Medium-risk security reports
99,069 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,165001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
96,651–96,700 of 99,069
- MMicrosoft Azure Web App - Error 404
clarity.ms
Other
69Medium
NIS2 25 · GDPR 40
NIS2 25 · GDPR 40
The website clarity.ms currently serves only a default Microsoft Azure 404 error page, indicating that the custom domain is not configured or the site content is missing. There is no business-related content, metadata, or structured data to analyze. The site is hosted on Microsoft Azure infrastructure but lacks any active services or content. The technical infrastructure is minimal and not optimized, with no TLS protocols enabled and an invalid SSL certificate, resulting in poor security posture. No privacy, cookie, or terms of service policies are present, and no contact or social media information is available. Overall, the site is non-functional from a business or security perspective, representing a high risk if intended for production use.
- DDEKRA Expert Migration GmbH
dekra-expert-migration.com
Healthcare · Germany
64Medium
NIS2 25 · GDPR 43
NIS2 25 · GDPR 43
DEKRA Expert Migration GmbH specializes in the recruitment, qualification, and integration of international skilled workers primarily in healthcare, social services, transport logistics, IT, and industrial sectors. With over ten years of experience and a strong partnership with DEKRA Akademie GmbH, the company offers a comprehensive end-to-end service including assessment, training, administrative support, and integration management. The website reflects a mature digital presence with excellent content quality and user experience, targeting German companies seeking international talent. Technically, the site is built on Nuxt.js with modern frontend technologies and is hosted on an Apache server with a valid SSL certificate, though TLS protocols are not optimally configured. Security practices include CSRF protection via cookies but lack some modern headers and DNS security features. Overall, the company demonstrates a strong market position with trust indicators such as EcoVadis Platinum certification and GDPR compliance.
Related:dekra-akademie.de
DEKRA Neo GmbHdekra-neo.com
Media · Germany
63Medium
NIS2 25 · GDPR 43
NIS2 25 · GDPR 43
DEKRA Neo GmbH is a German media agency specializing in digital learning solutions including live online trainings, e-learning, and explanatory films, with a focus on safety, security, and sustainability sectors. The company operates as a medium-sized entity with a full-service model, leveraging inhouse production and IT capabilities to deliver tailored learning media. Their market position is strengthened by notable clients and a rebranding under the DEKRA group umbrella since 2024. Technically, the website is built on modern frameworks such as Nuxt.js and Tailwind CSS, optimized for performance and mobile use, though it lacks some advanced security configurations like modern TLS protocols and DNSSEC. The security posture is solid with ISO 27001 certification and GDPR compliance, but improvements in SSL/TLS configuration and DNS security are recommended. Overall, the company demonstrates a high level of professionalism, trustworthiness, and digital maturity, with clear business and technical strategies aligned to their market niche.
Related:dekra.com
DEKRA Akademie GmbHdekra-akademie.de
Education · Germany
73Medium
NIS2 25 · GDPR 18
NIS2 25 · GDPR 18
DEKRA Akademie GmbH is a well-established German education and training provider specializing in professional development, certification, and continuing education across multiple sectors including transportation, healthcare, and technology. The company operates a comprehensive digital platform leveraging Salesforce Visualforce and Azure Search technologies, supported by a robust consent management system via Usercentrics. Their market position is strong with a nationwide presence and a broad portfolio of courses and services tailored to both private individuals and corporate clients. The website demonstrates high content quality, consistent branding, and clear navigation, supporting a positive user experience. Security posture is good with valid SSL certificates, HSTS, and content security policies, though the absence of modern TLS protocols and DNSSEC indicates room for improvement. Privacy and cookie policies are comprehensive and GDPR compliant, reflecting a mature approach to data protection. Overall, the digital infrastructure supports the business model effectively, though enhancements in security protocols and incident response transparency would further strengthen trust and resilience.
Related:dekra.de
Hornetsecurity GmbHhornetsecurity.com
Technology · Germany
75Medium
NIS2 17 · GDPR 43
NIS2 17 · GDPR 43
Hornetsecurity GmbH is a leading provider of cloud-based cybersecurity solutions focused on Microsoft 365 environments. With a strong market presence serving over 125,000 customers worldwide and a partner network exceeding 12,000 members, the company offers comprehensive services including email security, backup, compliance, and security awareness training. Their business model leverages partnerships with MSPs and channel partners to extend their reach globally. Technically, the website is built on WordPress with modern SEO and performance optimizations, hosted behind Cloudflare, and employs robust security headers and SSL configurations. However, the absence of TLS 1.2+ protocols is a notable gap. Security posture is strong with no known vulnerabilities detected, complemented by ISO 27001 certification and extensive cybersecurity awards. The company demonstrates good privacy compliance with GDPR-aligned policies and cookie consent mechanisms. Overall, Hornetsecurity presents a mature digital presence with a high level of professionalism and trustworthiness.
DEKRA ITVdekraitv.es
Transportation · Spain
58Medium
NIS2 25 · GDPR 0
NIS2 25 · GDPR 0
DEKRA ITV is the leading global operator in vehicle technical inspection (ITV), recently expanding its presence in Spain since 2022. The company offers a comprehensive range of services including online appointment booking, inspections for conventional and electric vehicles, and specialized services for corporate fleets. Their commitment to sustainability is demonstrated through the ITVerde project, focusing on green technologies and practices in ITV stations. Technically, the website is built on WordPress with Elementor and several premium plugins, optimized for SEO and mobile use, and integrates cookie consent and analytics tools such as CookieYes and Microsoft Clarity. Security-wise, the site has a valid SSL certificate but lacks modern TLS protocol support and some security headers, indicating room for improvement in HTTPS enforcement and security best practices. Overall, DEKRA ITV presents a professional, trustworthy, and user-friendly digital presence aligned with its market leadership.
Related:dekra.es
- DDEKRA Services
dekra-services.ma
Other · Morocco
72Medium
NIS2 25 · GDPR 40
NIS2 25 · GDPR 40
DEKRA Services Morocco is a medium-sized subsidiary of the international German company DEKRA AG, specializing in temporary staffing and outsourcing personnel management solutions. The company targets both job candidates and enterprises seeking flexible workforce solutions. Their website provides job search functionality and corporate information primarily in French, reflecting their Moroccan market focus. Technically, the site is built on Joomla CMS with a variety of JavaScript libraries and CSS frameworks, delivering a good user experience with fast performance and mobile optimization. Security-wise, the site employs strong HTTP security headers and a valid SSL certificate but lacks support for modern TLS protocols, which is a notable gap. No explicit privacy, cookie, or terms of service policies are present, indicating compliance and transparency improvements are needed.
Other
70Medium
NIS2 25 · GDPR 40
NIS2 25 · GDPR 40
The website at e-spirit.hosting currently serves a 403 Forbidden response, indicating no publicly accessible content. There is no metadata or business information available to describe the company, its services, or market position. The technical infrastructure is minimal, running on Apache with no modern TLS protocols enabled and an invalid SSL certificate that does not match the domain. DNS lacks security enhancements such as DNSSEC and CAA records. No security or privacy policies are published, and no contact or marketing data is present. Overall, the site is not operational for end users or customers and lacks digital maturity and security posture.
- DEKRA Industrial AB
dekra-industrial.se
Energy · Sweden
68Medium
NIS2 25 · GDPR 15
NIS2 25 · GDPR 15
DEKRA Industrial AB is a medium-sized Swedish company specializing in inspection, testing, certification, and training services primarily for industrial sectors such as energy and transportation. The company positions itself as a global partner committed to safety and quality, currently migrating its web presence to a consolidated platform at dekra.se to improve user experience and service accessibility. The website is built on Drupal CMS with a modern front-end stack including jQuery and Typekit fonts, hosted on Google Cloud infrastructure. Security posture is solid with valid SSL certificates and HSTS enabled, though it lacks support for modern TLS protocols and DNS security features. The site employs cookie consent mechanisms and integrates Google Analytics for user tracking with moderate privacy compliance. Contact options include phone and a detailed contact form, but no direct email addresses are publicly listed. Social media presence on Facebook and LinkedIn supports brand trust. Overall, the digital maturity is good with room for security enhancements and improved compliance documentation.
Related:dekra.se
- DEKRA Bilbesiktning
dekra-bilbesiktning.se
Transportation · Sweden
62Medium
NIS2 25 · GDPR 15
NIS2 25 · GDPR 15
DEKRA Bilbesiktning is a leading vehicle inspection service provider in Sweden and Europe, offering a wide range of inspection and testing services including battery tests for electric vehicles and registration inspections. The company leverages a robust digital infrastructure built on WordPress with modern optimization and analytics tools, ensuring a good user experience and SEO performance. Security measures include valid SSL certificates and essential security headers, though TLS protocols are outdated and could be improved. The website demonstrates compliance with GDPR through comprehensive privacy and cookie policies and implements user consent mechanisms. However, explicit security policies and incident response information are not publicly available, indicating areas for enhancement. Overall, DEKRA Bilbesiktning maintains a professional and trustworthy online presence with strong market positioning in the transportation sector.
Related:dekra.comklarna.com
オカネノホンネ|保険・金融メディアokanenohonne.com
Finance · Japan
63Medium
NIS2 25 · GDPR 25
NIS2 25 · GDPR 25
オカネノホンネ is a Japanese online media platform specializing in insurance, finance, investment, loans, and life planning content. It targets Japanese individuals seeking clear and honest financial information. The site is powered by WordPress and uses common SEO and UI plugins to enhance user experience and search visibility. The technical infrastructure includes nginx web server, jQuery, Slick Carousel, and YouTube API integrations. Hosting is provided by Xserver, a Japanese hosting provider. Security posture shows a valid SSL certificate but lacks modern TLS protocol support and advanced security headers. No cookie consent or detailed privacy compliance mechanisms are present, though a basic privacy policy is linked on the parent company’s domain. Advertising and analytics are managed via Google Adsense and Google Analytics respectively.
Related:digitalio.jp
- Kamstrup
mykamstrup.com
Energy
67Medium
NIS2 25 · GDPR 40
NIS2 25 · GDPR 40
My Kamstrup is a service portal provided by Kamstrup, a company operating in the energy sector. The portal offers customers quick access to Kamstrup applications, encryption key management, and support resources, aiming to centralize essential services for users. The website is built using modern web technologies such as Next.js and React and is hosted on Vercel, ensuring a fast and responsive user experience. However, the site lacks visible privacy, cookie, and terms of service policies, which are critical for compliance and user trust. The SSL certificate is valid, but the absence of modern TLS protocols reduces the overall security posture. There are no visible contact details or social media links, limiting direct communication channels. Overall, the site demonstrates a moderate level of professionalism and technical maturity but requires improvements in security protocols and compliance documentation.
Media · Japan
60Medium
NIS2 25 · GDPR 25
NIS2 25 · GDPR 25
Telecy.tv is a Japanese media company specializing in operational television commercial (TVCM) services and integrated communication strategies. The company offers end-to-end marketing communication solutions centered on TV advertising, including strategy planning, creative development, media execution, and performance analysis. Positioned as a medium-sized enterprise, Telecy operates under the parent company CARTA HOLDINGS and partners with major advertising firms such as Dentsu. The website reflects a professional and consistent brand image targeting marketing professionals and advertisers in Japan. Technically, the site is built on WordPress, uses Cloudflare for hosting and caching, and integrates modern marketing tools like Google Tag Manager and a chatbot service. However, the SSL configuration lacks modern TLS protocol support, and there is no visible cookie consent mechanism, which may impact compliance.
Related:cartaholdings.co.jp
—
73Medium
NIS2 25 · GDPR 40
NIS2 25 · GDPR 40
Security assessment completed with an overall score of 50/100 (unknown risk). 9 high-priority issues should be addressed promptly. Total of 22 security findings identified across all modules.
- Featured Customers
featuredcustomers.com
Technology
70Medium
NIS2 25 · GDPR 25
NIS2 25 · GDPR 25
Featured Customers operates as an online platform specializing in providing reviews, testimonials, and case studies for B2B and SaaS software and services. The platform targets B2B buyers and SaaS users seeking customer insights to inform purchasing decisions. The business model revolves around aggregating and showcasing customer feedback to enhance software selection processes. The company appears to be medium-sized within the technology sector, with a moderate market position focused on niche B2B software review services. Technically, the website is built using React and served via an nginx server hosted on DigitalOcean. It employs Google Fonts and Font Awesome for styling and icons, along with third-party tools such as UserWay for accessibility and Factors.ai for tracking. Performance is fast, but mobile optimization and SEO are basic. The absence of a CMS and limited metadata suggest a relatively simple technical infrastructure. From a security perspective, the site implements some security headers like X-Frame-Options and Content-Security-Policy to prevent clickjacking and framing attacks. However, the SSL configuration is weak, with no modern TLS protocols enabled, which poses a significant risk to secure communications. There are no visible privacy, cookie, or terms of service policies, nor GDPR compliance mechanisms, indicating gaps in regulatory adherence and user data protection. No incident response or vulnerability disclosure information is available. Overall, the website presents moderate trustworthiness but requires significant improvements in security posture, privacy compliance, and transparency. Strategic enhancements in SSL configuration, policy publication, and accessibility would strengthen the platform's reliability and user confidence.
- アアドバーチャ株式会社
ad-virtua.com
Technology · Japan
72Medium
NIS2 25 · GDPR 40
NIS2 25 · GDPR 40
Ad-Virtua is a Japanese company specializing in metaverse and in-game advertising, targeting primarily Gen Z male audiences. Their platform offers video ad distribution across a wide range of games and metaverse environments, positioning themselves as a next-generation media channel with higher engagement and recall rates compared to traditional web ads. The company operates a modern web presence using Next.js and React, hosted likely on Google Cloud infrastructure, with a focus on mobile optimization and fast performance. Security posture is solid with valid SSL and HSTS enabled, but lacks modern TLS protocol support and DNSSEC, indicating room for improvement. Privacy policies and terms of service are present and comprehensive, though cookie policy and consent mechanisms are missing. Overall, the company demonstrates a professional and trustworthy digital footprint with clear business focus and technical maturity.
Related:or.jp
Cludo ApScludo.com
Technology · Denmark
73Medium
NIS2 25 · GDPR 25
NIS2 25 · GDPR 25
Cludo ApS is a medium-sized technology company based in Denmark specializing in AI-powered site search solutions. Their platform enhances website search experiences by leveraging AI technologies such as AI Chat and AI Summary, targeting website owners and marketing teams globally. The company positions itself as a trusted partner with over 1000+ websites using their services, supported by strong customer testimonials and partner endorsements. Technically, Cludo utilizes a modern tech stack including HubSpot CMS, Cloudflare hosting, and integrates multiple marketing and analytics tools such as Google Analytics 4 and Microsoft Clarity. Security posture is solid with HSTS and content security policies in place, though the absence of modern TLS protocols and DNSSEC indicates room for improvement. Overall, Cludo demonstrates a mature digital presence with good privacy compliance and user experience, but could enhance security transparency and incident response readiness.
—
75Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
Security assessment completed with an overall score of 50/100 (unknown risk). Total of 6 security findings identified across all modules.
—
75Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
Security assessment completed with an overall score of 50/100 (unknown risk). Total of 7 security findings identified across all modules.
—
75Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
Security assessment completed with an overall score of 50/100 (unknown risk). Total of 8 security findings identified across all modules.
—
65Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
Security assessment completed with an overall score of 50/100 (unknown risk). 3 critical issues require immediate attention. Total of 11 security findings identified across all modules.
—
75Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
Security assessment completed with an overall score of 50/100 (unknown risk). Total of 5 security findings identified across all modules.
—
75Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
Security assessment completed with an overall score of 50/100 (unknown risk). 1 critical issues require immediate attention. Total of 9 security findings identified across all modules.
—
75Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
Security assessment completed with an overall score of 50/100 (unknown risk). Total of 7 security findings identified across all modules.
—
75Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
Security assessment completed with an overall score of 50/100 (unknown risk). Total of 8 security findings identified across all modules.
—
75Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
Security assessment completed with an overall score of 50/100 (unknown risk). Total of 6 security findings identified across all modules.
—
75Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
Security assessment completed with an overall score of 50/100 (unknown risk). 1 critical issues require immediate attention. Total of 8 security findings identified across all modules.
—
75Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
Security assessment completed with an overall score of 50/100 (unknown risk). Total of 6 security findings identified across all modules.
—
65Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
Security assessment completed with an overall score of 50/100 (unknown risk). 3 critical issues require immediate attention. Total of 11 security findings identified across all modules.
- SSwim School | Swim Lessons | Goldfish Swim School
goldfishswimschool.com
—
66Medium
NIS2 25 · GDPR 43
NIS2 25 · GDPR 43
Security assessment completed with an overall score of 50/100 (unknown risk). 10 high-priority issues should be addressed promptly. Total of 27 security findings identified across all modules.
- AAmerican Swimming Coaches Association
swimmingcoach.org
—
75Medium
NIS2 25 · GDPR 25
NIS2 25 · GDPR 25
Security assessment completed with an overall score of 50/100 (unknown risk). 9 high-priority issues should be addressed promptly. Total of 23 security findings identified across all modules.
—
66Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Security assessment completed with an overall score of 50/100 (unknown risk). 11 high-priority issues should be addressed promptly. Total of 27 security findings identified across all modules.
—
65Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
Security assessment completed with an overall score of 50/100 (unknown risk). 3 critical issues require immediate attention. Total of 11 security findings identified across all modules.
- EEvery Child A Swimmer charity store page
everychildaswimmer.com
—
73Medium
NIS2 25 · GDPR 43
NIS2 25 · GDPR 43
Security assessment completed with an overall score of 50/100 (unknown risk). 7 high-priority issues should be addressed promptly. Total of 26 security findings identified across all modules.
—
63Medium
NIS2 25 · GDPR 43
NIS2 25 · GDPR 43
Security assessment completed with an overall score of 50/100 (unknown risk). 1 critical issues require immediate attention. Total of 28 security findings identified across all modules.
Michigan Gamingmichigangaming.com
Government · United States
68Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Michigan Gaming is a specialized information resource focused on the gaming industry within the state of Michigan, providing regulatory news, licensing information, and industry updates. The site is operated by RMC Ventures, LLC, with contributions from legal and gaming experts, positioning it as a trusted source for government officials, industry professionals, and the public interested in Michigan gaming. The website leverages WordPress CMS with a custom theme and integrates common web technologies such as jQuery, AOS for animations, and Contact Form 7 for user interactions. Google Analytics and reCAPTCHA are used for analytics and security respectively. The SSL certificate is valid but lacks modern TLS protocol support, and security headers are partially implemented. No explicit privacy, cookie, or terms of service policies are found, indicating potential compliance gaps. Contact information is clearly provided, including email, phone, and a contact form. Overall, the site demonstrates a moderate level of digital maturity with room for improvement in security and compliance.
Related:rmclegal.com
—
75Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
Security assessment completed with an overall score of 50/100 (unknown risk). Total of 7 security findings identified across all modules.
- BBusinessFirms
businessfirms.co
Technology · US
68Medium
NIS2 17 · GDPR 43
NIS2 17 · GDPR 43
BusinessFirms is a B2B review and research platform focused on connecting businesses with top software development and IT companies worldwide. It offers a trusted directory with verified reviews and expert guidance, positioning itself as a reliable partner for businesses seeking strategic collaborations. The platform targets businesses looking for vetted IT service providers and aims to facilitate informed decision-making through authentic feedback and ratings. Technically, the website leverages modern frontend technologies such as SvelteKit and is hosted on an Apache server. While the site performs well with good mobile optimization and SEO practices, its security posture shows room for improvement, particularly in enabling modern TLS protocols and implementing advanced security headers. The SSL certificate is valid but lacks support for TLS 1.2 or higher, and DNSSEC is not enabled. Overall, the platform demonstrates a solid market presence with consistent branding and trust indicators but should enhance its security and privacy compliance to strengthen user trust further.
—
74Medium
NIS2 25 · GDPR 25
NIS2 25 · GDPR 25
Security assessment completed with an overall score of 50/100 (unknown risk). 9 high-priority issues should be addressed promptly. Total of 22 security findings identified across all modules.
- S
Other · Australia
62Medium
NIS2 25 · GDPR 25
NIS2 25 · GDPR 25
The website searchengine.com.au operates as a small-scale SEO service provider specializing in natural organic search optimization for major search engines such as Google, Bing, and Yahoo. The business targets companies seeking to improve their online visibility through SEO consulting and marketing services. The site content and structure indicate a niche market position with basic service offerings and moderate branding consistency. Technically, the website uses legacy technologies such as jQuery and jHtmlArea, hosted on an nginx server with a valid SSL certificate but lacking modern TLS protocol support. Performance is fast, but mobile optimization and accessibility are basic. Security headers include HSTS, but DNSSEC and CAA records are not implemented, and no advanced security policies or privacy compliance mechanisms are present. The site uses Google Analytics for tracking without visible privacy or cookie consent mechanisms, indicating potential compliance gaps. Overall, the security posture is basic with room for significant improvements in encryption protocols, policy disclosures, and data protection practices.
Related:domainmarketplace.com.au
- TTotal Internet
totalinternet.com.au
Technology · Australia
66Medium
NIS2 25 · GDPR 40
NIS2 25 · GDPR 40
Total Internet is an established Australian company founded in 1999 specializing in domain name registration, hosting solutions, online marketing, web development, and business intelligence services. It holds a strong market position as an industry leader with ISO27001-13 certification and accreditations from ASIC, auDA, and ACIC. The company operates multiple subsidiaries including ddns.com.au, cheaperdomains.com.au, and ib.com.au, targeting individuals, small businesses, and enterprises. Technically, the website uses nginx with the Foundation framework and jQuery, delivering fast performance and good mobile optimization, though it lacks modern TLS protocol support. Security posture is solid with HSTS enabled and a valid SSL certificate, but improvements are needed in TLS protocol support and privacy compliance. No privacy or cookie policies were found, and incident response information is absent, indicating gaps in compliance and security transparency. Overall, the website is professional with consistent branding and clear contact information but could enhance trust through improved security and privacy practices.
Related:cheaperdomains.com.auib.com.au
—
75Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
Security assessment completed with an overall score of 50/100 (unknown risk). 1 high-priority issues should be addressed promptly. Total of 10 security findings identified across all modules.
UNIQLOuniqlo.com
Retail
75Medium
NIS2 25 · GDPR 25
NIS2 25 · GDPR 25
UNIQLO is a global retail brand specializing in casual apparel, operating an enterprise-scale e-commerce platform. The website leverages modern web technologies including React and is hosted on Amazon AWS infrastructure with CDN support from Akamai. The digital maturity is evidenced by the use of advanced marketing and analytics tools such as Google Tag Manager, Datadog, and Queue-it for traffic management. Security posture is solid with valid SSL certificates and HSTS enabled; however, the absence of modern TLS protocols and some missing security headers indicate room for improvement. No explicit privacy, cookie, or terms of service policies were detected in the provided HTML content, which may impact compliance and user trust. Overall, the website demonstrates a professional and trustworthy presence with good performance and user experience.
Related:outlook.com
株式会社ローソンエンタテインメントl-tike.com
Other · Japan
68Medium
NIS2 25 · GDPR 25
NIS2 25 · GDPR 25
株式会社ローソンエンタテインメント operates l-tike.com, a leading Japanese ticket sales and reservation platform specializing in concerts, sports, theater, and various entertainment events. The website serves a broad audience of entertainment consumers and event attendees, offering services including ticket sales, electronic ticket delivery, fan club memberships, and travel-related bookings. The company is a subsidiary of Lawson, a major Japanese retail group, positioning it strongly in the domestic entertainment market. Technically, the site employs common web technologies such as jQuery, Swiper, and Flatpickr, with multi-language support via WOVN.io and is hosted on Akamai's CDN network. However, the SSL certificate is currently invalid, and no modern TLS protocols are supported, which significantly impacts the security posture. Security headers are partially implemented, but critical improvements are needed to secure user data and communications. The site integrates marketing and advertising tools including Google Tag Manager and Facebook SDK, with moderate user tracking but lacks a cookie consent mechanism. Overall, the website is professionally designed with good content relevance and navigation, but security and privacy compliance require urgent attention.
Related:lawson.co.jp
—
75Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
Security assessment completed with an overall score of 50/100 (unknown risk). Total of 8 security findings identified across all modules.
ラグザス株式会社|RAXUS INC. - 今ここにない未来を創り出すraxus.inc
—
63Medium
NIS2 25 · GDPR 25
NIS2 25 · GDPR 25
Security assessment completed with an overall score of 50/100 (unknown risk). 12 high-priority issues should be addressed promptly. Total of 26 security findings identified across all modules.
- RomanianCompanies
romanian-companies.eu
Other · Romania
66Medium
NIS2 25 · GDPR 0
NIS2 25 · GDPR 0
RomanianCompanies.eu is a data service platform providing comprehensive information on Romanian companies including contact details, financial data, legal status, and monitoring services. The platform targets businesses and individuals seeking detailed company data and offers both free and subscription-based access models. It holds a moderate market position with notable clients such as Altex, Emag, and Mercedes, indicating trust and relevance in the Romanian business data sector. Technically, the website employs modern frontend technologies including jQuery, Bootstrap, Font Awesome, and Google Fonts, hosted on infrastructure using Google Cloud DNS. However, the SSL certificate is invalid and does not match the domain, which undermines user trust and security. The site lacks TLS protocol support and HSTS, exposing it to potential security risks. Security headers like X-Frame-Options and X-Content-Type-Options are implemented, but cookie consent mechanisms and GDPR compliance are minimal or absent. Overall, the platform demonstrates good content quality and user experience but requires significant improvements in security and privacy compliance to enhance trust and regulatory adherence.
Related:listafirme.ro
- CCasino City Press
globalgamingalmanac.com
Other
67Medium
NIS2 25 · GDPR 25
NIS2 25 · GDPR 25
Casino City's GlobalGamingAlmanac.com is a subscription-based online service providing comprehensive global casino and gaming market data, including jurisdictional gaming activities, property profiles, revenue data, and regulatory information. The platform targets gaming industry professionals and businesses seeking detailed analytics and market insights. Technically, the site is built on a legacy ASP.NET WebForms framework, utilizing jQuery and jQuery UI for client-side interactivity, and is hosted behind Cloudflare DNS services. While the SSL certificate is valid and HSTS is enabled with preload, the site lacks support for modern TLS protocols, which is a notable security gap. The site employs Google Analytics for user tracking but does not implement a cookie consent mechanism, which may impact privacy compliance. Security policies and incident response information are not publicly disclosed, indicating room for improvement in transparency and governance.
- CCasino City Press
northamericangamingalmanac.com
Media · United States
67Medium
NIS2 25 · GDPR 25
NIS2 25 · GDPR 25
Casino City Press operates the North American Gaming Almanac website, providing detailed and comprehensive data on casino and gaming markets across North America. Their service targets industry professionals, regulators, and analysts by offering subscription-based access to gaming directories, revenue data, market analysis tools, and regulatory information. The company has an established market presence since 2003 and positions itself as a key data provider in the gaming media sector. Technically, the website is built on ASP.NET Web Forms with jQuery and uses Cloudflare for DNS and hosting services. While the site implements strong HSTS policies and has a valid SSL certificate, it lacks support for modern TLS protocols, which is a critical security gap. The site uses Google Analytics and Tag Manager for user tracking but does not implement explicit cookie consent mechanisms. Overall, the security posture is moderate with room for improvement in encryption protocols and DNS security. Business contact information is clearly provided, but no social media presence or physical address is listed.
- PPID Polyester Innovation Développement
pid-piscine.fr
Manufacturing · France
55Medium
NIS2 25 · GDPR 0
NIS2 25 · GDPR 0
PID Polyester Innovation Développement is a French manufacturer specializing in monobloc polyester swimming pools with nearly 40 years of experience. The company emphasizes quality, customization, and customer service, targeting residential customers in France. Their market position is strengthened by patented technology and compliance with French safety standards. Technically, the website is built on WordPress with the Divi theme, integrating modern marketing and analytics tools such as Google Analytics, Facebook Pixel, and Brevo email marketing. The site is performant and mobile-optimized but lacks some advanced security configurations such as modern TLS protocols and security headers. The security posture is moderate with valid SSL but no DNSSEC or HSTS enabled. Privacy compliance is good with GDPR-aligned cookie consent mechanisms. Overall, the company presents a professional and trustworthy online presence with clear contact information and active social media engagement.