Security reports directory
150,188 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,188001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
51–100 of 150,188
- GGoDaddy.com LLC
damoas.com
Technology · United States
85Low
NIS2 70 · GDPR 100
NIS2 70 · GDPR 100
The website damoas.com is a parked domain page hosted and managed by GoDaddy.com LLC, a well-known domain registrar and parking service provider. The site offers the domain for sale and includes minimal content primarily focused on domain parking and advertising. The target audience is domain buyers and investors rather than end consumers. The technical infrastructure relies on GoDaddy's parking platform with React-based frontend components and embedded Trustpilot widgets for trust signals. The site lacks a content management system and advanced SEO or accessibility features. Security posture is minimal with no detected security headers or HTTPS enforcement visible in the provided data. Privacy compliance is basic, with only a rudimentary privacy policy link and no cookie consent mechanism. Overall, the site serves as a placeholder rather than an active business website.
- Fashiongo
fashiongo.net
Retail · United States
82Low
NIS2 70 · GDPR 59
NIS2 70 · GDPR 59
Fashiongo.net operates as a leading online B2B wholesale marketplace specializing in fashion apparel, shoes, accessories, and home decor. It connects wholesale vendors with retail buyers globally, offering a comprehensive platform for trade shows, promotions, and affiliate programs. The website demonstrates a mature market position with a clear focus on wholesale fashion industry participants. Technically, the site employs modern JavaScript frameworks such as Vue.js, integrates multiple analytics and marketing tools, and is hosted on AWS infrastructure, indicating a robust and scalable digital presence. Security-wise, the site enforces HTTPS, implements cookie consent mechanisms, and uses encryption libraries, reflecting a strong security posture with room for improvement in public security policy disclosures. Overall, the site is professional, well-branded, and trustworthy, with no detected blocking or WAF interference, making it accessible and reliable for its target audience.
Phantom Blade Zero Savesphantombladezerosaves.com
Other
82Low
NIS2 70 · GDPR 62
NIS2 70 · GDPR 62
Phantom Blade Zero Saves is a niche website dedicated to providing PC gamers of Phantom Blade Zero with starter save files and a browser-based save editor. The site offers verified decrypted save files compatible with the Steam PC edition of the game, along with detailed guides on save file locations and troubleshooting. It targets a specialized gaming audience seeking to enhance or modify their game experience. Technically, the website is well-implemented with modern web standards, including local cryptographic operations for save editing, Google Fonts for typography, and Google AdSense for monetization. The site is mobile-optimized and accessible, with clear navigation and relevant content. However, it lacks formal privacy and cookie policies, contact information, and explicit security policies, which are areas for improvement. Security posture is moderate with no visible vulnerabilities but missing security headers and incident response contacts. Overall, the website is functional, trustworthy within its niche, but could enhance compliance and security transparency.
Kinetics Beautykineticsbeauty.com
E-commerce
93Low
NIS2 75 · GDPR 100
NIS2 75 · GDPR 100
Kinetics Beauty operates a professional e-commerce platform specializing in nail and beauty products, targeting professional nail technicians and beauty industry professionals. The website offers a wide range of products including gel polishes, nail colors, and skin and nail care items, positioning itself as a reputable brand in the beauty sector with international reach. The business model is primarily retail-focused, leveraging an online Magento-based platform enhanced with modern themes and tools for a professional user experience. Technically, the website employs Magento CMS with Hyvä themes and Magezon builder, integrating analytics tools such as PostHog and Google Tag Manager. The site demonstrates good mobile optimization and SEO practices, though accessibility features are basic. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms with blocking mode, but lacks explicit security headers and published security policies. No vulnerabilities or exposed sensitive data were detected. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security disclosures.
Chickenheads.linkchickenheads.link
Technology
49High
NIS2 75 · GDPR 100
NIS2 75 · GDPR 100
Chickenheads.link is a niche website providing customizable profile pages for managing important links, primarily supporting the band Radioactive Chicken Heads. The site is powered by LinkStack, an open-source, privacy-focused link management platform. The business model centers on serving fans and users who want a centralized link management solution with a band affiliation. Technically, the site uses modern web technologies including Bootstrap 5, JavaScript libraries, and CSS frameworks, delivering a good user experience with mobile optimization and decent SEO. Security posture is solid with HTTPS enforced and no exposed sensitive data, but lacks advanced security headers and explicit cookie consent mechanisms. Privacy compliance is basic with a privacy policy present but no cookie banner or GDPR explicit indicators. Overall, the site is trustworthy with no adult or questionable content, but could improve in security and privacy transparency.
- Centric Software
centricsoftware.com
Technology · United States
91Low
NIS2 85 · GDPR 62
NIS2 85 · GDPR 62
Centric Software is a well-established technology company specializing in AI-powered Product Lifecycle Management (PLM), Planning, Pricing, and Product Experience Management (PXM) solutions. Their market position is strong as a leading provider serving brands, retailers, and manufacturers aiming to optimize product development and retail performance. The company offers comprehensive software solutions that help reduce costs, improve margins, and accelerate time-to-market. The website reflects a professional and consistent brand image targeting B2B clients in the retail and manufacturing sectors. Technically, the website is built on modern frameworks such as Next.js and Material UI, hosted on Vercel, and integrates multiple analytics and marketing tools including Google Tag Manager, Microsoft Clarity, and Cookiebot for privacy compliance. The site is fast, mobile-optimized, and accessible, with good SEO practices. Security best practices are observed with HTTPS enforcement and security headers, although a dedicated security policy or incident response page is not present. The security posture is solid with no detected vulnerabilities or exposed sensitive data. Privacy compliance is strong, featuring comprehensive privacy and cookie policies with explicit consent mechanisms. Business credibility is high, supported by transparent WHOIS data consistent with the company's claims and a professional online presence. Overall, the website presents a low-risk profile with strong technical and privacy compliance. Strategic recommendations include publishing a dedicated security policy, incident response contacts, and a vulnerability disclosure program to further enhance trust and security maturity.
osapiensosapiens.com
Technology
93Low
NIS2 85 · GDPR 100
NIS2 85 · GDPR 100
osapiens is a technology company offering an AI-driven platform that integrates compliance and supplier intelligence to help businesses manage risk and enhance resilience. The platform supports multiple compliance regulations and operational needs, serving a broad B2B audience. The website is professionally designed, mobile-optimized, and provides clear navigation to various solution suites and regulatory topics. Technically, the site uses modern frameworks including Ibexa DXP, integrates with marketing and analytics tools such as HubSpot, Google Analytics, and Kameleoon, and employs robust cookie consent management via Cookiebot. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though explicit security policies and incident response contacts are not published. Overall, the domain registration is consistent with the business profile, indicating legitimacy and trustworthiness.
Factorialfactorialhr.com
Technology · Spain
92Low
NIS2 85 · GDPR 80
NIS2 85 · GDPR 80
Factorial is a technology company specializing in AI-powered business management solutions, integrating HR, finance, and IT systems into a unified platform. Established in 2016 and headquartered in Barcelona, Spain, Factorial targets businesses seeking to streamline operations through intelligent automation. Their market position is that of an innovative SaaS provider with a strong focus on AI-driven contextual understanding of company processes. The website reflects a professional and modern digital presence, supporting multiple languages and regions, indicating a medium-sized enterprise with international reach. Technically, the website leverages modern frameworks such as Next.js and React, hosted likely on performant cloud infrastructure. It employs advanced analytics and marketing tools including Google Tag Manager and Visual Website Optimizer, demonstrating a mature digital marketing and optimization strategy. The site is well-optimized for mobile devices and accessibility, with good SEO practices evident from metadata and structured data. From a security perspective, the site enforces HTTPS with strong SSL configuration and implements multiple security headers. While no explicit security policy or incident response contacts are published, the site follows best practices in cookie consent and privacy policy compliance, indicating a good security posture. No vulnerabilities or suspicious elements were detected in the content or scripts. Overall, Factorial presents a trustworthy and professional online presence with strong business credibility and technical maturity. Strategic recommendations include publishing a dedicated security policy, incident response contacts, and vulnerability disclosure information to enhance transparency and trust further.
CheckMySourcecheckmysource.com
Technology
96Low
NIS2 75 · GDPR 100
NIS2 75 · GDPR 100
CheckMySource is a small technology company operating a crowd-sourced platform that provides safety reports on websites based on user feedback for specific activities such as logging in, paying, uploading files, and writing notes. The service emphasizes transparency by showing raw counts behind verdicts and does not require user accounts for lookup or reporting, positioning itself as a niche community-driven website safety resource. The website is well designed with good mobile optimization and accessibility, offering a clear and professional user experience. Technically, the site uses modern web standards including HTML5, CSS3, JavaScript, and web manifest files, though no major frameworks or CMS are detected. Security posture is moderate with HTTPS implied but lacking explicit security headers and published security policies. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism or GDPR compliance indicators. Business credibility is supported by transparent operations and no paid ratings, but contact information is limited to a web form without direct emails or phone numbers. Overall, the site is trustworthy and safe with no adult or questionable content detected.
Remove Music From Videoremovemusicfromvideo.com
Technology
89Low
NIS2 70 · GDPR 100
NIS2 70 · GDPR 100
Remove Music From Video is a specialized online service that enables users to remove background music from video files while preserving clear voice tracks. The service targets content creators such as YouTubers, TikTokers, video editors, gamers, and educators who need to isolate voice audio for various purposes. The business operates on a SaaS model offering credit packs and subscription plans, allowing users to pay per minute of video processed. The website is professionally designed with clear navigation, comprehensive FAQs, and transparent pricing. Technically, it leverages modern web technologies including React and integrates multiple analytics platforms for performance and marketing insights. Security is well considered with HTTPS enforcement, encrypted payment processing via Waffo, and privacy-focused audio processing that avoids uploading full video files. Privacy and cookie policies are present with consent mechanisms, supporting GDPR compliance. Overall, the domain registration data aligns with the website content, indicating legitimacy and trustworthiness.
- Linkjob AI
linkjob.ai
Technology
86Low
NIS2 70 · GDPR 75
NIS2 70 · GDPR 75
Linkjob AI operates as a technology company specializing in AI-powered interview assistance tools designed to provide real-time, invisible support during technical and behavioral interviews. Their market position is focused on stealth and undetectability, targeting job seekers and professionals preparing for interviews across multiple languages and platforms. The company offers a SaaS business model with key services including AI interview copilots, coding interview assistants, and mock interview tools. The website content is professional, well-branded, and rich in multimedia testimonials, enhancing user trust and engagement. Technically, the website is built using modern frameworks such as Astro, leveraging JavaScript ES modules, and integrates analytics and user engagement tools like Microsoft Clarity, Hotjar, and Google Tag Manager. The site is optimized for performance, mobile responsiveness, and accessibility, reflecting a mature digital infrastructure. Hosting and CMS details are not explicitly identified but the technical stack indicates a modern, performant setup. From a security perspective, the site enforces HTTPS and employs modern JavaScript practices with no visible sensitive data exposure. However, it lacks explicit security headers, published security policies, and incident response contact information, which are areas for improvement. Privacy compliance is limited due to the absence of privacy and cookie policies or consent mechanisms, representing a compliance gap especially under GDPR. Overall, the website presents a low-risk profile with strong business credibility and technical maturity but should enhance privacy and security disclosures to improve compliance and user trust. Strategic recommendations include publishing comprehensive privacy and cookie policies, implementing security headers, and providing clear incident response contacts to strengthen the security posture and regulatory compliance.
- Sensei AI
senseiai.me
Technology
82Low
NIS2 60 · GDPR 75
NIS2 60 · GDPR 75
Sensei AI is a technology company specializing in AI-powered interview assistance tools designed to provide real-time, invisible guidance during live and mock interviews. Their flagship product, Sensei AI Copilot, supports multiple interview types including coding, behavioral, and system design, offering personalized answers based on user resumes and job descriptions. The company positions itself as a niche player in the AI interview assistant market with a subscription-based business model and a focus on seamless integration with popular interview platforms. Technically, the website is built using modern frameworks like Astro and integrates various analytics and user engagement tools such as Microsoft Clarity, Hotjar, and Google Tag Manager. The site is well-optimized for performance, mobile responsiveness, and accessibility, reflecting a mature digital presence. Security posture is strong with HTTPS enforcement and appropriate security headers, though the absence of explicit security policies and vulnerability disclosure mechanisms suggests room for improvement. Overall, the website presents a professional, trustworthy, and user-focused experience with clear business credibility and technical sophistication.
Image to Imageimagetoimage.tools
Technology
89Low
NIS2 70 · GDPR 100
NIS2 70 · GDPR 100
Image to Image is a specialized AI-driven image editing platform that allows users to transform existing photos using text prompts. The service targets both individual users and businesses seeking creative image restyling, product photo enhancement, and avatar creation. The platform operates on a subscription and credit-based model, offering multiple tiers to accommodate different usage levels. Technically, the website is built with modern web technologies, likely leveraging React or a similar framework, and integrates multiple analytics services for performance and marketing insights. The site is well-optimized for mobile and accessibility, with a professional design and clear navigation. Security-wise, the site enforces HTTPS and uses a secure third-party payment processor (Waffo), but could improve by adding explicit security headers and publishing a security policy. Privacy compliance is strong, with clear privacy and cookie policies and a consent mechanism. Overall, the website presents a trustworthy and professional image with a solid technical foundation.
WEBHOUSE s.r.o.vismo.cz
Government · Czech Republic
82Low
NIS2 80 · GDPR 67
NIS2 80 · GDPR 67
WEBHOUSE s.r.o. is a well-established Czech company specializing in providing web solutions primarily for public administration, including over 2,000 websites and serving more than 30% of Czech towns. Their flagship product, the Vismo 6 content management system, is a modern, secure, and flexible platform designed to meet current legislative and accessibility standards. The company emphasizes long-term support and integration with mobile applications and advanced features such as two-factor authentication and verified forms. Technically, the website employs modern JavaScript frameworks, analytics, and security tools, ensuring a good user experience and compliance with privacy regulations. Security posture is strong, supported by ISO 27001 certification and HTTPS enforcement, although some security headers could be improved. Overall, the website is professional, trustworthy, and well-aligned with its business objectives.
Megomego.lv
Retail · Latvia
92Low
NIS2 85 · GDPR 97
NIS2 85 · GDPR 97
Mego is a well-established retail grocery company operating in Latvia, providing a broad range of grocery products and customer services including a loyalty program and culinary content. The website is professionally designed with good navigation and mobile optimization, supporting multiple languages (Latvian and Russian). The technical infrastructure is based on WordPress with modern integrations such as Cookiebot for cookie consent, Google Tag Manager, and Facebook Pixel for analytics and marketing. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in security headers and explicit security policies. Privacy compliance is basic, with no explicit privacy policy or terms of service pages found, which should be addressed to enhance trust and compliance. Overall, the website reflects a credible and professional retail brand with extensive user tracking for marketing purposes.
- What is ts.net?
ts.net
Other
92Low
NIS2 95 · GDPR 77
NIS2 95 · GDPR 77
The website ts.net presents a minimal informational page with the title 'What is ts.net?'. It leverages modern web technologies including React and Next.js frameworks, and integrates multiple analytics and advertising tools such as Google Analytics 4, Microsoft Clarity, LinkedIn Insight Tag, Reddit Pixel, and Bing Ads. Despite the technical sophistication, the site lacks visible business information, contact details, privacy policies, or terms of service, which limits its transparency and trustworthiness. The domain registration is privacy protected, which is common but reduces public visibility into ownership details. Security posture is weak due to absence of security headers and explicit security policies. Overall, the site appears to be a technology-related informational resource but lacks comprehensive compliance and business credibility indicators.
- GGigahost AS
ithvr.no
Technology · Norway
88Low
NIS2 85 · GDPR 85
NIS2 85 · GDPR 85
The website ithvr.no is currently a parked domain hosted by Gigahost AS, a Norwegian hosting provider. The domain does not have an active website but may have other services such as email in use. The hosting provider offers virtual servers, dedicated servers, and colocation services, positioning itself as a technology service provider in Norway. The website content is minimal, serving only as a placeholder with branding and a call to action to visit the hosting provider's main site. Technically, the site uses standard HTML, CSS, and JavaScript with automatic SSL provisioning, ensuring secure HTTPS access. The site is mobile optimized and accessible but lacks advanced SEO and accessibility features. No CMS or third-party analytics/tracking tools are detected, indicating a simple and lightweight technical setup. From a security perspective, the site benefits from automatic SSL but lacks security headers and formal policies such as privacy, cookie, or terms of service. No contact or incident response information is provided, limiting transparency and compliance. The domain registration data aligns with the hosting provider, showing consistency and legitimacy. Overall, the site scores low on content and privacy compliance but maintains a moderate security posture due to SSL and hosting by a reputable provider. Strategic improvements include adding privacy and cookie policies, security headers, and contact information to enhance trust and compliance.
Dola AIdola-ai.com
Technology
82Low
NIS2 60 · GDPR 75
NIS2 60 · GDPR 75
Dola AI is a technology company specializing in AI-powered creative tools that enable users to generate and edit images, videos, 3D scenes, and office documents such as spreadsheets and PDFs. The platform operates on a credit-based model, targeting creative professionals and businesses seeking advanced multimedia generation capabilities. The website demonstrates a high level of digital maturity with a modern tech stack including JavaScript frameworks, Three.js for 3D rendering, and integration of analytics tools like Google Tag Manager and Plausible Analytics. The site is well-designed, mobile-optimized, and offers clear navigation across a broad suite of AI tools and models. Security posture is solid with HTTPS and no visible vulnerabilities, though explicit security headers and policies are absent. Privacy compliance is lacking due to missing privacy and cookie policies. Overall, the platform appears legitimate and professionally managed, but would benefit from enhanced transparency in privacy and security policies.
filmcraftfilmcraft.tools
Technology
82Low
NIS2 60 · GDPR 75
NIS2 60 · GDPR 75
filmcraft.tools is a technology-focused website offering a free, browser-based video editing platform enhanced with AI-powered video generation and editing tools. The platform targets video creators and content producers seeking accessible, no-installation-required video editing solutions. It provides a broad range of AI video tools including text-to-video, image-to-video, video upscaling, background removal, face swap, and lip sync features, positioning itself as a comprehensive multimedia editing suite. The business model centers on free access with optional sign-in for saving and exporting projects, while AI generation features operate on a credit system. Technically, the website employs modern web technologies such as JavaScript frameworks (likely React), Tailwind CSS for styling, and integrates Google Tag Manager and Plausible Analytics for tracking. The site is well-optimized for performance, mobile responsiveness, and accessibility, with a professional design and clear navigation structure. Security is robust with HTTPS enforced and multiple security headers present, though formal security policies and incident response information are absent. The security posture is strong overall, with no visible vulnerabilities or exposed sensitive data. However, the absence of explicit privacy, cookie, and terms of service policies, as well as lack of vulnerability disclosure mechanisms, represents compliance and transparency gaps. Contact information is limited to a verified company email address, with no phone or physical address provided. Overall, filmcraft.tools presents a trustworthy and professional online video editing service with advanced AI capabilities. Strategic improvements in privacy compliance and security transparency would enhance user trust and regulatory adherence.
ArtCraftartcraft.tools
Technology
82Low
NIS2 60 · GDPR 75
NIS2 60 · GDPR 75
ArtCraft is a technology company offering a comprehensive web-based creative studio that integrates manual image editing, 3D scene composition, video editing, and AI-powered generation and editing tools. The platform targets creative professionals and digital artists seeking an all-in-one solution for multimedia content creation. The business model is credit-based, allowing users to access AI features through purchased credits, positioning ArtCraft as an innovative player in the AI-driven creative tools market. Technically, the website employs modern web technologies including React, Tailwind CSS, and SVG icons, with performance optimizations such as module preloading and responsive design. SEO and accessibility are well addressed, and the site uses Google Tag Manager for analytics. The infrastructure appears robust and optimized for fast, mobile-friendly user experiences. From a security perspective, the site enforces HTTPS and shows signs of good security practices, though explicit security headers and policies are not visible in the provided data. There is no evidence of exposed sensitive data or vulnerabilities. However, the absence of privacy and cookie policies, as well as incident response contacts, indicates gaps in compliance and transparency. Overall, ArtCraft presents a professional and trustworthy online presence with strong technical foundations and a clear business focus. To enhance security posture and compliance, it is recommended to publish comprehensive privacy and cookie policies, establish a vulnerability disclosure program, and provide clear incident response information.
freeCodeCampfreecodecamp.com
Education · United States
93Low
NIS2 95 · GDPR 75
NIS2 95 · GDPR 75
freeCodeCamp.org is a well-established nonprofit educational platform founded in 2014, dedicated to providing free coding courses and certifications globally. The website offers a comprehensive curriculum covering programming, DevOps, cybersecurity, AI engineering, and language skills for developers. It targets individuals seeking accessible, high-quality education in technology without cost barriers. The platform enjoys a strong market position as a leading free coding education provider with a large and active user community. Technically, the website leverages modern web technologies including React and Gatsby, ensuring fast performance, mobile optimization, and good accessibility. Integration with Stripe for payment processing and Google Tag Manager for analytics reflects a mature digital infrastructure. The site maintains good SEO practices and a professional design, enhancing user experience and engagement. From a security perspective, freeCodeCamp employs HTTPS with strong SSL configuration and security headers such as CSP and HSTS. While no critical vulnerabilities or exposed sensitive data were detected, the site lacks a publicly available formal security policy or incident response plan. Privacy compliance is well addressed with clear privacy and cookie policies, including GDPR considerations. However, direct security contact channels and vulnerability disclosure mechanisms are absent. Overall, freeCodeCamp.org presents a low-risk profile with high trustworthiness and professionalism. Strategic improvements in formalizing security policies and incident response communications would further strengthen its security posture and stakeholder confidence.
- StyleAndPix
styleandpix.com
E-commerce
100Low
NIS2 100 · GDPR 100
NIS2 100 · GDPR 100
StyleAndPix is an e-commerce platform that enables users to create unique AI-generated artwork and have it printed on premium products such as t-shirts, mugs, and canvases, with worldwide delivery. The website demonstrates a modern and professional design, leveraging React and Vite technologies, and integrates monitoring and analytics tools like Sentry and Google Tag Manager. While the platform offers a smooth user experience with real-time previews and customization features, it lacks visible privacy and cookie policies, as well as explicit contact information, which are important for compliance and user trust. Security posture is generally good with HTTPS enforced, but the absence of security headers and vulnerability disclosure mechanisms suggests room for improvement. Overall, the site is safe for general audiences and presents a credible business profile with consistent WHOIS data.
Other
75Medium
NIS2 83 · GDPR 75
NIS2 83 · GDPR 75
The website mahindrafirstchoice.com is currently inaccessible, returning a 403 Forbidden error page with no visible content or metadata. This prevents any meaningful analysis of the business, its services, or technical infrastructure. The lack of accessible content also means no privacy, cookie, or terms of service policies are present, and no contact information or security policies can be identified. The WHOIS data is privacy protected, limiting the ability to verify domain registration legitimacy or business details. Overall, the site appears to be either restricted by server permissions or misconfigured, resulting in a poor security and compliance posture. Strategic recommendations include restoring proper website access, implementing security best practices, and publishing necessary compliance documentation.
Kamer Commerce d.o.o. Sarajevokamer.ba
Retail · Bosnia and Herzegovina
87Low
NIS2 75 · GDPR 47
NIS2 75 · GDPR 47
Kamer Commerce d.o.o. Sarajevo operates the website kamer.ba, serving as a leading authorized importer, distributor, and service provider of Kärcher cleaning devices in Bosnia and Herzegovina since 1997. The company targets both hobbyist and professional customers, offering a wide range of cleaning machines, accessories, and related services including sales, service, and rental. The website is well-structured with clear navigation and product categorization, supporting e-commerce functionalities such as product search and shopping cart. Technically, the site employs modern frontend libraries and frameworks, integrates Google Analytics and reCAPTCHA for security and analytics, and uses HTTPS with CSRF tokens to protect user interactions. However, it lacks explicit privacy and cookie policies, security headers, and vulnerability disclosure mechanisms, which are important for compliance and trust. Overall, the site demonstrates a moderate to good security posture and business credibility but would benefit from enhanced privacy compliance and security transparency.
Kamer Commerce d.o.o. Sarajevoplusline.ba
Technology · Bosnia and Herzegovina
83Low
NIS2 70 · GDPR 47
NIS2 70 · GDPR 47
plusline.ba is a professional e-commerce website operated by Kamer Commerce d.o.o. Sarajevo, serving as the authorized MikroTik Master Distributor for Bosnia and Herzegovina. The company specializes in distributing and retailing active and passive network equipment, including MikroTik and Ubiquiti products, targeting businesses and professionals in the telecommunications and technology sectors within the region. The website features a modern WordPress-based infrastructure with WooCommerce for e-commerce capabilities and Elementor for page building, complemented by SEO optimization via Yoast and marketing integrations such as Google Analytics and AdSense. Security measures include HTTPS, reCAPTCHA on forms, and password strength meters, although explicit security policies and vulnerability disclosures are absent. Overall, the site presents a trustworthy and professional digital presence with room for improvement in privacy and security transparency.
GitHub Inc.github.io
Technology · United States
93Low
NIS2 75 · GDPR 100
NIS2 75 · GDPR 100
GitHub Inc. operates the GitHub Pages service, enabling users to host static websites directly from GitHub repositories without separate hosting. Positioned as a leading platform in developer tools and collaboration, GitHub integrates website hosting with its core repository services, targeting developers, organizations, and individuals. The website content is professionally crafted, comprehensive, and well-structured, reflecting GitHub's enterprise-grade service offerings and strong market presence. Technically, the site leverages modern frameworks such as Next.js and Jekyll, ensuring fast performance, excellent mobile optimization, and accessibility compliance. Security is robust with enforced HTTPS, multiple security headers, and no detected vulnerabilities or exposed sensitive data. Privacy policies and terms of service are clearly linked, supporting GDPR compliance, although explicit cookie consent mechanisms and dedicated security policy pages are absent. Overall, the site demonstrates a mature digital infrastructure and trustworthy business credibility.
Other · France
75Medium
NIS2 70 · GDPR 85
NIS2 70 · GDPR 85
The website www.liberation.fr is currently inaccessible due to a Web Application Firewall (WAF) or bot mitigation challenge page that blocks direct access to its content. This prevents extraction of meaningful business, security, or compliance information. The visible content is limited to scripts and an iframe related to captcha-delivery.com, indicating active security controls to prevent automated access. Without access to the actual website content, metadata, or business information, a comprehensive analysis cannot be performed. The domain appears to be protected by security mechanisms, but no further details on the business or technical infrastructure are available from the provided data.
- Guardian News & Media Limited
theguardian.com
Media · United Kingdom
96Low
NIS2 95 · GDPR 92
NIS2 95 · GDPR 92
The Guardian is a globally recognized media company specializing in news, opinion, and analysis with a strong digital presence. It operates under Guardian News & Media Limited, a UK-based enterprise with a long history dating back to 1821. The website serves a broad general audience with high-quality, professionally curated content and a consistent brand identity. The business model is primarily advertising and subscription-based, supported by a sophisticated digital infrastructure. Technically, the site employs modern web technologies including React, advanced header bidding for advertising, and comprehensive analytics and tracking tools. The site is well optimized for performance, mobile responsiveness, and accessibility. Security posture is strong, with HTTPS enforcement, security headers, and error monitoring via Sentry, though explicit security policies and incident response details are not publicly disclosed. Privacy compliance is robust, featuring clear privacy and cookie policies with consent mechanisms aligned with GDPR. Overall, the website is trustworthy, professional, and secure, with no signs of blocking or suspicious activity.
DJ DJO & NILOdj-djo.nl
Hospitality · Netherlands
85Low
NIS2 75 · GDPR 50
NIS2 75 · GDPR 50
DJ DJO & NILO is a specialized DJ entertainment service provider based in Amsterdam, Netherlands, focusing on Hindoestaanse (desi) cultural events such as weddings, birthdays, and other celebrations. With over 23 years of experience, they offer a comprehensive range of services including professional DJ performances, lighting, sound installation, and special effects like sparkulars and low-lying fog. Their market position is that of a trusted, small-sized local business with a strong reputation and consistent branding. Technically, the website is well-built with modern web standards, mobile optimization, and good SEO practices. The use of Google Analytics and reCAPTCHA v3 indicates a moderate level of digital maturity. Security-wise, the site enforces HTTPS and uses spam protection on forms but lacks explicit security headers and published security policies, which are areas for improvement. Privacy compliance is limited due to the absence of privacy and cookie policies. Overall, the website is professional, trustworthy, and safe for general audiences.
Elektrum grupaelektrumgroup.com
Energy · Latvia
75Medium
NIS2 75 · GDPR 92
NIS2 75 · GDPR 92
Elektrum grupa is a leading energy company in the Baltic region, specializing in renewable energy production, energy sales, and innovative solutions such as e-mobility. The group is anchored by AS Latvenergo and includes several subsidiaries across Latvia, Estonia, and Lithuania. The website presents comprehensive business information, investor relations data, and sustainability commitments, reflecting a mature and enterprise-level organization. Technically, the site uses modern frameworks like Bootstrap and jQuery, integrates consent management via Usercentrics, and employs Google Tag Manager for analytics. The security posture is solid with HTTPS and no visible vulnerabilities, though explicit security policies and incident response contacts are absent. Overall, the site is professional, well-structured, and compliant with GDPR, offering a trustworthy digital presence for the company.
—
49High
NIS2 — · GDPR —
NIS2 — · GDPR —
Browsers refuse the HTTPS connection to bancounion.com, so Guard could not load the page. Assessed: DNS, email security, network exposure, the TLS certificate and configuration; the website checks did not run.
Fundación Tomillotomillo.org
Education · Spain
75Medium
NIS2 55 · GDPR 59
NIS2 55 · GDPR 59
Fundación Tomillo is a well-established Spanish non-profit organization focused on empowering children and youth from vulnerable backgrounds through comprehensive education and vocational training. With over 40 years of experience, it offers a range of services including regulated vocational training, employment support, school dropout prevention, personal development, and social innovation. The foundation maintains a strong digital presence and collaborates with notable partners such as Microsoft and Ferrovial to enhance its educational offerings. Technically, the website is built on WordPress with modern SEO and accessibility practices, supported by analytics and tracking tools like Google Analytics and Microsoft Clarity. Security measures are robust, featuring HTTPS, security headers, and secure forms, although formal incident response and vulnerability disclosure information are not publicly available. Overall, the foundation demonstrates high business credibility and digital maturity, with a secure and user-friendly online platform.
Ervyervy.app
Technology
88Low
NIS2 85 · GDPR 62
NIS2 85 · GDPR 62
Ervy is a technology startup founded in 2022 that offers an AI-powered microlearning platform designed to deliver short, engaging lessons directly within Microsoft Teams. The platform transforms company documents into concise 2-3 minute training modules, aiming to improve employee engagement and completion rates. The website reflects a focused business model targeting organizations using Microsoft Teams, emphasizing simplicity and integration without requiring new platforms or behavior changes. Technically, the site is built using Framer, with integrations for analytics and marketing including Google Analytics, Facebook Pixel, LinkedIn Insight Tag, and Bing Ads. The SSL configuration is excellent, but the site lacks visible security headers and formal privacy or cookie policies, which impacts its privacy compliance score. No contact information or incident response details are provided, limiting transparency in security and support. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and security disclosures to improve compliance and user trust.
Clear Junctionclearjunction.com
Finance · United Kingdom
89Low
NIS2 85 · GDPR 59
NIS2 85 · GDPR 59
Clear Junction is a UK-based financial services company specializing in providing accounts and local payment rails for financial institutions. The company targets financial institutions and businesses requiring payment processing infrastructure, positioning itself as a key player in the payment rails market. The website reflects a professional and modern digital presence, built on WordPress with integrations of advanced analytics and marketing tools such as Google Tag Manager, Microsoft Clarity, and HubSpot. The design is consistent and optimized for mobile, providing a good user experience and clear navigation. Security posture is strong with HTTPS enforced and multiple security headers present, although explicit security policies and incident response information are not published. Privacy compliance is partially addressed with cookie consent mechanisms but lacks a dedicated privacy policy page. WHOIS data is consistent with the business claims, showing transparency and legitimacy. Overall, the website demonstrates a mature technical infrastructure and a credible business presence in the finance sector.
Aker BP ASAakerbp.com
Energy · Norway
87Low
NIS2 80 · GDPR 62
NIS2 80 · GDPR 62
Aker BP ASA is a leading Norwegian oil and gas company focused on exploration, development, and production on the Norwegian continental shelf. It holds a strong market position as one of Europe's largest independent publicly listed oil companies. The website provides comprehensive information about its operations, investor relations, sustainability efforts, and career opportunities, targeting investors, partners, suppliers, and job seekers. Technically, the website is built on WordPress with a modern tech stack including Yoast SEO, Google reCAPTCHA, and various JavaScript libraries for enhanced user experience and analytics. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS and uses reCAPTCHA for form protection, but lacks explicit security headers and incident response disclosures. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the website is professional, trustworthy, and well-maintained, with minor improvements recommended in security headers, privacy compliance, and incident response transparency to enhance its security posture and regulatory adherence.
Nomudavisualfactory.net
Manufacturing
85Low
NIS2 65 · GDPR 74
NIS2 65 · GDPR 74
Nomuda is a specialized B2B software provider offering Manufacturing Execution System (MES) solutions through its VisualFactory platform. The company targets complex, high-mix manufacturing environments, aiming to enhance operational efficiency, provide real-time shop floor visibility, and ensure compliance. Their market position is niche but focused, serving manufacturing companies seeking digital transformation in production management. The website reflects a professional and consistent brand image with clear messaging tailored to industrial operations. Technically, the website is built on WordPress using modern frameworks such as Bootstrap and jQuery, supplemented by Google Tag Manager and Analytics for tracking. The site demonstrates good mobile optimization and SEO practices, though accessibility features are basic. Performance is moderate, with room for optimization. The technical infrastructure supports a stable and professional online presence suitable for their business model. From a security perspective, the site employs HTTPS with a strong SSL configuration and uses cookie consent mechanisms, indicating awareness of privacy regulations. However, the absence of explicit security headers and lack of published privacy policies or incident response plans represent compliance and security gaps. No vulnerabilities or exposed sensitive data were detected in the provided content. Overall, the security posture is adequate but could be improved to meet higher standards. The overall risk assessment suggests a moderately secure and credible website with minor compliance and security improvements needed. Strategic recommendations include publishing comprehensive privacy and terms policies, implementing security headers, and providing clear contact channels for security incidents to enhance trust and compliance.
Education · Latvia
80Low
NIS2 65 · GDPR 97
NIS2 65 · GDPR 97
Jēkabpils Tehnoloģiju tehnikums is a Latvian vocational and secondary education institution operating under the Ministry of Education and Science. The website serves as an informational portal for prospective and current students, highlighting educational programs in technology, commerce, and logistics. The institution maintains a professional web presence with modern technologies such as Bootstrap and jQuery, and a CMS named KPanel 3. The site is mobile-optimized and includes GDPR-compliant cookie consent mechanisms and a privacy policy, reflecting good privacy practices. However, explicit contact information and terms of service are not present in the provided content. Security posture is moderate with HTTPS usage implied but lacking visible security headers or detailed security policies. Overall, the site is trustworthy and well-maintained, suitable for its educational purpose.
Education · Latvia
85Low
NIS2 80 · GDPR 67
NIS2 80 · GDPR 67
edy365.com is a Latvian-based SaaS platform specializing in digital practice management for educational institutions and companies. The platform offers end-to-end solutions including contract signing, work tracking, and automated reporting, serving over 2000 companies and 30+ educational institutions. The website is professionally designed using WordPress and Elementor, with good SEO and mobile optimization. Security posture is strong with HTTPS, security headers, and GDPR-compliant cookie consent, though some security policy documentation is missing. Overall, the site reflects a mature business with a solid market position in Latvia's education sector.
Other
84Low
NIS2 75 · GDPR 75
NIS2 75 · GDPR 75
The website devlat.eu currently presents only minimal content, consisting solely of a single heading with the domain name. There is no metadata, structured data, or any business-related content available, which severely limits the ability to assess the company's operations, market position, or services. The lack of contact information, privacy policies, and terms of service further reduces the website's credibility and user trust. Technically, the site lacks any detectable frameworks, scripts, or CMS, and no security headers or SSL configuration details are available, indicating a very basic or placeholder site. Security posture is weak due to the absence of HTTPS and security best practices. Overall, the site appears to be either under development or abandoned, with significant improvements needed to meet basic security, compliance, and business standards.
Technology
49High
NIS2 — · GDPR —
NIS2 — · GDPR —
Browsers refuse the HTTPS connection to canarylabs.eu, so Guard could not load the page. Assessed: DNS, email security, network exposure, the TLS certificate and configuration; the website checks did not run.
Nice Ltd.niceincontact.com
Technology · United States
87Low
NIS2 75 · GDPR 74
NIS2 75 · GDPR 74
NiCE Ltd. is a well-established enterprise technology company specializing in AI-powered customer experience and automation platforms. The company targets large enterprises and government organizations, offering solutions that enhance customer service efficiency and engagement. Their market position is strong, supported by industry recognitions such as Gartner MQ placements and ISO 27001 certification. The website reflects a mature digital presence with modern technologies like React and Next.js, integrated marketing and analytics tools, and a focus on accessibility and performance. Security posture is robust with HTTPS enforcement and security headers, though explicit security policies and incident response details are not publicly disclosed. Privacy compliance is well addressed with comprehensive policies and consent mechanisms. Overall, the website and business demonstrate high professionalism and trustworthiness.
Government · United States
94Low
NIS2 95 · GDPR 75
NIS2 95 · GDPR 75
The National Institute of Standards and Technology (NIST) is a U.S. government agency under the Department of Commerce, established in 1901. It plays a critical role in advancing measurement science, standards, and technology to enhance economic security and improve quality of life. The website reflects its authoritative position with comprehensive content, clear navigation, and a professional design targeting industry, scientific communities, and the public. The business model is government-funded research and standards provision, positioning NIST as a leading national metrology institute. Technically, the site is built on Drupal 10, leveraging modern web technologies and performance optimizations including Cloudflare CDN and New Relic monitoring. It demonstrates excellent mobile optimization, accessibility, and SEO practices. Security posture is strong with HTTPS, security headers, and no detected vulnerabilities. Privacy policies and vulnerability disclosure mechanisms are present, though cookie consent mechanisms could be enhanced. Overall, NIST's website is highly trustworthy, secure, and professionally maintained, reflecting its government status and mission. It effectively balances transparency, user experience, and security, making it a reliable resource for its diverse audience.
Siguldas saldējumssiguldassaldejums.lv
Hospitality · Latvia
86Low
NIS2 75 · GDPR 47
NIS2 75 · GDPR 47
Siguldas saldējums is a small, locally focused ice cream business based in Sigulda, Latvia, specializing in natural ice cream made from fresh Latvian berries, fruits, and dairy. Established in 2014, the company operates a cafe in Sigulda Castle Park and offers masterclasses and STEM educational programs related to ice cream making. The website reflects a strong local brand with excellent customer reviews and a professional digital presence. Technically, the site is built on modern frameworks like Next.js, integrates Google Maps and Google Tag Manager, and is mobile-optimized with good SEO practices. Security posture is strong with HTTPS and security headers implemented, though privacy and cookie policies are missing, representing a compliance gap. Overall, the site is trustworthy and well-positioned in its niche, but could improve privacy compliance and transparency.
.US.ORGus.org
Non-profit · United States
85Low
NIS2 85 · GDPR 75
NIS2 85 · GDPR 75
The website us.org operates as a domain registry platform specializing in the .US.ORG domain, targeting U.S.-focused organizations such as nonprofits, charities, businesses, and advocacy groups. It positions itself as an unrestricted alternative to the .us domain with added trust from the .org association. The site offers domain search and registration services, supported by a clean, professional design and clear navigation. Technically, the site employs modern web technologies including Google Tag Manager, Google Analytics, jQuery, and Bootstrap Grid, ensuring moderate performance and good mobile optimization. Security posture is solid with HTTPS enforced and no exposed sensitive data, though it lacks some advanced security headers and a vulnerability disclosure policy. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism despite tracking scripts. Contact and abuse reporting information is clearly provided, with partnership support from Gen.xyz. Overall, the site is trustworthy and professionally maintained, suitable for its niche market.
.AE.ORGae.org
Technology · United States
83Low
NIS2 75 · GDPR 75
NIS2 75 · GDPR 75
The website ae.org operates as a domain registry platform offering the .AE.ORG domain, targeting businesses and organizations seeking a digital presence in the UAE with global accessibility. It positions itself as an unrestricted alternative to traditional UAE ccTLDs, emphasizing availability, trust, and SEO benefits. The business is supported by Gen.xyz, which handles customer support and abuse management, indicating a professional operational model. Technically, the site uses modern JavaScript libraries including jQuery, Underscore.js, and Google Tag Manager for analytics, with responsive design and good SEO practices. Security posture is solid with HTTPS enforced, but lacks some advanced security headers and explicit vulnerability disclosure mechanisms. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the site is professional, trustworthy, and well-positioned in its niche, but could improve in privacy and security transparency.
.DE.COMde.com
Technology
83Low
NIS2 75 · GDPR 75
NIS2 75 · GDPR 75
The website de.com operates as a domain registry and sales platform offering the .DE.COM domain extension, targeting businesses and startups seeking to establish a presence in the German market without local residency requirements. It positions itself as a global alternative to the traditional .de ccTLD, emphasizing unrestricted access and premium domain availability. The site is professionally designed with clear navigation, domain search functionality, and showcases live examples of registered domains. Technically, it employs modern web technologies including HTML5, CSS3, JavaScript, Bootstrap Grid, jQuery, Underscore.js, and Google Tag Manager for analytics. The site is mobile optimized and SEO friendly, though accessibility features are basic. Security posture is moderate with HTTPS implied but lacks explicit security headers and a published security policy. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Contact and abuse reporting channels are clearly provided through Gen.xyz, the parent company. Overall, the site is legitimate, trustworthy, and well-positioned in its niche domain market.
.BR.COMbr.com
Technology · United States
83Low
NIS2 75 · GDPR 75
NIS2 75 · GDPR 75
The website br.com operates as a specialized domain registry offering the .BR.COM domain namespace, targeting businesses and entrepreneurs seeking an unrestricted digital identity in Brazil. It positions itself as a premium alternative to the traditional .com.br domains by providing global accessibility without local regulatory restrictions. The business model revolves around domain registration services facilitated through partnerships with major registrars such as GoDaddy and Namecheap, with support services managed by Gen.xyz. The site is professionally designed with clear navigation, domain search functionality, and a focus on brand trust and market visibility.
Pôle Léonard de Vincidevinci.fr
Education · France
88Low
NIS2 80 · GDPR 74
NIS2 80 · GDPR 74
Pôle Léonard de Vinci is a prominent French higher education group comprising three main schools specializing in engineering (ESILV), management (EMLV), and multimedia (IIM), along with an executive education institute. The group emphasizes interdisciplinary education, research excellence, and sustainable development, positioning itself as a leader in innovative and responsible higher education. The website reflects a mature digital presence with comprehensive content, clear navigation, and multilingual support, targeting prospective students, academic partners, and companies seeking talent. Technically, the site is built on WordPress with modern plugins and integrates multiple analytics and marketing tools, all managed with GDPR-compliant consent mechanisms. Security posture is strong with HTTPS, security headers, and anti-spam measures, though explicit security policies and incident response information are not publicly detailed. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with privacy regulations.
Vercel Inc.vercel.app
Technology · United States
96Low
NIS2 95 · GDPR 85
NIS2 95 · GDPR 85
Vercel Inc. is a leading technology company specializing in developer tools and cloud infrastructure to build, scale, and secure modern web and AI applications. Founded in 2015 and headquartered in the United States, Vercel offers a comprehensive platform that integrates AI SDKs, sandboxed virtual machines, content delivery, and continuous integration/deployment services. Their platform targets developers and enterprises seeking efficient and scalable solutions for web and AI app deployment. The website reflects a mature digital presence with excellent design, clear navigation, and strong branding consistency. Structured data and social media integrations enhance their market visibility and trustworthiness. Technically, the site leverages modern frameworks like Next.js and React, hosted on their own Vercel platform, ensuring fast performance and mobile optimization. Security posture is solid with HTTPS enforcement and advanced request protections, though explicit security policies and incident response details are not publicly disclosed. Privacy compliance is basic, lacking visible privacy and cookie policies or consent mechanisms. Overall, Vercel demonstrates a high level of professionalism and business credibility, positioning itself strongly in the cloud infrastructure and developer tools market.
Other
80Low
NIS2 65 · GDPR 85
NIS2 65 · GDPR 85
The website at whistle-report.com currently presents only a minimal placeholder page consisting of a single embedded image with no textual content, metadata, or interactive elements. There is no visible business information, contact details, or legal policies such as privacy or cookie policies. The lack of content and metadata indicates a very early stage or inactive website. Technically, the site does not employ modern web technologies, scripts, or frameworks, and no security headers or advanced SSL configurations are detected. The security posture is weak due to missing HTTPS and security best practices. Overall, the site lacks transparency and trust signals, which limits its credibility and usability. Strategic improvements are needed to establish a professional online presence, including adding comprehensive content, legal policies, contact information, and security enhancements.