Low-risk security reports
14,261 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,165001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
9,851–9,900 of 14,261
- JJumpseller
jumpseller.com
E-commerce
86Low
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
Jumpseller is an established e-commerce platform founded in 2012, offering a SaaS online store builder targeted at fast-growing businesses and entrepreneurs. The platform supports multiple languages and countries, positioning itself as a versatile solution for online retail. The website presents a professional and consistent brand image with clear business descriptions and a 14-day free trial offer, indicating a customer-focused approach. Technically, the website employs modern front-end technologies including Bootstrap, FontAwesome, and Google Fonts, alongside robust analytics and marketing tools such as Google Analytics, Microsoft Clarity, Mixpanel, Facebook Pixel, and Visual Website Optimizer. Hosting appears to be on AWS infrastructure, ensuring scalability and reliability. The site is mobile-optimized and SEO-friendly, with good performance metrics. From a security perspective, the site uses HTTPS and implements reCAPTCHA v3 for bot mitigation. However, DNSSEC is not enabled, and no explicit security headers were detected in the provided data. There is no published security policy or incident response information, which could be improved to enhance trust. Privacy and cookie policies are not explicitly found, though a consent mechanism is implied. Overall, Jumpseller demonstrates a solid business and technical foundation with room for improvement in privacy compliance and security transparency. Strategic enhancements in these areas would strengthen user trust and regulatory adherence.
UC ABuc.se
Finance · Sweden
80Low
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
UC AB is Sweden's leading business and credit information company, providing comprehensive credit reports, risk assessments, and related services to both businesses and private individuals. The company operates under the parent group Enento and offers a wide range of services including corporate and personal credit information, ID protection, and credit scoring. The website reflects a mature digital presence with professional design, clear navigation, and extensive content tailored to its target audience in Sweden. Technically, the site uses modern web technologies such as Episerver CMS, Google Tag Manager, and cookie consent management tools, ensuring good performance and compliance with privacy regulations. Security posture is strong with HTTPS enforced and ISO certifications (9001 and 27701) indicating a commitment to quality and privacy. No critical vulnerabilities or exposed sensitive data were detected. Overall, UC AB demonstrates a high level of business credibility and digital maturity, with clear trust signals and compliance adherence.
Telecommunications · European Union
79Low
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
The European 5G Observatory is an official monitoring platform managed by the European Commission's Directorate-General for Communications Networks, Content and Technology. It provides comprehensive data and insights on 5G technology deployment, market developments, spectrum allocation, and policy progress across the EU and neighboring countries. The platform targets policymakers, researchers, telecom operators, and technology enthusiasts, offering reliable and up-to-date information to support the EU's digital transformation goals. Technically, the website is built on Drupal 10 and leverages the European Commission's design system (ECL), ensuring a modern, accessible, and mobile-optimized user experience. The site integrates standard web technologies and includes social media sharing tools and Matomo analytics for user insights. Performance is moderate with good SEO and accessibility practices. From a security perspective, the site enforces HTTPS, includes cookie consent mechanisms, and links to a vulnerability disclosure policy. No critical vulnerabilities or exposed sensitive data were detected. However, explicit security policy documentation and incident response contacts could enhance transparency and readiness. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with EU privacy regulations. It serves as a key resource for tracking 5G progress in Europe, supporting the Digital Decade connectivity targets.
Câmara Municipal Santo Tirsocm-stirso.pt
Government · Portugal
77Low
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
The Câmara Municipal Santo Tirso website serves as the official digital presence of the municipal government of Santo Tirso, Portugal. It provides comprehensive information about the municipality, including news, events, investment opportunities, tourism, and public services. The site targets residents, visitors, and investors, offering a user-friendly platform with clear navigation and multilingual support via Google Translate. The business model is that of a public sector entity focused on transparency, citizen engagement, and local development. Technically, the website employs a modern tech stack including React, jQuery, and the Wiremaze CMS platform. It integrates accessibility features and is optimized for mobile devices, ensuring a good user experience. The site uses HTTPS with a good SSL configuration and includes cookie consent mechanisms aligned with GDPR requirements. Analytics are implemented via Google Analytics and Google Tag Manager, with moderate user tracking. From a security perspective, the site enforces HTTPS and uses cookie consent banners but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or suspicious content were detected. WHOIS data confirms the legitimacy of the domain, matching the municipal government identity and location. Overall, the site is professional, trustworthy, and compliant with privacy regulations, though it could improve by publishing formal security policies and enhancing security headers. The risk level is low, and the site effectively supports the municipality's communication and service delivery objectives.
eMarket Designemarketdesign.com
Technology · United States
76Low
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
eMarket Design is a small technology company specializing in enterprise software solutions for WordPress. Established in 2006, it offers scalable, secure, and customizable WordPress plugins and software tailored to business needs. The company positions itself as a provider of high-quality, user-friendly enterprise WordPress solutions with a growing customer base. Technically, the website is built using the Hugo static site generator, leveraging modern web technologies such as FontAwesome and Google Fonts, and is hosted with domain registration via Amazon Registrar and DNS through Cloudflare. The site is fast, mobile-optimized, and well-structured with good SEO practices. Security posture is solid with HTTPS enforced and domain status locks, though DNSSEC is not enabled and no explicit security or incident response policies are published. Privacy compliance is basic, with a privacy policy and terms hosted on a related domain but no cookie consent mechanism detected. Overall, the website is professional, trustworthy, and safe for general audiences.
The New York Times Companynytco.com
Media
76Low
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
The New York Times Company website presents a professional and comprehensive digital presence consistent with a leading global media organization. The company operates a subscription-based business model with over 11 million subscribers worldwide, emphasizing high-quality journalism and visual storytelling. The website content is rich, well-structured, and optimized for both desktop and mobile users, reflecting a mature digital infrastructure. Technically, the site leverages WordPress CMS along with modern JavaScript libraries such as jQuery and Picturefill for responsive image handling. Google Analytics and Google Tag Manager are employed for user tracking and analytics, indicating a moderate level of user data collection balanced with privacy compliance. The site uses HTTPS with strong SSL configuration, though security headers could be improved to enhance protection. From a security perspective, the website demonstrates good practices including HTTPS enforcement and cookie consent mechanisms. However, there is no publicly available security policy or incident response contact information, which could be enhanced to improve transparency and readiness. The absence of WHOIS data limits domain registration trust analysis, but the website's branding and content strongly support its legitimacy. Overall, the website is trustworthy, professionally maintained, and compliant with privacy regulations such as GDPR. Strategic recommendations include implementing additional security headers, publishing a security policy, and providing clear incident response contacts to further strengthen security posture and user trust.
Ergomotion® Plusergomotionplus.com
E-commerce · Portugal
78Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Ergomotion® Plus operates an e-commerce platform specializing in smart beds designed to improve sleep quality and health. The website targets consumers interested in advanced sleep solutions, offering a range of smart beds through a Shopify-based online store. The business positions itself in a niche market with a focus on comfort and health benefits, leveraging multilingual support to cater to European markets. The company employs modern marketing and analytics tools such as Google Analytics, Facebook Pixel, Hotjar, and Trustpilot to enhance customer engagement and trust. Technically, the website is built on the Shopify platform using the Dawn theme, ensuring a responsive and user-friendly experience across devices. The infrastructure includes integrations with multiple third-party services for marketing, analytics, and cookie consent management. Performance is moderate with good mobile optimization and basic accessibility features. SEO practices are well implemented with proper meta tags and Open Graph data. From a security perspective, the site enforces HTTPS and uses CAPTCHA on forms, indicating a baseline security posture. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not detected, and no published security or incident response policies are available. The absence of WHOIS registration data raises concerns about domain legitimacy and transparency, which impacts overall trustworthiness. Overall, Ergomotion® Plus presents a professional and functional e-commerce presence with good privacy compliance and marketing sophistication. The main risks relate to domain registration opacity and limited published security policies. Strategic improvements in security transparency and direct contact information would enhance trust and compliance.
2NP production s.r.o.oktagonmma.cz
Media · Czech Republic
76Low
NIS2 2 · GDPR 80
NIS2 2 · GDPR 80
OKTAGON MMA is a prominent European mixed martial arts organization founded in 2016, with a strong presence in the Czech Republic and neighboring countries. The website serves as the official platform for event promotion, fighter information, ticket sales, and media streaming through OKTAGON.tv. The organization targets MMA fans and sports enthusiasts, offering a comprehensive range of services including live events, online streaming, and merchandise sales. The business model is centered on event-driven revenue and media content distribution, supported by partnerships with major broadcasters and sponsors.
Pinterestpinterest.pt
Technology · United States
79Low
NIS2 10 · GDPR 53
NIS2 10 · GDPR 53
Pinterest is a globally recognized visual discovery and social media platform that enables users to find and share ideas such as recipes, home decor, and style inspiration. The pt.pinterest.com site is a localized Portuguese version of the platform, maintaining the brand's global presence and user engagement. The business operates primarily through advertising and e-commerce integrations, positioning itself as a leader in the technology and social media sectors. The website demonstrates a mature digital infrastructure with modern technologies such as React, AWS hosting, and comprehensive security measures including HTTPS and Content Security Policy enforcement. Security posture is strong with no evident vulnerabilities or exposed sensitive data, and privacy compliance is well addressed through detailed policies and consent mechanisms. Overall, the site reflects a professional, trustworthy, and enterprise-grade online presence.
Government · Portugal
77Low
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
ANACOM is the national regulatory authority for postal and electronic communications in Portugal. It serves as a government entity overseeing regulation, consumer protection, spectrum management, and licensing within the telecommunications sector. The website is professionally designed, content-rich, and targets Portuguese consumers, businesses, and international stakeholders. It provides comprehensive regulatory information, public consultations, and consumer resources. Technically, the site uses established libraries such as jQuery and Bootstrap, integrates Google Tag Manager for analytics, and is mobile optimized with good accessibility and SEO practices. Security posture is strong with HTTPS enforced and cookie consent implemented, though it lacks explicit security headers and a formal security policy page. The domain registration aligns with the official Portuguese authority, confirming legitimacy. Overall, the website is trustworthy, professional, and well-maintained, supporting ANACOM's authoritative role in Portugal's communications sector.
ERTRACertrac.org
Transportation
82Low
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
ERTRAC is a European advisory council focused on road transport research and innovation, aiming to coordinate and promote sustainable, safe, and efficient mobility solutions. The website reflects a mature and professional organization targeting policymakers, researchers, and industry stakeholders in the transportation sector. The digital infrastructure is built on WordPress with modern plugins and themes, providing a good user experience with mobile optimization and SEO best practices. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though there is room for improvement in publishing explicit security policies and incident response information. Overall, the website is trustworthy and well-maintained, supporting ERTRAC's role as a key player in European transport research.
Axeptioaxeptio.eu
Technology
81Low
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
Axeptio is a specialized Consent Management Platform (CMP) providing GDPR, CCPA, Law 25, and other international privacy regulation compliance solutions. Trusted by over 80,000 websites and apps, Axeptio offers customizable consent banners, contractual consent modules, mobile SDKs, and compliance tools tailored for brands, publishers, and agencies. The company holds certifications from Google and IAB Europe, positioning itself as a leading player in the privacy compliance SaaS market. Technically, the website is built on HubSpot CMS, leveraging modern JavaScript libraries and integrations with major marketing and analytics platforms such as Google Tag Manager and HubSpot Analytics. The site is well-optimized for mobile and accessibility, with a professional design and clear navigation. Security posture is strong with HTTPS enforced and consent mechanisms implemented, though explicit security headers could be improved. WHOIS data is privacy protected, which is typical for SaaS companies, and no suspicious patterns were detected. Overall, Axeptio demonstrates a mature digital presence with strong business credibility and compliance focus.
Repsolrepsol.pt
Energy · Portugal
76Low
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
Repsol Portugal operates as a major energy supplier providing electricity, gas, and related services to individual consumers. The website is well-branded and professionally designed, targeting retail customers with a clear focus on energy solutions and customer benefits. The technical infrastructure leverages Adobe Experience Manager CMS, integrates multiple analytics and marketing tools including Google Tag Manager, Adobe Web SDK, and Gigya, and employs security best practices such as HTTPS and reCAPTCHA. However, the absence of explicit privacy and terms of service policies on the accessible pages indicates room for improvement in compliance transparency. Overall, the security posture is strong with proper headers and no detected vulnerabilities, but privacy compliance could be enhanced by publishing comprehensive policies and contact points for incident response.
- Bbp global
bp.com
Energy
86Low
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
BP is a global energy company focused on delivering energy solutions including oil, gas, bioenergy, renewables, and electric vehicle charging. The website reflects a large multinational enterprise with a comprehensive digital presence, including detailed corporate governance, investor relations, sustainability, and career information. The technical infrastructure uses modern web technologies such as Adobe Experience Manager CMS, Google Tag Manager, and Algolia search, indicating a mature digital platform. Security posture is moderate with cookie consent implemented but lacks visible security headers or explicit security policies in the provided content. WHOIS data is unavailable, which slightly impacts trust but the website's branding and content strongly support legitimacy. Overall, the site is professional, well-structured, and targets a general audience interested in energy and corporate information.
- Home
castrol.com
Energy
90Low
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Castrol's website presents a professional corporate presence focused on lubricants and specialty oils for automotive and industrial sectors. The company positions itself as a global leader embracing innovation and sustainability. The technical infrastructure includes modern tracking and video playback technologies, with good mobile optimization and SEO practices. However, explicit privacy and terms of service pages are not clearly found, and WHOIS data for the domain is unavailable, which raises transparency concerns. Security posture is moderate with HTTPS implied but lacking visible security headers in the provided data. Overall, the site is trustworthy and professional but would benefit from enhanced compliance and security transparency.
Motulmotul.com
Energy · France
76Low
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Motul is a well-established company specializing in high-performance engine oils, lubricants, and vehicle care products for a wide range of vehicles including cars, motorcycles, trucks, and bicycles. The website reflects a strong market position with a comprehensive product offering and multiple sales channels including B2B and e-commerce platforms. The brand is supported by consistent and professional digital presence with clear navigation and rich content. Technically, the site is built on modern frameworks such as Next.js and React, integrating advanced analytics and marketing tools with user consent management. Security posture is good with HTTPS enforced and no visible vulnerabilities, though the absence of explicit security headers and incident response information suggests room for improvement. The lack of WHOIS data is unusual but does not detract significantly from the overall legitimacy given the brand recognition and content quality. Strategic recommendations include enhancing security transparency and publishing vulnerability disclosure policies to further strengthen trust and compliance.
Transportation · United Kingdom
84Low
NIS2 10 · GDPR 80
NIS2 10 · GDPR 80
The Chartered Institution of Highways & Transportation (CIHT) is a well-established professional membership organization focused on the highways and transportation infrastructure sector primarily in the UK with international groups. The website serves as a comprehensive portal for professional development, qualifications, events, and resources tailored to transportation professionals. It offers a range of services including membership management, e-learning, and industry insights, positioning itself as a leading voice in the sector. Technically, the website employs modern web technologies such as AngularJS and Bootstrap, with integration of Google Analytics for user tracking. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is solid with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and explicit incident response information. WHOIS data for the www subdomain is unavailable due to an invalid query format, but the domain is likely registered properly without the www prefix, consistent with the professional nature of the organization. Overall, the website is trustworthy, safe, and well-maintained, serving its target audience effectively.
- FORVIA
forvia.com
Technology · France
78Low
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
FORVIA is a major global technology supplier in the automotive industry, ranking as the 7th largest worldwide. The company emphasizes sustainability and innovation, offering a broad portfolio of automotive technologies including electrification, automated driving, and sustainable materials. The website is professionally designed using Drupal 10, with modern web standards and analytics via Matomo. Security posture is strong with HTTPS and security headers, though explicit security policies and incident response details are not published. WHOIS data is missing, which is unusual for a corporate domain and suggests privacy protection or recent registration. Overall, the site presents a credible and professional business presence with room for improvement in transparency and direct contact information.
Scania CV AB (publ)scania.com
Transportation · Sweden
81Low
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
Scania CV AB is a globally recognized leader in the transportation sector, specializing in manufacturing trucks, buses, and providing comprehensive transport solutions for heavy transport applications. The company operates a professional and well-branded corporate website that serves business clients and stakeholders worldwide. The site is built on Adobe Experience Manager, leveraging modern web technologies and includes robust privacy and cookie consent mechanisms, reflecting a mature digital infrastructure. Security posture is solid with HTTPS and no visible vulnerabilities, though some security headers could be improved. The absence of public WHOIS data is likely due to privacy or registry policies and does not detract from the site's legitimacy. Overall, the website reflects a high level of professionalism and trustworthiness.
Euro NCAPeuroncap.com
Transportation
78Low
NIS2 10 · GDPR 83
NIS2 10 · GDPR 83
Euro NCAP is a leading European organization dedicated to providing consumer information on the safety of new cars through comprehensive crash testing and safety ratings. The website serves as a trusted resource for consumers, automotive professionals, and safety engineers, offering detailed safety assessments, assisted driving gradings, and safety campaign information. The organization positions itself as a key authority in automotive safety within Europe, supporting safer vehicle design and consumer awareness. Technically, the website employs modern web technologies including AngularJS and jQuery, with integration of multiple analytics platforms such as Google Analytics, Matomo, and Microsoft Application Insights. The site is mobile optimized, well-structured, and demonstrates good SEO and accessibility practices, contributing to a positive user experience. From a security perspective, the site enforces HTTPS and uses secure analytics scripts but lacks explicit security headers and published incident response policies. The absence of WHOIS data raises concerns about domain registration transparency, although the website content and branding appear professional and trustworthy. Privacy and cookie policies are present and indicate GDPR compliance, enhancing user trust. Overall, the website presents a strong business and technical profile with minor security and transparency gaps. Strategic improvements in security headers, incident response disclosure, and WHOIS transparency would further strengthen its security posture and trustworthiness.
Spiriispirii.com
Energy · Denmark
77Low
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Spirii is a Denmark-based company specializing in EV charging solutions and eMobility business platforms. Their offerings include a Charge Point Management System, an EV charging app, and a suite of services such as branded solutions, financial services, grid services, and operational support. The company operates across multiple European countries with dedicated offices and subsidiaries, positioning itself as an experienced and reliable player in the eMobility sector. Technically, the website is built on modern web technologies including Webflow CMS, Google Tag Manager, and Cookiebot for privacy compliance, delivering a fast, mobile-optimized, and accessible user experience. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though explicit security policies and incident response information are not publicly available. The WHOIS data for the domain is missing, which raises some concerns about domain registration legitimacy, but the presence of VAT registration and detailed business information supports the company's credibility. Overall, Spirii presents a professional and trustworthy digital presence with room for improvement in transparency around security policies and domain registration details.
- Heidelberg Materials
heidelbergmaterials.com
Manufacturing
86Low
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Heidelberg Materials is a global leader in the manufacturing and supply of building materials including cement, aggregates, ready-mixed concrete, and asphalt. The company emphasizes sustainability and digital innovation as core pillars of its business strategy, targeting construction industry professionals, investors, and sustainability stakeholders worldwide. The website reflects a mature digital presence built on Drupal 10, with excellent design, mobile optimization, and clear navigation. Security posture is strong with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are not published. The absence of WHOIS data for the domain is unusual for a large enterprise and warrants further verification. Overall, the website presents a professional, trustworthy, and comprehensive corporate presence.
MagNet Bank Zrt.magnetbank.hu
Finance · Hungary
79Low
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
MagNet Bank Zrt. is a Hungarian financial institution providing a broad range of banking services including retail and corporate accounts, loans, deposits, and digital banking solutions. The bank emphasizes community banking and sustainable finance, targeting individuals, companies, and nonprofit organizations. The website reflects a medium-sized bank with a solid market position in Hungary, offering comprehensive services and community-oriented programs. Technically, the website uses modern JavaScript frameworks like Vue.js and integrates popular analytics and marketing tools such as Google Tag Manager and Facebook Pixel. The site is well-optimized for mobile and SEO, with good performance and accessibility standards. Security-wise, the site enforces HTTPS, employs multiple security headers, and integrates recaptcha for form protection, indicating a strong security posture. No critical vulnerabilities or suspicious content were detected. Overall, the website is professional, trustworthy, and compliant with GDPR and other relevant regulations.
Finance · Czech Republic
80Low
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
Raiffeisen stavební spořitelna a.s. is a Czech financial institution specializing in building savings, housing loans, and related financial products. The company targets individuals and legal entities in the Czech Republic seeking financial solutions for housing and savings. The website reflects a professional and consistent brand presence with clear navigation and comprehensive service offerings. Technically, the site employs modern web technologies including JavaScript, SVG graphics, and integrates Google Tag Manager and Sentry for analytics and error tracking. Cookie consent management is robust, supporting GDPR compliance. Security posture is strong with HTTPS enforced and secure form handling, though explicit security policies and incident response contacts are not published. The domain WHOIS data is unavailable, which slightly reduces trust but the overall website professionalism and presence on social media platforms support legitimacy. Recommendations include publishing security policies and enhancing security headers.
- HHORNBACH Baumarkt AG
hornbach.com
Retail · Germany
77Low
NIS2 2 · GDPR 73
NIS2 2 · GDPR 73
HORNBACH Baumarkt AG operates a large-scale retail and e-commerce platform specializing in home improvement, garden, and construction products primarily serving the German market and neighboring countries. The website is professionally designed, well-structured, and optimized for performance and mobile devices, reflecting a mature digital infrastructure. The company leverages modern technologies including StencilJS, Usercentrics for consent management, Dynatrace for real user monitoring, and Coveo for search analytics, indicating a high level of digital maturity. Security posture is strong with HTTPS enforcement, security headers, and cookie management, although explicit security policies and incident response contacts are not prominently published. Overall, the website demonstrates high trustworthiness and compliance with GDPR, supported by comprehensive privacy and cookie policies. The domain registration data aligns well with the business claims, reinforcing legitimacy. Strategic recommendations include publishing a dedicated security policy, incident response information, and vulnerability disclosure to further enhance transparency and security culture.
- FORVIA HELLA
hella.com
Transportation · Germany
78Low
NIS2 47 · GDPR 68
NIS2 47 · GDPR 68
FORVIA HELLA is a large, internationally positioned automotive supplier specializing in high-performance lighting technology and vehicle electronics. The company also offers a broad portfolio of services and products for spare parts, workshops, and special vehicle manufacturers. The website reflects a professional corporate presence with comprehensive information for partners, investors, and job seekers. Technically, the site uses modern web technologies including JavaScript, Bootstrap, and Piwik PRO analytics, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and privacy compliance evident through detailed policies and cookie consent mechanisms, though explicit security headers and incident response contacts are absent. The WHOIS data is missing, which slightly reduces trust but the overall site content and branding strongly support legitimacy. Strategic recommendations include enhancing security headers, publishing vulnerability disclosure information, and improving accessibility features.
TicTac Learn ABtictaclearn.net
Education · Sweden
83Low
NIS2 17 · GDPR 95
NIS2 17 · GDPR 95
TicTac Learn AB is a European-based company specializing in e-learning and digital learning solutions, combining human creativity with AI-powered technology to deliver scalable learning platforms and custom content. The company holds a strong market position as a Core Leader on the Fosway 9-Grid™ and is ISO 27001 certified, emphasizing its commitment to security and compliance. Their offerings include well-known platforms such as Articulate 360, Docebo, Vyond, and Skillhabit, supported by comprehensive customer success services including training, onboarding, and AI readiness consulting. Technically, the website is built on Webflow CMS with integrations including Google Tag Manager, Sendinblue for marketing automation, Weglot for multilingual support, and Captcha.eu for form security. The site is well-optimized for performance, mobile responsiveness, and accessibility, with strong SEO practices and modern web technologies. Security posture is robust with HTTPS enforced, ISO certification, GDPR compliance, and use of CAPTCHA on forms. However, the absence of visible HTTP security headers and lack of published incident response or vulnerability disclosure policies represent areas for improvement. The missing WHOIS registration data is a notable concern for domain legitimacy, though the website content and trust signals strongly support business credibility. Overall, the website presents a professional, secure, and user-friendly digital presence suitable for its B2B education market. Strategic recommendations include enhancing security header implementation, publishing incident response information, and verifying domain registration details to strengthen trust and compliance.
SampsonMaysampsonmay.com
Technology · United Kingdom
81Low
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
SampsonMay is a London-based design and digital experience agency specializing in strategic consultancy, branding, design, and content creation services targeted at multinationals, established independents, and progressive start-ups. The company positions itself as a professional and creative partner in the technology sector, delivering tailored digital solutions. The website reflects a modern and professional digital presence with good design quality and user experience. Technically, the site leverages Cloudflare for security and performance, uses Umbraco CMS, and integrates Google Tag Manager and Cookiebot for analytics and privacy compliance. Security posture is strong with HTTPS enforcement, security headers, and anti-forgery cookies, though explicit security and incident response policies are not publicly disclosed. Privacy compliance is well addressed with a comprehensive privacy and cookie policy and a consent mechanism. However, the absence of WHOIS data and lack of explicit contact information slightly reduce the overall trustworthiness. Strategic recommendations include publishing terms of service, security policies, and incident response contacts to enhance transparency and trust.
Melrose Industries PLCmelroseplc.net
Transportation · United Kingdom
81Low
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Melrose Industries PLC is a UK-listed, industry-leading global aerospace business specializing in manufacturing aerospace engines and structures for major OEMs across civil and defense markets. The company emphasizes value creation, technology leadership, and sustainability, serving investors, customers, and stakeholders with comprehensive reporting and governance. The website demonstrates a mature digital presence with modern technologies, accessibility features, and clear navigation. Security posture is strong with HTTPS and cookie consent mechanisms, though explicit security headers and a public security policy are absent. The lack of WHOIS data introduces some uncertainty about domain registration legitimacy, but the professional corporate content and investor relations mitigate this risk. Overall, the website reflects a credible and well-managed aerospace business with room for security enhancements.
Satyssatys.com
Transportation · France
78Low
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Satys is a well-established French industrial group specializing in aerospace and railway mobility services, including aircraft painting, sealing, interiors manufacturing, and surface treatment. The company operates internationally with a strong presence in 13 countries and employs approximately 2,600 people. Their market position is strong, recognized as a world leader in aircraft painting and a French leader in composite treatment. The website reflects a professional and consistent brand image with good content quality and clear business focus. Technically, the website is built on Joomla CMS using modern frameworks such as Helix Ultimate and Bootstrap 5.3.3, with a moderate performance profile and good mobile optimization. Hosting is provided by OVH sas, a reputable provider. Security posture is adequate with HTTPS enabled and domain protections in place, though improvements such as DNSSEC and security headers are recommended. Security policies and incident response information are not explicitly presented on the website, indicating room for improvement in transparency and compliance. Privacy and cookie policies exist but lack advanced consent mechanisms. Overall, the site is safe, professional, and trustworthy, with no adult or questionable content detected. Strategic recommendations include enhancing security headers, enabling DNSSEC, implementing cookie consent mechanisms, and publishing clear incident response and vulnerability disclosure policies to strengthen compliance and trust.
Open Cosmos Ltd.open-cosmos.com
Technology · United Kingdom
81Low
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Open Cosmos Ltd. is a technology company specializing in the design, build, and operation of space missions, providing accessible satellite data and insights globally. The company offers end-to-end satellite mission services including assembly, launch, in-orbit operations, and data delivery. Their innovative OpenConstellation platform enables shared satellite infrastructure to address global challenges such as climate change and natural resource management. With multiple European offices and a strong social media presence, Open Cosmos positions itself as a key player in the satellite data and earth observation market. Technically, the website is built on modern web technologies including Webflow CMS, Google Fonts, and Google Tag Manager for analytics. The site is well-optimized for performance, mobile responsiveness, and accessibility, featuring a professional design and clear navigation. Cookie consent mechanisms and privacy policies indicate good privacy compliance. However, explicit security headers and incident response information are absent, representing areas for improvement. Security posture is solid with HTTPS enforced and no visible vulnerabilities or sensitive data exposure. The lack of WHOIS transparency slightly reduces trust but the overall business credibility remains high due to consistent branding, multiple physical addresses, and professional content. The site uses Google Analytics for moderate user tracking with good privacy compliance. Overall, Open Cosmos demonstrates a mature digital presence with strong business credibility and technical implementation. Strategic recommendations include enhancing security headers, publishing security policies, and improving WHOIS transparency to further strengthen trust and compliance.
Dragonfly Aerospacedragonflyaerospace.com
Technology · South Africa
76Low
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Dragonfly Aerospace is a South African-based technology company specializing in the design and manufacture of high-performance satellite imagers, payloads, and satellite buses for CubeSats, small satellites, and microsatellites. Positioned as a leader in the commercial aerospace sector, the company offers turnkey satellite solutions that minimize time, cost, and risk for Earth observation missions. Their flagship product, EOSSAT-1, exemplifies their capability in delivering advanced imaging technology for sustainable agriculture and forest monitoring. The company maintains a strong market presence supported by memberships in reputable aerospace organizations and a consistent stream of news and partnerships.
Open Cosmos Ltd.connected.space
Technology · United Kingdom
80Low
NIS2 29 · GDPR 83
NIS2 29 · GDPR 83
Open Cosmos Ltd. is a European space infrastructure company specializing in designing, building, and operating satellite missions. The company recently acquired Connected, a Portuguese startup focused on affordable space-based IoT connectivity, to enhance its technological autonomy and expand its footprint in Portugal. Open Cosmos operates production facilities across the UK, Spain, Greece, and now Portugal, serving both commercial and institutional clients with scalable satellite infrastructure and hosted payload technology. The company maintains a strong market position with a 100% mission success rate and profitability over the past four years. Technically, the website is built on the Webflow platform, leveraging modern web technologies such as Google Fonts, jQuery, and Google Tag Manager for analytics and marketing. The site is well-optimized for performance, mobile responsiveness, and accessibility, with comprehensive metadata and SEO practices. Cookie consent mechanisms and privacy policies are implemented, reflecting good privacy compliance. From a security perspective, the site enforces HTTPS and employs cookie consent but lacks explicit security headers and a public security policy or vulnerability disclosure. No exposed sensitive data or vulnerabilities were detected in the content. The WHOIS data for the domain is unavailable, likely due to privacy protection or recent registration, which slightly impacts trust but is common for tech startups. Overall, Open Cosmos presents a credible and professional digital presence aligned with its business objectives. Strategic recommendations include enhancing security transparency, publishing a security policy, and adding vulnerability disclosure mechanisms to strengthen trust and compliance.
Beyond Gravitybeyondgravity.com
Technology · Switzerland
78Low
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Beyond Gravity is a well-established aerospace technology company specializing in satellite and launcher components, with over 40 years of experience supporting space missions. Their website reflects a mature business with a clear focus on advancing humanity through space exploration technologies. The company targets aerospace professionals and organizations requiring advanced satellite and launcher solutions. Technically, the website is built on Drupal CMS, employs modern analytics (Matomo), and integrates a robust cookie consent mechanism (OneTrust), indicating a good level of digital maturity. Security posture is strong with HTTPS and security headers, though explicit security policies and incident response information are absent. The lack of WHOIS data slightly impacts trust but does not overshadow the professional presentation and compliance indicators. Overall, the website is trustworthy, well-structured, and compliant with privacy regulations.
- Akkodis
akkodis.com
Technology
91Low
NIS2 47 · GDPR 88
NIS2 47 · GDPR 88
Akkodis is a global technology and digital engineering company focused on Smart Industry solutions. They provide consulting, technology solutions, talent acquisition, and academy services to enterprises worldwide. The website demonstrates a mature digital presence with modern technologies such as Next.js and React, integrated monitoring via Dynatrace, and privacy compliance through OneTrust. Security posture is strong with HTTPS and security headers, though explicit security policies and incident response information are not published. The absence of WHOIS data reduces domain trust slightly but does not detract from the professional presentation and comprehensive service offerings. Overall, Akkodis presents as a credible and established enterprise technology partner.
Aernnovaaernnova.com
Transportation · Spain
81Low
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Aernnova is a leading aerospace company specializing in the design and manufacturing of aero structures such as wings, stabilizers, and fuselages using metal and composite materials. The company targets aerospace OEMs and partners, positioning itself as a key player in the aerospace manufacturing sector. The website reflects a professional and consistent brand image with good content quality and clear business focus. Technically, the site is built on Webflow with modern web technologies, includes cookie consent mechanisms, and uses Google Tag Manager for analytics. Security posture is strong with HTTPS and privacy compliance, though some security headers and explicit contact/security policies are missing. The WHOIS data is not available, which raises some concerns about domain registration transparency but does not detract from the professional presentation of the website. Overall, the site is well-structured, compliant, and trustworthy from a business and technical perspective.
GateHub Limitedgatehub.net
Finance · United Kingdom
83Low
NIS2 35 · GDPR 68
NIS2 35 · GDPR 68
GateHub Limited operates a digital wallet and trading platform focused on the Internet of Value, leveraging the XRP Ledger protocol. Established in 2014 and headquartered in London, UK, GateHub positions itself as a leading XRP Ledger wallet provider with a comprehensive suite of services including asset management, payments, trading, and wallet protection. The platform targets cryptocurrency users and traders seeking a secure and versatile environment for managing digital and fiat assets. The website reflects a mature business with consistent branding and a clear market presence. Technically, the website employs a modern technology stack including AngularJS, jQuery, Bootstrap, and various JavaScript libraries for charting and analytics. Hosting and DNS services are provided via Cloudflare, enhancing performance and security. The site is mobile-optimized and includes standard SEO and accessibility features, though some accessibility aspects could be improved. Privacy and cookie policies are well implemented with user consent mechanisms, and analytics tools such as Google Tag Manager and Sentry are used for monitoring and tracking. From a security perspective, the site enforces HTTPS and uses no-cache headers to protect sensitive data. However, DNSSEC is not enabled, and explicit security headers are not detected, representing areas for improvement. No critical vulnerabilities or exposed sensitive data were found. The absence of a published security policy and incident response contacts limits transparency in security governance. The WHOIS data aligns well with the business claims, indicating a legitimate and established domain registration. Overall, GateHub presents a professional, secure, and user-friendly platform with strong business credibility. Strategic enhancements in security headers, DNSSEC, and incident response transparency would further strengthen its security posture and trustworthiness.
- FORVIA
faurecia.com
Transportation · France
78Low
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
FORVIA is a major global supplier in the automotive industry, focusing on sustainable and innovative automotive technologies. The company positions itself as a tech company with a strong emphasis on sustainability and digital transformation in mobility. The website reflects a professional corporate presence with detailed sections on technologies, sustainability, investor relations, and careers. Technically, the site is built on Drupal 10 and uses Matomo for analytics, indicating a modern and privacy-conscious approach. Security posture is moderate with HTTPS implied but lacks visible security headers and explicit security policies. The absence of WHOIS data limits domain trust verification but the website content and branding suggest legitimacy. Privacy and cookie policies are not clearly found, indicating room for compliance improvement.
3Commas3commas.io
Finance · Estonia
83Low
NIS2 55 · GDPR 73
NIS2 55 · GDPR 73
3Commas is a well-established cryptocurrency trading platform founded in 2017, headquartered in Estonia. It offers a suite of automated trading tools including DCA bots, signal bots, grid bots, and a smart trading terminal, targeting cryptocurrency traders and investors globally. The platform integrates with major exchanges and supports multi-exchange portfolio management, positioning itself as a comprehensive solution for crypto trading automation. The website demonstrates a high level of professionalism, with excellent design, clear navigation, and strong trust signals such as high user ratings and active community engagement. Technically, the site leverages modern web technologies including React and Next.js, hosted behind Cloudflare with good performance and mobile optimization. Security posture is strong with HTTPS, security headers, and client transfer protection on the domain, though DNSSEC is not enabled. Privacy compliance is addressed with clear privacy and cookie policies and consent mechanisms. Overall, 3Commas presents a credible, secure, and user-friendly platform for crypto trading automation.
Biessebiesse.com
Manufacturing · Italy
78Low
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Biesse is an established international manufacturing company specializing in lines, machines, and components for processing wood, glass, stone, polymers, and composites. The company targets industrial manufacturers in these sectors and operates a professional, well-branded website built with modern technologies such as Gatsby and hosted likely on Netlify. The website demonstrates good design quality, mobile optimization, and SEO practices. Security posture is solid with HTTPS and cookie consent management via Cookiebot, but lacks explicit privacy policies, terms of service, and security headers which are recommended for enhanced compliance and security. WHOIS data confirms the domain's legitimacy and long-standing presence since 1997, consistent with the company's profile. Overall, the website is professional and trustworthy but could improve privacy and security disclosures.
- Vent | Ötztal | oetztal.com
vent.at
Hospitality · Austria
81Low
NIS2 22 · GDPR 100
NIS2 22 · GDPR 100
The website www.oetztal.com/de/regionen-orte/vent serves as a regional tourism portal focused on the Vent village in the Ötztal valley, Austria. It provides visitors with information about alpine hiking, skiing, and local attractions. The site targets tourists and outdoor enthusiasts seeking authentic mountain experiences. The business model centers on tourism promotion and regional marketing, positioning itself as a trusted source for travel planning in the region. Technically, the website employs modern JavaScript libraries such as GSAP, Swiper, Leaflet, and Rive for interactive and visual content. It integrates Google Tag Manager for analytics and Cookiebot for cookie consent management, reflecting a moderate level of digital maturity. The site is mobile-optimized with good SEO practices and a professional design, although accessibility features are basic. From a security perspective, the site uses HTTPS and a comprehensive cookie consent mechanism, but lacks visible security headers and explicit privacy or security policies in the provided content. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data reduces the trust score, but the website content and technical setup indicate a legitimate and professional operation. Overall, the website presents a solid tourism information platform with room for improvement in privacy transparency, security headers, and incident response readiness. Strategic enhancements in these areas would strengthen user trust and compliance posture.
Dealfrontdealfront.com
Technology
83Low
NIS2 47 · GDPR 70
NIS2 47 · GDPR 70
Dealfront is a technology company specializing in providing a SaaS platform designed to drive reliable growth by identifying, prioritizing, and engaging high-intent accounts. Positioned as a growth acceleration tool for B2B sales and marketing teams, Dealfront offers services that enhance conversion rates and revenue goals. The website reflects a professional and consistent brand image, targeting medium-sized businesses in the technology sector. The platform leverages modern web technologies such as React and Gatsby, ensuring a fast and responsive user experience. Privacy and cookie policies are comprehensive and GDPR compliant, indicating a mature approach to data protection. Security posture is solid with HTTPS enforcement and standard security headers, though explicit security policies and incident response information are not publicly available. The absence of WHOIS data raises concerns about domain registration legitimacy, which impacts overall trustworthiness from a domain perspective. However, the website content and technical infrastructure suggest a credible and professional business presence.
ADS Groupadsgroup.org.uk
Manufacturing · United Kingdom
76Low
NIS2 55 · GDPR 83
NIS2 55 · GDPR 83
ADS Group is a prominent UK trade association representing the aerospace, defence, security, and space sectors. The organization focuses on advancing leadership and enabling prosperity and sustainable growth within these critical industries. Their services include business development, security vetting, SME support, and organizing industry events, positioning them as a key player in the UK advanced engineering ecosystem. The website reflects a mature digital presence with a modern WordPress-based infrastructure, leveraging Elementor, Bootstrap, and Google Tag Manager for analytics and marketing. Security posture is solid with HTTPS and recognized certifications such as ISO 9001, ISO 27001, and Cyber Essentials Plus, though some security headers could be improved. Privacy and cookie policies are comprehensive and GDPR compliant, supporting strong privacy practices. Overall, the site demonstrates high professionalism, trustworthiness, and effective communication of business objectives.
KONGSBERG - an international technology groupkongsberg.com
Energy · Norway
81Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
KONGSBERG is a large, internationally recognized technology group specializing in high-technology systems and solutions for the oil and gas, merchant marine, defense, and aerospace industries. The company targets industrial and governmental customers with a B2B business model, leveraging a diversified portfolio of subsidiaries and partner companies. Their website reflects a mature digital presence with comprehensive content, professional design, and clear navigation tailored to their target audience. Technically, the website employs modern analytics and tracking technologies such as Piwik PRO, Azure Application Insights, and Google Tag Manager, combined with a robust consent management system via OneTrust. The site is hosted on a reliable CDN infrastructure (Amazon CloudFront) and demonstrates good performance, mobile optimization, and accessibility standards. From a security perspective, the site enforces HTTPS, implements key security headers, and manages user consent effectively. However, it lacks a dedicated security policy or incident response page, and no vulnerability disclosure policy is published. The absence of WHOIS data is a notable anomaly but does not detract significantly from the overall legitimacy given the professional business presence. Overall, the website presents a low-risk profile with strong business credibility and compliance posture. Strategic improvements in transparency around security policies and incident response would further enhance trust and security maturity.
GKN Aerospace Services Limitedgknaerospace.com
Transportation · United Kingdom
86Low
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
GKN Aerospace Services Limited is a leading global tier one aerospace supplier specializing in aero-engine products, airframe structures, and aftermarket services. The company serves over 90% of the world's aircraft and engine manufacturers with a strong presence in both civil and defense aerospace markets. The website reflects a mature digital presence with comprehensive content, clear navigation, and professional branding consistent with a large enterprise in the transportation and manufacturing sectors. Technically, the site employs modern JavaScript frameworks, cookie consent management, and accessibility tools, indicating a commitment to user experience and compliance. Security posture is good with HTTPS and consent mechanisms, though explicit security policies and vulnerability disclosures are absent. The WHOIS data is missing or indicates the domain may not be currently registered, which is a critical concern for domain legitimacy despite the professional website content. Overall, the site is trustworthy from a content and business perspective but requires domain registration verification and enhanced security transparency.
Dassault Aviationdassault-aviation.com
Transportation · France
84Low
NIS2 17 · GDPR 95
NIS2 17 · GDPR 95
Dassault Aviation is a leading French aerospace company specializing in the design, manufacture, and support of combat aircraft and business jets, including renowned brands such as Rafale, Falcon, and nEUROn. The company holds a strong market position as a major player in aeronautics with a global presence and a history dating back to 1916. The website reflects a mature digital presence with comprehensive content tailored to industry professionals, customers, and enthusiasts. Technically, the site is built on WordPress with modern analytics and tracking tools, optimized for performance and accessibility. Security posture is robust with HTTPS enforcement, security headers, and GDPR-compliant cookie consent mechanisms, although explicit security policies and incident response details are not publicly available. Overall, the domain appears legitimate despite WHOIS privacy protection, consistent with the company's stature and security needs.
- Editora Moderna
salamandra.com.br
Education · Brazil
80Low
NIS2 17 · GDPR 65
NIS2 17 · GDPR 65
Editora Moderna is a well-established Brazilian educational publisher specializing in literature and didactic materials for schools and educational institutions. The website serves as a comprehensive catalog for their literature offerings, targeting educators, students, and institutions. The company operates under the Santillana group, with related brands such as Richmond and Santillana Espanol. The site demonstrates a professional digital presence with modern web technologies and a focus on accessibility and privacy compliance. Technically, the site uses Next.js framework, hosted on AWS infrastructure, and integrates analytics and tracking tools such as Google Analytics, Facebook Pixel, and Hotjar. Security posture is strong with HTTPS enforcement and standard security headers, though explicit security policies and incident response contacts are not published. Overall, the site is trustworthy, well-maintained, and compliant with privacy regulations, making it a reliable resource for its target audience.
Anglo-American University in Pragueaauni.edu
Education · Czech Republic
80Low
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
Anglo-American University in Prague is a well-established non-profit higher education institution founded in 1990, offering dual accredited bachelor and master programs in English across diverse fields such as Business, International Relations, Humanities, and Law. The university positions itself as a leading private university in Prague with a strong international presence and multiple accreditations. The website reflects a professional and comprehensive digital presence, targeting prospective and current students, faculty, and academic partners. Technically, the site is built on WordPress with modern performance and SEO optimizations, leveraging various analytics and marketing tools while maintaining GDPR-compliant cookie consent mechanisms. Security posture is solid with HTTPS and cookie consent, though some HTTP security headers and formal security policies are not explicitly published. The absence of WHOIS domain registration data is a notable concern but does not detract significantly from the overall legitimacy given the rich content and trust signals. Strategic recommendations include enhancing security header implementation, publishing a security policy, and adding vulnerability disclosure information to further improve trust and compliance.
- Editora Moderna
moderna.com.br
Education · Brazil
80Low
NIS2 17 · GDPR 65
NIS2 17 · GDPR 65
Editora Moderna is a well-established educational publisher in Brazil, offering a wide range of educational content and services targeted at public and private schools across various educational levels. The company is part of the larger Grupo Santillana and Grupo Prisa, which strengthens its market position and credibility. The website reflects a professional and consistent brand image with good content quality and user experience tailored for educators and students. Technically, the site uses modern frameworks such as Next.js and integrates popular analytics and tracking tools like Google Analytics, Facebook Pixel, and Hotjar, hosted on AWS infrastructure. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although explicit security policies and incident response contacts are not published. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site is trustworthy and professionally maintained, suitable for its educational audience.
Pralinedesignbypraline.com
Media
76Low
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Praline is a well-established design studio specializing in branding, digital, and cultural design services. With over 20 years of experience, the company focuses on delivering creative solutions including brand strategy, visual identity, digital platforms, and cultural projects such as exhibitions and campaigns. Their market position is that of a boutique, client-focused studio with a strong portfolio and consistent branding. Technically, the website is built on WordPress using modern libraries like jQuery and Advanced Custom Fields Pro, with Matomo analytics implemented in a privacy-conscious manner (cookies disabled). The site is moderately performant and mobile-optimized, though accessibility features are basic. Security posture is adequate with HTTPS and domain transfer protections, but lacks DNSSEC and security headers. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the website is professional and trustworthy but could improve in privacy and security transparency.