Low-risk security reports
14,261 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,165001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
9,201–9,250 of 14,261
- QQuality Council of India
qcin.org
Government · India
77Low
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Quality Council of India (QCI) is a well-established autonomous national body founded in 1996 under the Ministry of Commerce and Industry, Government of India. It operates as a public-private partnership with key industry associations to promote quality standards, accreditation, and certification across various sectors in India. The organization holds a strong market position as the authoritative accreditation body with multiple specialized boards and divisions. The website reflects a professional and consistent brand image targeting government entities, industry stakeholders, and quality professionals. Key services include accreditations, certifications, training, and quality promotion initiatives.
GetYourGuidegetyourguide.de
Hospitality · Switzerland
85Low
NIS2 17 · GDPR 95
NIS2 17 · GDPR 95
GetYourGuide is a leading global online marketplace specializing in booking tours, attractions, and travel experiences worldwide. The platform targets travelers seeking convenient and reliable ways to discover and book activities, offering a broad range of services including sightseeing tours, excursions, and cultural experiences. The company has established a strong market position with consistent branding, a professional website, and a comprehensive service offering. Technically, the website leverages modern web technologies such as Vue.js, integrates advanced tracking and fraud prevention tools like Google Tag Manager and Forter, and employs a consent management platform to ensure privacy compliance. Security posture is robust with HTTPS, nonce-based CSP, and error tracking, though some security headers could be more explicitly implemented. The WHOIS data is privacy protected, which is typical for large enterprises, and does not detract from the legitimacy of the business. Overall, the website demonstrates a mature digital presence with strong business credibility and compliance practices.
—
82Low
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
- Bundesinstitut für Öffentliche Gesundheit (BIÖG)
impfen-info.de
Healthcare · Germany
80Low
NIS2 2 · GDPR 85
NIS2 2 · GDPR 85
The website www.impfen-info.de is a comprehensive public health information portal operated by the Bundesinstitut für Öffentliche Gesundheit (BIÖG) in Germany. It provides authoritative, up-to-date, and scientifically grounded information on vaccinations for various demographics including children, adolescents, adults, and pregnant women. The site supports public health goals by educating the population on immunization benefits, vaccination schedules, and legal frameworks such as the Masernschutzgesetz. It also offers interactive tools like vaccination checks and media resources to enhance user engagement. Technically, the site is built on the TYPO3 CMS platform, leveraging Matomo analytics configured with strong privacy protections such as IP anonymization and consent-based data collection. The design is modern, mobile-optimized, and accessible, ensuring a positive user experience. The site integrates social media channels for broader outreach and maintains consistent branding aligned with its government affiliation. From a security perspective, the site enforces HTTPS and employs privacy-conscious analytics but lacks explicit security headers and a published security policy or incident response contacts. No vulnerabilities or suspicious elements were detected. Privacy compliance is robust, with clear cookie consent mechanisms and GDPR adherence. The absence of direct contact emails or phone numbers on the main pages suggests a focus on information dissemination rather than direct user support. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance suitable for a government health information service. Strategic improvements could include publishing detailed security policies and enhancing security header implementation to further strengthen its security posture.
Other
77Low
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website www.bunnings.com.au is currently inaccessible due to a Cloudflare Turnstile security challenge page that blocks direct access to content. This prevents extraction of business, contact, and policy information. The domain WHOIS data is unavailable due to auDA policy restrictions and a malformed WHOIS request, resulting in no registrar, creation, or registrant details. The site is protected by Cloudflare, indicating a security-conscious posture but limiting external analysis. Without access to the actual website content, no meaningful assessment of business operations, technical infrastructure, or security posture can be made beyond the presence of the WAF challenge. The overall risk is moderate due to lack of data, but no explicit security threats or suspicious content were detected.
Chainlinkchain.link
Technology · United States
76Low
NIS2 25 · GDPR 68
NIS2 25 · GDPR 68
Chainlink is a leading decentralized oracle network that connects blockchains to real-world data, other blockchains, and enterprise systems. It serves major financial institutions, DeFi protocols, and governments worldwide, providing critical infrastructure for onchain finance, cross-chain interoperability, and secure data feeds. The company is well-established with a domain age since 2017 and strong partnerships with industry leaders such as J.P. Morgan, Mastercard, and UBS. Their platform offers a suite of products including Chainlink CCIP, data feeds, automation, and verifiable randomness, positioning them as a backbone for blockchain applications. Technically, Chainlink's website is built on modern web technologies including Webflow CMS, Cloudflare CDN, and integrates analytics and marketing tools like HubSpot and Google Tag Manager. The site is fast, mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital presence. Security posture is strong with HTTPS, security headers, and domain registration protections, though DNSSEC is not enabled and no explicit security policy or incident response contacts are published. Overall, Chainlink demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations including GDPR. The website content is comprehensive, well-branded, and targeted at institutional and developer audiences. No critical security vulnerabilities or suspicious activities were detected. Recommendations include enabling DNSSEC, publishing a security policy, and adding vulnerability disclosure mechanisms to further enhance trust and security. This analysis indicates Chainlink is a credible, secure, and technically sound organization with a strong market position in blockchain technology and decentralized finance.
AlpacaDB, Inc.alpaca.markets
Finance · United States
76Low
NIS2 47 · GDPR 83
NIS2 47 · GDPR 83
AlpacaDB, Inc. operates Alpaca Markets, a developer-first brokerage platform offering APIs for stock, options, and cryptocurrency trading. The company targets developers, fintech startups, broker-dealers, hedge funds, and other financial service providers seeking to embed trading capabilities into their applications. Alpaca is positioned as a leading API brokerage service with multiple industry awards and strong venture backing. The platform emphasizes commission-free trading, OAuth integration, and a comprehensive suite of brokerage infrastructure services. Technically, the website employs modern analytics and marketing tools, is well-optimized for mobile, and demonstrates excellent SEO and accessibility. Security posture is strong with HTTPS enforcement, no exposed sensitive data, and adherence to industry best practices, though there is room for improvement in publishing vulnerability disclosures and incident response contacts. Overall, Alpaca presents a professional, trustworthy, and mature fintech service with clear compliance and legal disclosures.
Planet E-Com Solutions Pvt. Ltd.planetecomsolutions.com
Technology · India
76Low
NIS2 47 · GDPR 53
NIS2 47 · GDPR 53
Planet E-Com Solutions Pvt. Ltd. (PECS) is a mid-sized Indian technology company specializing in custom web and mobile application development, cybersecurity, and digital transformation services. With over 25 years of experience and multiple industry certifications, PECS serves a diverse range of sectors including public sector, professional services, energy, BFSI, education, and healthcare. The company positions itself as a reliable partner for SMEs and large enterprises seeking tailored software solutions. Technically, the website employs modern front-end technologies such as Bootstrap, jQuery, and slick carousel, and integrates analytics tools like Microsoft Clarity and Google Tag Manager, indicating a moderate level of digital maturity. The site is mobile optimized and SEO friendly, though accessibility features are basic. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and explicit security headers. Privacy compliance is partial with a privacy policy present but no cookie consent mechanism or terms of service clearly available. Overall, the website is professional and trustworthy but could improve in security and privacy transparency.
- IIDFC FIRST Bank
idfcfirstbank.com
Finance · India
77Low
NIS2 17 · GDPR 58
NIS2 17 · GDPR 58
IDFC FIRST Bank is a prominent Indian banking institution offering a wide range of personal and business banking services including savings accounts, loans, credit cards, NRI banking, and wealth management. The bank positions itself as a customer-centric organization with a comprehensive digital presence and a large market footprint in India. The website reflects a mature digital infrastructure with Adobe Experience Manager CMS, Akamai CDN, and modern web technologies ensuring fast performance and good mobile optimization. Security posture is strong with HTTPS, security headers, and secure login portals, although explicit security policies and incident response information are not publicly detailed. The absence of WHOIS data is unusual for a banking domain and warrants further verification, but the website content and branding strongly indicate legitimacy. Overall, the site is professional, trustworthy, and well-structured, serving a broad audience of banking customers in India.
- BOBCARD LIMITED
bobfinancial.com
Finance · India
83Low
NIS2 55 · GDPR 58
NIS2 55 · GDPR 58
BOBCARD LIMITED operates as a credit card and financial services provider in India, offering a diverse portfolio of credit cards tailored for retail and corporate customers. The company is a wholly owned subsidiary of Bank of Baroda, positioning it strongly in the Indian financial market. The website showcases a comprehensive range of credit card products with detailed benefits, rewards, and digital onboarding capabilities, reflecting a customer-centric business model focused on convenience and value. The digital infrastructure leverages modern web technologies including Next.js and React, integrated with popular analytics and marketing tools such as Google Tag Manager, Microsoft Clarity, and Facebook Pixel, indicating a mature digital presence. Security posture is robust with HTTPS enforced and secure digital forms, though explicit security policies and headers could be enhanced. Privacy compliance is an area for improvement, as no explicit privacy or cookie policies are published. Overall, the website is professional, well-branded, and trustworthy, serving a broad Indian audience with clear contact channels and support. Strategic recommendations include publishing comprehensive privacy and security policies, enhancing accessibility, and formalizing incident response mechanisms to further strengthen trust and compliance.
India Energy Weekindiaenergyweek.com
Energy · India
78Low
NIS2 25 · GDPR 68
NIS2 25 · GDPR 68
India Energy Week is a large-scale, flagship energy exhibition and conference held in India, focusing on global energy innovation, partnerships, and investment. The event is organized under the patronage of India's Ministry of Petroleum and Natural Gas and in partnership with the Federation of Indian Petroleum Industry and dmg events. The website presents a professional and comprehensive platform showcasing the event's scope, speakers, exhibitors, and sponsorship opportunities. Technically, the site uses modern web technologies including Umbraco CMS, Google Analytics, Microsoft Clarity, and various marketing and tracking tools. Security posture is generally good with HTTPS enabled, but lacks visible security headers and privacy compliance documentation. The absence of WHOIS data for the domain raises concerns about domain legitimacy or recent registration, which should be further investigated. Overall, the website is well-designed, content-rich, and targets energy professionals and stakeholders globally.
Finance · India
78Low
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
The SIDBI Fund of Funds website represents a government-backed initiative aimed at supporting startups and MSMEs in India by providing indirect funding through venture capital funds. The platform positions itself as India's largest limited partner for venture capital and a key partner in the Startup India program, offering multiple fund programs such as FFS, ASPIRE, IAF, UPSF, and OSGF. The website content is professionally structured, targeting startups, venture capital funds, and government stakeholders, with a clear focus on fostering entrepreneurship and innovation in India. Technically, the website employs modern web technologies including Bootstrap 5, Font Awesome, Ionicons, Google Fonts, and integrates Google Analytics for user tracking. It is mobile-optimized and accessible, with good SEO practices evident from meta tags and structured navigation. The site uses HTTPS with excellent SSL configuration, ensuring secure communication. However, it lacks visible security headers and does not provide privacy or cookie policies, which are critical for compliance and user trust. From a security perspective, the site demonstrates a solid baseline with HTTPS and no exposed sensitive data. Yet, the absence of privacy policies, terms of service, incident response contacts, and vulnerability disclosure mechanisms indicates gaps in compliance and security transparency. The WHOIS data aligns well with the website's claims, showing consistent registrant information linked to the Indian government entity SIDBI, enhancing trustworthiness. Overall, the website is a credible and professional platform supporting India's startup ecosystem but requires improvements in privacy compliance and security policy disclosures to enhance user trust and regulatory adherence.
V.SUN GMBHv-sun.de
Retail · Germany
76Low
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
V.SUN GmbH operates a professional e-commerce website specializing in premium, vegan, and environmentally friendly sun care products. The company targets consumers seeking reliable and coral-friendly sunscreen options. The website is built on the Shopify platform, leveraging modern web technologies and multiple third-party integrations for marketing, analytics, and GDPR compliance. The business maintains a clear and consistent brand presence with comprehensive contact information and legal disclosures.
eoeolab.com
Technology · Australia
78Low
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
eo is a specialized sports technology company focused on enhancing athletic performance through innovative products and scientific research. Their offerings include the SwimBETTER system and the PolarCap concussion recovery treatment, targeting athletes and sports professionals. The website demonstrates a professional digital presence with good design, mobile optimization, and integration of modern marketing and analytics tools such as HubSpot, Google Analytics, and Facebook Pixel. Security posture is solid with HTTPS and secure forms, though some security headers and policies are missing. Privacy and cookie policies are present and GDPR compliant, supporting user trust. However, the absence of WHOIS registrant data and lack of explicit security and incident response policies slightly reduce transparency. Overall, eo presents as a credible and innovative player in the sports technology sector with room for improvement in security disclosures and WHOIS transparency.
Government · Germany
81Low
NIS2 22 · GDPR 68
NIS2 22 · GDPR 68
The Bundesministerium der Verteidigung (Federal Ministry of Defense) website serves as the official digital presence of the German federal government ministry responsible for defense and security policy. It provides comprehensive information on current security topics, ministry structure, history, and organizational details. The site targets citizens, media, and stakeholders interested in defense matters, positioning itself as a trusted government information source. The content is professionally presented in German with English alternatives, featuring a modern, responsive design and clear navigation.
Indian Oil Corporation Ltd.iocl.com
Energy · India
80Low
NIS2 17 · GDPR 58
NIS2 17 · GDPR 58
Indian Oil Corporation Ltd. is a leading integrated energy company in India with a significant global presence. The company operates across multiple sectors including refining, marketing, pipelines, petrochemicals, natural gas, LPG distribution, explosives, and cryogenics. The website reflects a mature enterprise with comprehensive business information, investor relations, and customer engagement portals targeting motorists, households, businesses, investors, suppliers, and partners. IndianOil maintains a strong market position as a top petroleum company in India with a diversified portfolio of energy products and services. Technically, the website employs modern web technologies such as Bootstrap, Font Awesome, and integrates with major analytics and marketing platforms like Google Tag Manager and Facebook SDK. The site is hosted with Cloudflare DNS and uses HTTPS with strong security headers, indicating a good level of digital maturity and security awareness. Mobile optimization and accessibility are well addressed, providing a positive user experience. From a security perspective, the site enforces HTTPS, uses security headers, and restricts domain transfer, which are positive indicators. However, it lacks explicit security policy documentation, incident response contacts, and a vulnerability disclosure program. Cookie consent mechanisms are not evident, which may impact privacy compliance, especially under GDPR. The WHOIS data confirms the domain's legitimacy with a long registration history consistent with the company's established presence. Overall, IndianOil's website is professional, secure, and business credible with minor gaps in privacy compliance and security transparency. Strategic improvements in these areas would enhance trust and regulatory alignment.
ECGC Limitedecgc.in
Finance · India
77Low
NIS2 47 · GDPR 35
NIS2 47 · GDPR 35
ECGC Limited is a Government of India enterprise specializing in export credit insurance services to support Indian exporters and banks. The website provides comprehensive information about various insurance policies, special schemes, regional offices, recruitment, and grievance redressal mechanisms. The site is primarily in Hindi with English language options, targeting exporters, banks, and government stakeholders. Technically, the site is built on WordPress with standard libraries like jQuery and Font Awesome, and it uses multiple trusted CDNs for resources. Security headers are implemented, but the Content Security Policy is commented out, indicating room for improvement. No privacy or cookie policies were found, which is a compliance gap. The domain WHOIS data aligns well with the business claims, indicating legitimacy. Overall, the website is professional, content-rich, and trustworthy but could enhance privacy compliance and security posture.
Finance · India
82Low
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Small Industries Development Bank of India (SIDBI) is a principal financial institution dedicated to promoting, financing, and developing the MSME sector in India. The website reflects a large, government-backed financial entity with a clear focus on MSME loans, institutional finance, and promotional initiatives. The site targets MSME businesses and related institutions, offering various loan products and ecosystem support. The market position is strong as a key government financial institution with a large operational scale and established history since 1990. Technically, the website uses modern frameworks such as Bootstrap 5, jQuery, and Owl Carousel, providing a responsive and accessible user experience. The site is well-structured with good SEO and accessibility features, though performance is moderate and could be optimized further. Security posture is strong with HTTPS enforced and standard security headers present, but lacks visible security policies and incident response contacts. Privacy compliance is basic, with no cookie consent mechanism detected despite use of tracking scripts. Overall, the website is professional, trustworthy, and aligned with its business purpose, but could improve privacy and security transparency.
- Nasscom
nasscom.in
Technology · India
76Low
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Nasscom is a well-established, not-for-profit industry association representing the Indian IT BPM sector, with over 3,000 members and a market influence over a $282.6 billion industry. The website effectively communicates its mission to empower members through policy advocacy, industry insights, skilling, and networking events. Technically, the site is built on Drupal 10 with modern front-end frameworks and integrates multiple analytics and monitoring tools, indicating a mature digital infrastructure. Security posture is strong with HTTPS, CAPTCHA protections, and security headers, though explicit security policies and incident response details are absent. Privacy compliance is partial, lacking a visible cookie consent mechanism despite tracking scripts. Overall, the site is professional, trustworthy, and well-positioned in its market niche.
Backed Finance AGbacked.fi
Finance · Switzerland
81Low
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Backed Finance AG is a Swiss-based financial technology company specializing in tokenizing real-world financial assets such as stocks, ETFs, and bonds onto blockchain platforms. Their innovative business model integrates traditional financial assets with decentralized finance (DeFi) protocols, enabling efficient, transparent, and compliant on-chain investment products. The company has established partnerships with major crypto exchanges like Kraken, Bybit, Gate, and Bitget, positioning itself as a key player in the emerging tokenized securities market. Their platform supports multichain operations and offers tools such as a DeFi dashboard, proof of reserves, and bridging services, catering primarily to qualified investors and financial institutions.
- Alibaba Group
alibaba.com
E-commerce
76Low
NIS2 17 · GDPR 65
NIS2 17 · GDPR 65
Alibaba.com is a leading global B2B e-commerce marketplace operated by Alibaba Group Holding Limited. The platform connects manufacturers, suppliers, exporters, and importers worldwide, facilitating international trade and product sourcing. It holds a strong market position as one of the largest online B2B marketplaces with extensive language and regional support. The website demonstrates a mature technical infrastructure with extensive use of proprietary analytics, CDN delivery, and modern web technologies, ensuring fast performance and excellent mobile optimization. Security posture is robust with HTTPS enforcement, security headers, and compliance with privacy regulations including GDPR. However, explicit security policies and incident response details are not prominently published. Overall, the site is highly professional, trustworthy, and well-optimized for its business model.
Santander Consumer Bank AGsantander.de
Finance · Germany
82Low
NIS2 2 · GDPR 73
NIS2 2 · GDPR 73
Santander Consumer Bank AG operates a comprehensive banking website targeting private and business customers in Germany. The site offers a wide range of financial products including checking accounts, loans, savings, investments, insurance, and online banking services. The company is positioned as a major financial institution with a strong market presence and a focus on customer-centric solutions. Technically, the website employs modern JavaScript frameworks, structured data (JSON-LD), and a consent management platform to ensure GDPR compliance. Hosting is managed via Akamai CDN, enhancing performance and security. Security posture is strong with HTTPS enforced and consent-based tracking, though explicit security headers could be verified further. No critical vulnerabilities or blocking mechanisms were detected, and the site maintains high standards of privacy and user experience. Overall, the website reflects a mature digital infrastructure aligned with industry best practices.
Cycology Clothing UKcycologygear.co.uk
Retail · United Kingdom
77Low
NIS2 17 · GDPR 58
NIS2 17 · GDPR 58
Cycology Clothing UK operates a professional e-commerce website specializing in cycling apparel and accessories, targeting cycling enthusiasts primarily in the UK and international markets. The website is built on the Shopify platform, leveraging a modern tech stack with integrations for marketing, analytics, and payment solutions such as Clearpay and Klarna. The brand positions itself with unique and original cycling clothing designs, offering free shipping over £35 and multiple country-specific storefronts. Technically, the site is well-structured with good SEO, mobile optimization, and performance, although accessibility features could be improved. Security posture is strong with HTTPS, security headers, and secure forms, but lacks publicly visible privacy and terms policies, which impacts compliance confidence. The WHOIS data is unavailable due to domain naming rules issues, which reduces domain trustworthiness but does not detract from the site's professional presentation and operational maturity.
- Spark Hire
sparkhire.com
Technology
83Low
NIS2 47 · GDPR 85
NIS2 47 · GDPR 85
Spark Hire is a technology company specializing in flexible hiring software solutions designed for people-powered organizations. Their platform offers a comprehensive suite of tools including applicant tracking systems, video interviews (both one-way and live), behavioral assessments, reference checks, and AI-assisted recruiting features. Positioned as a trusted provider with a strong customer base and high ratings, Spark Hire targets HR teams and recruiters seeking to streamline and enhance their hiring processes. The website demonstrates a mature digital presence with modern analytics and marketing integrations, reflecting a well-established SaaS business model in the recruitment technology sector. Security posture is solid with HTTPS enforcement and reputable third-party scripts, though some security headers could be improved. Privacy compliance is evident with accessible privacy and cookie policies, including consent mechanisms. Overall, the site is professional, user-friendly, and trustworthy, supporting Spark Hire's market position as a reliable hiring software provider.
HAKA Onlineshophaka.com
E-commerce · Germany
78Low
NIS2 17 · GDPR 85
NIS2 17 · GDPR 85
HAKA Onlineshop is a well-established German e-commerce business specializing in sustainable, effective, and skin-friendly cleaning and personal care products. The company emphasizes high-quality concentrates that are safe for users and the environment, targeting environmentally conscious consumers. The website reflects a professional brand image with consistent branding and a clear focus on product categories such as cleaning, washing, and body care. The business has a long history dating back to 1946 and operates under the legal entity HAKA Kunz GmbH.
Cycology Clothing UScycologyclothing.com
Retail · United States
80Low
NIS2 17 · GDPR 58
NIS2 17 · GDPR 58
Cycology Clothing US is an e-commerce retailer specializing in cycling apparel and gear, targeting cycling enthusiasts primarily in the United States and other supported international markets. The company offers unique and original cycling clothing designs, emphasizing quality fabrics and free shipping over a certain order value. The website is built on the Shopify platform, leveraging a modern tech stack including Google Tag Manager, Microsoft Clarity, Facebook SDK, Klaviyo, and Hotjar for marketing, analytics, and customer engagement. The site demonstrates good digital maturity with responsive design, SEO optimization, and integration of customer reviews and loyalty programs. Security posture is strong with HTTPS enforcement, security headers, and CAPTCHA protections, though there is room for improvement in publishing formal security policies and vulnerability disclosures. The absence of WHOIS data for the domain reduces trust slightly, but the active and professional online presence mitigates this concern. Overall, the website presents a trustworthy and professional e-commerce experience with moderate risk.
Joinchatjoin.chat
Technology · United States
82Low
NIS2 17 · GDPR 58
NIS2 17 · GDPR 58
Joinchat is a technology company specializing in providing a SaaS solution that integrates popular messaging platforms such as WhatsApp, Telegram, Messenger, Instagram, TikTok, Skype, SMS, and phone calls into websites to capture leads and enhance customer engagement. The company targets businesses across various sectors including hospitality, professional services, automotive, and education, emphasizing conversion rate optimization rather than traditional chat tools. The website demonstrates a mature digital presence with modern WordPress infrastructure, Elementor framework, and hosting on DigitalOcean. It features extensive user testimonials and social media integration, indicating strong market acceptance and user satisfaction. Security posture is adequate with HTTPS enabled and domain transfer protections, though improvements such as DNSSEC and security policies are recommended. Privacy compliance is limited due to the absence of explicit privacy and cookie policies. Overall, the website is professional, trustworthy, and well-optimized for performance and mobile use.
Krüger Dirndlkrueger-dirndl.ch
Retail · Switzerland
76Low
NIS2 2 · GDPR 73
NIS2 2 · GDPR 73
Krüger Dirndl operates a professional e-commerce platform specializing in traditional Trachtenmode and Dirndl clothing for women, men, and children primarily targeting German-speaking markets such as Switzerland, Germany, and Austria. The company emphasizes quality and tradition with over 50 years of experience and a large customer base. The website is built on Magento 2 with modern JavaScript frameworks and integrates marketing and consent management tools to enhance user experience and compliance. Security posture is strong with HTTPS and secure form handling, though explicit security policies and incident response information are not publicly visible. Overall, the site presents a trustworthy and professional retail presence with room for improvement in privacy policy transparency and security header implementation.
Krüger Dirndlkrueger-dirndl.at
Retail · Austria
76Low
NIS2 2 · GDPR 73
NIS2 2 · GDPR 73
Krüger Dirndl operates a professional e-commerce platform specializing in traditional Austrian Trachtenmode and Dirndl clothing for women, men, and children. The website showcases a broad product range including clothing, accessories, and shoes, supported by a loyalty program called Krüger Club. The company emphasizes quality and tradition with over 50 years of experience and a large customer base. Technically, the site is built on Magento with modern JavaScript libraries and integrates marketing and analytics tools such as Dynamic Yield and Google Tag Manager. Security posture is solid with HTTPS and secure forms, though some security headers could be improved. Privacy compliance is limited based on the provided content, with no explicit privacy or cookie policies detected. WHOIS data is unavailable due to NIC.AT restrictions, which slightly reduces trust but does not negate the professional presentation and business legitimacy. Overall, the site is well-designed, user-friendly, and safe for general audiences.
Preciselywinshuttle.com
Technology
83Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Precisely is an enterprise technology company specializing in data integrity solutions, including SAP automation and master data management, recently expanded by acquiring Winshuttle. The website reflects a mature digital presence with professional design, clear messaging, and comprehensive content targeting enterprise customers. Technically, the site is built on WordPress with Elementor, integrates Google Tag Manager and reCAPTCHA, and follows good security practices including HTTPS and security headers. However, WHOIS data is unavailable, which slightly impacts trust but is mitigated by the professional site presentation and clear business information. Privacy and cookie policies are comprehensive and GDPR compliant, though explicit security and incident response policies are not publicly detailed. Overall, the site demonstrates a strong security posture and digital maturity appropriate for an enterprise technology provider.
Government · United States
76Low
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
The Commodity Futures Trading Commission (CFTC) is a U.S. federal government agency responsible for regulating derivatives markets including futures and swaps. The website serves as the official portal for regulatory information, market data, enforcement actions, and consumer protection resources. It targets market participants, industry professionals, and the general public with authoritative content and timely news updates. The CFTC holds a strong market position as the primary derivatives regulator in the United States. Technically, the website is built on Drupal 10 with Bootstrap for responsive design, leveraging modern web technologies and third-party services such as Google Tag Manager and DigitalGov Web Vitals for analytics and performance monitoring. The site demonstrates good mobile optimization, accessibility, and SEO practices, contributing to a positive user experience. From a security perspective, the site enforces HTTPS with strong SSL configuration and includes multiple security headers. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of a cookie consent mechanism and explicit incident response policies suggests room for improvement in privacy compliance and transparency. Overall, the website is trustworthy, professional, and secure, with minor gaps in privacy and security policy disclosures. The incomplete WHOIS data is typical for .gov domains and does not detract from the site's legitimacy. Strategic recommendations include implementing cookie consent, publishing incident response and vulnerability disclosure policies, and adding terms of service to enhance user trust and compliance.
- Fantom
fantom.foundation
Technology
76Low
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Fantom is a well-established blockchain platform specializing in scalable Layer-1 solutions for decentralized finance, crypto applications, and enterprise use cases. The website reflects a professional and modern digital presence, targeting developers and businesses interested in blockchain technology. The platform positions itself as a next-generation solution emphasizing scalability and enterprise readiness. Technically, the site uses modern frameworks such as React and Next.js, with integrations of Google Fonts, Google Analytics, and Matomo for analytics. The design is responsive and user-friendly, with clear navigation and consistent branding. Security posture is solid with HTTPS enforced and bot protection via reCAPTCHA, though explicit security headers and policies are not published. Privacy compliance is limited due to the absence of visible privacy and cookie policies or consent mechanisms. Overall, the site is trustworthy and professional but could improve transparency on privacy and security policies.
NeptuneLabs GmbHneptunelabs.com
Technology · Germany
81Low
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
NeptuneLabs GmbH is a technology company specializing in dynamic imaging software solutions, offering products such as FSI Server and FSI Viewer that enable real-time responsive imaging for websites. Their solutions cater to businesses requiring advanced image management, zoom, pan, and 360° spin capabilities, delivered either on-premises or via SaaS. The company has a global footprint with over 1,000 installations across more than 35 countries, positioning it as a niche but established player in the imaging software market. Technically, the website is built on a modern WordPress CMS platform using the Avada theme and includes custom JavaScript libraries for their imaging products. The site is well optimized for performance, mobile responsiveness, and accessibility, with proper SEO metadata and structured navigation. Privacy and cookie policies are clearly presented with consent mechanisms, reflecting good compliance with GDPR requirements. From a security perspective, the site enforces HTTPS and includes cookie consent but lacks published formal security policies or incident response contacts. No security headers were detected in the provided data, and no vulnerabilities or exposed sensitive data were found. The absence of WHOIS registration data is a notable concern, as it limits domain legitimacy verification, although the website content and business information appear professional and trustworthy. Overall, NeptuneLabs demonstrates a mature digital presence with strong business and technical foundations but should improve transparency around domain registration and security governance to enhance trust and compliance.
- b.young
byoung.com
Retail · Denmark
77Low
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
b.young is a Scandinavian fashion brand specializing in modern, sustainable womenswear with a focus on timeless style. The company operates an e-commerce platform targeting women interested in trendy yet sustainable clothing options. The website is professionally designed using modern web technologies such as Next.js and React, hosted on Vercel, ensuring fast performance and good mobile optimization. The site includes comprehensive cookie consent mechanisms and privacy policies, demonstrating a commitment to GDPR compliance and user privacy. However, the absence of WHOIS data and explicit security policies slightly reduces the overall trustworthiness. Security posture is strong with HTTPS enforced and no visible vulnerabilities, but could be improved by adding security headers and publishing incident response contacts. Overall, the website presents a professional and trustworthy online retail presence with room for enhanced transparency and security documentation.
- Soaked in Luxury | Shop women's fashion
soakedinluxury.com
Retail
76Low
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Soaked in Luxury operates as an online retail platform specializing in women's fashion apparel and accessories, targeting European markets. The website demonstrates a professional e-commerce presence with a clear focus on user experience and brand consistency. The business model centers on direct-to-consumer sales through a modern web storefront. Technically, the site leverages contemporary frameworks such as Next.js and React, hosted likely on Vercel, ensuring fast performance and mobile optimization. The integration of comprehensive cookie consent mechanisms and privacy policies indicates a strong commitment to GDPR compliance and user privacy. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, though explicit security headers and incident response information are absent. The lack of WHOIS data for the domain introduces some uncertainty regarding domain legitimacy, but the active and professional nature of the site mitigates this concern. Overall, the site scores well on content quality, technical implementation, and privacy compliance, with room for improvement in business credibility and security transparency.
renatta&gorenattandgo.com
Retail · Spain
83Low
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
renatta&go is an e-commerce retailer specializing in women's fashion, offering a variety of clothing, footwear, and accessories primarily targeting Spanish-speaking customers. The website is built on the Shopify platform, leveraging modern e-commerce technologies and marketing tools such as Google Analytics, VWO, and Connectif Cloud. The site demonstrates a good level of digital maturity with responsive design, cookie consent mechanisms, and GDPR compliance. Security posture is solid with HTTPS enforced and secure form handling, though some security headers are not explicitly detected and no incident response information is provided. The absence of WHOIS data raises concerns about domain registration legitimacy, but the active and professional website presence suggests legitimate business operations. Overall, the site scores well on content quality, technical implementation, and security, with room for improvement in business credibility and transparency.
Cycology Clothing AUScycologygear.com
E-commerce · Australia
80Low
NIS2 17 · GDPR 58
NIS2 17 · GDPR 58
Cycology Clothing AUS operates an e-commerce platform specializing in cycling apparel and accessories targeting the Asia Pacific and Australian markets. The website is built on Shopify, leveraging a modern tech stack with integrations including Google Analytics, Microsoft Clarity, Klaviyo, and Okendo Reviews, indicating a mature digital marketing and analytics infrastructure. The site demonstrates good design quality, mobile optimization, and user experience, catering well to its niche audience of cycling enthusiasts. Security posture is solid with HTTPS enforced and reputable third-party tools used, though explicit security headers and privacy policies are not clearly presented in the analyzed content. The absence of WHOIS registrant data suggests privacy protection or recent domain registration, which is common for Shopify stores but slightly reduces transparency. Overall, the site is professional, trustworthy, and well-positioned in its market segment.
California Cowboycaliforniacowboy.com
Retail · United States
76Low
NIS2 2 · GDPR 58
NIS2 2 · GDPR 58
California Cowboy is a niche e-commerce retailer specializing in vintage-inspired casual apparel for men and women, designed in California. The company offers a variety of products including Hawaiian print shirts, flannels, t-shirts, sweatshirts, and accessories, emphasizing functional features such as bottle pockets. The website is built on the Shopify platform using the Pipeline theme, integrating multiple marketing and analytics tools to support customer engagement and sales. The brand targets casual apparel consumers seeking unique and functional clothing with a vintage aesthetic. Technically, the site is well-implemented with modern web technologies, fast performance, and good mobile optimization. Security posture is strong with HTTPS enforced and appropriate security headers, though explicit security policies and incident response information are not publicly disclosed. Privacy compliance is addressed with accessible privacy and cookie policies, including consent mechanisms. Overall, the site presents a professional and trustworthy e-commerce experience with room for improvement in transparency around security and contact information.
Pedal Mafia Australiapedalmafia.cc
E-commerce · Australia
77Low
NIS2 17 · GDPR 58
NIS2 17 · GDPR 58
Pedal Mafia Australia operates as a niche e-commerce retailer specializing in high-quality cycling apparel, custom apparel, accessories, and casual wear. The website targets cycling enthusiasts primarily in Australia, with an international presence indicated by a partner domain for US customers. The business leverages the Shopify platform, providing a professional and consistent online shopping experience. The site is well-branded and uses modern e-commerce technologies and marketing tools to engage customers.
Krüger Dirndlkrueger-dirndl.de
Retail · Germany
78Low
NIS2 2 · GDPR 73
NIS2 2 · GDPR 73
Krüger Dirndl operates a professional e-commerce platform specializing in traditional Bavarian and Austrian clothing, including Dirndl, Lederhosen, and related accessories for women, men, and children. The website targets consumers interested in high-quality, authentic Trachtenmode and maintains a strong market position with over 50 years of brand history and a large customer base. Technically, the site is built on Magento with integrations such as Dynamic Yield for personalization and Cloudflare for DNS and security. The platform demonstrates good digital maturity with responsive design and moderate performance. Security posture is solid with HTTPS and secure form handling, though improvements in security headers and explicit security policies are recommended. Privacy compliance is basic, lacking explicit privacy and cookie policies in the provided content. Overall, the site is trustworthy, safe, and professionally maintained, serving a general audience with family-friendly content.
- InWear
inwear.com
Retail · Denmark
77Low
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
InWear is a European fashion retail brand operating an official e-commerce website offering clothing with fast delivery and easy returns. The site targets European consumers interested in fashion apparel and provides promotional offers such as 10% off first orders and free delivery over €99. The website is built on modern technologies including Next.js and React, ensuring good performance and mobile optimization. It integrates multiple third-party marketing and analytics tools, including Google Analytics, Microsoft Bing, TikTok, and Pinterest, with a comprehensive cookie consent mechanism that complies with GDPR requirements. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security policies and incident response information are not published. The lack of WHOIS registration data reduces domain trustworthiness, but the professional branding and content quality support legitimacy. Strategic recommendations include publishing terms of service, enhancing contact information, and adding a security.txt file for vulnerability disclosure.
- Matinique
matinique.com
Retail · Denmark
77Low
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Matinique is a Scandinavian menswear brand offering stylish and quality clothing through its official webshop. The company targets modern men who appreciate classic and casual fashion styles. The website is professionally designed with a strong focus on user experience, mobile optimization, and SEO best practices. It leverages modern web technologies including Next.js and React, hosted on Vercel, ensuring fast performance and scalability. The integration of multiple marketing and analytics platforms such as Google Analytics, TikTok, and Sleeknote indicates a mature digital marketing strategy. Security posture is generally good with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and detailed security policies are absent. The lack of WHOIS data for the domain raises concerns about domain registration legitimacy, which should be further investigated. Overall, the website presents a professional and trustworthy front for the business, but improvements in transparency and security documentation are recommended.
- COMPANYS
companys.com
Retail
78Low
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
COMPANYS operates as a large-scale online fashion retail platform targeting men and women across European markets. The website offers a multi-regional, multi-lingual shopping experience with a focus on the latest fashion trends. Technically, the site is built on a modern stack including Next.js and React, hosted on Vercel, and leverages Cloudflare for performance and security. The site demonstrates good mobile optimization, accessibility, and SEO practices. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers could be verified further. Privacy compliance is robust, with detailed cookie declarations and GDPR-aligned consent management. However, the absence of WHOIS registration data and lack of explicit contact information slightly reduce business credibility. Overall, the site is professional and trustworthy but would benefit from enhanced transparency in registration and contact details.
AGUagu.com
E-commerce · Netherlands
78Low
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
AGU operates a mature and official e-commerce platform specializing in cycling apparel, rainwear, helmets, and accessories. The website targets cycling enthusiasts primarily in Europe and maintains partnerships with professional cycling teams such as Team Jumbo-Visma. The business model is retail-focused with a strong brand presence and product guidance content to support customer engagement. Technically, the site is built on Magento with modern JavaScript frameworks and integrates multiple marketing and analytics tools including Google Tag Manager, Microsoft Clarity, and Yotpo. Security posture is adequate with HTTPS and domain transfer protections, but lacks visible security headers and explicit privacy/cookie policies, which are areas for improvement. Overall, the website is professional, trustworthy, and well-positioned in its niche, though privacy compliance and security best practices should be enhanced to meet higher standards.
Giant Bicyclesgiant-bicycles.com
Transportation
78Low
NIS2 2 · GDPR 80
NIS2 2 · GDPR 80
Giant Bicycles is a globally recognized leader in the manufacturing and retail of bicycles and cycling gear. The website serves as the official platform for showcasing their latest products, news, events, and pro cycling team information, targeting cycling enthusiasts worldwide. The company operates under the parent Giant Group and includes subsidiaries such as Liv and Momentum, reinforcing its strong market position in the transportation sector. Technically, the website employs a modern tech stack including jQuery, Vue.js, Google Analytics, Klaviyo, Microsoft Clarity, and Facebook Pixel, ensuring robust analytics and marketing capabilities. The site is well-optimized for mobile devices, features comprehensive SEO and accessibility practices, and uses GDPR-compliant cookie consent mechanisms, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS and integrates consent-based analytics and marketing scripts. However, explicit security headers are not detected, and no public security or incident response policies are found, indicating room for improvement in transparency and security posture. The absence of WHOIS data for the domain is unusual but does not detract from the site's apparent legitimacy based on content and branding. Overall, the website presents a professional, trustworthy, and user-friendly experience with strong compliance to privacy regulations. Strategic enhancements in security policy publication and domain registration transparency would further strengthen its risk profile and stakeholder confidence.
- Saint Tropez
sainttropez.com
Retail · Denmark
78Low
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Saint Tropez is a European women's fashion retailer operating an official e-commerce website targeting the European market. The company offers a range of women's clothing and fashion products, positioning itself as an established brand within the retail sector. The website is built on modern web technologies including Next.js and React, hosted likely on Vercel, and integrates multiple marketing and analytics tools such as Google Analytics, Facebook Pixel, and Pinterest. The site demonstrates good performance, mobile optimization, and accessibility standards. Security posture is strong with HTTPS enforced and standard security headers present, though explicit security policies and incident response information are not publicly available. Privacy compliance is well addressed with a comprehensive cookie consent mechanism and GDPR-aligned privacy policies. However, the absence of WHOIS data for the domain raises concerns about domain registration transparency and legitimacy. Overall, the website is professional and trustworthy from a user perspective but would benefit from improved transparency in domain registration and security governance documentation.
- BBik Bok
bikbok.com
Retail · Finland
78Low
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Bik Bok is a well-established Nordic fashion retail company, founded in 1997, offering trendy clothing primarily targeting women interested in the latest fashion trends. The company operates both online and physical stores, positioning itself as a leading fashion destination in the Nordic region. The website reflects a modern e-commerce platform built with React and integrates various marketing and analytics tools such as Google Analytics, Google Tag Manager, Cookiebot for consent management, and New Relic for performance monitoring. The technical infrastructure is solid, with good mobile optimization and SEO practices, although some accessibility features could be improved. Security posture is adequate with HTTPS enabled and domain transfer protections in place, but lacks visible security headers and published security policies. Privacy compliance is partially addressed through cookie consent but lacks explicit privacy and terms of service documentation in the analyzed content. Overall, the website is professional, trustworthy, and serves its target audience effectively.
- DDressmann
dressmann.com
Retail · Finland
78Low
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Dressmann is a leading Nordic men's fashion retail chain, offering a wide range of clothing for men of all ages and sizes, with a strong emphasis on quality and affordability. The company operates a professional e-commerce platform targeting price-conscious male customers, providing a comprehensive product range and customer satisfaction guarantees. The website is well-structured, with clear branding and consistent messaging aligned with its market position. Technically, the site leverages modern web technologies including React, Google Tag Manager, and New Relic for performance monitoring, alongside Cookiebot for GDPR-compliant cookie management. Security posture is strong with HTTPS enforcement, domain locking, and active monitoring, although DNSSEC is not enabled and no explicit security policy or incident response contacts are published. Overall, the site demonstrates a mature digital presence with good privacy compliance and trustworthy business legitimacy.
Odloodlo.com
Retail · Switzerland
83Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Odlo is a well-established sportswear brand specializing in functional underwear and sports apparel, targeting active individuals and athletes primarily in Europe. The company operates a professional e-commerce platform offering direct sales of its products. The website demonstrates a good level of digital maturity with modern design, mobile optimization, and implemented privacy and cookie consent mechanisms. The technical infrastructure includes modern CSS frameworks and third-party marketing tools, supporting a moderate performance and user experience. Security posture is adequate with HTTPS enforced and cookie consent, though additional security headers could enhance protection. The absence of public WHOIS data suggests privacy protection or limited public registration information, which slightly impacts trust but is common for commercial brands. Overall, the website is professional, secure, and compliant with GDPR, supporting a trustworthy online presence for Odlo.
Infracapitalinfracapital.co.uk
Energy · United Kingdom
80Low
NIS2 2 · GDPR 58
NIS2 2 · GDPR 58
Infracapital is a UK-based infrastructure investment and asset management firm operating under the M&G plc group. The company focuses on long-term, sustainable growth in sectors such as energy and transportation. The website reflects a professional corporate presence with clear navigation and a focus on investor and stakeholder engagement. Technically, the site is built on Adobe Experience Manager with Adobe Scene7 for media delivery, hosted likely via Akamai CDN, and includes modern web technologies and performance optimizations. Security posture is solid with HTTPS enforced and monitoring scripts in place, though explicit security headers and policies could be improved. Privacy compliance is basic with cookie consent mechanisms but lacks visible privacy and terms of service pages. WHOIS data for the domain is unavailable due to Nominet naming rules, but the site is legitimate and professionally maintained. Overall, the site presents a trustworthy and professional digital presence aligned with its business objectives.