Medium-risk security reports
99,069 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,165001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
93,251–93,300 of 99,069
- DDesigner Outlet Luxembourg
designeroutletluxembourg.com
Retail · Luxembourg
67Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Designer Outlet Luxembourg operates a retail outlet shopping center featuring over 60 major brands offering discounts year-round. The website presents a professional and consistent brand image targeting shoppers in Luxembourg and nearby regions. The technical infrastructure is based on TYPO3 CMS hosted on Apache servers with integration of modern marketing and analytics tools such as Google Analytics, Google Tag Manager, and Cookiebot for GDPR compliance. Security posture is adequate with a valid SSL certificate but lacks modern TLS protocol support and some advanced security headers. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Contact information and social media presence enhance business credibility. Overall, the website is functional, secure, and compliant with relevant regulations, supporting the business's retail operations effectively.
Technology · Poland
75Medium
NIS2 25 · GDPR —
NIS2 25 · GDPR —
ConSol* Consulting & Solutions Software Poland Sp. z o.o. is a reputable IT service provider specializing in custom IT solutions, software architecture, web application development, and managed services. The company serves a diverse range of industries with a focus on digital transformation and technological excellence. Their market position is reinforced by notable clients and an ISO 27001 certification, indicating a strong commitment to information security. Technically, the website is built on TYPO3 CMS with modern frameworks and libraries, ensuring good performance, mobile optimization, and accessibility. Security measures include robust HTTP headers, valid SSL certificates, and no detected vulnerabilities, although enabling OCSP stapling and enhancing HSTS settings could improve security further. Privacy compliance is well addressed with comprehensive privacy and cookie policies, consent mechanisms, and moderate user tracking via Matomo analytics. Overall, the website demonstrates high professionalism, trustworthiness, and technical maturity, supporting the company's credibility and business goals.
Related:consol.deconsol-software.at
webcapitalquli.nl
Healthcare · Netherlands
55Medium
NIS2 25 · GDPR 58
NIS2 25 · GDPR 58
Quli.nl is a Dutch digital health platform offering a Personal Health Environment (PGO) that centralizes users' healthcare data, enabling better management and communication with healthcare providers. The platform targets patients, caregivers, healthcare organizations, and patient groups, positioning itself as a leader in digital accessibility and personal health data management in the Netherlands. The website is built on WordPress with modern web technologies and integrates Google Analytics and Tag Manager for analytics and marketing purposes. Security headers are properly configured; however, the absence of a valid SSL certificate and HTTPS implementation is a critical vulnerability that significantly impacts the site's security posture. Privacy policies and cookie consent mechanisms are well implemented and GDPR compliant. Overall, the site demonstrates good content quality and business credibility but requires urgent improvements in SSL/TLS configuration to ensure secure user interactions.
Technology · Germany
75Medium
NIS2 17 · GDPR —
NIS2 17 · GDPR —
ConSol Consulting & Solutions Software GmbH is a medium-sized, owner-managed IT service provider founded in 1984 in Germany. The company specializes in delivering customized IT solutions, supporting clients throughout the entire software lifecycle with a focus on agility, innovation, and technical excellence. Their offerings include IT consulting, software engineering, cloud and platform engineering, AI, automation, and product solutions based on open-source technologies. The company maintains strong partnerships with industry leaders such as Red Hat, AWS, SUSE, and others, reinforcing its market position. Technically, the website is built on TYPO3 CMS with modern front-end frameworks like Bootstrap and utilizes various JavaScript libraries for enhanced user experience. Analytics are implemented via Matomo and Google Tag Manager, with a comprehensive cookie consent mechanism ensuring GDPR compliance. The site is well-optimized for performance, mobile responsiveness, and accessibility. From a security perspective, the site uses HTTPS with a valid SSL certificate but lacks modern TLS protocol support and full HSTS implementation. Security headers are present but could be enhanced. No critical vulnerabilities or exposures were detected. The company demonstrates compliance with data protection regulations, supported by ISO 9001 and ISO 27001 certifications. Overall, ConSol presents a professional, trustworthy, and technically mature online presence with strong business credibility and a good security posture. Strategic improvements in SSL/TLS configuration and security header enhancements are recommended to further strengthen their security stance.
Related:redhat.comamazon.com
- The AES Corporation
lightingsimplified.com
Energy · United States
51Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Miami Valley Lighting, a division of The AES Corporation, specializes in providing comprehensive outdoor lighting solutions including street lighting, parking lot and security lighting, decorative lighting, and customized solutions primarily serving West Central Ohio. The company positions itself as a regional leader with a focus on safety, security, energy savings, and responsive maintenance services. The website is built on Drupal 10 with modern front-end technologies and integrates multiple analytics and marketing tools, indicating a mature digital infrastructure. However, the absence of a valid SSL certificate and disabled TLS protocols represent significant security vulnerabilities that undermine user trust and data protection. Privacy and cookie policies are present but basic, and no explicit security or incident response policies are published. Overall, the website demonstrates good content quality and business credibility but requires urgent security improvements to meet modern standards.
- AES Hawai‘i
aes-hawaii.com
Energy · United States
67Medium
NIS2 25 · GDPR 25
NIS2 25 · GDPR 25
AES Hawai‘i is a regional branch of the global AES Corporation, focused on accelerating the transition to renewable and clean energy solutions in Hawai‘i. The company operates multiple renewable energy projects and emphasizes sustainability, community partnerships, and innovation. The website is professionally designed using Drupal 10 and modern web technologies, providing a rich user experience with clear navigation and mobile optimization. Security posture is solid with HTTPS, security headers, and a content security policy, though improvements such as enabling full HSTS and OCSP stapling are recommended. Privacy and cookie policies are present with consent mechanisms, supporting GDPR compliance. Overall, the site reflects a mature digital presence aligned with the company's business goals and market position.
Related:aesandes.comaesbulgaria.com
NewMotoAsset GmbHdrivebeem.at
Energy · Austria
50Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
drivebeem is an Austrian company specializing in electric vehicle subscriptions, offering all-inclusive monthly plans that cover vehicle costs, insurance, maintenance, and charging solutions. The company targets both private customers and businesses, providing flexible subscription durations and additional services such as wallbox installations and photovoltaic energy solutions. The website is professionally designed with clear navigation and comprehensive content, including detailed FAQs and legal documentation. Technically, the site uses modern frameworks like Next.js and React, with content managed via a WordPress headless CMS. However, the website lacks a valid SSL certificate and proper HTTPS configuration, which significantly impacts its security posture. Security headers are partially implemented, but critical TLS protocols and certificate transparency are missing. Privacy compliance is generally good with a clear privacy policy, though no cookie consent mechanism was detected. Contact information is clearly presented, enhancing business credibility. Overall, the site is functional and informative but requires urgent security improvements to protect user data and build trust.
- The AES Corporation
aes-vietnam.com
Energy · Vietnam
73Medium
NIS2 25 · GDPR 25
NIS2 25 · GDPR 25
AES Vietnam operates as a regional branch of The AES Corporation, a global energy company focused on delivering sustainable and clean energy solutions. The website reflects a mature digital presence with comprehensive content in Vietnamese, targeting energy sector stakeholders and community partners. The company emphasizes sustainability, innovation, and community development as core pillars of its business model. Technically, the site is built on Drupal 10 with modern frontend technologies and integrates multiple analytics and marketing tools, indicating a high level of digital maturity. Security posture is solid with HTTPS and multiple security headers, though TLS protocols are not enabled, which is a notable gap. No critical vulnerabilities or blocking mechanisms were detected, and the domain registration details align well with the corporate identity, supporting legitimacy. Overall, the site presents a professional, trustworthy, and well-maintained digital asset for AES Vietnam.
- The AES Corporation
aespuertorico.com
Energy · Puerto Rico
70Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
AES Puerto Rico operates as a regional subsidiary of The AES Corporation, focusing on accelerating the future of energy through sustainable and smart energy solutions. The website demonstrates a strong market position in the energy sector with a clear emphasis on clean energy, community partnerships, and innovation. The company targets energy consumers, businesses, and community stakeholders in Puerto Rico and related AES markets. Technically, the site is built on Drupal 10 with modern frontend technologies and integrates multiple analytics and marketing tools, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforcement, comprehensive security headers, and no detected vulnerabilities, although some improvements in SSL configuration and security policy transparency are recommended. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website is professional, trustworthy, and well-aligned with the business's global and local energy initiatives.
- The AES Corporation
aespanama.com
Energy · Panama
57Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
AES Panama is a regional branch of The AES Corporation, a large multinational energy company focused on accelerating the future of energy through sustainable and innovative solutions. The website targets energy consumers, business clients, investors, and community partners primarily in Panama and other global markets. The company emphasizes community investment, sustainability, and advanced energy technologies. Technically, the website is built on Drupal 10 with modern frontend libraries and integrates multiple analytics and marketing tools. However, a critical security weakness is the absence of a valid SSL certificate, resulting in no HTTPS support despite security headers and policies being in place. Privacy and cookie policies are present and indicate some GDPR compliance, but no explicit incident response or security policy pages were found. The domain registration data is consistent and trustworthy, with no signs of suspicious activity. Overall, the site is professional and content-rich but requires urgent security improvements to protect user data and enhance trust.
- The AES Corporation
aes-ohio.com
Energy · United States
57Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
AES Ohio operates as a regional energy utility under The AES Corporation, providing electricity services and customer support to residential and commercial customers in Ohio. The website offers comprehensive information on energy supply options, billing, outages, safety, and sustainability initiatives. It leverages modern web technologies including Drupal 10 CMS and integrates multiple third-party analytics and marketing tools to enhance user engagement and service delivery. However, the absence of a valid SSL certificate and HTTPS implementation significantly undermines the site's security posture, exposing users to potential risks. Privacy and cookie policies are well-established, indicating a commitment to compliance and user data protection. Overall, the site presents a professional and content-rich experience but requires urgent security improvements to align with best practices.
Related:aes.comaesandes.com
—
75Medium
NIS2 25 · GDPR —
NIS2 25 · GDPR —
Security assessment incomplete. Successfully analyzed: nis2, emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr. 14 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.
- The AES Corporation
aesindiana.com
Energy · United States
57Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
AES Indiana is a large regional energy provider operating under The AES Corporation, focused on delivering electric utility services to residential and business customers in Indiana. The website offers comprehensive information on billing, outages, energy saving, and company initiatives, reflecting a mature business model with significant investments in infrastructure and digital transformation. Technically, the site is built on Drupal 10 with modern frontend libraries and integrates multiple analytics and marketing tools, indicating a high level of digital maturity. However, the absence of a valid SSL certificate and HTTPS severely impacts the security posture, exposing users to potential risks. While security headers and content security policies are implemented, critical gaps remain in SSL configuration and incident response transparency. Overall, the site is professional and trustworthy but requires urgent security improvements to protect user data and enhance compliance.
- AES El Salvador
aes-elsalvador.com
Energy · El Salvador
52Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
AES El Salvador operates as a major energy provider in El Salvador, offering electricity distribution, generation, and energy solutions. The website reflects a well-established corporate entity with a broad service portfolio and strong community engagement. The technical infrastructure is modern, leveraging Drupal 10 CMS and multiple JavaScript libraries for enhanced user experience and analytics. However, the absence of a valid SSL certificate is a critical security gap, undermining the site's HTTPS security and potentially affecting user trust. Privacy and cookie policies are comprehensive and GDPR compliant, supporting good privacy practices. Overall, the site is professional and content-rich but requires urgent security improvements to meet modern standards.
Related:aesandes.comaes.com
- The AES Corporation
aesdominicana.com
Energy · Dominican Republic
51Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
AES Dominicana is a regional subsidiary of The AES Corporation, focused on accelerating the future of energy through sustainable and innovative solutions in the Dominican Republic. The website presents a professional corporate image with comprehensive content about their products, sustainability initiatives, community partnerships, and investor relations. Technically, the site is built on Drupal 10 with modern frontend libraries and integrates multiple analytics and marketing tools. However, a critical security issue is the absence of a valid SSL certificate and HTTPS, which severely impacts the security posture. The site implements strong security headers and content security policies but lacks advanced SSL/TLS configurations and DNS security features. Privacy and cookie policies are present and indicate GDPR compliance. Overall, the site is credible and professionally maintained but requires urgent security improvements to protect user data and trust.
- Casa | AES Colombia | AES Colombia
aescol.com
—
57Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Security assessment completed with an overall score of 0/100 (unknown risk). 1 critical issues require immediate attention. Total of 21 security findings identified across all modules.
- AES Chile
aeschile.com
Energy · Chile
51Medium
NIS2 25 · GDPR 25
NIS2 25 · GDPR 25
AES Chile operates as a major energy company focused on accelerating the future of energy through sustainable and innovative solutions. The company emphasizes renewable energy, advanced energy networks, energy storage, and community partnerships. The website reflects a strong corporate presence with comprehensive content, clear navigation, and consistent branding. Technically, the site is built on Drupal 10 with modern frontend technologies and integrates multiple analytics and marketing tools. However, a critical security gap exists due to the absence of a valid SSL certificate and HTTPS configuration, which significantly impacts the security posture. Privacy and cookie policies are well implemented with consent mechanisms, supporting GDPR compliance. Overall, the site presents a professional and trustworthy image but requires urgent security improvements to protect users and data.
- The AES Corporation
aesbulgaria.com
Energy · Bulgaria
57Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
AES Bulgaria operates as a regional branch of The AES Corporation, a global energy company focused on accelerating the future of energy through sustainable and innovative solutions. The website presents a professional corporate image emphasizing clean energy, sustainability, community partnerships, and employee engagement. The technical infrastructure is based on Drupal 10 CMS with modern frontend libraries and integrations with multiple analytics and marketing tools, indicating a mature digital presence. However, a critical security gap exists due to the absence of a valid SSL certificate and HTTPS support, which significantly impacts the site's security posture. The site implements strong security headers and content security policies but lacks visible incident response or vulnerability disclosure information. Overall, the domain registration data aligns well with the corporate identity, supporting legitimacy. Strategic improvements in SSL deployment and security practices are recommended to enhance trust and compliance.
Related:aesandes.com
—
50Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 7 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.
—
59Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 8 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.
MSD Tiergesundheit Österreichmsd-tiergesundheit.at
Healthcare · Austria
56Medium
NIS2 17 · GDPR 18
NIS2 17 · GDPR 18
MSD Tiergesundheit Österreich operates as a prominent veterinary pharmaceutical provider in Austria, offering a broad range of veterinary medicines and vaccines. The website serves multiple target audiences including veterinarians and animal owners, providing product information, news, and educational resources. The business is part of the global Merck & Co., Inc. group, indicating a strong market position and established brand presence. The site features professional design, consistent branding, and comprehensive content tailored to the veterinary healthcare sector. Technically, the website is built on WordPress VIP with modern SEO and analytics integrations, but suffers from critical SSL/TLS deficiencies that undermine security and trust. Security headers are well implemented, but the absence of a valid SSL certificate and HTTPS support is a major vulnerability. Privacy compliance is well addressed with clear cookie consent mechanisms and a comprehensive privacy policy. Overall, the site demonstrates good digital maturity but requires urgent security improvements to protect user data and maintain credibility.
Related:msd.at
- HUMANIC
humanic.net
Retail · Austria
67Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
HUMANIC is a well-established shoe retailer and manufacturer with over 150 years of history, operating both physical stores and online shops across multiple Central and Eastern European countries. The company offers a broad range of footwear and accessories targeting consumers seeking quality and variety. Their market position is strong, especially in Austria, with a recognized brand and customer loyalty programs. Technically, the website is built on SAP Commerce (Hybris) platform, leveraging modern marketing and analytics tools such as Google Analytics, Dynamic Yield, and Usercentrics for consent management. The site is hosted behind Cloudflare, ensuring basic security and performance benefits. Security posture is adequate with HTTPS enforced and several security headers present, although TLS protocols are outdated and some security enhancements like HSTS preload and OCSP stapling are missing. Privacy compliance is addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website is professional, trustworthy, and functional, with room for technical and security improvements.
Backslashbackslash.com
Media
56Medium
NIS2 25 · GDPR 25
NIS2 25 · GDPR 25
Backslash is a cultural intelligence unit operating within the Omnicom Advertising Group, providing strategic insights through a combination of data, journalism, and cultural analysis. The website serves as a platform to share reports, documentaries, and newsletters targeted primarily at advertising professionals and agencies within the Omnicom ecosystem. Technically, the site is built on WordPress, hosted on WP Engine, and utilizes Cloudflare CDN along with several marketing and analytics tools such as Google Analytics and OneTrust for cookie consent. However, a critical security gap exists due to the absence of a valid SSL/TLS certificate, resulting in no HTTPS support, which significantly undermines the site's security posture. Security headers are partially implemented, but the lack of encryption and modern TLS protocols is a major vulnerability. Privacy compliance is basic, with a cookie consent mechanism present but no comprehensive GDPR-aligned privacy policy detected. Business credibility is supported by the affiliation with Omnicom and professional content, but contact information is limited to a newsletter signup form without direct emails or phone numbers. Overall, the site is functional and professional but requires urgent security improvements to protect user data and enhance trust.
TBWAtbwacannes.com
Media
51Medium
NIS2 25 · GDPR 25
NIS2 25 · GDPR 25
TBWA at Cannes is a professionally designed website serving as a showcase for the global TBWA Collective's creative work at the Cannes Lions Festival of Creativity. The site features a broad portfolio of advertising campaigns from various TBWA offices worldwide, targeting advertising professionals and festival attendees. Technically, the site is built on WordPress, hosted on WP Engine with Cloudflare CDN, and uses modern marketing and analytics tools such as Google Analytics, Google Tag Manager, and OneTrust for cookie consent. However, the site suffers from a critical security issue due to the absence of a valid SSL certificate and HTTPS support, which significantly undermines its security posture. Additionally, the lack of DNS records is unusual and may indicate configuration issues. Privacy compliance is partially addressed through cookie consent, but no privacy policy or terms of service pages were found. Overall, the site demonstrates strong business credibility and content quality but requires urgent security improvements.
Related:tbwa.com
- HHOYER GmbH
ktsk-terminal.com
Transportation · Germany
52Medium
NIS2 9 · GDPR 43
NIS2 9 · GDPR 43
Kombi Terminal Schkopau, operated under the HOYER GmbH brand, is a specialized logistics terminal focusing on container handling, hazardous goods storage, and rail transport connections. The website presents a professional and consistent brand image with clear service descriptions targeting logistics and transport businesses. The technical infrastructure is based on TYPO3 CMS running on Apache with Debian, employing modern security headers and HTTPS protocols, though some security configurations like HSTS are not fully enabled. The site uses tracking and consent management tools indicating moderate privacy compliance. No critical security vulnerabilities or blocking mechanisms were detected, but contact information is sparse on the main service page. Overall, the website reflects a medium-sized transportation business with a solid digital presence but could improve in security and privacy transparency.
Related:hoyer-group.com
—
50Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 7 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.
—
50Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 7 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.
- PPinterest
pinterest.engineering
Technology · United States
56Medium
NIS2 17 · GDPR 43
NIS2 17 · GDPR 43
Pinterest Engineering website serves as a career and culture portal for Pinterest's engineering division, showcasing job opportunities, employee testimonials, and blog content. The company is a large, established technology enterprise with a global footprint. The technical infrastructure uses modern JavaScript libraries and frameworks such as Bootstrap, Swiper, and GSAP, hosted on Fastly CDN, but suffers from critical SSL/TLS misconfiguration that undermines secure access. Privacy and cookie policies are comprehensive and GDPR compliant, reflecting a mature privacy posture. However, the absence of valid HTTPS and security headers significantly weakens the security posture, exposing users to potential risks. Overall, the site is professionally designed and trustworthy but requires urgent security improvements.
Pinterestpinterest.info
Technology · United States
60Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Pinterest is a leading visual discovery and social media platform that enables users to explore and save creative ideas across various categories such as recipes, home decor, fashion, and more. The platform serves a broad audience including individual users, content creators, and businesses seeking advertising opportunities. Pinterest operates on an advertising-based business model with integrated e-commerce features, positioning itself as a key player in the technology and social media industry. The website demonstrates a high level of digital maturity with a modern tech stack primarily based on React and extensive use of cloud services and CDNs for content delivery. The design and user experience are professional and optimized for both desktop and mobile users, ensuring accessibility and SEO best practices are followed. Security-wise, the site implements several important HTTP security headers and a comprehensive content security policy, but it currently suffers from an invalid or missing SSL certificate and lacks support for modern TLS protocols, which significantly impacts its security posture. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms in place. Overall, Pinterest's website is trustworthy and professional, but immediate attention is required to resolve SSL and TLS issues to enhance security and user trust.
Freyssinetfreyssinet.com
Energy · France
64Medium
NIS2 9 · GDPR 58
NIS2 9 · GDPR 58
Freyssinet is a well-established global civil engineering company specializing in the construction and repair of infrastructure using advanced technologies such as post-tensioning and cable systems. With over 80 years of experience and a network of 60 subsidiaries worldwide, it serves a broad international market primarily in the energy and transportation sectors. The website reflects a mature digital presence with comprehensive content, clear navigation, and strong branding. Technically, the site is built on WordPress with modern plugins for SEO, performance, and GDPR compliance, hosted on OVHcloud. However, a critical security issue is the absence of a valid SSL certificate, resulting in no HTTPS support, which significantly impacts the security posture. Privacy and cookie policies are present and include consent mechanisms, indicating good privacy compliance. Social media integration and detailed case studies enhance business credibility. Overall, the site is professional and trustworthy but requires urgent security improvements to protect user data and maintain trust.
Related:vinci.com
Geoquest Groupterre-armee.com
Transportation · France
59Medium
NIS2 9 · GDPR 43
NIS2 9 · GDPR 43
Geoquest Group is a globally recognized leader in geotechnical engineering, specializing in reinforced earth structures and soil-structure interaction solutions. With a presence in 80 countries and a history spanning over 60 years, the company offers a broad portfolio of engineering services and products tailored to infrastructure, hydraulic, industrial, and urban development sectors. The website reflects a mature business with comprehensive content, professional design, and a strong international network supported by its parent company, Soletanche Freyssinet. Technically, the website is built on a modern WordPress platform using advanced plugins and frameworks such as Avada Fusion Builder and Slider Revolution. It employs analytics tools like Google Tag Manager and Matomo for user tracking and performance insights. However, the site lacks a valid SSL certificate and proper HTTPS configuration, which significantly impacts its security posture. Security-wise, while several HTTP security headers are implemented, the absence of a valid SSL certificate and disabled TLS protocols present critical vulnerabilities. The site does implement GDPR-compliant cookie consent mechanisms and maintains comprehensive privacy and legal policies, indicating good privacy compliance. Overall, the website is professional and content-rich but requires urgent improvements in SSL/TLS configuration to enhance security and trustworthiness. Strategic recommendations include installing a valid SSL certificate, enabling modern TLS protocols, and enhancing HSTS policies to protect users and improve compliance.
Other
58Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
The website agventuremarketing.com currently serves as a redirect to a subpage and contains minimal accessible content. The business overview and key services cannot be determined from the site content. The technical infrastructure includes JavaScript with New Relic Browser monitoring and hosting via AWS CloudFront. However, the absence of a valid SSL certificate and lack of TLS support significantly weaken the site's security posture. No privacy, cookie, or terms of service policies are present, and no contact information is available, which impacts trust and compliance negatively. Overall, the site appears to be in an early or transitional stage with limited digital maturity and security readiness.
Sixensesixense-group.com
Energy · France
59Medium
NIS2 9 · GDPR 25
NIS2 9 · GDPR 25
Sixense is an international engineering and consulting company specializing in soil knowledge, environmental monitoring, and infrastructure lifecycle management. The company offers a broad range of services including engineering, monitoring, digital solutions, and mapping, targeting infrastructure owners and operators across energy, transport, and industrial sectors. With a strong international presence and multiple offices worldwide, Sixense positions itself as a key player in infrastructure security and sustainability. Technically, the website is built on WordPress with modern frameworks like Bootstrap and integrates advanced tools such as Matomo for analytics and Complianz for GDPR compliance. However, the absence of a valid SSL certificate and HTTPS severely undermines the security posture, exposing users to risks and impacting trust. Security headers are well implemented but cannot compensate for the lack of encryption. Privacy compliance is well addressed with clear cookie and privacy policies and consent mechanisms. Overall, the site is professional and content-rich but requires urgent security improvements to align with best practices.
Geoquest Groupgeoquest-group.com
Transportation · France
62Medium
NIS2 9 · GDPR 43
NIS2 9 · GDPR 43
Geoquest Group is a globally recognized leader in geotechnical engineering, specializing in reinforced earth structures and soil-structure interaction solutions. With over 60 years of experience and a presence in 80 countries, the company offers a broad range of engineering services and products tailored to infrastructure, hydraulic, industrial, and urban development sectors. The business operates under the parent company Soletanche Freyssinet, leveraging a strong international network of subsidiaries and partners. Technically, the website is built on a modern WordPress platform with advanced plugins and themes, providing a professional and user-friendly experience. However, the security posture is weakened by an invalid SSL certificate and lack of proper HTTPS configuration, which is a critical issue that must be addressed immediately to protect user data and maintain trust. Privacy compliance is well managed with clear cookie and privacy policies and consent mechanisms. Overall, the website demonstrates strong business credibility and digital maturity but requires urgent security improvements to align with best practices.
Related:soletanchefreyssinet.com
Menard group, world specialist in ground improvementmenard-group.com
Energy · France
71Medium
NIS2 17 · GDPR 43
NIS2 17 · GDPR 43
Menard Group is a global leader specializing in foundation solutions based on ground improvement and reinforcement technologies. Operating in over 80 countries, the company offers innovative and economical solutions across various infrastructure sectors including ports, airports, rail, road, process, energy, and building projects. Their expertise spans the entire infrastructure lifecycle, positioning them as a key player in the construction and engineering industry. The website reflects a professional and comprehensive digital presence, showcasing detailed service offerings and project portfolios. Technically, the site is built on WordPress with modern frameworks and libraries, though performance could be improved. Security measures include a valid SSL certificate and strong email authentication policies, but enhancements like HSTS and OCSP stapling are recommended. Privacy compliance is well addressed with clear cookie and privacy policies, including consent mechanisms. Overall, Menard Group demonstrates a strong business and digital maturity with room for technical and security optimizations.
Related:soletanchefreyssinet.com
20i Ltd.20i.com
Technology · United Kingdom
53Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
20i Ltd. is a UK-based technology company specializing in high-performance web hosting services including reseller hosting, managed cloud hosting, managed WordPress hosting, VPS, and domain registration. The company positions itself as a premium hosting provider with a focus on speed, reliability, and expert 24/7 support, supported by multiple industry awards and positive customer testimonials. Their technical infrastructure leverages modern cloud platforms such as AWS, Google Cloud, and their proprietary 20iCloud, utilizing advanced technologies like Redis, ElasticSearch, and autoscaling to deliver high availability and performance. The website is built on modern frameworks including Nuxt.js and Vue.js, with a responsive design and good SEO practices. However, the security posture is weakened by the absence of a valid SSL certificate and lack of HTTPS, which is a critical issue. While security headers and content security policies are in place, the lack of proper SSL/TLS configuration significantly impacts the overall security score. The company provides comprehensive contact information, including email, phone, and physical address, and maintains a strong social media presence. Strategic recommendations include immediate implementation of valid SSL certificates, enabling modern TLS protocols, and enhancing privacy compliance mechanisms. Overall, 20i presents a professional and trustworthy web hosting service with room for critical security improvements.
- CCorteva Agriscience
sentricon.com
Other · United States
51Medium
NIS2 17 · GDPR 43
NIS2 17 · GDPR 43
Sentricon.com is the official website for Sentricon®, a leading termite control solution brand owned by Corteva Agriscience. The site targets homeowners, property managers, homebuilders, and pest management professionals with termite inspection, control, and prevention services. The website is professionally designed with good content quality and clear navigation, leveraging Adobe Experience Manager CMS and Adobe marketing technologies. However, a critical security issue is the invalid or missing SSL certificate, which undermines user trust and security. Privacy compliance is moderate with a clear privacy policy but no cookie consent mechanism detected. Business credibility is strong due to alignment with the reputable Corteva Agriscience brand and presence of trust indicators such as testimonials and certified specialist programs.
Related:corteva.com
- CCorteva Agriscience
voltisseed.com
Other · United States
51Medium
NIS2 17 · GDPR 43
NIS2 17 · GDPR 43
Corteva Agriscience is a global, publicly traded agriculture company providing a comprehensive portfolio of crop protection, seeds, biologicals, and seed applied technologies. The website reflects a strong market position with professional branding and extensive content targeting farmers, agricultural professionals, investors, and partners. The digital infrastructure is built on Adobe Experience Manager with Adobe marketing and analytics tools, indicating a mature technical environment. However, the website currently lacks a valid SSL certificate, resulting in poor HTTPS security and a low security posture score. Privacy compliance is generally good with a clear privacy policy but lacks a cookie consent mechanism. Overall, the site is professional and trustworthy but requires urgent security improvements to protect user data and maintain trust.
Evelyn Partnersevelyn.com
Finance · United Kingdom
64Medium
NIS2 17 · GDPR 58
NIS2 17 · GDPR 58
Evelyn Partners is a well-established UK-based wealth management firm offering personalized financial planning, investment management, and employee benefits services. The company positions itself as a leader in the UK market with significant assets under management and a long history. Their website reflects a mature digital presence with comprehensive content, professional design, and clear navigation targeting individuals, families, entrepreneurs, and financial intermediaries. Technically, the site uses modern JavaScript frameworks, integrates multiple third-party marketing and analytics tools, and is hosted on Microsoft Azure. However, a critical security gap exists due to the absence of a valid SSL certificate and HTTPS support, which severely impacts the security posture and trustworthiness of the site. Privacy and compliance measures are well addressed with clear policies and consent mechanisms. Overall, the site demonstrates strong business credibility but requires urgent remediation of its SSL/TLS configuration to meet security best practices.
Related:bestinvest.co.uk
- Webmail :: Welcome to Webmail
stackmail.com
Technology
52Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
Stackmail.com operates as a webmail service platform, providing users with access to email via a web interface. The website is primarily a login portal built on the Roundcube webmail platform, targeting users who require email access. The business appears to be small and technology-focused, with a domain age of 18 years indicating a mature presence. However, the public-facing content is minimal, lacking detailed business descriptions or contact information. From a technical perspective, the site uses common web technologies such as jQuery and Bootstrap, but suffers from slow load times and lacks modern security implementations. Critically, the site does not have a valid SSL/TLS certificate, resulting in unencrypted HTTP access, which severely impacts user trust and security. The DNS configuration includes a valid SPF record but lacks DMARC, and no security headers or advanced TLS features are enabled. Security posture is weak due to the absence of HTTPS, missing security headers, and no visible privacy or cookie policies. There is no evidence of incident response or vulnerability disclosure mechanisms. The WHOIS data is consistent and indicates a legitimate domain registration with moderate domain protection. Overall, the site presents significant security and privacy compliance gaps that should be addressed to improve trust and protect users. Strategic recommendations include immediate deployment of a valid SSL certificate, implementation of security headers and DMARC, and publication of privacy and cookie policies. Enhancing performance and adding clear business and contact information would also improve credibility and user experience.
Translation Standardstranslationstandards.net
Education · Austria
54Medium
NIS2 17 · GDPR 43
NIS2 17 · GDPR 43
Translation Standards is a small Austrian-based service provider specializing in certification and assessment services for translation, interpretation, and localization providers. The company offers ISO certification audits aligned with multiple ISO standards relevant to language services, positioning itself as a niche player in quality assurance within the language industry. The website is built on WordPress, hosted by Hostinger, and uses modern SEO and marketing tools such as Yoast SEO and Google Tag Manager. However, the absence of a valid SSL certificate significantly impacts the security posture, exposing users to risks associated with unencrypted traffic. While the site provides clear contact information and trust signals like testimonials and case studies, it lacks cookie and terms of service policies, which are important for privacy compliance. Overall, the website demonstrates moderate digital maturity but requires urgent improvements in security to enhance trust and compliance.
EducationStandardseducationstandards.net
Education · Austria
51Medium
NIS2 9 · GDPR 43
NIS2 9 · GDPR 43
EducationStandards.net is a specialized service provider focused on ISO certification and standards for educational organizations. The company offers certification, assessment, training, and continuous improvement services tailored to the education sector, targeting educational institutions, language service providers, and training organizations. The website is professionally designed with clear navigation and relevant content, supporting its niche market position in education compliance and ISO standards. Technically, the site runs on WordPress with modern plugins and is hosted by Hostinger, but lacks critical security infrastructure such as a valid SSL certificate and modern TLS protocols, which significantly impacts its security posture. The absence of HTTPS and other security best practices exposes the site to risks and undermines user trust. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism or GDPR-specific disclosures. The site uses Google Analytics for tracking and includes affiliate marketing links. Overall, the business appears legitimate with consistent WHOIS data and a clear focus, but must urgently address security deficiencies to improve trust and compliance.
Soletanche Freyssinetactivskeen.com
Energy · France
62Medium
NIS2 9 · GDPR 43
NIS2 9 · GDPR 43
Soletanche Freyssinet is a global leader in specialty construction and engineering, focusing on soil, structural, and nuclear sectors. The company operates through six subsidiary brands, delivering technical excellence and sustainable solutions. The website reflects a mature digital presence with comprehensive content, strong branding, and active social media engagement. Technically, the site is built on WordPress with modern plugins for SEO, GDPR compliance, and performance optimization. However, the security posture is weakened by the absence of a valid SSL certificate and lack of HTTPS enforcement, which poses significant risks. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site is professional and trustworthy but requires urgent security improvements to protect user data and maintain credibility.
Related:vinci.com
Soletanche Freyssinetsoletanchefreyssinet.com
Energy · France
71Medium
NIS2 17 · GDPR 43
NIS2 17 · GDPR 43
Soletanche Freyssinet is a globally recognized leader in soil, structural, and nuclear engineering, operating through six specialized brands. The company delivers a broad range of construction and engineering services focused on infrastructure, energy, and nuclear sectors. Their market position is strong, supported by a large workforce and significant revenue, indicating enterprise scale. The website reflects a mature digital presence with comprehensive content, clear branding, and active social media engagement. Technically, the website is built on WordPress with modern plugins and optimization tools, hosted on OVHcloud. It employs PHP 8.1 and integrates SEO and performance enhancements such as Yoast SEO and WP Rocket. The site is mobile-optimized, accessible, and SEO-friendly, providing a good user experience. From a security perspective, the site enforces HTTPS with valid SSL certificates and includes important security headers. While HSTS is present, it is not fully enabled with subdomain inclusion or preload. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is well addressed with clear privacy and cookie policies, including consent mechanisms aligned with GDPR. Overall, the website presents a low risk profile with strong business credibility and technical maturity. Recommendations include enhancing HSTS settings, enabling OCSP stapling, adding CAA DNS records, and considering a security.txt file to improve vulnerability disclosure transparency.
Corteva Agrisciencecorteva.com
Manufacturing · United States
70Medium
NIS2 25 · GDPR 43
NIS2 25 · GDPR 43
Corteva Agriscience is a leading global agriculture company specializing in crop protection, seeds, and biologicals. The company operates as a publicly traded pure-play agriculture entity with a comprehensive portfolio serving farmers worldwide. Their website reflects a strong market position with extensive product and service offerings, targeting agricultural professionals and investors. Technically, the site is built on Adobe Experience Manager, leveraging modern marketing and analytics tools, though performance could be improved due to high page size and load times. Security posture is robust, with HTTPS, HSTS, DMARC, and SPF properly configured, and no critical vulnerabilities detected. Privacy compliance is well addressed with clear policies and consent mechanisms integrated via TrustArc. Overall, the site demonstrates high professionalism, trustworthiness, and business credibility.
Related:pioneer.com
Other · Spain
51Medium
NIS2 17 · GDPR 15
NIS2 17 · GDPR 15
The website lindor.es is currently inaccessible to users due to a Cloudflare Web Application Firewall (WAF) challenge page that blocks direct access to content. This prevents any meaningful content or metadata extraction. The domain is registered with consistent WHOIS data matching the Spanish domain extension, but the lack of a valid SSL certificate and HTTPS support significantly weakens the site's security posture. No privacy, cookie, or terms of service policies are present, and no contact or business information is available on the page. The technical infrastructure relies on Cloudflare for security and hosting, but the SSL/TLS configuration is incomplete or invalid, exposing the site to potential security risks. Overall, the site appears to be in a preliminary or protected state, limiting the ability to assess its business or compliance maturity.
Evelyn Partners Investment Management Services Limitedbestinvest.co.uk
Finance · United Kingdom
57Medium
NIS2 25 · GDPR 40
NIS2 25 · GDPR 40
Bestinvest is a well-established UK-based online investment platform offering a wide range of tax-efficient investment accounts including ISAs, SIPPs, and Junior ISAs. The company emphasizes free expert coaching, smart planning tools, and competitive pricing to help clients achieve their financial goals. The platform is supported by a mature technical infrastructure leveraging modern web technologies such as React and Next.js, hosted on Microsoft Azure, ensuring good performance and mobile optimization. However, the site currently suffers from critical SSL certificate issues and lacks support for modern TLS protocols, which significantly impacts its security posture. Privacy and cookie policies are comprehensive and indicate compliance with GDPR regulations. The business demonstrates strong credibility with FCA regulation, numerous awards, and positive Trustpilot reviews. Overall, the website is professional and user-friendly but requires urgent security improvements to ensure trust and compliance.
- enuvo GmbH
surveyhero.com
Technology · Switzerland
73Medium
NIS2 17 · GDPR 43
NIS2 17 · GDPR 43
SurveyHero, operated by enuvo GmbH, is a mature and established online survey software provider founded in 2005 and based in Switzerland. The company offers a SaaS platform enabling users to create, distribute, and analyze surveys with a focus on ease of use, multilingual support, and GDPR compliance. With over 3 million users worldwide and endorsements from reputable platforms like Capterra and G2, SurveyHero holds a strong market position in the online survey industry. The website reflects a professional and user-friendly design, targeting individuals and organizations seeking reliable survey tools.
Mailinblackmailinblack.com
Technology · France
69Medium
NIS2 25 · GDPR 25
NIS2 25 · GDPR 25
Mailinblack is a mature French cybersecurity company founded in 2003, specializing in user-centered cybersecurity solutions for enterprises, healthcare establishments, and public administrations. Their flagship platform, U-Cyber 360°, integrates multiple services including email protection, password management, phishing simulation, and e-learning cybersecurity training. With over 22,000 clients and a strong market presence, Mailinblack positions itself as an innovative and accessible provider in the cybersecurity industry. Technically, the website is built on WordPress with modern technologies such as Apache server, jQuery, and performance optimizations via WP Rocket. The site is well-optimized for SEO, mobile responsiveness, and accessibility, featuring comprehensive metadata, structured data, and multi-language support. Hosting appears to be on Microsoft Azure, ensuring reliable infrastructure. From a security perspective, the site employs HTTPS with a valid wildcard SSL certificate, includes important security headers like X-Frame-Options, X-XSS-Protection, and Content-Type-Options, and has properly configured DNS records including SPF and DMARC for email security. However, improvements such as enabling HSTS fully, implementing DNSSEC, and enabling OCSP stapling could enhance security further. No critical vulnerabilities or WAF blocking were detected. Overall, the website demonstrates a strong security posture, professional business credibility, and good privacy compliance with clear policies and consent mechanisms. The risk level is low, with recommendations focusing on enhancing security headers and DNS security to maintain trust and compliance.
VideoAmp, Inc.videoamp.com
Media · United States
55Medium
NIS2 25 · GDPR 43
NIS2 25 · GDPR 43
VideoAmp, Inc. is a mature and established media measurement software company founded in 2001, specializing in cross-platform audience segmentation and programmatic advertising optimization. The company targets agencies, brands, and publishers with a B2B SaaS business model, leveraging proprietary technology such as VALID™ for data-driven advertising insights. The website is professionally designed with excellent content quality, clear navigation, and strong branding consistency, reflecting a high level of digital maturity. Technically, the site is built on WordPress with modern marketing and analytics tools, but suffers from slow load times and lacks a valid SSL/TLS certificate, which critically impacts security posture. Privacy and cookie policies are comprehensive and GDPR compliant, supporting good privacy compliance. However, the absence of HTTPS and security headers represents a significant vulnerability. Overall, the domain registration data supports the legitimacy and trustworthiness of the business. Strategic improvements in security infrastructure are recommended to enhance trust and compliance.