Medium-risk security reports
99,069 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,165001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
91,751–91,800 of 99,069
Ivantipulsesecure.net
Technology · United States
61Medium
NIS2 35 · GDPR 63
NIS2 35 · GDPR 63
Ivanti, a leading enterprise software company, acquired Pulse Secure in 2020 and continues to offer secure network access and endpoint management solutions under the Ivanti brand. The website clearly communicates this transition and provides comprehensive information about products, solutions, and support services targeting enterprise customers seeking secure access and IT management capabilities. The technical infrastructure leverages modern analytics and telemetry tools such as Google Analytics and Microsoft Application Insights, combined with a robust cookie consent mechanism powered by OneTrust, reflecting a mature digital presence. Security posture is strong with HTTPS enforcement, privacy compliance, and clear incident response contacts, although explicit security headers and vulnerability disclosure mechanisms could be enhanced. Overall, the website demonstrates a professional, trustworthy, and well-maintained digital asset aligned with Ivanti's enterprise market position.
CARMA International Inccarma.com
Media · United Kingdom
55Medium
NIS2 5 · GDPR 43
NIS2 5 · GDPR 43
CARMA International Inc is a global media intelligence provider specializing in delivering comprehensive media monitoring, PR measurement, and consultancy services. The company operates internationally with a large workforce and multiple offices, providing services in over 100 languages. Their business model combines software platforms with expert-led research solutions, targeting organizations that require detailed media analysis and communication evaluation. The website reflects a mature digital presence with professional design, clear navigation, and multilingual support. Technically, the website is built on WordPress using Elementor and several advanced plugins, integrating multiple analytics and marketing tools such as Google Analytics, HubSpot, Facebook Pixel, and Hotjar. The site is mobile-optimized and demonstrates good SEO and accessibility practices. Security posture is strong with HTTPS enforced and no visible sensitive data exposure, although explicit security headers could be improved. Overall, CARMA shows a high level of digital maturity and business credibility, supported by client testimonials, partner logos, and structured data. No WAF or blocking mechanisms were detected, allowing full content access and analysis. The domain registration details align well with the business claims, supporting legitimacy and trustworthiness. Strategic recommendations include enhancing security headers, maintaining plugin updates, and publishing explicit security and incident response policies to further strengthen trust and compliance.
- AAtom
dium.com
Technology · United States
56Medium
NIS2 5 · GDPR 43
NIS2 5 · GDPR 43
Atom operates a comprehensive online marketplace specializing in premium domain name sales, branding contests, and related services. The platform targets startups and businesses seeking memorable domain names and branding solutions, positioning itself as a trusted intermediary with a strong market presence. The website for Dium.com exemplifies their offering of high-value domains with flexible purchase options including installment plans and escrow services. Technically, the site employs modern web technologies such as Bootstrap for responsive design, New Relic for performance monitoring, and Intercom for customer engagement, hosted behind Cloudflare's infrastructure ensuring fast and secure delivery. Security posture is robust with HTTPS enforced and no evident vulnerabilities, though there is room for improvement in explicit cookie consent and published security policies. Overall, Atom demonstrates a mature digital presence with strong business credibility and user trust indicators.
- DDNS resolution error | stjhlibya.com | Cloudflare
stjhlibya.com
Other
53Medium
NIS2 0 · GDPR 10
NIS2 0 · GDPR 10
The website stjhlibya.com is currently inaccessible due to a DNS resolution error as indicated by the Cloudflare error page. This prevents any meaningful content or business information from being accessed or analyzed. The site appears to be either misconfigured or not yet fully set up on Cloudflare's network. There is no visible business description, contact information, or security and privacy policies available. The technical infrastructure is limited to Cloudflare's error handling scripts and styles, with no CMS or other technologies detected. Security posture is poor due to lack of HTTPS and security headers, and the site is effectively blocked from public access. Overall, the site is non-operational in its current state, resulting in a very low trust and credibility score.
Genesis HealthCaregenesishcc.com
Healthcare · United States
56Medium
NIS2 5 · GDPR 28
NIS2 5 · GDPR 28
Genesis HealthCare is a large healthcare services provider operating nearly 200 centers across 17 states in the United States. The company specializes in long term care, transitional care, rehabilitation therapy, and specialty services including Alzheimer's care and assisted living. Their market position is strong, supported by multiple national quality awards and a broad service portfolio. The website is built using modern technologies such as React and Gatsby, with a professional design and good mobile optimization. Security posture is strong with HTTPS enabled and appropriate security headers, though minor improvements in privacy compliance and accessibility are recommended. Overall, the website reflects a credible and established healthcare organization with a good digital presence.
FCM Bank Limitedfcmbank.com.mt
Finance · Malta
63Medium
NIS2 0 · GDPR 55
NIS2 0 · GDPR 55
FCM Bank Limited is a Malta-based licensed bank operating since 2010, regulated by the Malta Financial Services Authority and the European Central Bank. It is part of the SAB Group and focuses on corporate banking services including loans, real estate financing, and deposit products. The bank serves over 18,000 corporate clients primarily in Malta and selected European countries such as Germany, Czech Republic, and Slovakia. The website reflects a professional and consistent brand image with clear business information and contact details. Technically, the website uses modern web technologies including Google Tag Manager, Google Analytics, and Bing Ads for marketing and analytics purposes. The site is mobile optimized with lazy loading images and uses custom CMS infrastructure. Performance is moderate with good SEO and accessibility basics in place. Security posture is strong with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. Cookie consent mechanisms are implemented in compliance with GDPR. However, no explicit security policy or incident response information is publicly available, which could be improved. Overall, the website and business present a trustworthy and credible profile with strong regulatory compliance and clear communication. Strategic improvements in security transparency and incident response readiness are recommended to enhance trust further.
- Make Architects
makearchitects.com
Real Estate · United Kingdom
55Medium
NIS2 5 · GDPR 63
NIS2 5 · GDPR 63
Make Architects is an award-winning international architecture practice founded in 2004 by Ken Shuttleworth, with offices in London, Hong Kong, and Shanghai. The firm provides comprehensive architecture, interior, and urban design services from concept to completion, targeting clients seeking innovative and sustainable design solutions globally. Their market position is strong, supported by a consistent brand presence and recognized certifications such as B-Corp. The website reflects a professional and modern digital presence, leveraging WordPress CMS, advanced animation technologies, and integrated analytics for user engagement and performance monitoring. Security measures include HTTPS enforcement and a robust cookie consent mechanism, though explicit security policies and incident response contacts are not publicly detailed. Overall, the site demonstrates a mature digital infrastructure with good privacy compliance and business credibility.
KSVksvc.com
Energy · United States
59Medium
NIS2 0 · GDPR 58
NIS2 0 · GDPR 58
KSV is an established creative and strategic agency founded in 1977, focusing on sustainability and energy sectors. The company offers services including creative strategy, brand engagement, and marketing campaigns, targeting businesses and organizations committed to sustainable practices. Their market position is solid with a medium-sized operation and a consistent brand presence. Technically, the website is built on WordPress using the Divi theme, integrating modern analytics and marketing tools such as HubSpot and Google Tag Manager. The site is moderately performant, mobile-optimized, and SEO-friendly. Security posture is adequate with HTTPS enforced and cookie consent implemented, though lacking explicit security headers and incident response policies. Overall, the website reflects a professional and trustworthy business with room for security enhancements.
- FFlutter International plc
singular.uk
Technology · Ireland
63Medium
NIS2 0 · GDPR 63
NIS2 0 · GDPR 63
Flutter International plc operates Singular, a technology provider within the iGaming sector, offering career opportunities globally. The website reflects a mature enterprise with a strong market position as part of Flutter Entertainment, emphasizing employee growth, culture, and global mobility. Technically, the site uses modern web technologies including jQuery, Bootstrap, Google Tag Manager, and OneTrust for cookie consent, hosted likely behind Cloudflare, ensuring good performance and security. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security headers could be improved. Privacy compliance is robust with clear policies and consent mechanisms. Overall, the site projects professionalism and trustworthiness suitable for an enterprise-level business.
- OOney Insurance (PCC) Ltd. & Oney Life (PCC) Ltd
oneyinsurance.com
Finance · Malta
50Medium
NIS2 0 · GDPR 10
NIS2 0 · GDPR 10
Oney Insurance operates as a specialized insurance provider focusing on tailored Life and Non-Life insurance solutions for retailers, companies, and broker networks primarily in Malta. The company emphasizes selective partnerships and long-term vision, offering expertise in PPI, providence, affinity, and specialty insurance products. Their market position is niche, targeting B2B2C channels with customized insurance offerings. The website reflects a small-sized business with professional branding and published financial and solvency reports indicating regulatory compliance. Technically, the website is a straightforward HTML/CSS implementation using Google Fonts, with no detected CMS or advanced frameworks. The site is mobile-optimized and presents content clearly but lacks advanced SEO and accessibility features. No interactive forms or tracking technologies are present, which reduces data collection risks but also limits user engagement. From a security perspective, the site lacks visible HTTPS enforcement data and security headers, which are critical for protecting user data and ensuring trust. No privacy or cookie policies are published, indicating gaps in compliance with GDPR and related regulations. The absence of incident response contacts or vulnerability disclosure mechanisms further limits transparency and security readiness. Overall, the website is functional and professional but requires significant improvements in security posture and privacy compliance to meet industry standards and enhance trustworthiness. Strategic recommendations include implementing HTTPS, adding security headers, publishing privacy and cookie policies, and establishing clear incident response channels.
Nuvita Babynuvitababy.com
E-commerce · Italy
63Medium
NIS2 5 · GDPR 63
NIS2 5 · GDPR 63
Nuvitababy.com is a professionally managed e-commerce website specializing in baby care products for children aged 0 to 5 years. The company, part of Anteprima Brands International Ltd., has a strong international presence with over 30 years of history and operations in 44 countries. The website offers a comprehensive product range, customer support, and multiple language options, targeting parents and caregivers. Technically, the site is built on the Shopify platform, leveraging modern technologies and integrations such as Klaviyo, PageFly, and various Shopify apps, ensuring a fast, responsive, and SEO-optimized experience. Security is robust with enforced HTTPS, secure forms, and privacy compliance including GDPR. The site includes clear privacy and cookie policies with consent mechanisms, and active social media engagement enhances trust and customer interaction. Overall, Nuvitababy.com demonstrates a mature digital infrastructure, strong business credibility, and a good security posture.
Other
55Medium
NIS2 5 · GDPR 10
NIS2 5 · GDPR 10
The website smarkets.com is currently inaccessible due to a Cloudflare Web Application Firewall (WAF) security challenge page that requires browser verification via Turnstile captcha. This prevents access to the actual website content, limiting the ability to analyze business, security, and compliance aspects. The visible page is minimal, showing only a security check message and no business or legal information. The site uses New Relic for performance monitoring and Cloudflare for security and DDoS protection. Due to the blocking, no privacy policy, cookie policy, terms of service, or contact information are available for review. The domain WHOIS data is privacy protected, which is common but reduces transparency. Overall, the site’s security posture appears to rely on Cloudflare’s protection, but internal security practices and compliance cannot be assessed at this time.
Host Student Housinghost-students.com
Real Estate · United Kingdom
61Medium
NIS2 5 · GDPR 48
NIS2 5 · GDPR 48
Host Student Housing operates as a reputable provider of student accommodation across the UK and Ireland, offering furnished rooms with all bills included. The company targets students, including international students, providing secure, well-located housing options near campuses and city centers. Their market position is strengthened by multiple awards and certifications, reflecting a commitment to quality and student wellbeing. Technically, the website is built on WordPress with modern marketing and analytics integrations such as HubSpot and Google Tag Manager, ensuring good SEO and user experience. Security posture is solid with HTTPS, reCAPTCHA, and secure access controls, though explicit security policies and incident response details are not publicly visible. Overall, the site demonstrates a mature digital presence with strong business credibility and compliance adherence.
- MMillie's Cookies
milliescookies.com
Retail · United Kingdom
62Medium
NIS2 0 · GDPR 63
NIS2 0 · GDPR 63
Millie's Cookies is a UK-based retail business specializing in freshly baked personalised giant cookies, cookie boxes, and corporate gifting solutions. The company targets consumers looking for unique and customised cookie gifts for various occasions. The website demonstrates a mature e-commerce platform with a modern Angular frontend and Magento backend, supporting a seamless user experience with next day delivery and click & collect options. The site is well-branded and professionally designed, reflecting a consistent and trustworthy market presence. Technically, the website employs contemporary web technologies including Angular 17, Typekit fonts, and integrates third-party services such as Google Tag Manager for analytics and OneTrust for cookie consent management. The site is hosted securely with HTTPS and implements strong security headers, indicating a good security posture. However, some standard business compliance documents like Terms of Service and explicit security policies are not readily found. Security-wise, the site enforces HTTPS, uses cookie consent mechanisms, and does not expose sensitive data in the HTML content. No vulnerabilities or suspicious scripts were detected. Privacy compliance is robust with GDPR-aligned cookie consent and a comprehensive privacy policy. The absence of direct contact information and incident response details suggests room for improvement in transparency. Overall, Millie's Cookies presents a secure, compliant, and user-friendly online retail platform with a solid business model. Strategic recommendations include publishing Terms of Service, enhancing contact transparency, and expanding security and incident response disclosures to further strengthen trust and compliance.
Natura Brasilnatura.com.br
Retail · Brazil
55Medium
NIS2 13 · GDPR 25
NIS2 13 · GDPR 25
Natura Brasil is a leading enterprise-level retail and e-commerce company specializing in perfumery, makeup, and personal care products. The website showcases a comprehensive product catalog with detailed descriptions, pricing, and promotions, targeting consumers interested in beauty and personal care in Brazil. The technical infrastructure leverages modern technologies such as React, Next.js, and Salesforce Commerce Cloud, supported by robust CDN and analytics tools, ensuring fast performance and excellent mobile optimization. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though there is room for improvement in public security policies and incident response transparency. Overall, the site is professional, trustworthy, and compliant with privacy regulations, reflecting a mature digital presence for a well-established brand.
C. & J. Clark International Limitedclarks.com
Retail · United Kingdom
66Medium
NIS2 5 · GDPR 63
NIS2 5 · GDPR 63
Clarks is a well-established global footwear brand with a rich history dating back to 1825. The company offers a wide range of footwear products for men, women, and children, including various collections such as Originals™, casual, smart, and seasonal styles. Their online presence is supported by a comprehensive e-commerce platform that integrates modern technologies like React and Next.js, ensuring a fast and responsive user experience across devices. The website features clear navigation, detailed product categorization, and multiple payment options, including popular services like Klarna and PayPal. Technically, the site employs a robust infrastructure with performance monitoring via New Relic and marketing tools such as Klaviyo and OneTrust for privacy compliance. The use of HTTPS, security headers, and cookie consent mechanisms reflects a strong security posture. No critical vulnerabilities or exposed sensitive data were detected, indicating adherence to best practices in web security. Overall, the website demonstrates a high level of professionalism, technical maturity, and compliance with privacy regulations such as GDPR. The domain registration details align with the company's claims, reinforcing its legitimacy. Strategic recommendations include implementing a public vulnerability disclosure policy and enhancing transparency around data retention and incident response. This analysis concludes that Clarks maintains a secure, user-friendly, and trustworthy online platform that supports its retail operations effectively.
SITAsita.aero
Transportation
60Medium
NIS2 0 · GDPR 63
NIS2 0 · GDPR 63
SITA is a leading global IT provider specializing in air transport communications and information technology. The company offers a broad portfolio of solutions targeting airlines, airports, ground handlers, governments, and air navigation service providers. Their services focus on enabling seamless, safe, and sustainable air travel through innovative digital travel solutions, passenger processing, border management, baggage management, and aircraft communications. The website reflects a mature enterprise with a strong market position and a comprehensive service offering tailored to the air transport industry. Technically, the website employs a modern technology stack including jQuery UI, Matomo analytics, Marketo marketing tools, OneTrust for cookie consent, and Azure Application Insights for monitoring. The site is hosted likely on Azure infrastructure and uses Episerver CMS. Performance and mobile optimization are good, with clear navigation and professional design. SEO and accessibility features are well implemented. From a security perspective, the site enforces HTTPS and integrates cookie consent mechanisms compliant with GDPR. While explicit security headers are not fully confirmed, best practices appear to be followed. No critical vulnerabilities or exposed sensitive data were detected. However, the site lacks a dedicated security policy, incident response information, and vulnerability disclosure mechanisms, which are recommended for enterprise-grade security posture. Overall, the website is professional, trustworthy, and compliant with privacy regulations. The risk profile is low with no blocking or WAF interference detected. Strategic improvements include publishing explicit security policies, incident response contacts, and vulnerability disclosure information to enhance transparency and security maturity.
Airswiftlinkoilandgas.com
Energy · United States
63Medium
NIS2 5 · GDPR 63
NIS2 5 · GDPR 63
Airswift is a well-established international recruitment and workforce solutions company specializing in technology, engineering, and energy sectors. With over 40 years of experience and a global footprint of 60 offices, Airswift offers comprehensive services including talent acquisition, employer of record, consulting, and managed solutions. The website reflects a mature business with a strong market position and a clear focus on STEM professionals and technical recruitment worldwide. Technically, the site is built on HubSpot CMS, leveraging modern marketing and analytics tools, and demonstrates good mobile optimization and SEO practices. Security posture is solid with HTTPS and secure form handling, though additional security headers and explicit policies could enhance protection. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website presents a professional, trustworthy, and user-friendly experience aligned with the company's business objectives.
Blockstream Corporation Inc.blockstream.com
Technology · United States
59Medium
NIS2 0 · GDPR 28
NIS2 0 · GDPR 28
Blockstream Corporation Inc. is a leading global technology company specializing in Bitcoin and blockchain infrastructure. Their website showcases a comprehensive suite of products and services including wallets, hardware devices, blockchain platforms, and investment funds, targeting individuals, enterprises, and developers. The company positions itself as a foundational player in the future financial infrastructure built on Bitcoin technology. Technically, the website employs modern JavaScript libraries, analytics tools, and security features such as HTTPS and reCAPTCHA, reflecting a mature digital infrastructure. However, some areas such as explicit cookie consent and vulnerability disclosure could be improved. The security posture is strong with no evident vulnerabilities, but the absence of published incident response or security policies suggests room for enhancement. Overall, the website is professional, trustworthy, and well-optimized, supporting Blockstream's market leadership and credibility in the blockchain space.
- PPraxis
triremepensions.com
Finance · Guernsey
63Medium
NIS2 5 · GDPR 40
NIS2 5 · GDPR 40
Praxis Group is a well-established, owner-managed financial services provider specializing in personal pensions, annuity solutions, employer solutions, corporate services, private wealth, and yacht services. Operating across multiple jurisdictions including Guernsey, Malta, and the UAE, the company leverages its multi-jurisdictional expertise to deliver tailored financial solutions to individual and corporate clients. The website reflects a professional and comprehensive service offering with clear navigation and detailed service descriptions. Technically, the website employs modern web technologies including React and Umbraco CMS, with integrations for analytics (Google Analytics, Hotjar) and marketing tools (Google Tag Manager, CookieScan). The site is mobile-optimized and demonstrates good performance and accessibility standards. Structured data is used effectively to enhance SEO and user experience. From a security perspective, the site uses HTTPS, implements reCAPTCHA v3 for form protection, and includes standard security practices. However, explicit security policies and incident response information are not present, indicating an area for improvement. Privacy compliance is strong, with clear privacy and cookie policies and user consent mechanisms. Overall, Praxis Group's website presents a credible, professional, and secure digital presence aligned with its business operations. Strategic enhancements in security transparency and policy disclosures would further strengthen trust and compliance.
Hogg Capital Investments Limitedtier1fx.com
Finance · Malta
52Medium
NIS2 0 · GDPR 43
NIS2 0 · GDPR 43
Tier1FX, operated by Hogg Capital Investments Limited, is a Malta-based regulated brokerage firm offering institutional trading services with a focus on transparency, fairness, and advanced technology. The company provides access to prime liquidity pools and ultra-low latency execution through an agency model, targeting professional and institutional traders. The website is well-designed, mobile-optimized, and uses modern technologies including WordPress, Google Analytics, and LiveChat for customer support. Security measures such as HTTPS, Google reCAPTCHA, and bot detection scripts are implemented, though some security headers could be improved. Privacy and cookie policies are comprehensive and GDPR compliant. Overall, the website reflects a professional and trustworthy financial services provider with strong regulatory adherence.
- AArcadis
dpsgroupglobal.com
Energy · Netherlands
63Medium
NIS2 0 · GDPR 63
NIS2 0 · GDPR 63
Arcadis is a leading global design and consultancy firm specializing in sustainable solutions for natural and built assets. With over 36,000 employees across more than 30 countries, the company offers services in engineering, consultancy, digital innovation, and project management. The website reflects a strong market position with a focus on improving quality of life through sustainable development. Technically, the site is built on the Sitecore CMS platform, leveraging modern JavaScript libraries, Google Analytics, and consent management tools like Cookiebot. The site is well-optimized for performance, mobile responsiveness, and accessibility. Security posture is strong with HTTPS, reCAPTCHA on forms, and cookie consent mechanisms, although explicit security policies and incident response contacts are not published. WHOIS data confirms the legitimacy of the domain and its alignment with the company's business claims. Overall, the website presents a professional, trustworthy, and compliant digital presence.
- HHugeDomains
claymoregroup.com
E-commerce
51Medium
NIS2 0 · GDPR 28
NIS2 0 · GDPR 28
HugeDomains operates as a domain marketplace specializing in premium domain name sales, exemplified by the ClaymoreGroup.com listing. The platform offers flexible purchasing options including outright buy and payment plans, supported by a 30-day money back guarantee and secure transaction methods such as PayPal and Escrow.com. The website is professionally designed with clear navigation and trust signals, targeting individuals and businesses seeking quality domain names. Technically, the site employs modern JavaScript libraries, Google Analytics, and Google reCAPTCHA Enterprise for security and analytics, hosted behind Cloudflare for performance and protection. Security posture is strong with HTTPS enforced, secure forms, and cookie consent mechanisms, though explicit security policies and incident response contacts are absent. Overall, the site is legitimate, trustworthy, and well-positioned in the domain resale market.
Medialogix Limitedmedialogix.co.uk
Technology · United Kingdom
54Medium
NIS2 5 · GDPR 43
NIS2 5 · GDPR 43
Medialogix Limited is a UK-based specialist provider of Digital Asset Management (DAM) solutions, focusing on sectors such as policing, healthcare, and media. They act as a systems integrator and technology partner, notably for FotoWare, delivering consultancy, technical support, and bespoke software development services. The company has a strong market position supported by reputable clients and partnerships with major technology vendors. Their website reflects a professional and consistent brand image with clear messaging targeted at organizations requiring DAM solutions. Technically, the site is built on WordPress using the Divi theme, enhanced with SEO and analytics tools such as Yoast SEO and HubSpot, indicating a mature digital presence. Security posture is solid with HTTPS enforced and cookie consent implemented, though formal security policies and vulnerability disclosures are absent. Overall, the site is trustworthy and well-structured, supporting the company's credibility in its niche market.
Golden Harvest Food Bankgoldenharvest.org
Non-profit · United States
57Medium
NIS2 5 · GDPR 28
NIS2 5 · GDPR 28
Golden Harvest Food Bank is a well-established non-profit organization focused on alleviating hunger in Georgia and South Carolina through various food distribution programs, partnerships, and community engagement. The website reflects a mature digital presence with clear calls to action for donations, volunteering, and partnerships. The technical infrastructure is based on WordPress with a modern theme and utilizes popular plugins and tracking tools, indicating a moderate to high level of digital maturity. Security posture is strong with HTTPS enforced and no visible critical vulnerabilities, though some security headers could be improved. Privacy compliance is basic with a privacy policy present but lacking a cookie consent mechanism. Overall, the site is professional and trustworthy, supporting the organization's mission effectively.
Mindbeatmindbeat.app
Other · Malta
57Medium
NIS2 0 · GDPR 40
NIS2 0 · GDPR 40
Mindbeat is a digital coaching platform founded in 2020, offering personalized and group coaching services focused on mental health, leadership development, and managing organizational transitions. The company targets leaders, HR professionals, and organizations seeking scalable coaching solutions to improve productivity and wellbeing. Their global network of coaches and data-driven approach position them as an accessible and affordable alternative in the coaching market. Technically, the website is built on WordPress with modern plugins and integrates analytics and live chat tools, demonstrating a mature digital infrastructure. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Privacy compliance is well addressed with clear policies and user consent. Overall, the website is professional, trustworthy, and well-optimized for SEO and mobile use.
- IInterstellar
databyte.nl
Technology · Netherlands
55Medium
NIS2 0 · GDPR 63
NIS2 0 · GDPR 63
Interstellar is a large Dutch IT services company with over 700 employees, specializing in infrastructure, productivity, and security solutions. The company positions itself as a next-level service provider focused on delivering innovative IT solutions to businesses across the Netherlands. Their website reflects a mature digital presence with comprehensive service descriptions, client showcases, and active social media engagement. Technically, the site is built on WordPress with modern JavaScript libraries and includes SEO and accessibility considerations, although some accessibility features could be improved. Security posture is solid with HTTPS and cookie consent mechanisms, but lacks explicit security policies and incident response contacts. Overall, the website is professional, trustworthy, and compliant with GDPR, supporting a strong market position in the technology sector.
- PPublic Transport Authority of Western Australia
pta.wa.gov.au
Transportation · Australia
55Medium
NIS2 5 · GDPR 28
NIS2 5 · GDPR 28
The Public Transport Authority of Western Australia (PTA) operates as the primary government agency responsible for public transportation services across Western Australia. The website serves as a comprehensive portal providing information about its key services including Transperth, Transwa, Transregional, and School Bus Services. The PTA positions itself as a safe, customer-focused, integrated, and efficient public transport provider, targeting residents and visitors within the region. The site reflects a well-established government entity with a large operational scale and a clear focus on public transport infrastructure and service delivery. Technically, the website is built on the DNN (DotNetNuke) CMS platform using ASP.NET WebForms, enhanced with jQuery, Bootstrap, and various third-party analytics and tracking tools such as Google Tag Manager, Facebook Pixel, and Siteimprove Analytics. The site demonstrates good mobile optimization and accessibility basics, with a moderate performance profile. SEO practices are adequately implemented with proper meta tags and structured navigation. From a security perspective, the site uses HTTPS and includes anti-forgery tokens in forms, indicating some level of security awareness. However, there is a lack of visible security headers and no published vulnerability disclosure or incident response information. Privacy compliance is partially addressed with a comprehensive privacy policy and terms of use, but the absence of a cookie consent mechanism despite tracking scripts is a notable gap. No contact emails or phone numbers are explicitly provided on the homepage, which may affect user trust and support accessibility. Overall, the PTA website is a professional and trustworthy government site with solid business credibility and technical implementation. Security posture is adequate but could be improved with enhanced headers, explicit consent mechanisms, and incident response transparency. Strategic recommendations include implementing cookie consent, publishing security policies, and improving security headers to strengthen compliance and user trust.
Business Leaders Maltabusinessleadersmalta.com
Other · Malta
56Medium
NIS2 0 · GDPR 75
NIS2 0 · GDPR 75
Business Leaders Malta is a well-established conference provider based in Malta, specializing in organizing dynamic business events and conferences that attract over 500 business professionals. The company has a strong market position as a leading event organizer in Malta, focusing on business innovation, leadership, and networking. Their digital presence is built on a modern WordPress infrastructure with a variety of plugins enhancing user experience, analytics, and marketing capabilities. The website is professionally designed, mobile-optimized, and SEO-friendly, reflecting a mature digital strategy. Security posture is strong with HTTPS enforced, reCAPTCHA integration, and cookie consent mechanisms, although explicit security and incident response policies are not publicly available. Overall, the website and business demonstrate high trustworthiness and professionalism, with room for improvement in publishing security policies and direct contact information for incident response.
- RRestaurant Associates
restaurantassociates.com
Hospitality · United States
52Medium
NIS2 5 · GDPR 33
NIS2 5 · GDPR 33
Restaurant Associates (R/A) is a well-established on-site dining management company operating as a member of Compass Group, with over 75 years of experience in culinary innovation, hospitality, and well-being services. The company targets corporate clients and workplace dining markets, positioning itself as a leader in hospitality excellence. Their website reflects a mature digital presence with comprehensive content, clear branding, and active social media engagement. Technically, the site is built on WordPress using modern themes and plugins, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and no exposed sensitive data, though security headers could be enhanced and privacy compliance improved by adding cookie consent mechanisms. Overall, the domain registration and WHOIS data align well with the business claims, indicating a legitimate and trustworthy entity.
- GGEICO
geico.jobs
Finance · United States
55Medium
NIS2 0 · GDPR 25
NIS2 0 · GDPR 25
GEICO is a well-established insurance company specializing in auto insurance and is a wholly owned subsidiary of Berkshire Hathaway. The website analyzed is a careers portal hosted on the Workday platform, designed to provide job seekers with information about employment opportunities at GEICO. The site content is minimal and focused primarily on recruitment, with no visible privacy or cookie policies, contact information, or terms of service on the analyzed page. Technically, the site uses modern JavaScript and Workday's candidate experience framework, with assets served via Workday's CDN, indicating a moderate level of digital maturity. Security posture is moderate but could be improved by adding security headers and explicit HTTPS enforcement. Overall, the site is functional but lacks comprehensive compliance and transparency features.
Kyte Globalkyteconsultants.com
Technology · Malta
55Medium
NIS2 55 · GDPR 70
NIS2 55 · GDPR 70
Kyte Global is a well-established cybersecurity and compliance consultancy founded in 2006, serving clients in over 65 countries. The company specializes in providing comprehensive services including AML, GDPR, PCI DSS, ISO 27001, SOC 2, and penetration testing, targeting regulated entities primarily in the fintech, gaming, and technology sectors. Their market position is strong, supported by multiple certifications and a professional digital presence. Technically, the website is built on WordPress with modern tools such as Google Analytics, Microsoft Clarity, and CookieYes for privacy compliance. The site is well-optimized for SEO, mobile-friendly, and incorporates robust consent mechanisms. Security posture is solid with HTTPS enforced, reCAPTCHA protection on forms, and no visible vulnerabilities, though additional security headers could enhance protection. Overall, Kyte Global demonstrates a mature digital infrastructure aligned with its business objectives and compliance requirements.
EDITECeditec.co
Other
50Medium
NIS2 0 · GDPR 10
NIS2 0 · GDPR 10
EDITEC is a leading provider of lottery products and operations across Africa and the Middle-East, offering innovative and high-quality gaming solutions through a vast network of computerized points of sale. The company operates in multiple markets and emphasizes transparency, reliability, and responsible gaming. Their services include lottery, sports betting, gaming activities, and consultancy in various business domains. The website is built on WordPress using modern themes and plugins, providing a professional and responsive user experience. Security posture is moderate with HTTPS enabled and some security best practices observed, but there are concerns such as insecure password input fields and lack of security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the website is credible but could improve in security and compliance aspects.
Sovereign Order of Maltaorderofmalta.int
Non-profit · Italy
67Medium
NIS2 5 · GDPR 63
NIS2 5 · GDPR 63
The Sovereign Order of Malta is a historic lay religious Catholic order recognized as a sovereign subject of international law, with a significant global presence in humanitarian and medical aid across 130 countries. The organization operates with a clear mission focused on medical, social, and humanitarian projects, supported by diplomatic activities and a structured governance system. The website reflects this stature with comprehensive content, clear navigation, and multilingual support, targeting a broad audience including members, humanitarian partners, and the general public. Technically, the website is built on WordPress with a modern tech stack including jQuery, Bootstrap, and Owl Carousel, optimized for SEO and mobile responsiveness. Hosting is inferred to be via Cloudflare, ensuring good performance and security. Privacy compliance is robust, featuring a detailed cookie policy and consent mechanism powered by OneTrust, aligning with GDPR requirements. Security posture is strong with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. However, explicit security headers could be improved to enhance protection. Contact information is clearly presented with official emails, phone numbers, and physical addresses, reinforcing trust and credibility. Overall, the website demonstrates a mature digital presence suitable for a large international non-profit organization, with strong compliance and security practices. Strategic recommendations include enhancing security headers and continuous monitoring of third-party scripts to maintain security integrity.
- SSucuri WebSite Firewall - Access Denied
gfddesign.com
Other
51Medium
NIS2 5 · GDPR 28
NIS2 5 · GDPR 28
The website gfddesign.com is currently inaccessible due to a Sucuri Website Firewall block triggered by a country-based IP restriction (Block ID: GEO02). This block prevents any meaningful content from being accessed or analyzed, resulting in a lack of visible business information, contact details, or technical metadata. The page served is a standard Sucuri access denied message with links only to Sucuri resources and Google Fonts. Consequently, the digital maturity and technical infrastructure of the actual business behind the domain cannot be assessed. Security posture evaluation is limited to the presence of the WAF itself, which is actively blocking access from certain geographies, indicating some level of security enforcement but also potential overblocking risks. Overall, the site is currently non-functional for users from the blocked region, and no direct business or compliance information is available from the content.
Belair Propertybelair.com.mt
Real Estate · Malta
52Medium
NIS2 0 · GDPR 18
NIS2 0 · GDPR 18
Belair Property is a Malta-based real estate agency specializing in property sales, rentals, commercial and luxury properties. The website presents a professional and well-structured platform with comprehensive property listings, agent contact details, and exclusive offerings. The company targets property buyers, renters, and sellers primarily in Malta, positioning itself as a trusted and established player in the local real estate market. Technically, the website is built on WordPress with modern plugins and SEO optimizations, offering good mobile responsiveness and user experience. Security posture is solid with HTTPS enabled and secure forms, though some security headers and policies are missing. Privacy compliance is partial, lacking a cookie consent mechanism and explicit GDPR indicators. Overall, the site is trustworthy and professionally maintained, with room for improvement in privacy and security transparency.
- Aramis Capital (Europe) Ltd.
aramiseurope.com
Finance · Malta
54Medium
NIS2 0 · GDPR 48
NIS2 0 · GDPR 48
Aramis Capital (Europe) Ltd. is a Malta-based financial services firm specializing in wealth management, capital raising, and advisory services targeted at European firms and investors. The company leverages Malta's position as a leading asset management and financial services center to provide tailored investment solutions. Their website reflects a professional and consistent brand image, with clear navigation and relevant content in French, catering to their target audience. The business model focuses on assisting clients in capital raising and advisory, positioning themselves as an experienced partner in the financial markets. Technically, the website is built on the Wix platform using modern technologies such as React and integrates Sentry for error monitoring. The site demonstrates moderate performance and basic mobile optimization, with standard SEO and accessibility features. Hosting is managed via Wix's infrastructure and CDN services, ensuring reliable availability. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms, indicating compliance with privacy regulations such as GDPR. However, there is room for improvement in implementing additional security headers and publishing explicit security or incident response policies. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website presents a trustworthy and professional front for Aramis Capital (Europe) Ltd., with a solid technical foundation and adequate privacy compliance. Strategic enhancements in security policies and technical optimizations could further strengthen their digital presence and risk posture.
- PParagon Offshore Limited
paragonoffshore.com
Energy
51Medium
NIS2 0 · GDPR 25
NIS2 0 · GDPR 25
Paragon Offshore Limited is an offshore drilling company that underwent significant corporate restructuring, culminating in its acquisition by Borr Drilling Limited in 2018. The website primarily serves as a corporate notice platform informing visitors about the ownership change and the status of shares. The company operates in the energy sector, specifically offshore drilling, and functions as a subsidiary under Borr Drilling Limited. The website content is minimal and focused on corporate information rather than marketing or customer engagement. Technically, the website is built with basic HTML, CSS, and JavaScript without modern frameworks or CMS detected. The site lacks mobile optimization and accessibility features, and no advanced SEO or analytics tools are evident. The performance is moderate but limited by the simplicity of the site. There is no evidence of HTTPS usage or security headers, which indicates a weak security posture. From a security perspective, the site lacks critical elements such as HTTPS, privacy and cookie policies, contact information, and incident response details. No forms or user input mechanisms are present, reducing attack surface but also limiting user engagement. The absence of security best practices and compliance indicators suggests the site is informational only and not designed for interactive or transactional use. Overall, the website presents a low-risk profile due to its static nature but suffers from poor security and privacy compliance. Strategic improvements in security, privacy policies, and technical modernization are recommended to enhance trust and compliance.
- KKambi
kambi.com
Information technology and services · United kingdom
54Medium
NIS2 5 · GDPR 75
NIS2 5 · GDPR 75
- Stella Maris
stellamaris.org
Healthcare · United States
52Medium
NIS2 0 · GDPR 28
NIS2 0 · GDPR 28
Stella Maris is a well-established non-profit healthcare provider specializing in elder care services including skilled nursing, long-term care, hospice, rehabilitation, and senior living options. Affiliated with the Sisters of Mercy and Mercy Health Services, it holds a strong regional position in Maryland with multiple awards and a trusted reputation. The website effectively communicates its services and mission to its target audience of elderly individuals and their families. Technically, the site is built on WordPress with modern SEO and accessibility features, providing a good user experience across devices. Security posture is solid with HTTPS and no visible vulnerabilities, though it lacks some advanced security headers and explicit incident response information. Privacy compliance is partial, with a comprehensive privacy policy but no cookie consent mechanism. Overall, the site is professional, trustworthy, and well-maintained, supporting the organization's mission and business goals.
- Hhet CAK
werkenbijcak.nl
Government · Netherlands
61Medium
NIS2 0 · GDPR 58
NIS2 0 · GDPR 58
Het CAK is a Dutch public sector organization providing essential government services related to healthcare accessibility and financial contributions for care. The website serves as a portal for citizens to access information and job vacancies, emphasizing a human-centered approach to service delivery. The technical infrastructure is modern, leveraging Nuxt.js and a CMS backend, with integration of Google Analytics and Tag Manager for user behavior insights. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and headers could be improved. Overall, the website is professional, accessible, and trustworthy, supporting the organization's mission effectively.
IFBBifbb.com
Other · Spain
59Medium
NIS2 0 · GDPR 40
NIS2 0 · GDPR 40
The International Fitness and Bodybuilding Federation (IFBB) is a globally recognized non-profit governing body for bodybuilding and fitness sports, founded in 1946 and headquartered in Madrid, Spain. It oversees a vast network of affiliated national members and organizes thousands of events annually, serving athletes, coaches, judges, and fans worldwide. The website reflects a mature digital presence with comprehensive content, event information, educational resources, and media galleries. Technically, the site is built on WordPress with modern plugins and frameworks, offering good performance and mobile optimization. Security posture is solid with HTTPS and GDPR compliance, though some security headers could be improved. No critical vulnerabilities or blocking mechanisms were detected, indicating a trustworthy and professional online presence.
- PHB Development
phbdevelopment.com
Other
51Medium
NIS2 0 · GDPR 40
NIS2 0 · GDPR 40
PHB Development is a consulting collective specializing in digital transformation across multiple sectors including finance, agriculture, education, energy, and humanitarian assistance. The company positions itself as an industry leader with a global footprint and a strong partner ecosystem. Their website reflects a professional and consistent brand with clear service offerings and impact stories. Technically, the site is built on WordPress with modern libraries and frameworks, supporting multilingual content and responsive design. Security posture is adequate with HTTPS and reCAPTCHA implemented, though lacking some security headers and explicit policies. Privacy compliance is minimal with no visible privacy or cookie policies. Overall, the site is trustworthy and professional but would benefit from enhanced security and compliance transparency.
- FFUJIFILM Holdings America Corporation
fujifilmusa.com
Technology · United States
65Medium
NIS2 35 · GDPR 63
NIS2 35 · GDPR 63
FUJIFILM Holdings America Corporation operates a comprehensive website serving the United States market, showcasing its broad portfolio across consumer imaging, healthcare, and business sectors. The company is positioned as a global leader in imaging and healthcare technology, offering products such as digital cameras, diagnostic imaging systems, printing equipment, and semiconductor materials. The website targets consumers, healthcare professionals, and business clients, reflecting an enterprise-level operation with consistent branding and high-quality content. Technically, the website is built on Drupal CMS and employs modern technologies including Google Tag Manager for analytics and OneTrust for cookie consent management. The site demonstrates good mobile optimization, accessibility, and SEO practices, with moderate performance. Security is robust with HTTPS enforced and privacy compliance mechanisms in place, although explicit security headers and a vulnerability disclosure policy are absent. The security posture is strong, with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed through comprehensive policies and consent banners. Incident response contact is available indirectly via a compliance hotline. The domain registration details align well with the corporate identity, supporting high legitimacy and trustworthiness. Overall, the website reflects a mature digital presence with strong business credibility and privacy practices. Strategic improvements could include adding explicit security headers, publishing a security.txt file, and providing direct incident response contact information to enhance security transparency and readiness.
Elit'Aviaelitavia.com
Transportation · Malta
59Medium
NIS2 47 · GDPR 28
NIS2 47 · GDPR 28
Elit'Avia is a Malta-based private aviation company founded in 2006, specializing in aircraft management, private charter, and aircraft sales and acquisitions. The company emphasizes sustainable aviation and offers bespoke services tailored to private aviation clients globally. Their market position is that of a leading global and sustainable operator with a strong commitment to client satisfaction and environmental responsibility. Technically, the website is built on WordPress using Elementor and jQuery, with good SEO and mobile optimization, though some accessibility features could be improved. Security-wise, the site uses HTTPS with no visible vulnerabilities and demonstrates transparency through a published security incident notice, but lacks a formal security policy and vulnerability disclosure. Overall, the website is professional, trustworthy, and well-aligned with the company's business claims.
202 Jewellery202jewellery.com
Retail · Malta
56Medium
NIS2 5 · GDPR 48
NIS2 5 · GDPR 48
202 Jewellery is a retail business specializing in branded jewellery and watches, operating both online and through physical stores in Malta and Gozo. The website showcases a wide range of products including earrings, necklaces, bracelets, rings, charms, and watches, along with services such as welding and piercing studios. The company targets consumers in Malta and Gozo seeking high-quality silver jewellery and branded watches, supported by a loyalty program and gift card offerings. Technically, the website is built on the Wix platform, leveraging modern technologies including React 18 and various Wix apps for e-commerce, bookings, loyalty, and more. The site demonstrates good performance and basic mobile optimization, with a consistent and professional design. SEO and accessibility features are present but could be enhanced. From a security perspective, the site enforces HTTPS and includes some security best practices in its JavaScript. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic, with privacy and cookie policies present, though more comprehensive GDPR compliance measures could be implemented. Overall, 202 Jewellery presents a trustworthy and professional online presence with a solid technical foundation. Strategic improvements in privacy compliance, accessibility, and security headers would further enhance its security posture and user trust.
Famalco Groupfamalco.net
Other · Malta
57Medium
NIS2 0 · GDPR 25
NIS2 0 · GDPR 25
Famalco Group is a diversified conglomerate based in Malta, operating across eleven distinct sectors including fresh produce importation, logistics, retail franchising, real estate services, marketing, mobility, investment partnerships, property development, energy, and business solutions. The company holds exclusive franchise rights for prominent global brands and maintains a strong market presence in Malta and Central/Eastern Europe. Their business model leverages a broad portfolio of subsidiaries to deliver comprehensive services to a wide range of customers. The website reflects a mature digital infrastructure with modern technologies such as WordPress CMS, Slider Revolution, and integrated analytics and marketing tools. Security measures include HTTPS enforcement, Google reCAPTCHA, and a robust cookie consent mechanism, indicating a strong commitment to user privacy and data protection. Overall, the site is professionally designed, mobile-optimized, and SEO-friendly, supporting the company's market positioning and credibility.
- AAP Valletta
architecture-project.com
Real Estate · Malta
53Medium
NIS2 0 · GDPR 43
NIS2 0 · GDPR 43
AP Valletta is a well-established architectural firm based in Malta, specializing in sustainable heritage and multidisciplinary architectural services. Founded in 1991, the firm has a strong market position supported by numerous awards and a multinational team. Their website reflects a professional and content-rich presence, targeting clients interested in architectural design, restoration, and urban planning. Technically, the site is built on WordPress with modern JavaScript libraries and plugins, providing a good user experience and mobile optimization. Security-wise, the site uses HTTPS for external resources and implements cookie consent with opt-in mechanisms, but lacks visible advanced security headers and explicit security policies. Overall, the website demonstrates a moderate to good security posture with room for improvement in transparency and incident response readiness.
PT Freeport Indonesiaptfi.co.id
Energy · Indonesia
61Medium
NIS2 0 · GDPR 10
NIS2 0 · GDPR 10
PT Freeport Indonesia is a major mining company operating in Papua, Indonesia, specializing in copper, gold, and silver extraction and processing. The company maintains a strong market position with global concentrate marketing and emphasizes sustainability, community engagement, and corporate governance. The website reflects a professional digital presence with good content quality and navigation, supporting both Indonesian and English languages. Technically, the site uses modern JavaScript libraries and tracking tools, with moderate performance and good mobile optimization. Security posture is solid with HTTPS and secure forms, though lacks some advanced security headers and explicit incident response information. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is trustworthy and credible but would benefit from enhanced privacy and security disclosures.
Mr Messagingmrmessaging.net
Telecommunications · Malta
51Medium
NIS2 0 · GDPR 10
NIS2 0 · GDPR 10
Mr Messaging Limited is a Malta-based cloud communication service provider specializing in SMS and related telecommunications services. Founded in 2012, the company offers key services including Sending SMS, 2-WAY SMS, Number Portability (MNP), and Number Cleansing (HLR). Positioned as an industry leader, Mr Messaging targets businesses seeking reliable and cost-effective communication solutions to engage their customers globally. The website reflects a professional and consistent brand image supported by testimonials and GSMA certification, enhancing trustworthiness. Technically, the website is built on WordPress using modern frameworks such as Foundation CSS and jQuery, with SEO optimized via Yoast plugin. It integrates Google Analytics and LinkedIn Insight for user tracking and marketing analytics. The site is mobile-optimized with moderate performance and basic accessibility features. Security-wise, HTTPS is properly configured, but the absence of security headers and explicit security policies indicates room for improvement. The security posture is adequate but could be enhanced by implementing security headers, publishing privacy and cookie policies, and establishing incident response and vulnerability disclosure mechanisms. Contact information is available, though no phone number is explicitly provided. Social media presence is active on Instagram, Facebook, and LinkedIn. Overall, the website is functional, professional, and moderately secure, with opportunities to strengthen privacy compliance and security transparency.