Medium-risk security reports
99,069 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,165001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
92,851–92,900 of 99,069
Eltel Networkseltelnetworks.com
Energy
60Medium
NIS2 5 · GDPR 63
NIS2 5 · GDPR 63
Eltel Networks is a large international company specializing in energy and telecommunications infrastructure services. The company operates multiple country-specific websites and is part of the larger Eltel Group, indicating a strong multinational presence. Their business model focuses on enabling sustainable and connected infrastructure solutions. The website content is professionally presented with a clear focus on their services and market sectors. Technically, the site leverages modern cloud infrastructure on Microsoft Azure, uses Google Tag Manager, Microsoft Application Insights for analytics, and implements a comprehensive cookie consent mechanism. The CMS appears to be Episerver, supporting a structured and scalable content management approach. Security-wise, the site uses HTTPS and standard cloud platform cookies but lacks explicit security headers and published security policies. Privacy compliance is partially addressed through a detailed cookie consent banner, but no explicit privacy policy or terms of service pages were found. Overall, the website demonstrates a good level of professionalism and technical maturity but could improve in transparency and security documentation.
- KITS AB
kits.se
Technology · Sweden
53Medium
NIS2 5 · GDPR 0
NIS2 5 · GDPR 0
KITS AB is a Swedish IT consulting company specializing in development, project management, integration, and security services. The company targets businesses seeking expert IT consultancy and professionals looking for career opportunities in the IT sector. The website reflects a medium-sized, established firm with a consistent brand presence and active social media engagement. Technically, the site is built using modern frameworks such as React and Gatsby, with integration of Mapbox for mapping features, indicating a contemporary digital infrastructure. However, the site lacks explicit privacy and cookie policies, and no security headers were detected, which are areas for improvement in compliance and security posture. Overall, the website is professional and trustworthy but would benefit from enhanced security and privacy disclosures.
Xtrfy Gaming ABxtrfy.com
Technology · Sweden
63Medium
NIS2 5 · GDPR 55
NIS2 5 · GDPR 55
Xtrfy Gaming AB is a Swedish company specializing in high-performance gaming peripherals designed for esports professionals and enthusiasts. The company emphasizes collaboration with pro gamers to develop products that meet competitive standards, including mechanical keyboards, mice, headsets, and microphones. Their market position is strong within the niche of esports equipment, supported by professional endorsements and a consistent brand image. Technically, the website is built on WordPress with WooCommerce, utilizing modern JavaScript frameworks and analytics tools, providing a good user experience with mobile optimization and clear navigation. Security posture is robust with HTTPS, security headers, and no visible vulnerabilities, complemented by comprehensive privacy and cookie policies ensuring GDPR compliance. Overall, the website reflects a trustworthy and professional e-commerce platform with clear business information and strong digital maturity.
- PPricewaterhouseCoopers
pwc.se
Finance · Sweden
54Medium
NIS2 5 · GDPR 15
NIS2 5 · GDPR 15
PwC Sweden is a branch of the global PricewaterhouseCoopers network, providing professional consulting, auditing, tax, ESG, finance, cyber security, and M&A advisory services. The website reflects a mature and well-established business with a strong market position in Sweden. The technical infrastructure is built on Adobe Experience Manager CMS, leveraging modern JavaScript frameworks and analytics tools such as Microsoft Clarity, Google Tag Manager, and Adobe DTM. The site is well-optimized for mobile and accessibility, with comprehensive privacy and cookie consent mechanisms in place. Security posture is strong with HTTPS enforced and CSRF protection, though explicit security headers could be improved. Overall, the website demonstrates high professionalism, trustworthiness, and compliance with GDPR regulations.
Stretchgruppenstretch.se
Technology · Sweden
64Medium
NIS2 0 · GDPR 58
NIS2 0 · GDPR 58
Stretchgruppen is a Swedish IT group specializing in digital transformation services and products, with a strong focus on sustainable entrepreneurship and customer-centric solutions. The group operates multiple subsidiaries across Sweden and the Nordic region, offering expertise in Microsoft 365, Salesforce, SAP, Qlik, and business intelligence. Their website reflects a mature digital presence with professional design, clear navigation, and comprehensive content. Technically, the site is built on WordPress with modern plugins and tools such as Cookiebot for consent management and Google reCAPTCHA for form security, indicating a good level of digital maturity. Security posture is strong with HTTPS enforced, security headers implied, and no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with a comprehensive privacy policy and active cookie consent mechanisms. Overall, the website demonstrates high professionalism and trustworthiness, supporting the company's market position as an important regional IT service provider.
- Triona AB
triona.se
Technology · Sweden
54Medium
NIS2 0 · GDPR 58
NIS2 0 · GDPR 58
Triona AB is a Swedish IT company specializing in innovative IT solutions focused on logistics, infrastructure, and transport sectors. The company positions itself as a leading and reliable supplier combining domain expertise with specialized software products and expert consulting services. Their website reflects a professional and consistent brand presence with clear navigation and relevant business content. Technically, the site uses modern web technologies including Bootstrap, jQuery, and various JavaScript libraries, with moderate performance and good mobile optimization. Security-wise, the site uses HTTPS and implements a cookie consent mechanism, but lacks visible advanced security headers and vulnerability disclosure mechanisms. Overall, the website demonstrates a solid business and technical foundation with room for improvement in security transparency and compliance documentation.
- LLinnéuniversitetet
lnu.se
Education · Sweden
51Medium
NIS2 5 · GDPR 15
NIS2 5 · GDPR 15
Linnéuniversitetet is a modern and internationally oriented university located in Kalmar and Växjö, Sweden. It offers a wide range of educational programs, research initiatives, and collaborative projects aimed at societal development. The university holds a strong market position in the Swedish higher education sector, supported by accreditations such as AACSB and a comprehensive digital presence. The website reflects a mature digital infrastructure with modern technologies including jQuery, FontAwesome, and cloud hosting via Microsoft Azure. Privacy and cookie consent mechanisms are robust and GDPR-compliant, providing users with granular control over data collection. Security practices are good, with HTTPS enforced and bot management in place, though some security headers could be enhanced. Overall, the site demonstrates high professionalism, trustworthiness, and user experience quality.
Vasakronan ABvasakronan.se
Real Estate · Sweden
65Medium
NIS2 0 · GDPR 70
NIS2 0 · GDPR 70
Vasakronan AB is Sweden's largest real estate company specializing in owning, managing, and developing centrally located office and retail properties in major Swedish cities including Stockholm, Göteborg, Malmö, and Uppsala. The company offers over two million square meters of commercial space across more than 170 properties, targeting businesses and investors seeking premium commercial real estate solutions. Their business model focuses on long-term property leasing and urban development, positioning them as a market leader in the Swedish real estate sector. Technically, the website is built on WordPress and integrates modern tools such as Matomo Analytics for privacy-focused data collection, Google Tag Manager for tag management, and Cookiebot for comprehensive cookie consent management. The site demonstrates good mobile optimization, SEO practices, and moderate performance, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms aligned with GDPR requirements. While explicit security headers are not detected in the HTML content, no critical vulnerabilities or exposed sensitive data were found. The absence of a dedicated security policy or incident response contact suggests room for improvement in transparency and readiness. Overall, Vasakronan's website reflects a professional, trustworthy, and compliant digital presence consistent with its market position. The company demonstrates strong adherence to privacy regulations and provides clear information about its services and corporate identity, supporting a high level of business credibility and user trust.
- AAscom
ascom.com
Telecommunications · Switzerland
66Medium
NIS2 5 · GDPR 58
NIS2 5 · GDPR 58
Eneaenea.com
Technology · Sweden
66Medium
NIS2 35 · GDPR 43
NIS2 35 · GDPR 43
Enea is a well-established global leader specializing in AI-powered software solutions for telecom networks and cybersecurity. The company serves a broad range of clients including communication service providers, CPaaS providers, software vendors, and government regulators. Their software portfolio covers messaging security, signaling and voice security, network traffic management, and IoT connectivity, among others. Enea's market position is strong, with over 30% of the world's mobile services relying on their technology, and a presence in 101 countries. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content tailored to their target audience. Technically, the website is built on WordPress with modern performance and SEO optimizations including WP Rocket, Yoast SEO Premium, and lazy loading techniques. The site is mobile-optimized and accessible, leveraging popular JavaScript libraries such as jQuery and Axios. Security posture is solid with HTTPS enforced and no visible vulnerabilities, although explicit security headers could be improved. Privacy compliance is well addressed with clear privacy and cookie policies, including consent mechanisms. Overall, the security posture is good with no critical issues detected. The company demonstrates trustworthiness through certifications, client testimonials, and consistent WHOIS data. The website employs moderate user tracking via Piwik PRO and Google Tag Manager, balanced with privacy compliance. Strategic recommendations include enhancing security headers, publishing a security policy, and adding a vulnerability disclosure program to further strengthen trust and compliance.
Education · Sweden
60Medium
NIS2 0 · GDPR 15
NIS2 0 · GDPR 15
Blekinge Tekniska Högskola (BTH) is a Swedish technical university focused on providing high-quality education, research, and innovation. The institution targets students, researchers, and the academic community, offering profession-oriented programs and emphasizing societal challenges and innovation. The website reflects a well-established educational entity with a consistent brand and clear communication of its mission and services. Technically, the site leverages modern web technologies including React, jQuery, and SiteVision CMS, with embedded video content and advanced search features. Security posture is strong with HTTPS enforcement, cookie consent mechanisms, and no visible vulnerabilities, although explicit security policies and incident response contacts are absent. Overall, the site demonstrates a mature digital presence suitable for its educational mission, with room for enhanced transparency in security and compliance documentation.
Omdomnicommediagroup.com
Marketing and advertising · United kingdom
59Medium
NIS2 0 · GDPR 63
NIS2 0 · GDPR 63
- SJ
sj.se
Transportation · Sweden
50Medium
NIS2 0 · GDPR 0
NIS2 0 · GDPR 0
SJ.se is the official website of SJ, the leading Swedish rail operator offering train ticket booking and travel information services primarily for travel within Sweden and to nearby international destinations such as Copenhagen and Oslo. The website targets both domestic and international travelers seeking convenient rail travel options. The business model centers on ticket sales and travel-related services, positioning SJ as a key player in Sweden's transportation sector. Technically, the website employs a modern React-based frontend with integrations including Adobe Launch for tag management, Microsoft AppInsights for monitoring, and Queue-Fair for traffic management. The site demonstrates good mobile optimization, accessibility, and SEO practices, providing a smooth user experience. External resources are loaded from trusted domains, and the site uses HTTPS with a good SSL configuration. From a security perspective, SJ.se enforces HTTPS and employs cookie consent mechanisms aligned with GDPR requirements. While explicit security headers and incident response policies are not directly visible in the HTML, the site shows no signs of exposed sensitive data or vulnerable libraries. Tracking technologies include Adobe Analytics and Facebook Pixel, with moderate user tracking levels balanced by privacy compliance measures. Overall, SJ.se presents a professional, trustworthy, and well-maintained digital presence consistent with a large transportation enterprise. Recommendations include publishing explicit security policies, incident response contacts, and vulnerability disclosure information to further enhance transparency and security posture.
- Veoneer
veoneer.com
Transportation · Sweden
59Medium
NIS2 0 · GDPR 43
NIS2 0 · GDPR 43
Veoneer is a globally recognized leader in automotive safety electronics, specializing in the design, manufacture, and sale of advanced restraint control systems and safety sensors. The company emphasizes its mission to protect everyone in every crash and demonstrates a strong commitment to sustainable mobility and innovation. Their market position is solid, with over one billion sensors and electronic control units delivered worldwide, serving automotive manufacturers and partners. The website reflects a professional and consistent brand image, targeting industry stakeholders and potential employees. Technically, the website is built on Drupal CMS with modern frontend technologies such as Bootstrap and jQuery, ensuring good mobile optimization, accessibility, and SEO practices. The site integrates third-party services like YouTube and Investis Digital's cookie manager, indicating a mature digital infrastructure. Performance is moderate, with no critical technical issues detected. From a security perspective, the site enforces HTTPS and implements a comprehensive cookie consent mechanism aligned with GDPR requirements. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms, which are recommended for enhanced transparency and trust. No critical vulnerabilities or exposed sensitive data were found in the HTML content. Overall, the website presents a high level of professionalism and trustworthiness, with minor areas for improvement in security transparency and legal documentation. The domain registration details align well with the company's identity, supporting the legitimacy of the online presence.
- SSD Worx
aditro.com
Technology
61Medium
NIS2 0 · GDPR 63
NIS2 0 · GDPR 63
SD Worx is a leading European payroll and HR services provider, having integrated Aditro into its operations. The company offers a broad portfolio of HR, payroll, staffing, and workforce management solutions, targeting businesses across 18 countries with a workforce of 5,300 employees. The website reflects a mature enterprise with a strong market position and a comprehensive service offering. Technically, the site uses modern frameworks such as React and Next.js, hosted on Vercel, with good performance and mobile optimization. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms in place, though explicit security policies and incident response contacts are not published. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.
Inerainera.se
Government · Sweden
60Medium
NIS2 0 · GDPR 15
NIS2 0 · GDPR 15
Inera is a Swedish digitalization company focused on developing and providing digital infrastructure and architecture to support the welfare sector, primarily serving municipalities and regions. The website presents a professional and comprehensive digital presence with clear navigation, rich content, and a strong emphasis on accessibility and user experience. The company positions itself as a key enabler for digital transformation in welfare services, offering services such as 1177, technical connection support, and utility calculations. Technically, the site uses modern frameworks like React and integrates cookie consent management via OneTrust, reflecting a mature digital infrastructure. Security posture is good with HTTPS usage and cookie consent mechanisms, though there is room for improvement in publishing explicit security policies and implementing security headers. Overall, the website is trustworthy, well-maintained, and compliant with GDPR requirements, making it a reliable source for its target audience. Strategic recommendations include enhancing security transparency, publishing incident response contacts, and continuous monitoring of third-party scripts.
Axfood ABaxfood.se
Retail · Sweden
55Medium
NIS2 5 · GDPR 15
NIS2 5 · GDPR 15
Axfood AB is a leading Swedish food retail group operating multiple well-known brands such as Willys, Hemköp, and Tempo. The company focuses on providing affordable, good quality, and sustainable food products to the Swedish market. Their website reflects a mature digital presence with comprehensive content covering corporate information, sustainability initiatives, investor relations, and career opportunities. Technically, the site uses modern frameworks like Bootstrap and jQuery, integrates Azure Application Insights for monitoring, and employs OneTrust for cookie consent management, indicating a good level of digital maturity. Security posture is strong with HTTPS enforced and no visible vulnerabilities or exposed sensitive data, although some security headers could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and granular consent mechanisms. Overall, the website is professional, trustworthy, and aligns well with the company's business claims and history.
Novacura ABnovacura.com
Technology · Sweden
53Medium
NIS2 43 · GDPR 58
NIS2 43 · GDPR 58
Novacura AB is a medium-sized technology company specializing in enterprise software solutions based on a low-code platform designed to expand ERP systems, particularly IFS Cloud. The company holds a strong market position as a Gold Channel Partner of IFS and has been recognized multiple times as the IFS Channel Partner of the Year. Their key services include low-code ERP application development, IFS ERP implementation and support, industry-specific software solutions, and consulting and training services targeted at large and mid-size companies. The website content is professionally designed, well-structured, and rich in relevant business information, including customer testimonials and certifications.
Education · Sweden
57Medium
NIS2 0 · GDPR 58
NIS2 0 · GDPR 58
Stockholms universitet is a major Swedish public university offering a wide range of educational programs and conducting high-quality research. The website reflects a well-established institution with a strong market position in the education sector, targeting students, researchers, and the general public. Key services include education, research dissemination, open lectures, and library services. The site is professionally designed with consistent branding and comprehensive content tailored to its audience. Technically, the website employs modern web technologies such as jQuery, Bootstrap, Matomo analytics, and video embedding platforms, indicating a mature digital infrastructure. Accessibility and SEO optimizations are well implemented, contributing to a positive user experience across devices. From a security perspective, the site enforces HTTPS, respects privacy preferences, and uses cookie consent mechanisms. While security headers are not explicitly detected in the HTML, no critical vulnerabilities or exposed sensitive data were found. The absence of a public security policy or incident response page suggests room for improvement in transparency. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations, making it a reliable digital presence for the university.
Zettleizettle.com
Retail · Finland
69Medium
NIS2 0 · GDPR 58
NIS2 0 · GDPR 58
Zettle is a well-established provider of modern point-of-sale (POS) systems and payment solutions, operating primarily in the retail and hospitality sectors. As a subsidiary of PayPal, it leverages strong brand recognition and financial backing to offer integrated hardware and software solutions that simplify payment processing and business management for small to medium-sized enterprises. The website reflects a mature digital presence with comprehensive content tailored to its target audience, including detailed product offerings and pricing information across multiple countries. Technically, the site employs a modern React and Next.js framework with Storyblok CMS, ensuring fast performance, mobile responsiveness, and good SEO practices. Security measures include HTTPS enforcement and several security headers, although there is room for improvement in CSP implementation and incident response transparency. Privacy compliance is robust, featuring clear privacy and cookie policies with user consent mechanisms. Overall, the website demonstrates a high level of professionalism, trustworthiness, and technical maturity, supporting Zettle's market position as a reliable payment solutions provider.
Sony Europe B.V.sonymobile.com
Technology · Finland
65Medium
NIS2 0 · GDPR 63
NIS2 0 · GDPR 63
Sony Europe B.V. operates the Finnish localized website for Sony's mobile and smartphone products, prominently featuring the Xperia brand. The site targets Finnish consumers interested in high-quality smartphones and related accessories, offering product information, support, and community engagement. The business is positioned as a global leader in consumer electronics with a strong brand presence and a comprehensive product portfolio. Technically, the website is built on Adobe Experience Manager, uses modern tag management and consent tools, and is hosted on a reliable CDN infrastructure. The site is mobile optimized, accessible, and SEO friendly. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though additional security headers could enhance protection. Privacy compliance is robust, with clear policies and GDPR adherence. Overall, the website reflects a mature digital presence consistent with an enterprise-level technology company.
Swedbank Groupswedbank.com
Finance · Sweden
58Medium
NIS2 5 · GDPR 40
NIS2 5 · GDPR 40
Swedbank Group is a well-established financial institution rooted in Sweden’s savings banks tradition, serving millions of private and corporate customers. The website reflects a mature enterprise with a comprehensive offering in retail and corporate banking, investment services, and asset management. The company positions itself as a systemically significant player in the financial market with a strong focus on sustainability and anti-money laundering efforts. Technically, the site is built on Adobe Experience Manager, leveraging modern web technologies including jQuery, Adobe Helix RUM, and Google reCAPTCHA, ensuring a robust and user-friendly experience. Security posture is strong with HTTPS enforced, appropriate security headers, and no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear cookie consent mechanisms and a comprehensive privacy policy. Overall, the website demonstrates high professionalism, trustworthiness, and technical maturity.
Kanthal ABkanthal.com
Energy · Sweden
66Medium
NIS2 5 · GDPR 63
NIS2 5 · GDPR 63
Kanthal AB operates a professional and comprehensive website focused on industrial heating technology and resistance materials. The company is positioned as a world-leading brand in its sector, supported by a strong parent company, Alleima. The website provides extensive product information, technical resources, and sustainability content, targeting industrial customers and partners. Technically, the site uses modern JavaScript frameworks such as React and Vue.js, integrates Azure Application Insights for monitoring, and employs Google Tag Manager and OneTrust for analytics and privacy compliance. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and vulnerability disclosures are absent. Overall, the site demonstrates a mature digital presence with good privacy compliance and business credibility.
Telenor Grouptelenor.com
Telecommunications · Norway
60Medium
NIS2 0 · GDPR 70
NIS2 0 · GDPR 70
Telenor Group is a leading multinational telecommunications company connecting customers across the Nordics and Asia. The company offers a broad range of telecom services including mobile and fixed networks, with a strong emphasis on innovation such as sovereign AI infrastructure. Their website reflects a mature digital presence with comprehensive investor relations, ESG initiatives, and corporate governance information. Technically, the site uses modern frameworks like Vue.js and Nuxt.js, supported by tag management tools such as Tealium and Google Tag Manager, ensuring a performant and responsive user experience. Security posture is strong with HTTPS enforcement, security headers, and a clear cookie consent mechanism, though explicit security policies and incident response contacts are not publicly detailed. Overall, Telenor demonstrates high business credibility and digital maturity, positioning itself as a trustworthy and professional entity in the telecommunications sector.
- Aadesso Sweden AB
purplescout.se
Technology · Sweden
51Medium
NIS2 0 · GDPR 60
NIS2 0 · GDPR 60
adesso Sweden AB is a large, established IT service provider specializing in cloud solutions, software engineering, AI, and compliance services. With over 10,300 employees and a presence in 60 locations globally, they offer a comprehensive portfolio of IT consulting and development services targeting enterprises and public sector clients. The website demonstrates a mature technical infrastructure leveraging modern web technologies and cloud platforms, with strong digital maturity evident in their use of advanced analytics and consent management. Security posture is robust with no visible vulnerabilities, proper use of HTTPS, and adherence to privacy regulations including GDPR. Overall, the site reflects a professional, trustworthy, and well-managed business with clear market positioning and comprehensive service offerings.
Smarteyessmarteyes.se
Retail · Sweden
57Medium
NIS2 5 · GDPR 15
NIS2 5 · GDPR 15
Smarteyes is a well-established Swedish retail optician chain founded in 2007, offering a wide range of eyewear products including glasses, sunglasses, and contact lenses, alongside professional eye care services such as eye examinations. The company emphasizes affordable, high-quality Scandinavian design and operates over 70 physical stores across Sweden. As part of the global EssilorLuxottica group, Smarteyes benefits from strong market positioning and brand recognition. The website supports online booking and subscription services, reflecting a modern e-commerce approach. Technically, the website is built on a modern stack including React and Next.js, integrated with advanced search via Algolia, and uses robust analytics and consent management tools such as Google Tag Manager and OneTrust. The site is hosted with Cloudflare, ensuring good performance and security. Accessibility and SEO best practices are well implemented, providing a good user experience across devices. From a security perspective, the site enforces HTTPS, employs multiple security headers, and avoids exposing sensitive data. While no explicit security policy or incident response information is published, the overall security posture is strong. Privacy compliance is evident with comprehensive privacy and cookie policies and active consent mechanisms, aligning with GDPR requirements. Overall, Smarteyes presents a professional, trustworthy, and user-friendly online presence with strong business credibility and technical maturity. Strategic recommendations include publishing a dedicated security policy, incident response contacts, and vulnerability disclosure information to further enhance trust and compliance.
- Lidl Sverige
lidl.se
Retail · Sweden
58Medium
NIS2 0 · GDPR 15
NIS2 0 · GDPR 15
Lidl Sverige operates as a major retail supermarket chain in Sweden, offering a broad range of products including food, household goods, clothing, and more. The website serves as a comprehensive platform for customers to access weekly offers, store information, recipes, and loyalty programs such as Lidl Plus. The company holds a strong market position with multiple certifications and trust indicators, reflecting its established presence in the retail sector. Technically, the website employs modern web technologies including Vue.js, OneTrust for privacy compliance, and Kameleoon for personalization and A/B testing. The site is well-optimized for performance, mobile responsiveness, and accessibility, ensuring a high-quality user experience. SEO practices are adequately implemented with proper meta tags and structured data. From a security perspective, the site enforces HTTPS and incorporates cookie consent mechanisms aligned with GDPR requirements. No critical vulnerabilities or exposed sensitive data were detected. However, explicit security headers and incident response contacts could be more prominently documented to enhance security posture. Overall, Lidl.se demonstrates a mature digital infrastructure with strong privacy and security compliance, supporting its business credibility and customer trust. Strategic improvements in security documentation and incident response readiness are recommended to maintain and enhance its security framework.
Uppsala kommunuppsala.se
Government · Sweden
50Medium
NIS2 0 · GDPR 0
NIS2 0 · GDPR 0
Uppsala kommun operates as the official municipal government website for the city of Uppsala, Sweden. It provides comprehensive information about municipal services including education, social care, culture, traffic, building permits, and political governance. The site targets residents, businesses, and visitors, offering resources such as job listings, event information, and contact channels. The business model is public sector service provision, with a strong emphasis on transparency and accessibility. Technically, the website is built on the EPiServer CMS Falcon platform, utilizing Bootstrap 3.3.7 and jQuery for frontend components. It integrates Matomo analytics for user tracking and employs modern web standards including responsive design and accessibility features. The site is served over HTTPS with a good security posture, including cookie consent mechanisms and no detected vulnerabilities. Security-wise, the site demonstrates good practices such as HTTPS enforcement, cookie consent, and no exposed sensitive data. However, it lacks explicit published security policies or incident response contacts. No critical vulnerabilities or suspicious patterns were found, and WHOIS data confirms the legitimacy and consistency of the domain registration. Overall, the website is professional, trustworthy, and well-maintained, suitable for its role as a municipal information portal. Strategic improvements could include enhanced security headers and publishing formal security and incident response policies to further strengthen trust and compliance.
Mobillmobill.se
Transportation · Sweden
59Medium
NIS2 0 · GDPR 58
NIS2 0 · GDPR 58
Mobill is a Swedish company providing a mobile app solution for parking and electric vehicle charging payments. The company positions itself as a convenient and secure payment platform, offering users the ability to pay via invoice or card and only for the actual usage time or energy consumed. The website reflects a mature digital presence with partnerships in the sports and municipal sectors, indicating a solid market position in the Scandinavian transportation and energy sectors. Technically, the site uses AngularJS and integrates modern analytics and tracking tools, with a cookie consent mechanism ensuring GDPR compliance. Security posture is good with HTTPS enforced, though there is room for improvement in security headers and explicit security policies. Overall, the website is professional, user-friendly, and trustworthy, supporting Mobill's business credibility in its domain.
- OPV Media Systems
opv.se
Technology · Sweden
63Medium
NIS2 0 · GDPR 70
NIS2 0 · GDPR 70
OPV Media Systems is a Sweden-based technology company specializing in cloud-based SaaS solutions for digital asset management (DAM), product information management (PIM), and cloud printing services. With over 20 years of industry leadership, particularly in the grocery and pharmacy sectors, OPV offers robust, scalable platforms tailored to European businesses. Their key services include OPV® STORAGE for DAM, OPV® Online for PIM and DAM integration, and OPV® ELC for cloud-based print management. The company targets medium-sized enterprises seeking efficient media and product data management solutions.
Other
50Medium
NIS2 5 · GDPR 15
NIS2 5 · GDPR 15
The website at tretton37.com is currently inaccessible, serving an HTTP 403 Forbidden error page with minimal HTML content indicating access is blocked by the server or a security mechanism. Due to this, no business, technical, or security content is available for analysis. The lack of accessible content prevents assessment of the company's services, market position, or compliance posture. The technical infrastructure appears to be using openresty as the web server, but no further technology stack details can be determined. Security posture cannot be evaluated due to absence of headers, HTTPS status, or policies. Overall, the site is effectively blocked, resulting in a critical limitation for any meaningful security or compliance evaluation.
Optilonoptilon.se
Manufacturing · Sweden
51Medium
NIS2 5 · GDPR 63
NIS2 5 · GDPR 63
Optilon is a well-established supply chain consulting company based in Sweden, specializing in optimizing business operations through advanced supply chain solutions. With over 20 years of industry experience and a strong portfolio of more than 1,000 projects for 200 clients, Optilon positions itself as a trusted independent partner in the Nordic region. Their services span demand forecasting, production planning, sales and operations planning, supply chain design, digitalization, AI, and sustainability, targeting professionals and management teams across retail, manufacturing, e-commerce, and food & beverage sectors. The website demonstrates a mature digital infrastructure built on WordPress with Elementor, enhanced by performance and SEO optimizations, and integrates modern analytics and consent management tools like Google Tag Manager and Cookiebot. Security posture is strong with HTTPS enforced and appropriate security headers, though explicit security policies and incident response contacts are not publicly disclosed. Overall, the site reflects a professional, trustworthy, and user-friendly platform aligned with GDPR compliance and modern privacy standards.
- Bbradyid.com
bradycorp.com
Other
51Medium
NIS2 0 · GDPR 25
NIS2 0 · GDPR 25
The website content for bradycorp.com is currently inaccessible due to a security or bot protection mechanism, likely a Web Application Firewall (WAF) or similar service, which presents a captcha challenge via external domains geo.captcha-delivery.com and ct.captcha-delivery.com. This prevents direct analysis of the site's content, metadata, or business information. As a result, no privacy policies, contact information, or business details are available for review. The technical infrastructure appears to include third-party bot mitigation services, but no further technology stack details can be determined. The security posture cannot be fully assessed due to lack of accessible content and headers. Overall, the site is effectively blocked from automated analysis, resulting in a low AI score and limited insights.
Capcito Finance ABcapcito.com
Finance · Sweden
56Medium
NIS2 0 · GDPR 43
NIS2 0 · GDPR 43
Capcito Finance AB is a Swedish fintech company specializing in providing flexible business financing solutions such as business loans and invoice factoring. Established in 2015, it has positioned itself as a trusted partner for SMEs in Sweden, leveraging partnerships with major service providers like Fortnox, Visma, and Björn Lundén. The website reflects a professional and user-friendly platform with clear service offerings and a strong emphasis on transparency and customer support. Technically, the site is built on modern frameworks including Next.js and React, integrated with Storyblok CMS and Piwik PRO analytics, ensuring a fast, responsive, and SEO-optimized user experience. Security posture is strong with HTTPS enforcement, security headers, and secure form handling, although explicit security policies and incident response contacts are not publicly detailed. Privacy compliance is well addressed with comprehensive privacy and cookie policies and a granular consent mechanism. Overall, Capcito demonstrates a mature digital presence with high trustworthiness and business credibility.
Skatteverketskatteverket.se
Government · Sweden
62Medium
NIS2 0 · GDPR 15
NIS2 0 · GDPR 15
Skatteverket is the official Swedish Tax Agency responsible for tax collection, population registration, and related public services. The website serves a broad audience including private individuals, companies, associations, and public actors. It provides comprehensive information, e-services, and guidance related to taxation and population matters. The agency holds a strong national position as a government authority with monopoly over these services in Sweden. Technically, the website is built on the SiteVision CMS platform, utilizing jQuery and Matomo analytics for privacy-conscious user tracking. The site is well-optimized for mobile devices and accessibility, with good SEO practices and a moderate performance profile. Security is robust with HTTPS enforced, secure login via SSO, and a cookie consent mechanism, although some security headers are not explicitly detected. The security posture is strong with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies, and GDPR compliance indicators. Contact information is provided primarily via phone, with no direct email addresses listed on the main page. The domain registration details align perfectly with the official agency, confirming legitimacy and trustworthiness. Overall, the website demonstrates a mature digital presence with good security and privacy practices, serving as a reliable portal for Swedish tax and population services.
Centirocentiro.com
Technology · Sweden
63Medium
NIS2 5 · GDPR 55
NIS2 5 · GDPR 55
Centiro is a Swedish technology company specializing in supply chain network cloud solutions, focusing on delivery management and multicarrier parcel management. The company holds a strong market position with multiple industry recognitions and partnerships with major logistics providers such as UPS and FedEx. Their platform offers real-time insights, AI-powered optimization, and comprehensive delivery network connectivity, targeting businesses in e-commerce, logistics, and retail sectors. The website reflects a mature digital presence with modern technologies, excellent content quality, and strong branding consistency. Security posture is robust with HTTPS, security headers, and privacy compliance, although incident response details and vulnerability disclosures are not explicitly found. Overall, Centiro demonstrates a high level of business credibility and technical maturity, supporting its position as a trusted industry player.
Försvarshögskolanfhs.se
Government · Sweden
59Medium
NIS2 0 · GDPR 0
NIS2 0 · GDPR 0
Försvarshögskolan is a Swedish government-affiliated academic institution specializing in defense, crisis management, and security education and research. It serves as a unique environment where civilian and military sectors intersect, educating officers and experts to handle current and future security challenges. The institution holds a strong international reputation and offers a range of academic programs, research initiatives, and training services. The website reflects a professional and comprehensive digital presence, supporting its mission with clear navigation, rich content, and multilingual support. Technically, the site leverages modern web technologies including React, Sitevision CMS, and Firebase, with good mobile optimization and accessibility features. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though it lacks explicit security policies and incident response contacts. Overall, the domain registration and WHOIS data align well with the institution's profile, indicating legitimacy and trustworthiness.
- KKPMG AB
kpmg.se
Finance · Sweden
60Medium
NIS2 0 · GDPR 63
NIS2 0 · GDPR 63
KPMG Sweden operates as a leading management consulting and professional services firm, offering a broad range of services including audit, tax, legal, advisory, ESG, and technology transformation. The website reflects a strong market position as part of the global KPMG network, targeting businesses and organizations in Sweden. The technical infrastructure is modern, leveraging Adobe Experience Manager CMS, OneTrust for privacy compliance, and Adobe Launch for tag management, indicating a mature digital presence. Security posture is robust with HTTPS enforced, cookie consent mechanisms, and no visible vulnerabilities or exposed sensitive data. Overall, the website demonstrates high professionalism, trustworthiness, and compliance with GDPR and other privacy regulations.
Sublime Consulting ABsublime.se
Technology · Sweden
63Medium
NIS2 0 · GDPR 58
NIS2 0 · GDPR 58
Sublime Consulting AB is a well-established digital agency based in Stockholm, Sweden, with over 30 years of experience specializing in UX design, web development, AI-driven digital solutions, and digital strategy consulting. The company targets businesses primarily in Stockholm and broader Sweden, offering tailored digital services that emphasize accessibility, security, and long-term partnerships. Their market position is strong, supported by long-term client relationships and a comprehensive portfolio of services including modern intranet solutions and platform/CMS expertise. Technically, the website demonstrates a mature digital infrastructure leveraging ASP.NET Core, Umbraco CMS, and modern analytics and marketing tools such as Google Tag Manager, Google Analytics, and Facebook Pixel. The site is fast, mobile-optimized, and accessible, with good SEO practices and structured data implementation. Security posture is robust with HTTPS, antiforgery tokens, and a detailed cookie consent mechanism, although explicit security policies and incident response contacts are not published. Overall, the website reflects a professional, trustworthy, and technically competent organization with a strong focus on client satisfaction and compliance.
- TTelia Company
teliasonera.com
Telecommunications
62Medium
NIS2 0 · GDPR 55
NIS2 0 · GDPR 55
Telia Company is a major telecommunications provider focused on delivering better connected living experiences. The website reflects a modern digital presence with a React-based single-page application architecture and integrates industry-standard privacy compliance tools such as OneTrust for cookie consent management. The company targets both consumers and businesses with telecommunications and connectivity services. The site demonstrates good mobile optimization and accessibility features, although content depth and navigation clarity could be improved. From a security perspective, the website employs a robust cookie consent mechanism and uses reputable third-party analytics and marketing tools. However, there is a lack of explicit security headers and no visible security or incident response policies, which are areas for improvement. The WHOIS data confirms the legitimacy and consistency of the domain registration with the company's identity, supporting a high trust level. Overall, the website is professionally designed and compliant with GDPR requirements, but it would benefit from enhanced security practices and more transparent contact and policy information to strengthen user trust and security posture.
- MMitel Networks Corp.
aastra.com
Technology · United States
65Medium
NIS2 13 · GDPR 63
NIS2 13 · GDPR 63
Mitel Networks Corp. is a leading enterprise technology company specializing in hybrid business communication solutions, including unified communications and contact center services. The company holds a strong market position as a trusted provider for enterprises worldwide, offering scalable, secure, and resilient communication platforms tailored to various industries. Their website reflects a mature digital presence with comprehensive content, clear navigation, and a professional design that supports their brand image. Technically, the website is built on Drupal 11, leveraging modern JavaScript libraries and analytics tools such as Google Tag Manager, LinkedIn Insight, and Salesloft Scout. The site demonstrates good mobile optimization, accessibility, and SEO practices, ensuring a positive user experience across devices. Privacy compliance is robust, with explicit cookie consent mechanisms and detailed privacy and cookie policies aligned with GDPR requirements. From a security perspective, the site enforces HTTPS and employs standard security best practices, including cookie consent and security advisories. However, explicit security policies and incident response contacts are not publicly available, representing an area for improvement. No vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, Mitel's website presents a low-risk profile with strong business credibility and digital maturity. Strategic recommendations include publishing detailed security policies, vulnerability disclosure programs, and incident response contacts to further enhance trust and compliance.
- PPage not found
greatworks.com
Other
50Medium
NIS2 0 · GDPR 25
NIS2 0 · GDPR 25
The website greatworks.com currently serves only a 404 error page indicating that the requested content is not available. There is no business or company information presented, and no metadata or structured data to describe the entity or services. The site is hosted on Netlify, as indicated by the external link to Netlify's support guide. The technical infrastructure appears minimal with no scripts, forms, or advanced technologies detected. Security posture is weak due to lack of HTTPS and security headers, and no privacy or cookie policies are present. Overall, the site is not functional as a business or service platform and lacks essential compliance and trust elements.
- EEasyPark Group
easyparkgroup.com
Transportation · Sweden
52Medium
NIS2 5 · GDPR 40
NIS2 5 · GDPR 40
EasyPark Group is a large, Sweden-based global mobility platform specializing in parking technology and urban mobility solutions. The company operates in over 90 countries and 20,000 cities, offering a broad portfolio of services including off-street parking, electric vehicle charging payment solutions, parking data services, and in-car integrations. The website reflects a professional and consistent brand presence with clear navigation and good mobile optimization. Technically, the site uses modern web technologies such as Google reCAPTCHA and Bootstrap, but lacks some advanced security headers and explicit privacy policies. Security posture is moderate with room for improvement in published policies and headers. Overall, the domain registration and website content align well, indicating a trustworthy and legitimate business presence.
INVID Gruppen ABinvid.se
Technology · Sweden
57Medium
NIS2 13 · GDPR 75
NIS2 13 · GDPR 75
INVID Gruppen AB is a Swedish IT services company specializing in managed IT solutions, cybersecurity, and digital process automation. The company positions itself as a proactive IT partner, offering comprehensive services including IT infrastructure, modern workplace solutions, and compliance frameworks such as ISO 27001 and NIST. Their website reflects a mature digital presence with clear service descriptions, customer references, and a focus on digital transformation for business clients. Technically, the site uses modern web technologies including jQuery, Slick Carousel, and HubSpot for marketing and lead capture, alongside Cookiebot for GDPR-compliant cookie management. The site is mobile-optimized and well-structured, providing a good user experience. Security-wise, the website enforces HTTPS, anonymizes IPs in Google Analytics, and uses consent management effectively, though it lacks some advanced security headers and explicit incident response contacts. Overall, the domain registration data aligns with the business claims, supporting legitimacy and trustworthiness.
Kvadratkvadrat.se
Technology · Sweden
53Medium
NIS2 0 · GDPR 70
NIS2 0 · GDPR 70
Kvadrat is a Swedish consulting company operating the largest network of self-employed specialists in Sweden. They provide expert consulting services in system development, digitalization, information management, leadership, and organizational development. Their business model focuses on empowering independent consultants within a strong community, targeting companies and organizations seeking specialized expertise to drive change and innovation. The website reflects a professional and well-structured digital presence with clear navigation and comprehensive content about their services and network. Technically, the website employs modern tracking and analytics tools such as Google Tag Manager, Facebook Pixel, and Cookiebot for privacy compliance. The site is well-optimized for mobile and accessibility, with a moderate performance profile. HTTPS is enforced, and cookie consent mechanisms are robust, indicating a mature digital infrastructure. However, explicit security headers and detailed security policies are not present, which could be improved. From a security perspective, the site shows good practices with HTTPS and cookie consent but lacks visible incident response or vulnerability disclosure information. No WAF or blocking mechanisms were detected, and no critical vulnerabilities were found in the HTML content. The extensive use of third-party tracking and advertising services is managed with user consent, aligning with GDPR requirements. Overall, Kvadrat presents a trustworthy and professional online presence with strong business credibility and privacy compliance. Strategic improvements in security headers and transparency around security policies would enhance their security posture further.
- SStockholms stad
stockholm.se
Government · Sweden
63Medium
NIS2 0 · GDPR 15
NIS2 0 · GDPR 15
Stockholms stad operates an official municipal website serving over 960,000 residents and approximately 40,000 employees. The website provides comprehensive access to city services, including education, family support, cultural activities, traffic information, and business resources. It targets residents, businesses, and visitors, positioning itself as the authoritative digital portal for Stockholm city government. The site is well-branded, professionally designed, and offers clear navigation and accessibility features. Technically, the website employs modern web technologies including JavaScript, SVG icons, React components, and Piwik PRO analytics. The presence of Episerver CMS is inferred from script paths. The site is mobile-optimized and demonstrates good SEO and accessibility practices. Performance is moderate, with asynchronous script loading and structured content. From a security perspective, the site enforces HTTPS, uses cookie consent mechanisms with granular controls, and avoids exposing sensitive data. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not found. Security headers are not explicitly detected in the HTML content, suggesting room for improvement. Overall, the website is trustworthy, professionally maintained, and compliant with GDPR requirements. The domain registration data aligns with the official city ownership, reinforcing legitimacy. No blocking or WAF interference was detected, allowing full content access and analysis.
- AS Sadales tīkls
sadalestikls.lv
Energy · Latvia
64Medium
NIS2 10 · GDPR 10
NIS2 10 · GDPR 10
AS Sadales tīkls is the primary electricity distribution network operator and developer in Latvia, providing a wide range of services including new electricity connections, smart metering, and network maintenance. The company targets residential, business, and energy producer customers within Latvia, positioning itself as a key player in the national energy sector. The website reflects a mature digital presence with comprehensive service information, training programs, and customer support features including a virtual assistant chatbot. Technically, the site is built on OctoberCMS and integrates modern web technologies such as Google Tag Manager, Usercentrics for cookie consent, and Bot Framework for chat functionality. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers and explicit incident response policies are absent. Overall, the site demonstrates good privacy compliance and business credibility, supported by consistent branding and active social media channels.
SIA „Jēkabpils siltums“jekabpils-siltums.lv
Energy · Latvia
50Medium
NIS2 25 · GDPR 40
NIS2 25 · GDPR 40
SIA „Jēkabpils siltums“ is a municipally owned energy company established in 2003, providing district heating and hot water services primarily to the residents and businesses of Jēkabpils, Latvia. The company operates under full ownership of the Jēkabpils city municipality, positioning itself as a key local utility provider with a stable market presence. Their website reflects a professional and consistent brand image, offering clear information about services, tariffs, and customer support, including integration with third-party payment services like Bill.me. Technically, the website is built using modern web technologies including Bootstrap and FontAwesome, with responsive design and good SEO practices. The presence of Google Analytics indicates moderate user tracking, balanced with a comprehensive cookie consent mechanism and a detailed privacy policy, demonstrating good privacy compliance. However, some security headers are missing, and no explicit security or incident response policies are published. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data, but could improve by implementing additional HTTP security headers and publishing vulnerability disclosure information. The domain registration details align well with the business claims, enhancing trustworthiness. Overall, the site is well-maintained, secure, and compliant with GDPR, serving its municipal utility function effectively.
- VVisitor anti-robot validation
jekabpilsudens.lv
Other
54Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
The website at jekabpilsudens.lv currently serves as a security checkpoint page implemented by BitNinja, requiring visitors to complete a CAPTCHA challenge to verify they are not automated bots. This indicates the site is protected by a Web Application Firewall (WAF) or similar security mechanism that restricts direct access to content until validation is complete. The page includes multilingual support for the CAPTCHA instructions but lacks substantive business content, contact information, or legal policies. Technically, the site uses Google reCAPTCHA and Google Analytics scripts, with meta tags referencing outdated CMS versions (Joomla 1.5 and WordPress 2.5), suggesting legacy or placeholder content. The security posture is moderate due to the presence of CAPTCHA and IP greylisting but lacks visible security headers and comprehensive privacy or cookie policies. Overall, the site is currently inaccessible for normal browsing, limiting the ability to assess business operations or content quality.
Other
51Medium
NIS2 25 · GDPR 28
NIS2 25 · GDPR 28
The website sala.lv is currently a parked domain page primarily used for domain resale purposes. It does not provide any active business services or detailed company information. The page is minimalistic, featuring a prominent message that the domain is for sale and monetized through Google Ads and Bodis domain parking services. The target audience appears to be potential domain buyers or investors rather than end consumers or clients. Technically, the site uses standard HTML5, CSS3, and JavaScript with embedded Google advertising scripts. The hosting and domain parking are managed by Bodis, a known domain parking provider. The website is accessible over HTTPS, but lacks important security headers and privacy compliance mechanisms such as cookie consent banners. There are no forms or interactive elements, and no contact or business information is provided, which limits trust and credibility. Overall, the site is low in content quality and business presence, reflecting its status as a parked domain.