Medium-risk security reports

Setrab AB is a well-established Swedish manufacturer specializing in high-performance liquid and oil cooling solutions, including bespoke aluminium coolers and heat exchangers. With over 57 years of experience, the company serves diverse sectors such as motorsport, passenger and commercial vehicles, industrial and medical equipment, battery electric vehicles, and energy storage systems. Their market position is strong, emphasizing quality, customization, and reliability. The website reflects a professional digital presence with clear navigation, multilingual support, and integration of modern web technologies including Google Maps, analytics, and cookie consent mechanisms. Security posture is solid with HTTPS and privacy compliance, though there is room for improvement in publishing dedicated security policies and incident response information. Overall, the domain registration and business information are consistent, supporting the legitimacy of the company.

OneMed is a Swedish healthcare supplier specializing in medical devices, consumables, equipment, and related services. The company targets healthcare providers in Sweden, offering a B2B model with multiple digital portals including a webshop and patient portals. The website reflects a well-established market position with a focus on quality, sustainability, and secure healthcare supply chain management. Technically, the site uses modern frameworks such as Bootstrap and Sitecore CMS, integrates multiple analytics and tracking services, and is hosted behind Cloudflare for performance and security. The site is mobile optimized and accessible, with good SEO practices. Security posture is strong with HTTPS, session management, and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is robust with a comprehensive GDPR-aligned privacy policy and cookie consent banner. Overall, the website is professional, trustworthy, and aligned with the company's business claims.

Rapunzel of Sweden AB operates a professional e-commerce platform specializing in high-quality hair extensions and related hair care products. The website targets consumers seeking premium hair solutions, offering a wide range of products including tape extensions, clip-ins, keratin extensions, and hair care kits. The company maintains a strong market position with international reach, supported by multiple language and country options. The technical infrastructure leverages modern technologies such as React, Next.js, and Storyblok CMS, ensuring a fast, mobile-optimized, and accessible user experience. Security measures include HTTPS enforcement, reCAPTCHA integration, and comprehensive cookie consent mechanisms, reflecting a mature security posture. Overall, the website demonstrates high professionalism, trustworthiness, and compliance with privacy regulations, making it a reliable platform for customers.

Specsavers is a well-established multinational retail optical company specializing in optician services, glasses, and contact lenses. The website serves as a global landing page directing users to country-specific sites, indicating a broad international presence. The business model focuses on retail optical products and services targeting consumers seeking eye care solutions. The website's branding is consistent and professional, reflecting a mature market position. Technically, the website employs modern web technologies including Bootstrap 5, jQuery, FontAwesome, and Google Tag Manager for analytics and marketing. The site is hosted behind Cloudflare, providing performance and security benefits. Mobile optimization and SEO appear well implemented, though accessibility features are basic. The cookie consent mechanism is implemented via OneTrust, demonstrating compliance with privacy regulations such as GDPR. From a security perspective, the site uses HTTPS and includes a cookie consent banner, but lacks visible advanced security headers and explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the provided content. The domain uses privacy protection for WHOIS data, which is typical for large retail brands. Overall, the security posture is moderate but could be improved by publishing security policies and enhancing header configurations. The overall risk assessment is low with no critical issues detected. Strategic recommendations include enhancing security headers, publishing incident response contacts, and improving accessibility compliance to strengthen trust and security culture. The website quality and business credibility are high, supporting Specsavers' position as a leading optical retailer.

Uddevalla kommun operates as the official municipal government for the Uddevalla region in Sweden, providing a wide range of public services including education, social care, urban development, and community engagement. The website serves residents, local businesses, and visitors with comprehensive information and e-services, positioning itself as a trusted local government portal. The site is well-branded, consistent, and professionally maintained, reflecting its public sector nature. Technically, the website leverages the SiteVision CMS platform, integrates modern JavaScript libraries such as jQuery and React, and employs third-party services for cookie consent (ConsentManager.net) and analytics (Vizzit). The site is mobile-optimized, accessible, and SEO-friendly, indicating a mature digital infrastructure. From a security perspective, the site enforces HTTPS, implements cookie consent mechanisms, and avoids exposing sensitive data. However, it lacks explicit published security policies, incident response contacts, and vulnerability disclosure mechanisms, which are recommended for enhanced transparency and security posture. Overall, the website is legitimate, trustworthy, and well-aligned with the municipal government’s mission. Strategic improvements in security documentation and HTTP header hardening could further strengthen its security and compliance stance.

TBWA Stockholm is a prominent advertising agency based in Sweden, part of the global TBWA network. The company specializes in creative marketing and advertising services targeting businesses seeking impactful campaigns. The website reflects a medium-sized agency with a professional digital presence, leveraging Squarespace CMS and modern web technologies. The site is well-structured, mobile-optimized, and includes clear contact information and social media links. Security posture is strong with HTTPS enforced and HSTS enabled, complemented by a comprehensive cookie consent mechanism via OneTrust. However, explicit security policies and incident response contacts are not present, representing an area for improvement. Overall, the website demonstrates a mature digital infrastructure suitable for its business model and market position.

NEYE is a well-established retail company specializing in bags, backpacks, suitcases, wallets, and accessories, with a strong presence in Sweden and Denmark. The company has a rich history dating back to 1881 and is supported by the NEYE Foundation, which donates profits to cancer research. The website reflects a mature e-commerce platform with clear business information, a customer club, and a focus on user privacy and compliance. Technically, the site uses modern web technologies including ASP.NET Core, jQuery, and integrates multiple analytics and marketing tools such as Google Analytics, Microsoft Clarity, TikTok Pixel, and Sleeknote. The security posture is strong with HTTPS, reCAPTCHA, and consent management, although explicit security policies and vulnerability disclosures are not found. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, providing a good user experience and clear navigation.

Mölndals stad operates as the official municipal government website for the city of Mölndal, Sweden. It provides residents and visitors with comprehensive information about municipal services, events, job opportunities, and contact channels. The website serves as a central hub for public communication and e-services, reflecting a medium-sized government entity with a clear focus on accessibility and user engagement. The site is well-branded and consistent with municipal identity, targeting local citizens and stakeholders. Technically, the website leverages a modern technology stack including SiteVision CMS, React, and multiple analytics platforms such as Piwik PRO and Vizzit. The infrastructure supports responsive design, accessibility features, and performance optimizations suitable for a government portal. The use of nonce attributes in scripts and secure cookie flags indicates attention to security best practices. From a security perspective, the site enforces HTTPS, employs cookie consent mechanisms, and integrates analytics with privacy compliance in mind. However, it lacks explicit published security policies or incident response information, which could be improved to enhance transparency and readiness. No critical vulnerabilities or blocking mechanisms were detected, and the WHOIS data confirms the legitimacy and consistency of the domain registration. Overall, Mölndals stad's website demonstrates a solid digital presence with good content quality, technical implementation, and privacy compliance. Strategic enhancements in security policy publication and incident response communication would further strengthen its security posture and user trust.

ICA Gruppen is a leading Swedish retail conglomerate focusing on grocery, pharmacy, banking, insurance, and real estate sectors. The company operates multiple subsidiaries including ICA Sverige, Apotek Hjärtat, ICA Banken, ICA Försäkringar, and ICA Fastigheter, positioning itself as a dominant player in the Swedish market. The website reflects a mature digital presence with clear corporate branding, comprehensive content about business operations, sustainability efforts, innovation, and financial information targeted at consumers, investors, and partners. Technically, the site is built on Episerver CMS with AngularJS and jQuery, hosted likely on Microsoft Azure, and integrates modern analytics tools such as Azure Application Insights and Google Tag Manager. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response information are not publicly disclosed. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, supporting the company's enterprise-level stature.

BPM is a well-established accounting and advisory firm headquartered in California, USA, offering a broad range of services including assurance, tax, advisory, wealth management, and cybersecurity. The firm targets diverse client segments such as public companies, startups, private equity, family offices, and high net-worth individuals, positioning itself as a trusted partner for strategic financial solutions. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content tailored to its audience. Technically, the site is built on WordPress with integrations of HubSpot, Drift chat, and multiple analytics tools, indicating a modern and data-driven infrastructure. Security posture is strong with HTTPS, reCAPTCHA Enterprise, and security headers, though explicit security policies and incident response contacts are not published. Overall, BPM demonstrates high business credibility and digital maturity, with room for improvement in transparency around security policies and incident handling.

Compotech Provider AB is a Swedish company specializing in electromekanik products and solutions, including motors, HMI products, sensors, and magnetic components. With over 30 years of experience and as part of the Addtech group, they offer product sales, development, and complete system solutions targeting manufacturing and engineering sectors. Their website is professionally designed, content-rich, and optimized for SEO and mobile devices. The technical infrastructure is modern, leveraging WordPress CMS, Cloudflare CDN and WAF, Google Analytics, and marketing automation tools like ActiveCampaign. Security posture is strong with HTTPS, reCAPTCHA on forms, and cookie consent mechanisms, though a dedicated security policy and incident response contacts are not published. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with GDPR.

Netlight Consulting is a well-established digital transformation consultancy founded in 1999 in Sweden. The company positions itself as a leading partner for enterprises and startups seeking to succeed in the digital landscape by providing expert consulting services from strategy to implementation. With over 2000 consultants and 13 offices across 9 countries, Netlight demonstrates a strong market presence and a commitment to collective intelligence and collaboration. The website reflects a mature digital infrastructure using modern technologies such as React, Next.js, and Sanity CMS, complemented by Piwik PRO for analytics. Security measures include HTTPS enforcement, comprehensive cookie consent, and standard security headers, indicating a robust security posture. However, explicit security policies and incident response contacts are not publicly detailed. Overall, the website is professional, user-friendly, and compliant with GDPR, supporting a high level of trust and credibility.

Sogeti is a well-established technology solutions provider and a subsidiary of Capgemini, offering a broad range of services including AI, Cloud, Data, Intelligent Apps, Modern Work, and Quality Engineering. The company positions itself as an agile partner leveraging emerging technologies to deliver innovative and quality-driven solutions to businesses globally. The website reflects a mature digital presence with comprehensive content, clear navigation, and strong branding consistency. Technically, the site is built on WordPress with modern integrations such as Cookiebot for privacy compliance, Google Tag Manager, and analytics tools like Hotjar and Parsely, indicating a high level of digital maturity. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and incident response policies are not published. Overall, the site demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations, supporting Sogeti's market position as a leading technology provider.

IPP is a Swedish construction industry-focused blog providing detailed articles and guides on building materials, tools, and sustainable construction practices. The site targets construction professionals and DIY enthusiasts in Sweden, offering practical knowledge and industry insights. The business model appears to be content-driven, possibly monetized through affiliate links and partnerships with suppliers. Technically, the site uses standard HTML, CSS, and JavaScript with responsive design, but lacks advanced frameworks or CMS indications. Security posture is basic with HTTPS enabled but missing important security headers and no visible privacy or cookie policies, which impacts compliance and trust. No contact or incident response information is provided, limiting transparency. Overall, the site is functional and content-rich but requires improvements in privacy, security, and business transparency to enhance credibility and compliance.

East Capital Group is a well-established asset management firm specializing in emerging and frontier equity markets with a strong focus on ESG and sustainability. Founded in 1997 and headquartered in Sweden, the company offers a range of investment funds targeting institutional and professional investors globally. The website reflects a professional and consistent brand image, emphasizing long-term, responsible investment strategies. Technically, the site uses modern web technologies including Bootstrap and Cookiebot for GDPR-compliant cookie management, with good mobile optimization and accessibility features. Security posture is strong with HTTPS enforced, security headers present, and no visible vulnerabilities or exposed sensitive data. The company demonstrates compliance with privacy regulations and uses reputable analytics and marketing tools. Overall, the website and domain registration data support a high level of business credibility and trustworthiness.

T-Engineering AB is a Scandinavian development company specializing in control systems and electrification solutions for future mobility. The company offers a comprehensive suite of services including electrical architecture development, integration, calibration, validation, and hardware-in-the-loop testing. Their market position is strengthened by their in-house IP and close ties to automotive industry players, including implied association with Dongfeng Motor. The website reflects a medium-sized enterprise with a strong focus on technology and transportation sectors, targeting automotive manufacturers and mobility solution providers. Technically, the website is built on a modern WordPress CMS platform using Elementor and integrates Google Tag Manager for analytics. The site is mobile-optimized with good SEO practices and moderate performance. Security posture is adequate with HTTPS enforced, though there is room for improvement in security headers and explicit security policies. Privacy compliance is basic but includes a cookie consent mechanism and a privacy policy page. Overall, the security posture is sound with no critical vulnerabilities detected, and the domain registration details align well with the business claims, indicating legitimacy. The company maintains active social media channels and provides clear contact information, enhancing trustworthiness. Strategic recommendations include enhancing security headers, publishing incident response and security policies, and maintaining regular security audits to strengthen compliance and resilience.

GlobalConnect AB operates as a leading telecommunications provider in Sweden, specializing in open fiber networks that enable customers to access broadband, TV, and telephony services from multiple providers. The company targets residential customers, property owners, and businesses, offering a comprehensive fiber installation and service ordering experience. Their market position is strong, supported by a professional and well-structured website that reflects their large enterprise status and broad service portfolio. Technically, the website is built on WordPress with modern JavaScript frameworks like Vue.js and integrates advanced analytics and consent management tools such as Google Analytics, Hotjar, and Cookiebot, indicating a mature digital infrastructure. Security-wise, the site enforces HTTPS and employs cookie consent mechanisms, but lacks explicit security headers and a published security policy, suggesting room for improvement in security transparency and hardening. Overall, the website is professional, user-friendly, and compliant with GDPR, with clear contact information and trust signals. Strategic recommendations include enhancing security headers, publishing a security policy, and continuous monitoring of third-party scripts to maintain a strong security posture.

DNB Carnegie Investment Bank AB is a leading Nordic financial advisory and investment banking firm, operating under a unified brand to serve private banking clients, institutional investors, and market participants. The company offers a broad range of services including private banking, securities and research, investment banking, and commissioned research. The website reflects a mature digital presence with professional design, clear navigation, and multiple client portals. Technically, the site is built on WordPress with modern tracking and analytics tools, supported by a robust cookie consent mechanism ensuring GDPR compliance. Security posture is strong with HTTPS enforced and error monitoring via Sentry, though explicit security policies and incident response contacts are not published. Overall, the site demonstrates high professionalism, trustworthiness, and compliance suitable for a financial institution.

Polarium Energy Solutions AB is a Swedish company specializing in smart and sustainable energy storage solutions. Their offerings include modular and scalable battery energy storage systems designed to optimize energy usage for a variety of customers including telecom operators, manufacturing plants, and residential users. The company positions itself as a leader in the Nordic energy storage market, supported by strategic partnerships and acquisitions. The website is built on WordPress with modern technologies such as Google Tag Manager and Cookiebot for analytics and privacy compliance. Security posture is strong with HTTPS, bot management, and cookie consent mechanisms, though explicit security policies and incident response contacts are not publicly available. Overall, the site is professional, well-branded, and compliant with GDPR requirements.

AARO is a well-established Swedish company specializing in comprehensive group reporting and consolidation software solutions. With over 35 years of experience, they serve a global clientele with more than 10,000 active users across 140 countries. Their business model centers on providing SaaS products complemented by extensive support services and training programs, targeting corporations requiring efficient and transparent financial reporting. The website reflects a mature digital presence, leveraging WordPress and Elementor for a professional, responsive, and accessible user experience. Security is robust with HTTPS enforcement, cookie consent via Cookiebot, and integration of reputable analytics and tracking tools. While explicit security headers could be more visible, the overall posture is strong with no critical vulnerabilities detected. The domain registration aligns with the company's claims, enhancing trustworthiness. Strategic recommendations include enhancing security header implementation, publishing a vulnerability disclosure policy, and providing explicit incident response contacts.

DELTACO is a well-established Nordic IT brand specializing in the distribution and retail of IT accessories, including cables, batteries, smart home devices, and gaming equipment. With a history dating back to 1991, the company has positioned itself as a leading player in the Nordic e-commerce market, offering competitive prices and a broad product range. The website reflects a mature digital presence with comprehensive product categorization and a strong focus on user experience. Technically, the website is built on the Magento platform with integration of modern JavaScript frameworks such as Alpine.js and libraries like Swiper and Glider for enhanced UI components. The use of Cloudflare as a CDN and security provider adds a layer of protection and performance optimization. The site is mobile-optimized and includes accessibility features, ensuring a broad reach and compliance with modern web standards. From a security perspective, the site employs HTTPS with strong SSL configuration, uses reCAPTCHA on login forms to prevent automated abuse, and implements a detailed cookie consent mechanism compliant with GDPR. While explicit security headers are not fully visible in the HTML, the overall posture is strong with no evident vulnerabilities or exposed sensitive data. Overall, DELTACO's website demonstrates a high level of professionalism, security awareness, and compliance, making it a trustworthy platform for customers and partners alike. Strategic recommendations include enhancing visible security headers, maintaining up-to-date software, and improving incident response contact visibility to further strengthen trust and resilience.

Volvo is a globally recognized enterprise specializing in manufacturing and selling vehicles and related products across multiple sectors including cars, trucks, buses, construction equipment, marine and industrial engines, defense, autonomous solutions, energy, and financial services. The website reflects a strong market position with comprehensive offerings and a clear focus on quality, safety, and environmental care. The digital infrastructure is built on Adobe Experience Manager and Scene7 platforms, leveraging modern technologies for content delivery, media management, and analytics. Privacy compliance is robust, with clear cookie consent mechanisms and detailed privacy policies. Security posture is strong, with HTTPS enforced and best practices observed, although explicit security and incident response policies are not publicly detailed. Overall, the site demonstrates high professionalism, trustworthiness, and technical maturity.

QD Sverige AB is a medium-sized Swedish IT service provider specializing in delivering comprehensive IT and operational solutions. Acting as an external IT department for its clients, QD offers a broad range of services including user support, IT security, cloud services, and strategic IT advisory. The company positions itself as a flexible yet stable IT partner, targeting businesses and organizations seeking reliable and scalable IT solutions. Their market presence is supported by multiple certifications and a strong focus on customer satisfaction. Technically, the website employs modern web technologies such as jQuery, SignalR, and Google Tag Manager, with responsive design and good SEO practices. While the site uses HTTPS and has cookie consent mechanisms, it lacks some advanced security headers and explicit security policies. Analytics usage is moderate, primarily through Google Tag Manager, with basic privacy compliance measures in place. From a security perspective, the site demonstrates a solid baseline with HTTPS and cookie consent but could improve by publishing detailed security policies, incident response contacts, and vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected. The domain registration data aligns well with the business claims, enhancing trustworthiness. Overall, QD Sverige AB presents a professional and credible online presence with good technical implementation and business clarity. Strategic improvements in security transparency and compliance documentation would further strengthen their security posture and customer trust.

Ramirent AB is a leading equipment rental company operating primarily in Sweden and the Nordic region, offering a wide range of construction and industrial equipment along with digital services and training. The company emphasizes safety, knowledge, and sustainability, as evidenced by its ISO 9001, 14001, and 45001 certifications. The website reflects a mature digital infrastructure using modern technologies such as Next.js and React, with strong mobile optimization and good SEO practices. Security posture is robust with HTTPS enforcement, comprehensive cookie consent mechanisms, and appropriate security headers. No critical vulnerabilities or blocking mechanisms were detected, indicating a secure and accessible web presence. Overall, Ramirent demonstrates a strong market position with clear business credibility and compliance with privacy regulations.

Sofigate is a leading Nordic business technology company specializing in digital transformation and business technology services. With over 700 certified experts across multiple countries, they leverage generative AI and leading enterprise platforms like ServiceNow and Salesforce to deliver fast time-to-value for their clients. The company positions itself as a trusted partner for both business and IT leaders, emphasizing co-creation and sustainable transformation. Technically, the website is built on WordPress with modern SEO and analytics integrations, including Google Tag Manager, HubSpot, and OneTrust for privacy compliance. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers are not visible in the provided data. Overall, the site demonstrates professionalism, good performance, and compliance with GDPR requirements.

The Chimney Pot is a Nordic-based postproduction company specializing in VFX, sound design, color grading, and editing services for film, TV, and digital content. The company positions itself as a leader in the Nordic media postproduction market, offering artistic integrity combined with advanced technology. Their business model includes co-production support to facilitate financing and distribution, with headquarters in Stockholm and satellite presence in Poland and Los Angeles. Technically, the website is built on the Webflow CMS platform, leveraging modern web fonts and embedded Vimeo video content. The site demonstrates good design quality and user experience but lacks comprehensive privacy and cookie policies, as well as explicit contact information. Security posture is limited due to missing security headers and unclear SSL configuration. Overall, the website is professional but could improve in compliance and security transparency.

ARKET is a modern Nordic lifestyle and retail brand offering collections for women, men, children, and homeware, complemented by a seasonal vegetarian café. Founded in 2017 and part of the H&M Group, it holds a strong market position in the European retail sector with a focus on quality, sustainability, and design. The website reflects a mature digital presence with a well-structured e-commerce platform, rich content, and clear navigation tailored for a broad consumer audience. Technically, the site leverages modern frameworks such as Next.js and React, with Storyblok CMS and Akamai hosting, ensuring fast performance and mobile optimization. Security measures include HTTPS enforcement, comprehensive cookie consent via OneTrust, and appropriate security headers, indicating a robust security posture. No critical vulnerabilities or exposed sensitive data were detected. The site demonstrates good privacy compliance with GDPR indicators and transparent cookie management. Overall, ARKET's website is professional, trustworthy, and aligned with its business objectives, though it could enhance security transparency by publishing dedicated security policies and incident response contacts.

NOBA Bank Group AB is a leading European specialist bank founded in 2003, operating across eight countries with over 600 employees. The group offers flexible financial products including consumer credit, cards, savings, mortgages, and equity release loans through its subsidiaries Nordax Bank, Bank Norwegian, and Svensk Hypotekspension. The website reflects a professional and consistent brand presence with clear investor relations and sustainability focus. Technically, the site is built on modern frameworks like Next.js and React, hosted on Vercel, and optimized for performance and mobile use. Security posture is adequate with HTTPS usage and no exposed sensitive data, but lacks explicit security headers and published security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is trustworthy and credible but would benefit from enhanced privacy and security transparency.

Zmarta AB operates a comprehensive online platform for insurance and financial product comparison primarily targeting the Swedish market. The website offers a broad range of insurance products including car, home, life, and business insurance, alongside loan and electricity price comparisons. With over 1.5 million insurance sales and partnerships with numerous reputable insurance companies, Zmarta holds a strong market position as a trusted intermediary. The platform emphasizes user convenience through features like BankID authentication and free advisory services. Technically, the website employs modern frameworks such as Vue.js, integrates advanced analytics and marketing tools, and maintains good performance and accessibility standards. Security practices include HTTPS enforcement, cookie consent management, and error tracking, though explicit security policies and incident response details are not publicly disclosed. Overall, the site demonstrates a high level of professionalism, compliance with GDPR, and strong business credibility, making it a reliable resource for consumers seeking insurance and financial services.

Rejlers is a leading engineering consultancy firm operating primarily in the Nordic region, with a strong focus on sustainable development and energy transition. The company offers a broad range of services including energy transition, industry transformation, future-proofing communities, and technical management consulting. Their market position is well-established as a catalyst for sustainable societal development, targeting clients in energy, infrastructure, and industry sectors. The website reflects a professional and modern digital presence, leveraging WordPress CMS with React and Alpine.js for interactive features, and integrates Cookiebot for GDPR-compliant cookie management. Technically, the site employs modern web technologies and frameworks, ensuring good mobile optimization, accessibility, and SEO practices. The use of Piwik Pro analytics and Cookiebot indicates a mature approach to user privacy and data protection. Security posture is strong with HTTPS enforced and appropriate security headers present, although explicit security policies and incident response contacts are not publicly detailed. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations. The business is transparent with clear contact information and social media presence, supporting its credibility. No critical vulnerabilities or blocking mechanisms were detected, allowing full content accessibility and analysis.

Relatable is a global influencer marketing agency specializing in executing influencer marketing campaigns at scale for consumer brands. The company leverages technology and expertise to deliver content creation, audience engagement, and sales-driving marketing strategies across more than 50 countries. Their website reflects a strong market position with a professional design, comprehensive client portfolio, and clear branding. Technically, the site is built on WordPress with Elementor and optimized for performance and mobile responsiveness. Security posture is solid with HTTPS enforced and GDPR compliance mechanisms in place, including cookie consent banners and privacy policies. However, explicit security policies and incident response contacts are not published, representing an area for improvement. Overall, the website demonstrates a mature digital presence with extensive analytics and marketing tools integrated, supporting a high level of business credibility and trust.

Fredriksons Verkstads AB is a Swedish-based industrial manufacturing company specializing in contract manufacturing and conveyor solutions. The company emphasizes sustainability and operational efficiency, serving industrial clients primarily in Sweden and China. Their market position is supported by multiple ISO certifications and a parent company relationship with XANO-koncernen, a publicly listed industrial group. The website content is professionally presented, targeting B2B customers seeking high-value manufacturing services. Technically, the website is built on the Litium CMS platform, utilizing modern web technologies including jQuery, FontAwesome, Vimeo for video content, and Google Tag Manager for analytics. Cookiebot is implemented for GDPR-compliant cookie consent management. The site is mobile-optimized with good navigation and basic accessibility features, though SEO could be enhanced further. From a security perspective, the site enforces HTTPS with strong security headers and secure form handling. No critical vulnerabilities or exposed sensitive data were detected. However, explicit security policies and incident response information are absent, which could be improved to enhance trust and compliance. Overall, Fredriksons presents a trustworthy and professional online presence with solid technical infrastructure and compliance practices. Strategic improvements in accessibility, SEO, and security transparency would further strengthen their digital maturity and stakeholder confidence.

Fortnox AB is a leading Swedish SaaS provider specializing in cloud-based accounting, invoicing, payroll, and business management solutions. Established in 2001, the company serves over 600,000 businesses, positioning itself as a market leader in Sweden. Their platform offers automation and integration capabilities tailored to various industries, supporting startups, accounting firms, and established enterprises. The website reflects a mature digital presence with modern technologies such as Next.js, React, and Piwik PRO for analytics and consent management. Security practices are robust, with HTTPS enforced and consent mechanisms in place, although explicit incident response contacts and vulnerability disclosure policies are not publicly detailed. Overall, Fortnox demonstrates a strong business and technical foundation with high trustworthiness and compliance adherence.

Folksam is a leading Swedish insurance and financial services company specializing in home and car insurance, as well as savings and pension products. The website clearly targets private customers with a comprehensive offering of insurance types and financial products. The company holds a strong market position in Sweden, insuring the largest number of homes and a significant number of vehicles. The digital infrastructure is modern, leveraging Next.js, React, Azure CDN, and Adobe Launch for analytics and tag management, complemented by OneTrust for cookie consent management. The site is well-optimized for mobile and accessibility, providing a professional user experience with clear navigation and rich content. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though some security headers and explicit security policies are not visible. Overall, the site demonstrates a mature digital presence with good privacy compliance and trustworthy business information.

Cognizant Technology Solutions Corp is a large, established enterprise specializing in technology services and consulting, with a strong focus on AI, digital transformation, cloud, and industry-specific solutions. The company serves a broad range of sectors including healthcare, finance, manufacturing, retail, and more. Their website demonstrates a mature digital infrastructure leveraging Adobe Experience Manager, Adobe Analytics, and other modern technologies, ensuring a professional and user-friendly experience. Security measures such as reCAPTCHA and OneTrust cookie consent are implemented, reflecting a good security posture. Overall, the site is well-structured, compliant with privacy regulations, and presents a trustworthy and authoritative business presence.

Zeekr Technology Europe AB, formerly known as CEVT, is a leading technology company specializing in electric mobility solutions. Based in Gothenburg, Sweden, the company employs over 900 researchers and engineers focused on developing intelligent, sustainable, and user-centric automotive technologies. Their offerings include advanced in-car experiences, smart driving systems, future mobility platforms, and energy efficiency optimizations, positioning them as a key player in the electric vehicle technology sector within the Geely Group ecosystem. The website reflects a mature digital presence with comprehensive content, modern technology stack, and strong compliance with privacy regulations including GDPR. Security posture is robust with HTTPS enforcement, security headers, and consent management mechanisms in place. However, explicit security policy and incident response contacts are not prominently published, suggesting room for improvement. Overall, the company demonstrates high professionalism, trustworthiness, and alignment between their digital footprint and business identity.

Örebro universitet is a well-established public university in Sweden, offering a broad range of educational programs and conducting research with a focus on modernity and quality. The website reflects a strong institutional presence with clear branding, comprehensive content for students and researchers, and active engagement through multiple official social media channels. The university positions itself as a highly ranked institution with a commitment to innovation and collaboration. Technically, the website employs modern web technologies including Bootstrap, FontAwesome, and JSON-LD structured data, likely running on a CMS such as Episerver. The site is mobile-optimized, accessible, and SEO-friendly, providing a good user experience. Performance is moderate with room for optimization. From a security perspective, the site uses HTTPS and implements a cookie consent mechanism compliant with GDPR. However, it lacks visible security policies, incident response contacts, and vulnerability disclosure information. Security headers and advanced security practices are not evident in the provided data, suggesting areas for improvement. Overall, the website is trustworthy and professional, with no signs of blocking or WAF interference. The domain registration details align well with the university's identity, supporting legitimacy. Strategic recommendations include enhancing security transparency, publishing incident response and vulnerability disclosure information, and improving security header implementation to strengthen the security posture.

Riverty Group GmbH operates a professional and comprehensive financial services website focused on receivables management, debt collection, and payment solutions such as Buy Now Pay Later. The company holds reputable industry certifications and memberships, reinforcing its market position as a leading European receivables management firm. The website offers multiple self-service portals and a mobile app to facilitate consumer interactions and payments, targeting primarily business clients. Technically, the site employs modern analytics and marketing technologies, including Microsoft Application Insights, Google Analytics, Matomo, and Usercentrics for GDPR-compliant consent management. The site is well-optimized for mobile and accessibility, with a professional design and clear navigation. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. Privacy policies and terms of service are comprehensive and clearly linked. Overall, the domain registration data aligns well with the website content, supporting legitimacy and trustworthiness.

Photowall is a Sweden-based e-commerce retailer specializing in customizable wall decor products including wallpapers, canvases, posters, and paints. The company operates multiple localized websites targeting Nordic and European markets, offering personalized products and influencer collections. The website demonstrates a mature digital infrastructure leveraging modern technologies such as React, New Relic monitoring, and comprehensive marketing and analytics integrations. Security posture is strong with HTTPS enforcement, cookie consent mechanisms, and no visible vulnerabilities. However, explicit security and incident response policies are not publicly available. Overall, Photowall presents a professional, trustworthy, and privacy-compliant online presence suitable for its retail business model.

Vy flygbussarna is a well-established transportation company specializing in airport shuttle services across Sweden. With a history dating back to 1989, the company offers reliable, sustainable, and affordable travel options to six major Swedish airports. Their digital presence is robust, featuring a modern, responsive website built on Next.js and Chakra UI, integrated with Google Maps and advanced analytics via Piwik PRO. The site demonstrates strong privacy compliance with comprehensive cookie consent mechanisms and clear privacy and terms of service documentation. Security posture is solid, with HTTPS enforced and appropriate security headers in place, though there is room for improvement in publishing dedicated security policies and incident response contacts. Overall, Vy flygbussarna presents a professional, trustworthy, and user-friendly online platform that supports their market position as a leading airport shuttle provider in Sweden.

TDC Erhverv is a leading Danish telecommunications provider specializing in integrated communication and IT solutions for businesses of all sizes. Their offerings include mobile subscriptions, internet services, IT security, and collaboration tools, targeting small and medium-sized enterprises as well as larger organizations and public institutions. The website reflects a strong market position with a professional and modern design, clear navigation, and comprehensive content tailored to their business audience. Technically, the site is built using modern frameworks such as React and Gatsby, with integrations to major analytics and marketing platforms like Adobe Experience Cloud and Google Analytics. Security posture is robust with HTTPS enforcement and a detailed cookie consent mechanism ensuring GDPR compliance. However, explicit security policies and incident response contacts are not prominently available, representing an area for improvement. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with privacy regulations.

MAG Interactive AB is a Swedish mobile gaming company specializing in the development and publishing of engaging mobile games. The company positions itself as a creative and passionate game developer with a portfolio of popular titles targeting mobile game players globally. The website reflects a medium-sized enterprise with a clear focus on mobile gaming and investor relations, indicating a publicly listed status. The business model centers on creating quality gaming experiences that encourage player retention and engagement. From a technical perspective, the website employs standard web technologies including HTML5, CSS3, JavaScript, and Font Awesome icons. Google Tag Manager is used for analytics and marketing tracking. The site is moderately optimized for performance and mobile devices, with basic accessibility and SEO features. However, there is room for improvement in security headers and metadata completeness. Security posture is adequate with HTTPS enforced and a cookie consent mechanism in place, but lacks advanced security headers and explicit security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with a cookie notice present but no explicit privacy policy found on the main page. Business credibility is strong, supported by clear contact information, investor relations transparency, and consistent branding. Overall, the website is professional and trustworthy but would benefit from enhanced privacy disclosures, security policies, and technical security improvements to strengthen compliance and user trust.

Coop Sverige AB operates a comprehensive retail and e-commerce platform focused on grocery shopping, recipe inspiration, and membership benefits primarily targeting Swedish consumers and businesses. The website coop.se serves as a digital storefront offering online shopping, banking services, and personalized member offers, positioning Coop as a leading cooperative retailer in Sweden. The platform integrates modern technologies such as React, Dynamic Yield for personalization, and Google Tag Manager for analytics, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforcement, consent management, and standard security headers, although explicit security policies and incident response details are not publicly disclosed. Overall, the website demonstrates high professionalism, trustworthiness, and compliance with GDPR, supported by clear privacy and cookie policies. The domain registration aligns well with the business identity, reinforcing legitimacy. Strategic recommendations include publishing detailed security policies, vulnerability disclosure mechanisms, and enhancing transparency on data retention and DPO contact information.

iLOQ Ltd. is a Finland-based company specializing in battery-free smart locking and access management solutions. The company offers a comprehensive ecosystem including smart keys, mobile access products, and cloud-based management software designed for residential, commercial, and critical infrastructure sectors globally. Their market position is strong with over 10 million locks and keys in use and a wide dealer network. The website demonstrates a mature digital presence with multi-language support, modern technology stack, and extensive use of analytics and marketing tools. Security posture is solid with HTTPS, cookie consent mechanisms, and penetration-tested cloud infrastructure, though explicit security policies and incident response information are not publicly detailed. Overall, the site is professional, trustworthy, and compliant with GDPR and cookie regulations.

CGI Inc. is a leading global IT and business consulting services firm founded in 1976, headquartered in Canada. The company offers a broad range of end-to-end services including business consulting, systems integration, managed IT services, application and infrastructure services, and business process services. CGI positions itself as an insights-driven and outcomes-focused organization serving a diverse clientele across industries such as technology, government, energy, manufacturing, retail, healthcare, finance, and transportation. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content tailored to business and government audiences. Technically, the website is built on Drupal 9 CMS, leveraging modern web technologies including Google Tag Manager for analytics, New Relic for performance monitoring, and TrustArc for privacy compliance. The use of Akamai CDN and service workers indicates a focus on performance and security. The site is mobile-optimized and accessible, with good SEO practices evident from meta tags and structured data. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms aligned with GDPR compliance. While explicit security policies and incident response contacts are not found, the site follows best practices in avoiding exposed sensitive data and uses reputable third-party services. No vulnerabilities or suspicious activities were detected in the content. Overall, CGI.com demonstrates a strong business credibility and digital maturity with a high level of professionalism and trustworthiness. The domain registration data aligns well with the company’s identity and history, supporting legitimacy. Strategic recommendations include publishing explicit security policies, incident response information, and security.txt files to enhance transparency and security posture.

Onitio Norge AS is a medium-sized IT services company operating across the Nordics, specializing in sustainable IT solutions, consulting, and technology services for sectors including retail, pharmacy, transport, and logistics. The company positions itself as a trusted partner enabling customers to focus on their core business by managing IT needs comprehensively. The website reflects a mature digital presence with modern technologies such as React, Next.js, and integrations with HubSpot and Google Tag Manager, indicating a well-developed technical infrastructure. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms in place, though explicit security policies and incident response contacts are not publicly available. Overall, the site is professional, GDPR compliant, and trustworthy, with room for improvement in transparency around security and vulnerability disclosures.