Medium-risk security reports
99,069 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,165001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
94,101–94,150 of 99,069
KaVo Dentalkavo.com
Healthcare · Germany
57Medium
NIS2 0 · GDPR 18
NIS2 0 · GDPR 18
KaVo Dental is a well-established manufacturer of dental devices and instruments with over 110 years of history, serving dentists and dental technicians worldwide. The company offers a broad portfolio including treatment units, handpieces, and laboratory equipment, positioning itself as a pioneer and innovator in the dental healthcare sector. The website reflects a professional and comprehensive digital presence with multiple language support and rich content tailored to dental professionals. Technically, the site is built on Drupal 10 with modern web technologies, providing good user experience and SEO optimization. However, the security posture is weakened by the absence of a valid SSL certificate and proper HTTPS configuration, which is a critical issue that must be addressed to protect user data and maintain trust. Privacy and cookie policies are present and appear compliant with GDPR standards. Overall, the site demonstrates strong business credibility and professionalism but requires urgent security improvements.
—
68Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 10 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.
Other
51Medium
NIS2 5 · GDPR 15
NIS2 5 · GDPR 15
The website acleddata.com is currently inaccessible due to a Cloudflare security challenge page requiring human verification via Turnstile captcha. This prevents access to any substantive content or business information. The site lacks a valid SSL certificate and does not support HTTPS, which is a critical security deficiency. The technical infrastructure relies on Cloudflare services for DNS and security, but the absence of a valid certificate and security headers indicates a poor security posture. No privacy, cookie, or terms of service policies are present, and no contact or business details are available on the landing page. Overall, the site appears to be in a blocked or pre-launch state, limiting the ability to assess its business credibility or compliance status.
- DDeutsche Lufthansa AG
lh.com
Transportation · Germany
56Medium
NIS2 5 · GDPR 18
NIS2 5 · GDPR 18
Deutsche Lufthansa AG operates a comprehensive airline website offering flight booking and travel management services to a global audience. The site reflects Lufthansa's position as a leading international airline with a broad network and premium service offerings. The technical infrastructure leverages modern web technologies including Adobe Helix, Maui Design System, and Akamai CDN, ensuring a responsive and accessible user experience. While the website is rich in content and professionally designed, the SSL certificate is currently invalid, which poses a security risk. Security headers are well implemented, but the absence of a cookie consent mechanism indicates partial privacy compliance. Overall, the site demonstrates a mature digital presence with room for improvement in security and privacy practices.
Related:miles-and-more.comswiss.com
troii Software GmbHtroii.com
Technology · Austria
52Medium
NIS2 5 · GDPR 18
NIS2 5 · GDPR 18
troii Software GmbH is a small Austrian technology company specializing in software development, offering a suite of products including time tracking, mileage logging, financial market information, and field service management solutions. Their market position is that of a regional software provider with a focus on delivering integrated web and mobile applications. The website is built on WordPress with Elementor and uses Google Cloud hosting. While the site is professionally designed with good content and SEO practices, it lacks a valid SSL certificate, resulting in insecure HTTP connections despite some security headers being present. Privacy policy is comprehensive and GDPR compliant, but cookie consent mechanisms are missing. Contact information is clearly provided, enhancing business credibility.
AGFA HealthCareagfahealthcare.com
Healthcare · Belgium
52Medium
NIS2 0 · GDPR 18
NIS2 0 · GDPR 18
AGFA HealthCare is a prominent enterprise in the healthcare sector specializing in secure and sustainable imaging data management solutions. The company holds a strong market position, evidenced by multiple KLAS awards and a comprehensive portfolio of services including Enterprise Imaging Platform, Augmented Intelligence, and Cloud solutions. Their target audience includes healthcare professionals, IT professionals, and government healthcare entities. Technically, the website is built on WordPress with a modern tech stack including popular plugins and frameworks, delivering a good user experience with mobile optimization and accessibility. However, the security posture is currently weak due to the absence of a valid SSL certificate and lack of modern TLS protocols, which is a critical issue that needs immediate remediation. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the website is professional and trustworthy but requires urgent security improvements to enhance its risk profile.
- AAdolf Würth GmbH & Co. KG
wuerth.com
Manufacturing · Germany
58Medium
NIS2 0 · GDPR 18
NIS2 0 · GDPR 18
The Würth Group is a globally recognized leader in the manufacturing and distribution of assembly and fastening materials, operating over 400 companies in 80 countries with more than 2,800 branches. Their website reflects a mature digital presence with comprehensive corporate information, career opportunities, and sustainability initiatives targeting B2B customers and industrial partners. Technically, the site employs modern frameworks such as Bootstrap and integrates advanced analytics via Piwik PRO, ensuring a responsive and user-friendly experience. However, the security posture is weakened by an invalid SSL certificate and lack of TLS protocol support, which poses risks to data confidentiality and user trust. Privacy and cookie policies are well implemented, demonstrating GDPR compliance. Overall, the site is professional and trustworthy but requires urgent SSL remediation to enhance security.
- NNalco Water
nalco.com
Manufacturing · United States
57Medium
NIS2 0 · GDPR 33
NIS2 0 · GDPR 33
Nalco Water, a subsidiary of Ecolab, is a global leader in water and process management solutions serving a broad range of industries including manufacturing, energy, transportation, and healthcare. The company emphasizes sustainability and operational efficiency, leveraging advanced digital platforms such as ECOLAB3D™ IIOT to deliver data-driven insights and innovative water management technologies. The website reflects a mature digital presence with comprehensive content, clear navigation, and strong branding consistency. Technically, the site is built on the Sitecore CMS platform, hosted via Akamai CDN and Azure, and integrates multiple analytics and marketing tools including Google Analytics, Microsoft Clarity, and OneTrust for cookie consent. Security headers are well implemented; however, a critical issue exists with the SSL certificate being invalid or missing, and no TLS protocols enabled, which significantly impacts the security posture. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Contact information is clearly presented with phone numbers, physical addresses, and contact forms. Overall, the website is professional and trustworthy but requires urgent remediation of SSL issues to ensure secure communications and maintain user trust.
- AAbbott
sjm.com
Healthcare · United States
60Medium
NIS2 0 · GDPR 18
NIS2 0 · GDPR 18
Abbott Cardiovascular's website serves as a comprehensive corporate portal providing detailed information on cardiac and vascular medical devices and therapies. The site targets healthcare professionals and patients, offering product details, educational resources, and patient support. The business is positioned as a global leader in healthcare technology, supported by consistent branding and professional content. Technically, the site leverages Adobe Experience Manager CMS, Amazon CloudFront hosting, and integrates advanced analytics and consent management tools. However, the absence of a valid SSL certificate and enabled TLS protocols significantly undermines the security posture, despite well-configured security headers and privacy policies. Overall, the site is professional and trustworthy but requires urgent remediation of SSL/TLS issues to ensure secure user interactions and compliance.
POS Service Grouppos-sg.com
Retail · Germany
53Medium
NIS2 0 · GDPR 18
NIS2 0 · GDPR 18
POS Service Group is a well-established service provider specializing in on-site repair and cleaning of upholstery, furniture, and related household items. With over 35 years of experience, the company holds a strong market position as a European leader in full-service on-site upholstery and furniture care, serving both private and business customers primarily in Germany and neighboring countries. Their key services include repair, cleaning, 3D laser measurement, and burglary protection, supported by a network of service technicians across multiple countries. Technically, the website uses modern front-end technologies and is mobile-optimized, but suffers from a critical lack of valid SSL/TLS certification, which severely impacts security posture. Security headers are present but cannot compensate for the absence of HTTPS. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Business credibility is high, supported by certifications and professional content. Overall, the website is functional and professional but urgently needs to address SSL/TLS issues to improve security and trust.
- DDyson Suomi
dyson.com
Retail · Finland
56Medium
NIS2 5 · GDPR 18
NIS2 5 · GDPR 18
Dyson's Finnish website presents a professional and well-structured digital storefront focused on retailing advanced home and personal care technology products. The site targets Finnish consumers with localized content, multiple product categories, and comprehensive customer support options including phone and chat. Technically, the site leverages Adobe Experience Manager CMS, Akamai CDN, and integrates marketing and analytics tools such as Adobe Launch, Google Analytics, and New Relic. However, a critical security weakness is the absence of a valid SSL certificate and enabled TLS protocols, severely impacting the site's security posture. Privacy and cookie policies are comprehensive and GDPR compliant, reflecting good privacy practices. Business information aligns with Dyson's global brand, reinforcing trust. Overall, the site is functional and user-friendly but requires urgent security improvements to protect user data and maintain trust.
- IING-DiBa AG
ing-diba.de
Finance · Germany
52Medium
NIS2 5 · GDPR 0
NIS2 5 · GDPR 0
ING-DiBa AG operates as a leading digital and universal bank in Germany, serving over 9 million customers with a broad portfolio including checking accounts, loans, mortgages, savings, investments, and insurance products. The website reflects a mature digital presence with modern web technologies such as Lit and web components, supported by a proprietary CMS and hosted on a Microsoft Azure/Akamai infrastructure. The site is well-structured, mobile-optimized, and rich in content, including comprehensive privacy and cookie policies, and clear contact information. However, the security posture is weakened by a critical failure in SSL/TLS configuration, with no valid certificate and no TLS protocols enabled, which poses a significant risk to user trust and data security. Despite strong security headers and privacy compliance, these SSL issues must be urgently addressed. Overall, the site demonstrates high business credibility and professionalism but requires immediate remediation of its SSL/TLS setup to ensure secure user interactions.
- ASSA ABLOY
assaabloyentrance.com
Manufacturing · Finland
60Medium
NIS2 5 · GDPR 15
NIS2 5 · GDPR 15
ASSA ABLOY Entrance Systems is a global enterprise specializing in manufacturing and supplying advanced entrance solutions including automatic, commercial, industrial, and digital doors. The company positions itself as a leader in secure and efficient access solutions, targeting businesses and industries requiring high-quality entrance systems. The website reflects a mature digital presence with a professional design and comprehensive product information, supporting its market leadership claims. Technically, the site uses modern web technologies and a proprietary CMS platform, with good SEO and mobile optimization. However, the lack of a valid SSL certificate and HTTPS support is a critical security weakness, exposing users to potential risks. Security headers are well implemented, but the absence of encryption and privacy policies reduces trust and compliance. Overall, the site demonstrates strong business credibility but requires urgent security improvements to align with best practices and regulatory requirements.
- Avantor, Inc.
vwr.com
Healthcare · United States
57Medium
NIS2 5 · GDPR 18
NIS2 5 · GDPR 18
VWR.com is the online presence of Avantor, Inc., a large enterprise specializing in providing life science products and service solutions. The website targets life science professionals and organizations globally, offering a broad range of scientific supplies and services. The business model is primarily B2B, with a strong market position as an established global supplier in the healthcare sector. The site uses localized subdomains to serve different countries, indicating a mature international presence. Technically, the website employs a variety of modern JavaScript libraries and tracking tools, including Google Analytics, Hotjar, and Cloudflare for CDN and security. However, the site lacks a valid SSL certificate and does not enable modern TLS protocols, which is a significant security concern. The content is professionally presented with good navigation and branding consistency, but mobile optimization and accessibility are basic. From a security perspective, while the site implements a comprehensive Content Security Policy and some security headers, the absence of HTTPS and modern TLS support severely impacts the security posture. No incident response or vulnerability disclosure information is provided, and no explicit contact details are available on the landing page, limiting transparency. Overall, the website is functional and professional but requires urgent improvements in SSL/TLS implementation and privacy compliance mechanisms to enhance trust and security. Strategic recommendations include installing a valid SSL certificate, enabling modern TLS protocols, implementing cookie consent mechanisms, and providing clear contact and security policy information.
Artaneonartaneon.com
Technology · Germany
51Medium
NIS2 5 · GDPR 18
NIS2 5 · GDPR 18
Artaneon is a small German-based company specializing in coaching and consulting services that help businesses integrate artificial intelligence into their marketing strategies. The website is hosted on WordPress.com and uses modern WordPress technologies such as Gutenberg and Jetpack. The content is well-structured and relevant, targeting marketing professionals interested in AI tools and techniques. However, the site lacks critical security configurations such as a valid SSL certificate and HTTPS enforcement, which significantly impacts its security posture. Privacy and cookie policies are absent, indicating compliance gaps with GDPR and related regulations. Social media presence is strong, providing trust signals and engagement channels. Overall, the business demonstrates a good level of digital maturity but requires urgent improvements in security and privacy compliance to enhance trust and protect users.
Other
59Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
The website eci-d.com currently presents only a minimal error page with no accessible content, metadata, or business information. The absence of HTTPS and a valid SSL certificate severely impacts the site's security posture and trustworthiness. The technical infrastructure is basic, running on an Apache server without modern security configurations or performance optimizations. No privacy, cookie, or terms of service policies are present, indicating a lack of compliance with common data protection regulations. Overall, the site appears inactive or misconfigured, offering no meaningful business or security information to visitors.
FH Kärnten gemeinnützige Gesellschaft mbHfh-kaernten.at
Education · Austria
55Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
FH Kärnten is a public higher education institution in Austria offering a wide range of Bachelor, Master, and continuing education programs focused on technology, health, social sciences, and management. The institution emphasizes practical orientation, international cooperation, and sustainable development. The website reflects a mature digital presence with comprehensive content, clear navigation, and consistent branding targeting prospective and current students. Technically, the site is built on TYPO3 CMS and served by Apache, but critically lacks a valid SSL certificate and HTTPS support, which undermines security and user trust. Security headers are partially implemented, but the absence of TLS protocols and HSTS reduces the site's security posture. Privacy compliance is moderate with a clear privacy policy but no cookie consent mechanism despite tracking scripts. Overall, the site is professional and credible but requires urgent security improvements to protect user data and enhance trust.
Other
59Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
The website ledworx.com currently serves minimal content, consisting solely of a client-side redirect to a /lander path. There is no substantive business information, metadata, or user-facing content available. The domain is registered and resolves to two IP addresses hosted on Amazon AWS infrastructure, but lacks a valid SSL certificate and does not support HTTPS, which severely limits trust and security. No contact information, privacy policies, or terms of service are present, indicating a very low level of digital maturity and compliance. From a technical perspective, the site is underdeveloped with no detectable CMS, frameworks, or analytics tools. The absence of security headers, DNSSEC, and a valid SSL certificate exposes the site to potential security risks and undermines user trust. The SPF record is configured strictly but without MX records, which may cause email delivery issues if email services are intended. Security posture is weak due to lack of HTTPS and security best practices. No incident response or vulnerability disclosure mechanisms are found. The domain registration appears consistent but provides no additional trust signals. Overall, the site is not suitable for business operations in its current state and requires significant improvements in security, content, and compliance to be viable. Strategic recommendations include obtaining and configuring a valid SSL certificate, implementing security headers and DNSSEC, developing substantive website content including privacy and cookie policies, and establishing clear contact and business information to improve credibility and compliance.
SLBslb.com
Energy
60Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
SLB is a global energy technology company focused on driving innovation for a balanced planet. Their website showcases a comprehensive portfolio of solutions spanning decarbonization, digital transformation, and traditional oil and gas services. The company targets energy industry professionals, investors, partners, and job seekers, positioning itself as a market leader with extensive service offerings and a strong sustainability commitment. Technically, the website employs modern technologies such as jQuery, Brightcove video, Coveo search, and integrates multiple analytics and marketing tools. The site is well-designed, mobile-optimized, and offers rich content with clear navigation. However, the security posture is weakened by an invalid or missing SSL certificate and lack of HTTPS support, which is a critical issue. Privacy compliance is strong with clear policies and cookie consent mechanisms. Overall, the site reflects a mature enterprise with good business credibility but requires urgent security improvements to protect user data and maintain trust.
Kemira Oyjkemira.com
Energy · Finland
60Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
Kemira Oyj is a global leader specializing in sustainable chemical solutions primarily for water-intensive industries such as pulp & paper, water treatment, and energy sectors. The company offers a comprehensive portfolio including water treatment chemicals, fiber production solutions, industrial chemicals, and digital services aimed at process optimization. Their website reflects a mature digital presence with strong emphasis on sustainability, investor relations, and corporate governance, targeting industry professionals, investors, suppliers, and potential employees. The company is headquartered in Helsinki, Finland, and maintains a large operational scale with over 4,700 employees.
- SSTADA
stada.de
Healthcare · Germany
55Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
STADA is a leading German pharmaceutical company specializing in high-quality medicines, including consumer healthcare products, generics, and specialty pharmaceuticals. The company holds a strong market position as the fourth largest consumer healthcare company in Europe and is recognized as a Top Employer in Germany. Their website reflects a professional and comprehensive digital presence targeting consumers, healthcare professionals, and partners. Technically, the site uses modern JavaScript libraries, consent management tools, and is built on the Umbraco CMS platform. However, the website suffers from a critical security issue: the absence of a valid SSL certificate, resulting in no HTTPS support, which significantly undermines user trust and security. Performance is also suboptimal with slow load times and a large page size. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Business credibility is high with detailed contact information and consistent WHOIS data. Overall, while the business and content quality are excellent, the security posture requires urgent improvement to protect users and maintain trust.
Roomle GmbHroomle.com
Technology · Germany
60Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
Roomle GmbH operates a sophisticated 3D commerce platform named Rubens, specializing in product personalization, room designing, and augmented reality visualization. The company targets furniture manufacturers, retailers, and other industries seeking to enhance their e-commerce offerings with interactive 3D configurators and AR experiences. The platform integrates with e-commerce and ERP/CRM systems, providing a seamless customer experience and boosting sales. Technically, the website leverages modern web technologies including Vue.js, Storyblok CMS, and Google Cloud hosting, with performance and mobile optimization rated good. However, a critical security gap exists due to the absence of a valid SSL certificate and HTTPS support, severely impacting the security posture. Privacy and cookie policies are present and GDPR compliant, but incident response and vulnerability disclosure mechanisms are lacking. Overall, Roomle presents a professional and trustworthy business with strong market positioning but must urgently address its SSL/TLS deficiencies to ensure secure user interactions.
WordPresskapschcarrier.com
Telecommunications
59Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
KapschCarrier.com is a small-scale WordPress-based blog focused on telecommunications policy and 5G network insights. The site provides regularly updated content authored by an identified individual, targeting telecom professionals and enthusiasts. Technically, the site uses WordPress with common libraries like jQuery and Swiper.js, hosted behind Cloudflare. However, the site lacks a valid SSL/TLS certificate and does not serve content over HTTPS, which is a critical security deficiency. No privacy, cookie, or terms of service policies are published, and no contact information is available, limiting trust and compliance. The site has good SEO metadata and structured data but lacks analytics or advertising integrations. Overall, the site is functional but has significant security and compliance gaps that should be addressed to improve trustworthiness and user safety.
- Heidrick & Struggles International, Inc.
heidrick.com
Technology · United States
59Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
Heidrick & Struggles International, Inc. operates a leading global retained executive search and leadership consulting firm. The company specializes in executive search, leadership development, on-demand talent, and organizational culture consulting, serving a broad range of industries with a strong market position. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content targeting corporate clients seeking leadership solutions. Technically, the site uses Sitecore CMS, Microsoft IIS hosting, and integrates Coveo search and OneTrust cookie consent, indicating a modern and scalable infrastructure. However, a critical security gap exists as the site lacks HTTPS/SSL encryption, exposing users to potential risks. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site is professional and credible but urgently requires SSL implementation to meet security best practices.
LearnChamp Consulting GmbH & Co KGlearnchamp.com
Education · Austria
59Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
LearnChamp Consulting GmbH & Co KG is a well-established E-Learning agency founded in 2001, specializing in tailored digital learning solutions and LMS implementation with Totara for corporate clients primarily in the DACH region. The company holds recognized certifications including ISO 27001:2022 and has received industry awards, positioning it as a leading provider in its sector. The website reflects a professional and consistent brand image with comprehensive content and multimedia elements targeting business customers. Technically, the site uses modern marketing and embedding technologies such as HubSpot and Vimeo, hosted via Cloudflare and built on Webflow CMS. However, a critical security gap exists due to the absence of a valid SSL certificate and HTTPS support, which significantly impacts the security posture. Privacy and cookie policies are well implemented with consent mechanisms, supporting GDPR compliance. Contact information is clearly presented, enhancing business credibility.
Austria
59Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 8 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.
Anker Innovationsanker-in.com
Technology
59Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
Anker Innovations is a globally recognized leader in charging technology and consumer electronics, offering products in premium audio, home entertainment, and home security. The company maintains a professional and well-branded online presence with regularly updated content and a focus on sustainability. Technically, the website is built on WordPress with Elementor and integrates modern marketing and analytics tools, although performance is moderate and accessibility is basic. Security posture is weak due to the absence of a valid SSL certificate and lack of HTTPS enforcement, which poses significant risks. Privacy compliance is strong with clear cookie consent mechanisms and GDPR-aligned policies. Overall, the website demonstrates good business credibility but requires urgent security improvements to protect user data and trust.
Evides N.V.evides.nl
Energy · Netherlands
59Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
Evides N.V. is a large, established public utility company providing reliable and sustainable drinking water services to approximately 2.5 million consumers and businesses in the southwest Netherlands. The company operates a comprehensive digital infrastructure including a customer portal (Mijn Evides), extensive self-service options, and detailed information resources. Their market position is strong with a focus on quality, sustainability, and customer engagement. Technically, the website is built on modern frameworks like Nuxt.js and Vue.js, hosted on Microsoft Azure, and integrates analytics and marketing tools such as Google Analytics, Hotjar, and Google Tag Manager. Security measures are in place including a strict Content Security Policy and multiple security headers; however, the SSL certificate is currently invalid and no modern TLS protocols are enabled, representing a critical security risk. Privacy compliance is robust with comprehensive GDPR-aligned policies and cookie consent mechanisms. Overall, the site is professional and trustworthy but requires urgent remediation of SSL issues to ensure secure user interactions.
Other
60Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
The website jci.cc is currently inaccessible due to a Cloudflare security block, which prevents access to any meaningful content or business information. The site presents a Cloudflare challenge page indicating that the visitor has been blocked, likely due to security rules triggered by the request. This results in a lack of visible metadata, contact details, policies, or business descriptions. The technical infrastructure relies on Cloudflare for security and DNS, with Google MX records for email, but the SSL/TLS configuration is invalid or missing, which is a critical security concern. Overall, the security posture is weak due to the absence of a valid certificate and modern TLS protocols, though some security headers are present. Due to the blocking, the website's content quality, privacy compliance, and business credibility cannot be assessed, resulting in a low overall risk score. Strategic recommendations include resolving SSL issues, enabling HSTS, and providing accessible privacy and contact information to improve trust and compliance.
Burton Snowboardsburton.com
Retail · United States
59Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
Burton Snowboards is a well-established leader in the snowboarding retail industry, offering a comprehensive range of products including snowboards, boots, bindings, apparel, and accessories. Founded in 1977, the company has a strong brand presence and a loyal customer base, supported by a professional e-commerce platform that targets snowboarding enthusiasts and outdoor sports consumers. The website demonstrates excellent content quality, clear navigation, and consistent branding, reflecting a mature digital presence. Technically, the site leverages modern e-commerce technologies such as Salesforce Commerce Cloud (Demandware), Cloudflare CDN, and integrates multiple marketing and analytics tools including Google Analytics, OneTrust, and Yotpo. However, the current SSL certificate is invalid or missing, which poses a critical security risk and impacts user trust. Security headers are implemented but HSTS is not fully enabled, indicating room for improvement in HTTPS enforcement. Privacy compliance is strong with clear policies and consent mechanisms in place. Overall, the website is professional and trustworthy but requires urgent attention to SSL configuration to enhance security posture.
Other
60Medium
NIS2 25 · GDPR 40
NIS2 25 · GDPR 40
The website pdcf.org currently serves as a minimal placeholder with no substantive content beyond a client-side redirect to a /lander path. There is no visible business information, contact details, or user engagement features. The domain is registered and active with DNS records pointing to Afternic nameservers, suggesting it may be parked or intended for future sale or development. The SSL certificate is valid but issued to an unrelated domain, indicating a shared or misconfigured certificate. Technically, the site supports modern TLS protocols but lacks security headers, HSTS, and OCSP stapling, which are recommended for improved security. No privacy, cookie, or terms of service policies are present, and no contact or incident response information is available, limiting compliance and trust. Overall, the site’s security posture is basic, and the lack of content and business data results in a low trust and credibility score.
StreamBreak Interactive GmbHstreambreak.tv
Technology · Austria
55Medium
NIS2 25 · GDPR 43
NIS2 25 · GDPR 43
StreamBreak Interactive GmbH operates a niche technology platform focused on enhancing live streaming experiences by providing interactive minigames and ads that engage viewers during breaks. The company targets streamers, eSports organizers, and advertisers, offering a dashboard for analytics and community interaction. Founded in 2017 and based in Austria, StreamBreak has established a consistent brand presence and has been recognized with awards such as the Twitch Extension Winner in 2019. Technically, the website is built using modern web technologies including Bootstrap and JavaScript, hosted on Uberspace with DNS managed by world4you.at. While the site supports modern TLS protocols and has HSTS enabled, performance is suboptimal with a slow page load time. Mobile optimization and SEO are good, but accessibility is basic. No CMS is detected, indicating a custom or static site. From a security perspective, the site employs HTTPS with strong protocols but lacks DNSSEC, CAA records, and domain protection locks, which are recommended to enhance DNS and domain security. OCSP stapling and certificate transparency are also not implemented. Privacy compliance is basic with a cookie banner and privacy policy present, but no terms of service or explicit GDPR compliance statements. Contact information is limited to an email address. Overall, the website is professional and trustworthy with minor security and performance improvements needed. The domain registration data aligns well with the business claims, supporting legitimacy. Strategic recommendations include improving DNS security, enhancing performance, and expanding privacy and security policies to strengthen compliance and user trust.
Other
56Medium
NIS2 25 · GDPR 40
NIS2 25 · GDPR 40
The website hartlteam.com presents minimal content, primarily functioning as a redirect page that uses FingerprintJS for visitor identification. There is no visible business description, contact information, or user engagement features. The SSL certificate is valid and supports modern TLS protocols, but it is a multi-domain certificate shared with many unrelated domains, which may reduce trust. The technical infrastructure is basic, hosted on Apache with DNS managed by Above.com, and no advanced security headers or policies are implemented. The site lacks privacy, cookie, and terms of service policies, indicating poor compliance with data protection regulations. Overall, the security posture is basic with room for significant improvement, and the website's business credibility is low due to the absence of identifiable company information or trust signals.
lbaselbase.software
Transportation · Austria
63Medium
NIS2 25 · GDPR 43
NIS2 25 · GDPR 43
lbase is a specialized business unit of Axians, providing advanced logistics software solutions such as transport management systems (TMS) and warehouse management systems (WMS). Leveraging AI, algorithms, and eco-partnerships, lbase aims to optimize supply chain processes for efficiency and flexibility. The company is well-positioned in the European logistics market with a mature domain and strong parent company backing from VINCI Energies. The website reflects a professional and comprehensive digital presence with clear business information and compliance with GDPR and cookie regulations. Technically, the site uses WordPress with modern plugins and analytics tools, though performance could be improved. Security posture is strong with HTTPS, HSTS, SPF, and DMARC properly configured, but could benefit from enabling DNSSEC and OCSP stapling. Overall, lbase demonstrates a mature, trustworthy, and compliant online presence suitable for its B2B logistics software market.
Regusregus.com
Real Estate · United States
65Medium
NIS2 25 · GDPR 58
NIS2 25 · GDPR 58
Regus is a well-established global provider of flexible workspace solutions, including office space, coworking, virtual offices, and meeting rooms. With a mature domain age of 29 years and a strong market presence as part of the IWG Group, Regus serves a broad audience of businesses seeking flexible and scalable workspace options. The website is professionally designed, leveraging modern technologies such as Next.js and Sitecore CMS, and offers comprehensive content and clear navigation to support user engagement. However, the current lack of a valid SSL certificate and disabled TLS protocols represent significant security vulnerabilities that must be addressed promptly to ensure secure communications and maintain user trust. Privacy and cookie policies are present and indicate good compliance with GDPR requirements. Overall, the site demonstrates a strong business credibility and digital maturity but requires immediate security improvements.
ertex solarertex-solar.at
Energy · Austria
68Medium
NIS2 17 · GDPR 18
NIS2 17 · GDPR 18
Ertex solar is a specialized company focused on building-integrated photovoltaics (BIPV), offering innovative solar energy solutions integrated into architectural elements such as façades, balconies, and roofs. With a strong emphasis on aesthetics and energy transition, the company serves architects, developers, and environmentally conscious clients globally. The website reflects a mature digital presence with professional design, multilingual support, and comprehensive product information. Technically, the site runs on a modern WordPress stack with SEO and performance optimizations, hosted on OVHcloud. Security posture is solid with HTTPS and multiple security headers, though SSL/TLS protocol support requires enhancement. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. Overall, the domain and WHOIS data corroborate the legitimacy and consistency of the business claims.
Corteva Commercialpioneer.com
Manufacturing · United States
54Medium
NIS2 25 · GDPR 40
NIS2 25 · GDPR 40
Pioneer.com represents the global seed brand of Corteva Commercial, a large agricultural manufacturing company. The website provides seed products, agronomic expertise, and local data support aimed at farmers and agricultural professionals worldwide. The site is built on Adobe Experience Manager and uses Adobe's digital marketing and analytics tools, indicating a moderate level of digital maturity. However, the absence of a valid SSL certificate and HTTPS support is a critical security flaw that undermines user trust and data protection. Privacy and terms pages exist but are basic, and no cookie consent mechanism is implemented, which may raise compliance concerns in regulated jurisdictions. Contact information is limited to a contact form without direct emails or phone numbers, reducing accessibility for users seeking support. Overall, the site is professional and content-rich but requires urgent security and privacy improvements.
IC Resourcesic-resources.com
Technology · United Kingdom
54Medium
NIS2 9 · GDPR 43
NIS2 9 · GDPR 43
IC Resources is a well-established technology recruitment agency specializing in deep tech sectors such as software, semiconductor, electronics, and manufacturing. Founded in 1999, it operates globally with offices in the UK, Germany, and the USA. The company connects innovative organizations with highly skilled technology professionals, offering services including job search assistance, CV advice, and talent acquisition for clients. The website reflects a professional and comprehensive digital presence with rich content and client testimonials, positioning IC Resources as a trusted partner in the technology recruitment market. Technically, the website is built on WordPress with modern plugins like Yoast SEO and Contact Form 7, supported by a PHP 8.2 backend and hosted via StackCDN. While the site is mobile-optimized and SEO-friendly, performance metrics are not available, and accessibility is basic. The absence of a valid SSL certificate and HTTPS support is a critical security shortfall, exposing users to potential risks. Security headers are present but insufficient to compensate for the lack of encryption. Privacy compliance is partially met with a privacy policy present, but no cookie consent mechanism is detected. Overall, the security posture is weak due to missing HTTPS and TLS protocols, which should be addressed urgently. The business credibility is strong, supported by consistent WHOIS data and transparent contact information. Strategic recommendations include immediate SSL/TLS implementation, enhanced security headers, and improved privacy and cookie consent mechanisms to align with GDPR requirements and user trust expectations.
TDK Electronics AGepcos.com
Manufacturing · Germany
62Medium
NIS2 25 · GDPR 58
NIS2 25 · GDPR 58
TDK Electronics AG, formerly EPCOS, is a mature and established enterprise specializing in the manufacturing and sales of electronic components, primarily serving industrial, automotive, and energy sectors. The company operates under the TDK Group umbrella, with a strong European presence and a comprehensive product catalog that includes capacitors, sensors, inductors, transformers, and more. Their website reflects a professional and well-structured digital presence, targeting engineers, distributors, and industrial clients with detailed product information and design support resources. Technically, the website employs modern analytics and marketing tools such as Piwik PRO, Google Tag Manager, and OneTrust for cookie consent, indicating a good level of digital maturity. However, the absence of a valid SSL/TLS certificate and HTTPS implementation significantly undermines the security posture, exposing users to potential risks. Despite this, the domain is mature, well-registered, and consistent with the business claims, enhancing overall trustworthiness. Strategic improvements in security infrastructure are recommended to align with industry best practices and regulatory compliance.
Education · Austria
66Medium
NIS2 17 · GDPR 43
NIS2 17 · GDPR 43
The website ebcl-arab.com represents the European Business Competence License (EBC*L) Arab World, an educational organization focused on providing fundamental business management knowledge and certification programs. The company offers various levels of certification (A, B, C), in-house training, and promotes entrepreneurship, targeting students, organizations, and entrepreneurs primarily in Austria and the Arab World. The site is professionally designed using WordPress with the Avada theme and integrates WooCommerce for e-commerce capabilities. It is hosted on Hostinger and employs modern web technologies including jQuery, Revolution Slider, and WP Rocket for performance optimization. From a security perspective, the site uses HTTPS with a valid certificate but lacks modern TLS protocol support and important security headers like HSTS. The absence of a DMARC record indicates potential email security risks. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism detected. The site includes social media integrations and tracking via Google Analytics, indicating moderate user tracking. No critical security issues or WAF blocking were detected, allowing full content access and analysis. Overall, the website demonstrates a good balance of business credibility, technical implementation, and content quality, though improvements in security headers, privacy compliance, and email security are recommended to enhance trust and protection. The domain registration is consistent with the business claims, though some DNS misconfigurations (CAA records) are noted. Strategic recommendations include enabling HSTS, adding DMARC, implementing cookie consent, and updating TLS configurations.
Transportation · Brazil
56Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
The website wilsonsons.com.br is currently inaccessible due to a 403 Forbidden error, indicating restricted access or blocking at the server or security layer. This prevents extraction of any meaningful content, metadata, or business information from the site itself. The domain is registered and uses professional DNS and email infrastructure, including Amazon AWS name servers and Google MX servers, suggesting a legitimate and established business presence in Brazil, likely in the transportation sector. The SSL certificate is valid and supports modern TLS protocols, but lacks advanced security features such as HSTS and OCSP stapling. No privacy, cookie, or terms of service policies are detectable on the root page, and no contact information or social media links are present in the accessible content. Overall, the site’s security posture is basic but could be improved with additional headers and DNS security measures. Due to the blocked content, the overall risk assessment is limited and the AI scoring is low, reflecting the inability to fully evaluate the site’s content and compliance.
Digital Walloniadigitalwallonia.be
Government · Belgium
70Medium
NIS2 25 · GDPR 0
NIS2 25 · GDPR 0
Digital Wallonia is the official digital strategy platform for the Wallonia region in Belgium, managed by the Walloon Government. It serves as a comprehensive resource for digital transformation initiatives, programs, and ecosystem mapping in the region. The platform targets businesses, public authorities, and digital stakeholders, providing detailed publications, event agendas, and strategic information. Technically, the site is built on a modern React Static framework, hosted on Amazon infrastructure, and uses Cloudflare DNS services. Despite a valid SSL certificate and no detected vulnerabilities, the site lacks advanced security headers and HSTS, which are recommended for enhanced security. Performance is notably slow, with a page load time exceeding 26 seconds, indicating room for optimization. Privacy compliance is well addressed with clear privacy and cookie policies, including consent mechanisms. Overall, the site demonstrates high business credibility and trustworthiness as a government entity but could improve technical and security aspects to enhance user experience and protection.
South Africa
59Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 8 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.
Evelyn Partnerstilney.co.uk
Finance · United Kingdom
65Medium
NIS2 25 · GDPR 58
NIS2 25 · GDPR 58
Evelyn Partners is a well-established UK-based wealth management firm offering a comprehensive range of financial planning and investment management services. The company positions itself as a leader in the UK market with significant assets under management and a broad client base including individuals, families, entrepreneurs, and professional partners. Their website reflects a mature, professional business with strong branding, clear service offerings, and multiple client engagement channels including forms and contact options. Technically, the website leverages modern JavaScript frameworks and is hosted on Microsoft Azure, with good SEO and accessibility practices. However, the security posture is weakened by an invalid SSL certificate and lack of modern TLS protocol support, which poses a critical risk to user trust and data security. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site is professional and credible but requires urgent remediation of SSL issues to ensure secure client interactions.
—
59Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 13 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.
Anyline GmbHanyline.io
Technology · Austria
51Medium
NIS2 5 · GDPR 18
NIS2 5 · GDPR 18
Anyline GmbH is a mature technology company specializing in AI-powered mobile data capture and OCR scanning solutions, primarily serving industries such as automotive, retail, logistics, enforcement, and energy. The company offers a broad portfolio of products including tire scanning, vehicle identification, barcode scanning, license plate scanning, meter reading, and ID scanning. Their market position is strong with over 10 years of experience and a global customer base including Fortune 500 companies. Technically, the website is built on WordPress with modern JavaScript libraries and integrates translation and consent management tools. However, the site suffers from a lack of HTTPS due to an invalid SSL certificate, resulting in a basic security posture. Privacy compliance is supported by a cookie consent mechanism and a privacy policy, though terms of service and incident response policies are not evident. Overall, the website is content-rich and professionally designed but requires critical security improvements to protect user data and enhance trust.
WILD GmbHwild.at
Manufacturing · Austria
53Medium
NIS2 25 · GDPR 18
NIS2 25 · GDPR 18
WILD GmbH is a well-established Austrian technology partner specializing in contract development and manufacturing of optomechatronic systems, serving sectors such as medical technology, in-vitro diagnostics, optical metrology, laboratory, laser, and semiconductor technology. The company has a strong market position with decades of experience and multiple subsidiaries, offering comprehensive services including development, production, and supply chain management. Their website reflects a mature digital presence with multilingual support, professional design, and rich content tailored to their target audience of technology and healthcare companies. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and WPBakery Page Builder, hosted on infrastructure associated with a1.net. The site demonstrates good performance, mobile optimization, and accessibility. Security headers and SSL configurations are robust, with HSTS, CSP, and XSS protections in place, although some improvements like enabling HSTS preload and DMARC records are recommended. The security posture is strong with no detected vulnerabilities or exposed sensitive data. Privacy compliance is well managed through Borlabs Cookie consent mechanisms and a comprehensive privacy policy. Contact information is clear and detailed, supporting business credibility. Overall, the website scores highly in content quality, technical implementation, security, privacy compliance, and business credibility, indicating a trustworthy and professional online presence.
United Kingdom
53Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 11 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.
Bosebose.com
Retail · United States
50Medium
NIS2 5 · GDPR 18
NIS2 5 · GDPR 18
Bose.com is the official e-commerce website of Bose Corporation, a leading premium audio equipment brand. The site offers a wide range of products including headphones, earbuds, speakers, soundbars, and home theater systems, targeting consumers seeking high-quality audio solutions. The business model focuses on direct-to-consumer sales supported by comprehensive customer service and product support. The website demonstrates a strong brand presence with consistent messaging and professional design, reflecting Bose's market position as a trusted leader in the audio retail sector. Technically, the website is built on Salesforce Commerce Cloud, hosted on AWS infrastructure, and integrates multiple modern marketing and analytics technologies such as Google Tag Manager, Bazaarvoice, Qualtrics, and Forter. While the site is mobile-optimized and accessible, performance is somewhat slow, and there is room for improvement in technical implementation, particularly in SSL configuration and security headers. From a security perspective, the site currently lacks a valid SSL certificate, which is a critical issue impacting user trust and data protection. No security headers are detected, and advanced security policies or incident response information are not publicly available. Privacy and cookie policies are present and include consent mechanisms, indicating good privacy compliance. WHOIS data confirms the domain's legitimacy and consistency with the brand's identity. Overall, Bose.com is a professionally managed, content-rich e-commerce platform with strong business credibility but requires urgent improvements in SSL and security configurations to enhance its security posture and user trust.
Mi Envío Entidad de Pago, S.L.fonmoney.com
Finance · Spain
51Medium
NIS2 0 · GDPR 33
NIS2 0 · GDPR 33
Fonmoney is an online financial services platform specializing in international money transfers and mobile top-ups. The company operates under Mi Envío Entidad de Pago, S.L., a subsidiary of Transpaygo Limited, and is regulated by the FCA and registered with the Bank of Spain. The platform targets individuals and families seeking fast, easy, and secure ways to send money or mobile credit internationally, with a presence in multiple countries through localized subdomains. Technically, the website uses the nopCommerce platform, integrates common marketing and analytics tools such as Google Analytics and Sendinblue, and is hosted behind Cloudflare. While the site offers good content quality, mobile optimization, and SEO practices, its performance is slow and accessibility features are basic. Critically, the site lacks a valid SSL certificate, resulting in no HTTPS protection, which is a major security concern. From a security perspective, the absence of HTTPS and security headers significantly lowers the security posture. No explicit security or incident response policies are published, and no direct contact emails or phone numbers are provided, limiting transparency. However, the site includes cookie consent with an opt-in mechanism and privacy policies indicating GDPR compliance. Overall, Fonmoney presents a moderately credible and professional financial service with strong regulatory backing but suffers from critical security implementation gaps. Immediate remediation of SSL issues and enhancement of security policies are recommended to improve trust and compliance.