Low-risk security reports
14,261 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,165001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
9,451–9,500 of 14,261
LiveRampfaktor.io
Technology · United States
80Low
NIS2 47 · GDPR 58
NIS2 47 · GDPR 58
LiveRamp is a leading enterprise technology company specializing in data collaboration and identity resolution platforms. Their platform enables marketers and partners to connect people, data, and devices securely across digital and physical environments, facilitating people-based marketing. The company targets enterprise clients across multiple industries and maintains a strong market position with comprehensive product portfolios including Live/Identity, Live/Access, Live/Connectivity, and Live/Insights. The website reflects a mature digital presence with professional design, clear navigation, and extensive content tailored to business users. Technically, the website is built on WordPress with modern performance and SEO optimizations such as WP Rocket and Yoast SEO. The infrastructure leverages Cloudflare for domain registration and AWS for DNS services, indicating a robust hosting environment. The site is mobile-optimized and accessible, with no detected blocking or WAF challenges. Analytics and marketing tools are integrated responsibly with consent mechanisms in place. From a security perspective, the site enforces HTTPS with strong domain registration protections and uses multiple security-related scripts for privacy management. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not publicly evident, representing areas for improvement. No vulnerabilities or exposed sensitive data were detected. Overall, LiveRamp's website demonstrates a high level of professionalism, security, and compliance suitable for an enterprise technology provider. Strategic recommendations include enabling DNSSEC, publishing detailed security policies, and establishing a vulnerability disclosure program to enhance trust and security posture.
Corazon Latinocorazonlatino.com
Retail · United Kingdom
78Low
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
Corazon Latino is a UK-based e-commerce retailer specializing in handmade silver jewellery for women and men. The company emphasizes traditional craftsmanship, unique artisan partnerships, and high-quality sterling silver products hallmarked by the London Assay Office. Their market position is that of a niche artisan jewellery provider with a strong focus on customer service, fast UK delivery, and a money-back guarantee. Technically, the website is built on the Shopify platform using the Impulse theme, integrating modern marketing and analytics tools such as Google Tag Manager, Klaviyo, and Trusted Shops. The site is well-optimized for performance, mobile responsiveness, and SEO. Security posture is strong with HTTPS enforced and standard security headers, though explicit security policies and incident response contacts are not publicly available. The absence of WHOIS data slightly reduces trust but does not outweigh the strong business and technical indicators. Overall, the website presents a professional, trustworthy, and user-friendly e-commerce experience.
Lasten ja nuorten säätiönuori.fi
Non-profit · Finland
78Low
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Lasten ja nuorten säätiö is a Finnish non-profit foundation dedicated to strengthening the future confidence of children and youth across Finland. Established in 2011, the foundation operates nationwide and reaches tens of thousands of young people annually through various support and educational programs. The website reflects a professional and consistent brand image, providing clear information about its mission, donation methods, and multilingual support. Technically, the site is built on WordPress with modern web technologies including jQuery and Google Tag Manager, hosted on infrastructure inferred from its nameservers. Security posture is solid with HTTPS enforced and standard security headers present, though DNSSEC is not implemented and no explicit incident response contacts or vulnerability disclosure policies are published. Privacy compliance is well addressed with comprehensive privacy and cookie policies and GDPR adherence. Overall, the domain registration data aligns well with the organization's identity, enhancing trust and legitimacy.
CONVOTIS GmbHconvotis.ch
Technology · Germany
88Low
NIS2 2 · GDPR 95
NIS2 2 · GDPR 95
CONVOTIS GmbH is a large German IT services company specializing in digital transformation through its three main business areas: Business IT, Platform IT, and Managed IT. The company supports over 1,000 employees across 26 locations in 8 countries, serving more than 2,400 customers globally. Their offerings include business applications such as SAP and HR services, cloud and security solutions, digital workplace management, and advanced platform integration with AI and data analytics. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content tailored to business clients. Technically, the site is built on WordPress with Elementor and integrates modern marketing and analytics tools like HubSpot and Google Tag Manager, ensuring good SEO and user experience. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are not publicly detailed. The absence of WHOIS data for the domain is a notable anomaly that slightly impacts trust but does not detract from the overall professionalism and legitimacy of the business. Strategic recommendations include publishing formal security and incident response policies and enhancing HTTP security headers to further strengthen trust and compliance.
E-commerce · Germany
80Low
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
Bedrop.de is an e-commerce website specializing in natural bee products such as Propolis tinctures, Gelee Royal capsules, pollen, and Manuka honey. The site targets consumers interested in natural health supplements and bee-derived products, positioning itself in a niche market within Germany. The business operates on the Shopify platform, leveraging a modern tech stack including jQuery, Alpine.js, and various marketing and analytics tools like Klaviyo, Yotpo, and Facebook Pixel. The website demonstrates good technical maturity with mobile optimization and SEO best practices. Security posture is solid with HTTPS, Shopify Payments integration supporting 3DS, and a comprehensive cookie consent mechanism, although it lacks published privacy and security policies. Overall, the site is professional and trustworthy but could improve transparency by publishing privacy, terms, and incident response information.
FRED & FELIAfredfelia.com
E-commerce · Germany
78Low
NIS2 2 · GDPR 85
NIS2 2 · GDPR 85
FRED & FELIA operates a premium e-commerce platform specializing in high-quality wet dog and cat food, emphasizing natural ingredients and sustainable packaging. The company targets German-speaking pet owners seeking premium pet nutrition. The website is built on Shopify, leveraging modern e-commerce technologies and integrates multiple marketing and analytics tools with user consent management, reflecting a mature digital infrastructure. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though explicit security policies and incident response contacts are absent. The WHOIS data is missing, which raises some legitimacy concerns, but the professional site design, trust badges, and customer reviews support business credibility. Overall, the site presents a low-risk profile with room for improvement in transparency and security documentation.
LERROSlerros.com
Retail · Germany
81Low
NIS2 2 · GDPR 73
NIS2 2 · GDPR 73
LERROS operates a professional e-commerce platform specializing in men's fashion apparel primarily targeting the German market. The website offers a broad range of products including plus sizes and accessories, supported by fast delivery and easy returns. The company maintains a consistent brand presence with active social media channels and comprehensive privacy and cookie policies, indicating a mature digital presence. Technically, the site is built on Shopify using a modern theme and integrates multiple marketing and analytics tools such as Klaviyo and Facebook Pixel, ensuring robust marketing and customer engagement capabilities. Security posture is strong with HTTPS enforced and multiple security headers present, although explicit security policies and incident response contacts are not publicly disclosed. The absence of WHOIS registrant data introduces some uncertainty regarding domain registration transparency, but the operational website and professional presentation mitigate major concerns. Overall, LERROS presents as a credible mid-sized retail business with a solid technical foundation and good compliance practices.
Retail · Czech Republic
86Low
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
Hanibal.cz is a Czech Republic-based e-commerce retailer specializing in outdoor clothing and equipment for activities such as hiking, climbing, and camping. The website targets a broad audience including men, women, and children interested in outdoor sports and adventures. It offers a comprehensive product catalog with expert advice and multiple physical store locations, positioning itself as a trusted specialist in the outdoor retail market. Technically, the website employs modern JavaScript frameworks, integrates multiple analytics and advertising services, and uses HTTPS with error monitoring via Sentry, indicating a mature digital infrastructure. Security posture is solid with encrypted connections and cookie consent mechanisms, though explicit security headers and detailed privacy policies are missing. The absence of WHOIS data limits domain trust assessment, but the professional presentation and operational contact details support legitimacy. Overall, the site is well-structured, user-friendly, and compliant with basic privacy standards, making it a reliable platform for outdoor gear shopping.
- Referat 72 – Digitalisierungsstrategie
digital-laend.de
Government · Germany
78Low
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
digital.LÄND is the official digitalization strategy platform of the Baden-Württemberg state government, providing comprehensive information and resources related to digital transformation initiatives. The website serves as a central communication hub targeting citizens and businesses within the region, positioning itself as a trusted government source for digital strategy. The platform is supported by modern technical infrastructure including WordPress CMS, enhanced security via Wordfence, and privacy compliance through Real Cookie Banner Pro and Matomo analytics. The site demonstrates a mature digital presence with excellent SEO, accessibility, and mobile optimization. Security posture is strong with HTTPS enforcement, security headers, and active firewall protections. Privacy compliance is robust, featuring detailed cookie consent mechanisms and GDPR-aligned policies. Overall, the website reflects a professional, secure, and trustworthy government digital service.
CONVOTIS GmbHlynet.de
Technology · Germany
88Low
NIS2 2 · GDPR 95
NIS2 2 · GDPR 95
CONVOTIS GmbH is a large, established IT services company based in Germany, specializing in digital transformation through its three core business areas: Business IT, Platform IT, and Managed IT. The company supports clients globally with a workforce of approximately 1,000 employees across 26 locations in 8 countries. Their service portfolio includes business applications such as SAP and HR services, cloud and security solutions, digital workplace management, and advanced platform integration with AI and data analytics. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content tailored to business customers seeking IT modernization and efficiency gains. Technically, the site is built on WordPress with Elementor and integrates marketing and analytics tools like HubSpot and Google Tag Manager, indicating a modern digital infrastructure. Security posture is good with HTTPS and cookie consent mechanisms, though there is room for improvement in security headers and incident response transparency. WHOIS data is unavailable, which slightly impacts trust but is not uncommon for corporate domains. Overall, CONVOTIS presents as a credible and professional IT partner with a strong market position.
MACH AGmach.de
Government · Germany
76Low
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
MACH AG is a specialized software provider focused on digital transformation solutions for public administration and municipalities in Germany. Their offerings include ERP systems, financial management software, online services, and process management platforms tailored to the needs of government entities. The company positions itself as a trusted partner for digitalization in the public sector, serving both larger and smaller institutions. The website is professionally designed, well-structured, and provides comprehensive information about their products, services, and events such as training and webinars. Technically, the site uses modern web technologies including JavaScript, SVG graphics, lazy loading, and integrates Cookiebot for cookie consent and Google Tag Manager for analytics. Security posture is strong with HTTPS enforced and standard security headers present, though explicit security policies and incident response contacts are not published. Privacy compliance is well addressed with clear cookie consent mechanisms and a comprehensive privacy policy. Overall, MACH AG demonstrates a mature digital presence with a high level of professionalism and trustworthiness.
FGS Global Incfgsglobal.com
Other · United States
77Low
NIS2 47 · GDPR 53
NIS2 47 · GDPR 53
FGS Global Inc is a leading global stakeholder strategy firm founded in 2018, specializing in crisis and issues management, government affairs, policy advocacy, strategy and reputation, and transaction and financial communications. The company operates with a strong market position supported by a majority equity stake acquisition by KKR, indicating robust financial backing and growth potential. Their services target organizations and leaders seeking to influence and succeed in high-stakes situations worldwide. The website reflects a professional and consistent brand image with comprehensive content tailored to their audience. Technically, the website is built on modern frameworks including Next.js and React, hosted on Google Cloud infrastructure, and managed via the Storyblok CMS. It demonstrates excellent performance, mobile optimization, and good accessibility features. The presence of Google Tag Manager and a consent management platform indicates a mature approach to analytics and privacy compliance. From a security perspective, the site enforces HTTPS with a strong SSL configuration and uses security best practices such as consent management. However, it lacks explicit security headers and published security policies or incident response contacts, which could be improved. No vulnerabilities or exposed sensitive data were detected. The domain registration details are consistent and legitimate, supporting the trustworthiness of the business. Overall, FGS Global's digital presence is professional, secure, and compliant with privacy regulations, positioning it well for continued growth and client trust. Strategic improvements in security policy transparency and DNS security could further enhance their security posture.
Nationalpark Schwarzwaldnationalpark-schwarzwald.de
Government · Germany
76Low
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
The Nationalpark Schwarzwald website represents a well-established governmental entity focused on nature conservation, education, and public engagement in the Black Forest region of Germany. The site offers comprehensive information about the park, including visitor centers, events, educational programs, and research initiatives. It is supported by the Ministry for Environment, Climate and Energy of Baden-Württemberg, indicating strong institutional backing and legitimacy. Technically, the website is built on TYPO3 CMS with modern web technologies such as jQuery, Bootstrap, and Leaflet for maps. It incorporates accessibility features, responsive design, and SEO best practices, providing a good user experience across devices. The site uses Matomo for analytics and implements a cookie consent mechanism compliant with GDPR requirements. From a security perspective, the site enforces HTTPS, uses Google reCAPTCHA for form protection, and has a cookie consent banner. While explicit security headers are not clearly visible in the HTML, the overall posture is solid with no exposed sensitive data or vulnerabilities detected. The WHOIS data aligns with the site's public sector nature, showing no suspicious patterns. Overall, the website is professional, trustworthy, and compliant with privacy regulations, serving its audience effectively. Minor improvements in security headers and publishing a security policy could enhance its security maturity further.
Kreissparkasse Böblingenkskbb.de
Finance · Germany
79Low
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Kreissparkasse Böblingen is a regional German savings bank offering a broad range of financial services including online banking, loans, insurance, investments, and real estate services targeting both private and business customers. The website reflects a professional and consistent brand presence aligned with the Sparkasse group, providing clear navigation and comprehensive service information. Technically, the site uses modern web technologies including React components and is built on Adobe Experience Manager CMS, delivering a mobile-optimized and accessible user experience. Security posture is strong with HTTPS enforcement, session management, and cookie consent mechanisms, though explicit security policies and vulnerability disclosure information are not publicly available. Overall, the site is trustworthy, compliant with GDPR, and well-positioned in its market segment.
- Esri Deutschland GmbH
esri.de
Technology · Germany
81Low
NIS2 2 · GDPR 80
NIS2 2 · GDPR 80
Esri Deutschland GmbH is a leading provider of geographic information system (GIS) solutions based on the ArcGIS platform, serving a broad audience including private enterprises, government agencies, and academic institutions. The company offers a comprehensive suite of GIS software products, consulting, training, and support services, positioning itself as a key player in the spatial data and location intelligence market in Germany and Europe. The website reflects a mature digital presence with professional design, clear navigation, and rich content that highlights their product offerings, industry applications, and customer success stories. Technically, the website is built on Adobe Experience Manager, leveraging modern web technologies such as the ArcGIS JavaScript API, Calcite design components, and integrates advanced analytics and marketing tools including Matomo, Adobe Analytics, and Google Tag Manager. The site is optimized for performance, mobile responsiveness, and accessibility, demonstrating a high level of digital maturity. From a security perspective, the site enforces HTTPS with strong SSL configuration and implements key security headers. Consent management for cookies is in place, aligning with GDPR requirements. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not prominently available, representing areas for improvement. Overall, the website presents a low-risk profile with strong business credibility and technical robustness. Strategic recommendations include enhancing transparency around security policies and incident response, publishing vulnerability disclosure information, and providing clear data protection officer contacts to further strengthen trust and compliance.
Livescore Limitedlivescore.com
Media · United Kingdom
78Low
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Livescore Limited operates the website livescore.com, a leading global platform providing real-time sports scores, fixtures, results, and news primarily focused on football but also covering cricket, tennis, basketball, and hockey. Established in 1998, the company has positioned itself as a trusted source for live sports data and integrates betting affiliate services to monetize its large user base. The website is professionally designed, mobile-optimized, and supported by modern web technologies including React and Next.js frameworks. It employs comprehensive privacy and cookie policies with consent management, reflecting good compliance with GDPR and related regulations. Security posture is strong with HTTPS enforcement and standard security headers, although explicit security policies and incident response contacts are not publicly disclosed. WHOIS data for the domain is unavailable, which is unusual but does not detract significantly from the site's legitimacy given its branding and market presence. Overall, Livescore.com demonstrates a mature digital infrastructure and a high level of professionalism suitable for its large, general audience.
NationalWorldnationalworld.com
Media · United Kingdom
78Low
NIS2 17 · GDPR 85
NIS2 17 · GDPR 85
NationalWorld is a UK-based online news media publisher offering a broad range of news, lifestyle, sports, and cultural content. The website features multiple sections and newsletters targeting a general audience interested in current affairs and entertainment. The business model centers on digital advertising, subscriptions, and user engagement through newsletters and social media. The site demonstrates a consistent brand presence and professional content quality, positioning itself as a reputable news source in the UK market. Technically, NationalWorld employs a modern web technology stack including React-based components, Google Analytics, Google Tag Manager, and a consent management platform to ensure GDPR compliance. The site is hosted on a CMS platform (Brightsites) and integrates various advertising and tracking services, balancing monetization with user privacy controls. Performance and mobile optimization are good, though accessibility features could be improved. From a security perspective, the site enforces HTTPS with strong SSL configuration and includes security headers such as Content Security Policy and X-Frame-Options. It uses reCAPTCHA and a privacy management SDK to protect user data and comply with privacy regulations. However, the absence of explicit security policies, incident response information, and vulnerability disclosure mechanisms indicates room for improvement in transparency and readiness. Overall, the website is professionally designed and secure, with good privacy compliance and business credibility. The main risk lies in the lack of WHOIS transparency and missing direct contact information, which slightly reduces trustworthiness. Strategic recommendations include publishing detailed security and incident response policies, adding vulnerability disclosure channels, and enhancing accessibility and contact transparency to further strengthen user trust and compliance.
Finance · United States
79Low
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
University of Kentucky Federal Credit Union is a well-established financial cooperative serving the University of Kentucky community and surrounding areas. The credit union offers a broad range of financial products including checking and savings accounts, loans, credit cards, and investment services. It holds a strong market position supported by multiple awards and certifications, emphasizing community involvement and member-focused banking. The website reflects a professional and trustworthy brand with consistent messaging and clear navigation. Technically, the site uses modern web technologies, including Kentico CMS and various analytics and marketing tools, and is hosted with Cloudflare DNS services. Security posture is strong with HTTPS enforced and secure login forms, though DNSSEC is not enabled and some security headers could be improved. Privacy compliance is basic with a cookie consent mechanism and a comprehensive privacy policy, but no explicit GDPR compliance statements or data protection officer information were found. Overall, the site is safe, well-maintained, and credible, with extensive tracking and marketing integrations. Recommendations include enhancing DNS security, publishing a vulnerability disclosure policy, and improving security header coverage.
Two Peas and Their Podtwopeasandtheirpod.com
Media · United States
78Low
NIS2 17 · GDPR 85
NIS2 17 · GDPR 85
Two Peas and Their Pod is a well-established food and lifestyle blog focused on delivering high-quality recipes and lifestyle content to home cooks and food enthusiasts. The website leverages a mature digital infrastructure built on WordPress, enhanced with SEO and performance optimizations, and monetized primarily through premium advertising networks such as AdThrive and affiliate marketing programs like Amazon Associates. The site demonstrates a strong market position within the food blogging niche, supported by consistent branding and professional content presentation. Technically, the site employs modern web technologies including lazy loading, advanced ad management, and comprehensive SEO practices, ensuring fast performance and excellent mobile optimization. Security posture is solid with HTTPS enforcement and security headers, though the absence of a public security policy or incident response information suggests room for improvement in transparency and preparedness. Privacy compliance is addressed with a comprehensive privacy and cookie policy, including consent mechanisms, aligning with GDPR requirements. Overall, the website is trustworthy and professional, with no indications of malicious activity or content safety concerns. Strategic recommendations include publishing explicit security and incident response policies and enhancing transparency around vulnerability disclosures to further strengthen trust and compliance.
- Fevo Inc.
fevogm.com
Technology
79Low
NIS2 2 · GDPR 58
NIS2 2 · GDPR 58
FEVO Enterprise operates as an online group ticket sales platform designed to facilitate organizations in managing group clients and increasing revenue opportunities. The platform targets organizations that require efficient group ticket sales and marketing tools. The website content and metadata indicate a professional and focused business model with a niche market position in ticket sales technology. The parent company appears to be Fevo Inc., as indicated by privacy and terms of service links. Technically, the website employs a modern React-based stack with integrations for multiple payment gateways including Braintree, Shift4, and Zip.co, alongside analytics and consent management tools. Accessibility is addressed through EqualWeb, and security is enhanced with HTTPS, reCAPTCHA Enterprise, and consent frameworks. However, the absence of WHOIS data for the domain www.gofevo.com raises concerns about domain registration legitimacy, although the website content and external references suggest a legitimate business presence. Security posture is strong but could be improved by adding explicit security headers and incident response information. Overall, the website is professional, secure, and compliant with privacy standards, but lacks direct contact information and cookie consent visibility.
Schönbuch-Heckengäu Tourismus e.V.schoenbuch-heckengaeu.de
Hospitality · Germany
79Low
NIS2 17 · GDPR 95
NIS2 17 · GDPR 95
Schönbuch-Heckengäu Tourismus e.V. operates a regional tourism website focused on promoting the Schönbuch and Heckengäu areas in Germany. The site provides comprehensive information on nature activities such as hiking and cycling, local events, and accommodation options, targeting tourists and local visitors. The business model is non-profit and community-oriented, emphasizing regional promotion and visitor engagement. Technically, the website is built on WordPress with a modern tech stack including jQuery, Flatpickr, and FontAwesome, hosted likely via GoDaddy. The site demonstrates good digital maturity with mobile optimization and SEO best practices. Security posture is solid with HTTPS, security headers, and bot protection via Google reCAPTCHA v3, though it lacks a dedicated security policy or vulnerability disclosure page. Privacy compliance is strong, featuring GDPR-aligned privacy and cookie policies with consent mechanisms. Overall, the website is professional, trustworthy, and safe for general audiences.
Simply Voting Inc.simplevote.ca
Technology · Canada
76Low
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Simply Voting Inc. operates the website simplevote.ca, providing a comprehensive online voting system designed to facilitate transparent and secure electoral processes. The company targets a diverse clientele including associations, educational institutions, unions, local governments, political parties, cooperatives, and other organizations primarily in Canada. Their business model includes both self-managed and fully managed election solutions, covering internet, telephone, and paper ballot voting methods. The website is professionally designed, bilingual (French primary), and features extensive customer testimonials and sector-specific solutions, positioning the company as a trusted provider in the online voting market. Technically, the website is built on WordPress 6.8.2 with modern front-end technologies such as jQuery, Font Awesome, and Slick Carousel. It employs performance optimizations including WP Rocket caching and lazy loading. Google Tag Manager and Google Analytics are used for analytics and marketing, with Google Ads integrated for advertising. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS with a strong SSL configuration and implements several security best practices such as deferred script loading and no exposed sensitive data. However, explicit security headers like Content-Security-Policy could be enhanced, and no public incident response or vulnerability disclosure information is found. The absence of WHOIS data for the domain is a concern, potentially indicating recent registration or privacy protection, which slightly lowers trust but is mitigated by the professional web presence. Overall, the risk profile is moderate with strong business credibility and technical maturity. Strategic recommendations include improving security header policies, publishing vulnerability disclosure and incident response contacts, and monitoring domain registration status to ensure ongoing legitimacy.
TIMIFYtimify.com
Technology
77Low
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
TIMIFY is a well-established SaaS provider specializing in online appointment scheduling and resource management software tailored for small to large businesses across multiple industries including retail, finance, healthcare, and government sectors. The platform offers a comprehensive suite of features such as online calendars, booking management, resource and service management, and a marketplace with integrations to popular services like Google and Facebook. The company supports over 45,000 businesses worldwide, demonstrating a strong market presence and customer trust. Technically, the website employs modern JavaScript frameworks and integrates multiple analytics and marketing tools such as HubSpot, Google Tag Manager, Microsoft Clarity, and Facebook Pixel. The site is mobile-optimized, fast-loading, and well-structured with good SEO and accessibility practices. Security measures include HTTPS enforcement, reCAPTCHA, and ISO 27001:2022 certification, reflecting a mature security posture. While WHOIS data is unavailable, which is unusual, the website's professional presentation, certifications, and compliance with GDPR provide strong trust signals. No critical vulnerabilities or security issues were detected in the content or scripts. Privacy and cookie policies are comprehensive and include consent mechanisms. Overall, TIMIFY presents a secure, professional, and trustworthy online presence suitable for its business model. Strategic recommendations include publishing explicit security headers, incident response contacts, and vulnerability disclosure policies to further enhance trust and security transparency.
- PPixabay
pixabay.de
Media
79Low
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
Pixabay is a well-established online platform founded in 2010 that offers over one million free, high-quality images for download, catering to a broad audience including creatives and businesses seeking royalty-free media. The platform operates a freemium business model, providing free content with optional premium services, positioning itself as a leading resource in the free stock image market. The website is professionally designed with excellent content relevance and user experience, optimized for mobile devices and SEO. Technically, Pixabay employs modern web technologies including React, Cloudflare CDN, Google reCAPTCHA, and Snowplow Analytics, ensuring fast performance and robust infrastructure. Security measures include HTTPS enforcement, multiple security headers, and GDPR-compliant consent management, although DNSSEC is not enabled, representing a minor security enhancement opportunity. No critical vulnerabilities or exposed sensitive data were detected. The site lacks explicit public security policies or incident response contacts, and no vulnerability disclosure mechanism is present. Overall, Pixabay demonstrates a mature digital presence with strong privacy compliance and a trustworthy reputation in the media industry.
Landkreis Schwäbisch Halllrasha.de
Government · Germany
77Low
NIS2 2 · GDPR 100
NIS2 2 · GDPR 100
Landkreis Schwäbisch Hall operates as a local government authority in Germany, providing a wide range of public services including administration, waste management, health, and economic development. The website serves residents, businesses, and visitors with comprehensive information and digital services. It is well-positioned as a trusted government entity with a clear focus on accessibility and user engagement. The technical infrastructure is based on TYPO3 CMS, hosted on German telecom servers, and integrates modern web technologies and accessibility features. Security posture is strong with HTTPS enforcement and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is robust, with detailed cookie and privacy policies and a named data protection officer. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with relevant regulations.
Landkreis Karlsruhelandkreis-karlsruhe.de
Government · Germany
76Low
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Landkreis Karlsruhe operates as the official government district authority for the Karlsruhe region in Germany, providing a wide range of public services including administration, social welfare, environmental management, and community engagement. The website serves as a comprehensive portal for residents and stakeholders, offering access to online services, news updates, and detailed information about district governance and programs. The organization maintains a strong market position as a regional government entity with a focus on transparency and citizen support. Technically, the website employs a modern technology stack including jQuery, Leaflet for mapping, Mustache.js for templating, and a custom or ikiss-based CMS framework. The site demonstrates good mobile optimization, accessibility features, and SEO practices, although some security headers could be enhanced. Performance is moderate, with a professional design and clear navigation structure supporting a positive user experience. From a security perspective, the site enforces HTTPS and holds ISO 27001 certification, indicating a mature information security management system. Cookie consent mechanisms and privacy policies align with GDPR requirements. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not clearly declared, and no public incident response or vulnerability disclosure policies are found. No vulnerabilities or exposed sensitive data were detected in the analysis. Overall, the website is trustworthy, professionally maintained, and compliant with relevant privacy and security standards. It effectively supports the district's mission to provide transparent and accessible public services. Strategic recommendations include enhancing security headers, publishing incident response contacts, and maintaining up-to-date third-party libraries to further strengthen security posture.
- Domains By Proxy, LLC
productive.io
Technology · United States
79Low
NIS2 17 · GDPR 85
NIS2 17 · GDPR 85
Productive.io is a mature SaaS platform founded in 2013, specializing in professional services automation tailored for agencies, consultancies, and similar businesses. The platform integrates resource management, project management, and financial operations into a single solution, serving over 1,500 companies globally. The website presents a professional and comprehensive digital presence with excellent content quality and user experience, targeting professional service organizations seeking operational efficiency and profitability improvements. Technically, the site is built on WordPress with a modern tech stack including multiple analytics and marketing tools, hosted likely on AWS infrastructure. Security posture is solid with HTTPS and domain registration protections, though some improvements in security headers and public security policies could enhance trust. Privacy compliance is basic, lacking explicit privacy and cookie policies in the visible content. Overall, Productive.io demonstrates strong business credibility and technical maturity, with room for enhanced transparency in privacy and security governance.
Simply Voting Inc.simplyvoting.com
Technology · Canada
79Low
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Simply Voting Inc. operates a professional online voting platform offering a range of election solutions including managed elections, internet voting, telephone voting, and paper ballots. The company targets a diverse set of organizations such as professional associations, educational institutions, unions, governments, political parties, and cooperatives. Their market position is supported by strong customer testimonials and presence on multiple review platforms, indicating a trusted and established service provider. Technically, the website is built on WordPress with modern technologies like jQuery, Google Tag Manager, and WP Rocket for performance optimization. The site is well-optimized for SEO, mobile responsiveness, and accessibility, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforced, security headers present, and no obvious vulnerabilities detected in the content. Privacy and cookie policies are comprehensive and GDPR compliant, though explicit incident response and vulnerability disclosure information are lacking. The absence of WHOIS data is a notable gap, suggesting the domain registration status should be verified to confirm legitimacy. Overall, the website presents a professional, trustworthy, and secure online presence suitable for its business domain.
Cognito.cz, s.r.o.expresscash.cz
Finance · Czech Republic
80Low
NIS2 2 · GDPR 85
NIS2 2 · GDPR 85
Expresscash.cz is an online financial service platform operated by Cognito.cz, s.r.o., offering fast cash loans up to 70,000 CZK targeted primarily at Czech Republic residents. The website positions itself as the fastest cash loan provider in the local market, emphasizing quick and secure loan disbursement without collateral or guarantors. The business model focuses on consumer lending with an online application process, catering to individuals seeking immediate financial assistance. The company appears to be a small-sized entity with a focused market niche in finance.
- Raiffeisenbank a.s.
fwr.cz
Finance · Czech Republic
83Low
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
Raiffeisenbank a.s. operates a dedicated Private Banking website offering exclusive banking and wealth management services tailored for high net worth individuals in the Czech Republic. The site presents a professional and comprehensive portfolio of investment products, account services, and asset management solutions, positioning itself as a premium financial service provider. Technically, the website is built on a modern Angular framework with integrations for analytics and cookie consent management, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforcement and secure login mechanisms, though some security headers could be improved. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site demonstrates high professionalism and trustworthiness, though the absence of WHOIS data slightly impacts domain trust assessment.
University of Missourimutigers.com
Education · United States
80Low
NIS2 25 · GDPR 70
NIS2 25 · GDPR 70
The University of Missouri Athletics website serves as the official digital platform for the Missouri Tigers, providing comprehensive sports-related content including schedules, rosters, news, and ticketing services. It targets university students, alumni, and sports enthusiasts, particularly those following Southeastern Conference athletics. The site is well-established with a domain age dating back to 1997, reflecting a mature online presence aligned with the university's athletics department. Technically, the website leverages modern JavaScript frameworks, content delivery networks, and integrates multiple analytics and marketing tools, indicating a moderate to advanced digital maturity. Security-wise, the site employs HTTPS with domain locking and uses reputable third-party services for chat and analytics, though it lacks DNSSEC and explicit security policies or vulnerability disclosures. Overall, the site is professional, trustworthy, and compliant with privacy regulations, but could improve in security transparency and DNS security.
Inizioinizio.com
Healthcare · United Kingdom
76Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Inizio is a well-established healthcare and life science consulting firm founded in 2000, providing comprehensive commercialization and clinical development services globally. The company positions itself as a market-leading partner with a broad suite of capabilities including advisory, medical communications, marketing, and biotech solutions. Their client base includes 100% of the top 20 pharma companies, indicating strong market presence and trust. The website reflects a mature digital infrastructure built on WordPress, enhanced with modern JavaScript libraries and analytics tools such as HubSpot, Google Tag Manager, and Hotjar. Security posture is robust with HTTPS enforced, reCAPTCHA protection on forms, and cookie consent mechanisms in place, although some security headers could be improved. Privacy compliance is well addressed with clear policies and GDPR adherence. Overall, the website demonstrates high professionalism, excellent content quality, and strong business credibility.
- Raiffeisenbank a.s.
raiffeisenbank.cz
Finance · Czech Republic
83Low
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
Raiffeisenbank a.s. is a well-established financial institution in the Czech Republic, offering a comprehensive range of banking services including personal accounts, loans, mortgages, and investment products. The website reflects a mature digital presence with modern technologies such as Angular, integrated analytics, and user-friendly mobile optimization. Security posture is strong with HTTPS enforcement, secure login mechanisms, and privacy compliance including GDPR-aligned policies. However, the absence of WHOIS data limits full trust verification, though the professional presentation and external partnerships support legitimacy. Overall, the site is reliable and secure for its users.
Pond5pond5.com
Media · United States
79Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Pond5 is a well-established online marketplace specializing in royalty-free stock media including 4K and HD videos, music tracks, sound effects, motion graphics, and images. Founded in 2006 and headquartered in New York, USA, it serves media professionals and content creators globally. The website demonstrates a strong market position with a comprehensive library and professional quality offerings at affordable prices. Technically, the site employs modern JavaScript technologies, integrates monitoring and analytics tools such as New Relic and Google Tag Manager, and implements robust privacy and cookie consent mechanisms. Security posture is strong with HTTPS enforced and multiple security headers present, though explicit security policies and incident response contacts are not publicly disclosed. The WHOIS data is unavailable, likely due to privacy protection, which is common for commercial entities but slightly reduces transparency. Overall, Pond5 presents a trustworthy and professional digital presence with excellent content quality and user experience.
Rachuneo Sp. z o.o.blue.pl
Energy · Poland
82Low
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Rachuneo Sp. z o.o. operates an online comparison platform focused on helping Polish residential customers reduce their energy and home media bills by selecting optimal offers. The company positions itself as a niche player in the Polish energy sector, offering a user-friendly service to compare and lower household expenses. The website is professionally designed using Webflow CMS and integrates modern marketing and analytics tools such as Google Analytics, Hotjar, Facebook Pixel, and SalesManago, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced, cookie consent mechanisms in place, and no visible vulnerabilities or exposed sensitive data. However, the absence of public WHOIS data due to privacy protection limits domain registration transparency. Overall, the site is trustworthy, compliant with GDPR, and provides clear business and contact information, supporting its legitimacy and professional standing.
xoxoBellaxoxobella.com
Media · Canada
76Low
NIS2 17 · GDPR 85
NIS2 17 · GDPR 85
xoxoBella is a well-established Canadian lifestyle and food blog founded in 2015, offering high-quality content focused on recipes, travel, and everyday inspiration. The website leverages a modern WordPress infrastructure with integrations for advertising, analytics, and marketing tools, supporting a content monetization business model primarily through advertising and affiliate marketing. The site demonstrates strong digital maturity with excellent design, mobile optimization, and SEO practices. Security posture is solid with HTTPS enforced and use of Cloudflare DNS, though some security headers could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website presents a trustworthy and professional online presence with consistent branding and legitimate domain registration.
Home - Ruthybelle Recipesruthybellerecipes.com
—
76Low
NIS2 17 · GDPR 70
NIS2 17 · GDPR 70
Gamintraveler | Ruben Arribasgamintraveler.com
Media
76Low
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Gamintraveler is a niche travel blog established in 2014, focusing on travel tips, digital nomad advice, itineraries, and travel connectivity reviews. The site targets travelers and digital nomads seeking practical information and destination guides. The business model appears to be content publishing supported by advertising and affiliate marketing partnerships. Technically, the website is built on WordPress with a modern tech stack including jQuery, Google Tag Manager, and Mediavine ads, optimized for performance and mobile responsiveness. Security posture is solid with HTTPS enforced and anti-spam measures in place, though explicit security headers and privacy policies are missing. The absence of WHOIS data is a concern but the website content and technical setup indicate a legitimate and professional operation. Overall, the site is trustworthy and well-positioned in its niche but could improve privacy compliance and security transparency.
World Wild Schoolingworldwildschooling.com
Other
82Low
NIS2 17 · GDPR 70
NIS2 17 · GDPR 70
World Wild Schooling is a niche travel blog founded in 2020 that provides travel destination guides, tips, and news for global travelers. The website targets travel enthusiasts and general audiences interested in adventure and exploration. It maintains a consistent brand presence with active social media channels and regularly updated content. Technically, the site is built on WordPress and integrates multiple advertising and tracking technologies including Google DoubleClick, Amazon APS, and AdThrive. The site is hosted with Cloudflare DNS but does not enable DNSSEC. Security posture is moderate with HTTPS enabled and domain registration protections in place, but lacks security headers and explicit security policies on the site. Privacy compliance is weak due to missing privacy and cookie policies and no consent mechanisms. Business credibility is supported by consistent branding and social media presence but lacks direct contact information on the site. Overall, the website is functional, safe, and professionally presented but would benefit from enhanced privacy and security practices.
Home - The Honour Systemthehonoursystem.com
—
80Low
NIS2 17 · GDPR 85
NIS2 17 · GDPR 85
Small Batch Cooking For One or Two | Little Bit Recipeslittlebitrecipes.com
—
80Low
NIS2 17 · GDPR 85
NIS2 17 · GDPR 85
Movies Anywheremoviesanywhere.com
Media
78Low
NIS2 22 · GDPR 88
NIS2 22 · GDPR 88
Movies Anywhere is a well-established digital media platform that aggregates and streams movies from major studios including Disney, Fox, Sony, Universal, and Warner Bros. The platform enables users to connect multiple digital retailer accounts and consolidate their movie libraries for seamless streaming and offline viewing. The website demonstrates a high level of professionalism with excellent design, clear navigation, and mobile optimization, targeting a general audience interested in digital movie consumption. Technically, the site leverages modern technologies such as React, AWS hosting, and integrates performance monitoring via New Relic, alongside privacy compliance tools like OneTrust for cookie consent. Security posture is strong with HTTPS enforced and domain management best practices observed, although some security headers and explicit policies could be improved. Overall, the site is trustworthy, safe, and aligns well with its business objectives.
Autopay RS sp. z o.o.autopayglobal.com
Finance · Poland
80Low
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
Autopay RS sp. z o.o. operates the Autopay Global platform, providing a unified payment solution that simplifies global payment processing through a single API integration. The company targets businesses seeking to optimize payment acceptance, reduce costs, and ensure compliance across multiple markets. The website demonstrates a strong market position with endorsements from major financial institutions and highlights key services such as smart routing, multi-currency support, and fraud detection. Technically, the site employs modern frameworks like Bootstrap 5, uses Amazon AWS for hosting, and integrates privacy and analytics tools such as Consentmanager.net and Plausible Analytics. Security posture is robust with PCI DSS compliance, tokenization, and 3D Secure authentication, though there is room for improvement in security headers and incident response transparency. Overall, the website is professional, well-structured, and compliant with GDPR, reflecting a credible and trustworthy business presence.
Autopay S.A.autopay.ro
Finance · Romania
77Low
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
Autopay S.A. is a well-established payment processing and fintech solutions provider operating primarily in Romania and Europe. The company offers a broad range of services including card processing, 3DS authentication, API support, and data-driven payment products. It holds important certifications such as PCI DSS and PCI 3DS and is supervised by the Polish Financial Supervision Authority, indicating a strong regulatory compliance posture. The website is professionally designed, mobile-optimized, and provides comprehensive cookie consent mechanisms aligned with GDPR requirements. Technical infrastructure leverages modern frontend frameworks like Vue.js and Bootstrap, with analytics implemented via Matomo and Google Tag Manager. Security practices include HTTPS enforcement and certified payment processing standards, though HTTP security headers could be improved. Overall, the domain registration and WHOIS data are consistent with the business claims, supporting legitimacy and trustworthiness.
Autopay S.A.autopay.eu
Finance · Poland
82Low
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
Autopay S.A. is a well-established payment processing company founded in 1999, offering a broad range of payment solutions including card processing, 3DS authentication, and data-driven insights. The company targets businesses such as e-commerce platforms, fintechs, and payment service providers, positioning itself as a trusted partner with regulatory supervision and certifications like PCI DSS. The website reflects a mature digital presence with modern technologies like Vue.js and Bootstrap, integrated analytics, and a strong cookie consent mechanism. Security posture is robust with HTTPS, security headers, and no visible vulnerabilities. However, explicit security policies and incident response contacts are not published, representing an area for improvement. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.
- Open Factor s.r.o.
openfactor.cz
Finance · Czech Republic
76Low
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
Open Factor s.r.o. operates an online platform providing business loans and invoice factoring services primarily targeting small and medium-sized enterprises in the Czech Republic. Their services emphasize quick online processing, transparent fees, and ease of access, positioning them as a niche financial services provider in the local market. The website is professionally designed with clear navigation and relevant content tailored to their target audience. Technically, the website employs modern JavaScript libraries such as jQuery, noUiSlider, and SimpleBar, alongside Google Tag Manager and Cookiebot for analytics and cookie consent management. The site is mobile-optimized and uses HTTPS, ensuring secure data transmission. However, some security best practices like implementing security headers could be improved. From a security perspective, the site demonstrates good privacy compliance with a comprehensive privacy policy and cookie consent mechanism. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data for the domain is a notable concern, impacting trust and legitimacy assessments. Overall, the website presents a trustworthy and professional front for its financial services, but domain registration transparency and enhanced security headers would strengthen its security posture and credibility.
U.S. General Services Administrationbenefits.gov
Government · United States
76Low
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
USA.gov is the official U.S. government website providing a comprehensive benefit finder tool and categorized information to help citizens discover government benefits and financial assistance. The site is managed by the U.S. General Services Administration and serves as a trusted portal for government services. The website is well-branded, professionally designed, and optimized for accessibility and mobile use. It supports English and Spanish languages and integrates modern analytics and tracking technologies to monitor usage and improve user experience. Technically, the site uses Drupal CMS and the U.S. Web Design System (USWDS), ensuring compliance with government standards for accessibility and usability. The site loads quickly and is optimized for SEO with proper meta tags and structured data. Security posture is strong with HTTPS enforced and no visible vulnerabilities, although explicit security headers could be improved. Privacy compliance is good with a comprehensive privacy policy, but lacks a visible cookie consent mechanism. Overall, the security posture is robust for a government site, with no detected malware or phishing indicators. The domain is a .gov domain, tightly controlled and verified by the government, enhancing trust. However, WHOIS data is privacy protected or unavailable, which is typical for government domains. The site lacks explicit incident response contacts and vulnerability disclosure information, which could be enhanced for transparency. The site is safe for general audiences, contains no adult or questionable content, and provides valuable public service information. Strategic recommendations include adding security headers, implementing cookie consent, publishing vulnerability disclosure, and enhancing contact information for incident response.
Wecoline voor een schone wereldwecoline.com
—
80Low
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Dianomidianomi.com
Finance · United Kingdom
79Low
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
Dianomi operates a premium digital advertising platform specializing in contextual and native advertising targeted at affluent audiences interested in finance, business, and lifestyle sectors. The company partners with over 320 premium publishers globally and reaches over 510 million devices, positioning itself as a trusted marketplace for advertisers and publishers alike. The website reflects a mature digital presence with modern technologies, strong SEO, and comprehensive privacy compliance. Security posture is robust with HTTPS, security headers, and CAPTCHA protections, though explicit security policies and incident response contacts are not published. Overall, Dianomi presents as a credible and professional business with a strong market position in financial digital advertising.
Stape, Inc.stape.de
Technology · United States
84Low
NIS2 47 · GDPR 95
NIS2 47 · GDPR 95
Stape, Inc. is a US-based technology company specializing in server-side tracking solutions primarily for marketing and analytics professionals. Their platform offers a comprehensive suite of services including Google Tag Manager hosting, Meta Conversions API Gateway, and integrations with major advertising platforms such as TikTok and Snapchat. Positioned as an industry leader with over 200,000 customers, Stape provides scalable, secure, and GDPR-compliant server-side tracking infrastructure with enterprise-grade features and 24/7 support. Technically, the website is built on modern frameworks like React and Next.js, hosted with Cloudflare, and employs strong security headers and HTTPS encryption. The company demonstrates a mature security posture with certifications including SOC 2, ISO 27001, HIPAA, and GDPR compliance. Overall, the website and business exhibit high professionalism, trustworthiness, and technical sophistication, making Stape a credible and reliable provider in the server-side tracking market.