Low-risk security reports
14,261 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,165001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
10,151–10,200 of 14,261
HPhp.sk
Technology · Slovakia
83Low
NIS2 2 · GDPR 100
NIS2 2 · GDPR 100
HP's Slovak website serves as a comprehensive portal for consumers and businesses seeking HP's computing and printing products. The site offers detailed product categories, support resources, and account management, reflecting HP's strong market position as a global technology leader. The digital infrastructure leverages Adobe Experience Manager and modern analytics tools, ensuring a responsive and user-friendly experience. Security measures such as HTTPS and security headers are well implemented, although explicit security policies and incident response information are not prominently published. The absence of WHOIS data is noted but likely due to registry or privacy policies rather than malicious intent. Overall, the site demonstrates high professionalism and trustworthiness, suitable for its enterprise scale and audience.
- Ghostery
ghostery.com
Technology
78Low
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Ghostery is a well-established privacy technology company offering a suite of privacy tools including a tracker and ad blocker, private search engine, and privacy-focused newsletters. The website demonstrates a strong market position with over 100 million downloads and high user ratings, targeting internet users seeking enhanced online privacy. Technically, the site uses modern web standards with good mobile optimization and SEO practices, though explicit security headers are not detected in the provided HTML. The security posture is solid with HTTPS enforced and no visible vulnerabilities, but could be improved by publishing security policies and incident response contacts. Overall, the site is professional, trustworthy, and focused on privacy advocacy, though the lack of WHOIS data transparency and explicit privacy/cookie policies in the provided content slightly reduce compliance confidence.
ZURB, Inc.zurb.com
Technology
78Low
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
ZURB, Inc. is an established design consultancy founded in 1999, specializing in strategic marketing, branding, and user experience design. The company serves a diverse clientele ranging from startups to large enterprises, offering services such as growth design, design systems, experience design, product innovation, and mobile/web app development. Their market position is strong, supported by notable client logos and a consistent brand presence. Technically, the website is well-built using modern frameworks like Foundation, with Cloudflare DNS and CDN services enhancing performance and security. The site is mobile-optimized, accessible, and SEO-friendly, with integrated analytics tools such as Google Analytics and Tag Manager. Security posture is solid with HTTPS and domain transfer protections, though improvements are recommended in DNSSEC and security headers. Privacy compliance is partial, with a clear privacy policy but lacking cookie consent mechanisms. Overall, the website reflects a professional and trustworthy business with a high level of digital maturity.
Ministerium fuer Inneres und Kommunales NRWpolizei.nrw
Government · Germany
76Low
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
The website polizei.nrw is the official online presence of the Police of North Rhine-Westphalia, operated by the Ministry of the Interior and Municipal Affairs of NRW, Germany. It provides comprehensive information including press releases, crime prevention tips, traffic safety, and career opportunities. The site targets citizens, media, and stakeholders interested in police work and public safety in NRW. It holds a strong market position as a trusted government source with consistent branding and high content quality. Technically, the site is built on Drupal 10 with modern JavaScript libraries such as Splide for carousels and Shariff for social sharing. It uses Matomo analytics with DoNotTrack enabled, reflecting a privacy-conscious approach. The site is mobile-optimized and accessible, with features for easy language and sign language support. Performance is moderate, with room for improvement in security headers and DNSSEC. Security posture is good with HTTPS enforced and no visible vulnerabilities. However, security headers like CSP and X-Frame-Options are not detected and could be added. Privacy compliance is strong with a clear privacy policy and GDPR adherence, though a cookie consent mechanism is missing. Contact information is present but no direct emails or incident response contacts are found. Overall, the site is professional, trustworthy, and well-maintained, suitable for its government function. Recommendations include enhancing security headers, enabling DNSSEC, and implementing cookie consent to further improve compliance and security.
- GGrupo Parques Reunidos
parquesreunidos.com
Hospitality · Spain
78Low
NIS2 17 · GDPR 65
NIS2 17 · GDPR 65
Grupo Parques Reunidos operates as a major global leisure park operator managing a diverse portfolio of amusement parks, aquariums, zoos, and water parks across multiple countries. The company employs various business models including ownership, management, and consultancy, positioning itself as a leader in the hospitality and entertainment sector. The website reflects a professional digital presence with clear navigation, multilingual support, and active social media engagement. Technically, the site is built on Adobe Experience Manager with integration of Google Tag Manager and OneTrust for cookie consent, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks visible security headers and explicit privacy policies, which are areas for improvement. The absence of WHOIS registration data is a notable anomaly that reduces trust slightly, though the overall business credibility remains high based on website professionalism and content quality. Strategic recommendations include enhancing security headers, publishing comprehensive privacy and terms policies, and clarifying domain registration details to improve trust and compliance.
Region Fuldaregion-fulda.de
Government · Germany
81Low
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Region Fulda operates as a regional government portal providing information and services related to the Fulda region in Germany. The website emphasizes tradition and innovation, targeting residents and visitors interested in regional development and community events. The business model centers on public service and regional promotion, positioning itself as a key information hub within the government sector. Technically, the site is built on WordPress using the Divi theme, enhanced with multilingual support via Weglot and cookie consent management through Cookiebot. The infrastructure is modern and includes SEO optimizations and analytics tracking via Etracker. Security posture is strong with HTTPS and Content Security Policy headers implemented, though there is room for improvement in privacy compliance documentation and contact transparency. Overall, the site is professional, trustworthy, and well-structured, serving its public sector audience effectively.
TechHub Region Fulda e.V.techhub-fulda.de
Technology · Germany
76Low
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
TechHub Region Fulda e.V. is a regional non-profit organization focused on fostering innovation and collaboration among technology companies in the Fulda region of Germany. The website serves as a platform to promote their key services including project groups (TechWorks), company visits and expert talks (TechInsights), thematic expert events (TechForum), and networking events (TechTalks). The organization targets technology professionals and companies seeking to share knowledge and resources to drive regional technological advancement. The website is professionally designed, content-rich, and provides clear navigation and contact information, supporting its role as a trusted regional network hub. Technically, the website is built on the com4site CMS platform and uses modern JavaScript libraries such as jQuery, Splide.js, and Swiper.js for interactive elements. The site is mobile-optimized and accessible, with good SEO practices evident in meta tags and structured content. Performance is moderate with no critical technical issues detected. Security posture is solid with HTTPS enforced and secure form handling, though the absence of security headers and cookie consent mechanisms suggests room for improvement. From a security perspective, the site shows no signs of vulnerabilities or exposed sensitive data. However, it lacks explicit security policies, incident response information, and vulnerability disclosure mechanisms, which are recommended for enhancing trust and compliance. Privacy compliance is good with a clear privacy policy and GDPR-compliant newsletter consent, but no cookie policy or consent banner is present. Overall, the website represents a credible and professional regional technology network with a solid digital presence. Strategic improvements in security headers, cookie consent, and incident response transparency would further strengthen its security posture and compliance standing.
RegioEntsorgung AöRregioentsorgung.de
Transportation · Germany
78Low
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
RegioEntsorgung AöR operates as a regional public authority focused on waste disposal and recycling services in Germany. The website provides comprehensive information about waste separation, collection services, service locations, customer support, and career opportunities. It targets residents and businesses within its service region, positioning itself as a trusted local waste management provider. The business model is centered on public service delivery with direct citizen engagement. Technically, the website is built on TYPO3 CMS, a robust and mature content management system. It employs responsive design, SVG icons, and modern JavaScript for interactive elements. The site includes a cookie consent mechanism compliant with GDPR, uses Google Analytics for tracking, and is optimized for mobile and accessibility standards. Performance is moderate, with good SEO and navigation clarity. From a security perspective, the site enforces HTTPS and implements cookie consent controls. However, it lacks explicit security policy documentation, incident response contacts, and security.txt files. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms domain legitimacy and consistency with the business identity. Overall, the website demonstrates a solid digital presence with good privacy compliance and business credibility. Strategic improvements in security transparency and incident response readiness would enhance trust and resilience.
Sparkassen Immobilien GmbH Aachens-immo-aachen.de
Real Estate · Germany
82Low
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Sparkassen Immobilien GmbH Aachen operates as a leading real estate brokerage firm in the Aachen region, offering comprehensive services including property sales, rentals, valuations, energy consulting, and new development projects. The company leverages its strong regional expertise and partnerships, notably with Sparkasse Aachen for financing solutions, to maintain a dominant market position. The website reflects a mature digital presence built on WordPress with modern plugins and integrations, supporting a professional user experience and effective customer engagement. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though some security headers could be improved. The site demonstrates good privacy compliance with a comprehensive privacy policy and cookie management. Overall, the business credibility is high, supported by multiple certifications and positive customer reviews.
- Amazon
amazon.sa
E-commerce · Saudi Arabia
84Low
NIS2 25 · GDPR 70
NIS2 25 · GDPR 70
Amazon.sa is the localized e-commerce platform of Amazon serving the Saudi Arabian market. It offers a wide range of products including electronics, fashion, groceries, and more, with services such as fast shipping, cash on delivery, and Amazon Prime membership. The website reflects Amazon's global brand identity and market leadership in online retail. Technically, the site uses Amazon's proprietary UI framework along with modern web technologies to deliver a fast, responsive, and accessible user experience. Security is robust with HTTPS enforced and multiple security headers present, although explicit privacy and cookie policies were not found in the provided content. Overall, the site is a professional, enterprise-grade e-commerce platform with strong trust signals and a mature technical infrastructure.
- Amazon.ae
amazon.ae
E-commerce · United Arab Emirates
81Low
NIS2 25 · GDPR 70
NIS2 25 · GDPR 70
Amazon.ae is the regional e-commerce platform operated by Amazon.com, Inc., serving the United Arab Emirates market with a comprehensive online retail offering. The website provides a wide range of products including electronics, fashion, groceries, and more, supported by Amazon's Prime membership benefits such as fast and free delivery. The platform holds a leading market position in the UAE online retail sector, leveraging Amazon's global brand and infrastructure. Technically, Amazon.ae employs a robust and modern technology stack based on Amazon's proprietary UI frameworks, AWS hosting, and advanced client-side JavaScript. The site is optimized for performance, mobile responsiveness, and accessibility, ensuring a high-quality user experience. SEO and metadata are well implemented to support discoverability. From a security perspective, the site enforces HTTPS with strong SSL configurations and implements multiple security headers. Error logging and service worker messaging indicate mature operational security practices. However, explicit public security policies and vulnerability disclosure mechanisms are not prominently available, suggesting room for transparency improvements. Overall, Amazon.ae demonstrates a mature digital presence with strong business credibility and security posture. The absence of blocking mechanisms or WAF challenges allows full content accessibility. Strategic recommendations include publishing detailed security policies, establishing a public vulnerability disclosure program, and enhancing visible trust signals to further strengthen user confidence.
—
82Low
NIS2 25 · GDPR 58
NIS2 25 · GDPR 58
- Amazon
amazon.es
E-commerce · Spain
89Low
NIS2 10 · GDPR 100
NIS2 10 · GDPR 100
Amazon.es is the Spanish regional e-commerce platform of Amazon.com, Inc., offering a wide range of consumer products including electronics, books, fashion, and household items. It holds a leading market position in Spain and serves a broad general consumer audience with a comprehensive online retail marketplace and Amazon Prime delivery services. The website demonstrates a mature digital infrastructure with a proprietary Amazon UI framework, extensive use of JavaScript, and integration with Amazon's analytics and advertising services. Security posture is strong with HTTPS enforcement, security headers, and cookie consent mechanisms, although explicit security policy and vulnerability disclosure pages are not publicly found. Overall, the site is highly professional, trustworthy, and compliant with GDPR requirements.
- AAmazon.com, Inc.
amazon.in
E-commerce · India
81Low
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Amazon.in is the Indian localized e-commerce platform operated by Amazon.com, Inc., a global leader in online retail. The website offers a broad range of products and services targeting the general consumer market in India. The platform supports sellers and buyers with APIs and advertising tools, reflecting a mature and comprehensive e-commerce business model. The site is enterprise scale with a long-established market presence since 1994 under the Amazon brand. Technically, the website uses Amazon's proprietary UI libraries and captcha instrumentation scripts to protect against automated access. Hosting is provided by Amazon AWS infrastructure, ensuring robust performance and security. However, the analyzed page is currently behind a captcha challenge, limiting full content visibility and analysis. The site shows basic mobile optimization and accessibility features. From a security perspective, the site enforces HTTPS and uses captcha challenges to mitigate automated threats. While explicit security headers are not visible in the provided data, the overall SSL configuration is excellent. Privacy and terms of service policies are present and comprehensive, indicating good compliance posture. No direct contact or incident response information is exposed on the analyzed page. Overall, the website is highly legitimate and trustworthy, consistent with Amazon's global reputation. The captcha challenge reduces immediate content accessibility, impacting the ability to fully assess content quality and technical implementation. Strategic recommendations include enhancing visible security headers, improving cookie consent mechanisms, and publishing explicit security policies to strengthen trust and compliance.
- Stadt Bergisch Gladbach
bergischgladbach.de
Government · Germany
77Low
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
The website www.bergischgladbach.de serves as the official online presence of the city of Bergisch Gladbach, Germany. It provides comprehensive municipal information, citizen services, news updates, event information, and access to various public resources. The site targets residents and visitors, offering a broad range of services including citizen office information, urban planning, cultural events, and social services. The business model is that of a government municipal service provider, with a strong focus on transparency and accessibility. Technically, the site is built on ASP.NET WebForms with modern JavaScript libraries such as jQuery and Owl Carousel. It employs a cookie consent mechanism powered by consentmanager.net and uses eTracker for analytics. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. The presence of CAPTCHA on contact forms and HTTPS enforcement indicates a good security posture. Security-wise, the website demonstrates solid practices including HTTPS, cookie consent, and spam prevention. However, it lacks explicit security policies or incident response contacts, and could improve by adding more security headers and a vulnerability disclosure policy. No critical vulnerabilities or suspicious content were detected. Overall, the site is trustworthy, professionally maintained, and compliant with GDPR requirements. It effectively serves its purpose as a municipal information portal with a good balance of usability, security, and privacy compliance.
Kreisstadt Bergheimbergheim.de
Government · Germany
76Low
NIS2 2 · GDPR 43
NIS2 2 · GDPR 43
The website www.bergheim.de serves as the official online portal for the municipal government of Kreisstadt Bergheim in Germany. It provides residents and visitors with news, press releases, and access to various public services and administrative information. The site is positioned as a local government authority platform, focusing on community engagement and service delivery. The content is well-structured, professionally presented, and targets a general audience including local citizens and stakeholders. Technically, the website is built on the Information Enterprise Server platform by Sitepark GmbH, utilizing modern web technologies such as JavaScript and the Slick Slider library for interactive content. The site is mobile-optimized and accessible, with a good SEO foundation. HTTPS is enforced, ensuring secure communication, though some security headers appear to be missing. From a security perspective, the site demonstrates a solid baseline with HTTPS and no visible sensitive data exposure. However, it lacks explicit privacy and cookie policies, security headers, and incident response information, which are important for compliance and trust. No vulnerabilities or malicious content were detected in the provided content. Overall, the website is trustworthy and professional, suitable for its role as a government information portal. Strategic improvements in privacy compliance and security hardening would enhance its posture and user trust.
Stadt Augsburgaugsburg.de
Government · Germany
83Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Stadt Augsburg operates an official municipal website providing comprehensive information on politics, administration, economy, culture, and tourism for the city of Augsburg, Germany. The website targets citizens, tourists, and businesses, serving as a central portal for public services and city-related information. It leverages TYPO3 CMS, a widely used open-source content management system favored by government entities, ensuring a stable and scalable platform. The site integrates modern technologies such as Matomo for privacy-conscious analytics and Cookiebot for GDPR-compliant cookie consent management, alongside accessibility tools like Eye-Able to enhance usability for users with disabilities. The hosting infrastructure appears reliable, with nameservers linked to m-online.net, a known hosting provider.
Landkreis Ansbachlandkreis-ansbach.de
Government · Germany
78Low
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Landkreis Ansbach is the official government website for the largest district by area in Bavaria, Germany. It provides comprehensive public administration services, digital office functionalities, and information relevant to residents and stakeholders within the district. The website serves as a central hub for local government communication, event announcements, and citizen support. The target audience primarily includes residents, local businesses, and public officials within Landkreis Ansbach. The business model is that of a public sector entity focused on governance and community services. Technically, the website is built on the ikiss CMS framework and leverages modern JavaScript libraries such as jQuery, Mustache.js, and PhotoSwipe for enhanced user experience. Hosting is provided by host4you.de, with a moderate performance profile and good mobile optimization and accessibility features. The site includes a cookie consent mechanism and follows GDPR compliance practices, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS and employs cookie consent banners, but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. The WHOIS data aligns well with the hosting and website content, indicating legitimacy and consistency. Overall, the website demonstrates a solid security posture appropriate for a government entity but could improve by adding security headers and formal incident response information. The overall risk assessment is low, with the site presenting minimal exposure to security or compliance risks. Strategic recommendations include implementing security headers, publishing a security policy, and maintaining regular audits of third-party libraries. These steps will enhance trust and security culture while ensuring continued compliance with evolving regulations.
Obec Ladiceladice.sk
Government · Slovakia
76Low
NIS2 2 · GDPR 100
NIS2 2 · GDPR 100
Obec Ladice operates an official municipal website serving the local community of Ladice, Slovakia. The site provides residents and visitors with essential information including local news, public notices, contact details for municipal offices, event calendars, weather forecasts, and community services. The website also promotes a mobile application to enhance accessibility and engagement. The business model is focused on public service and community information dissemination, positioning itself as a trusted local government portal.
Obec Kalinkovoobeckalinkovo.sk
Government · Slovakia
78Low
NIS2 2 · GDPR 100
NIS2 2 · GDPR 100
Obec Kalinkovo operates an official municipal website serving the local community of Kalinkovo, Slovakia. The site provides residents and visitors with timely news, official documents, contact information, and public service details. It positions itself as a trusted source of local government information with a clear focus on community engagement and transparency. The website targets local citizens and stakeholders interested in municipal affairs and services. Technically, the website employs modern web technologies including Google Analytics for traffic analysis, Google reCAPTCHA for form security, and Facebook SDK for social integration. The site is well-optimized for mobile devices and accessibility, with good SEO practices and structured navigation. The use of HTTPS and security headers indicates a solid security foundation. From a security perspective, the website demonstrates good practices such as encrypted connections, privacy and cookie policies with consent mechanisms, and no visible vulnerabilities or exposed sensitive data. However, it lacks explicit security policy documentation and incident response contact information, which could enhance its security posture. Overall, the site is trustworthy and compliant with GDPR requirements. The overall risk assessment is low, with no critical security issues detected. Strategic recommendations include adding a dedicated security policy page, implementing a vulnerability disclosure program, and providing incident response contacts to improve transparency and readiness. These steps would further strengthen the site's security culture and trustworthiness.
Obec Machulinceobecmachulince.sk
Government · Slovakia
79Low
NIS2 2 · GDPR 100
NIS2 2 · GDPR 100
Obec Machulince operates as the official municipal website for the local government of Machulince, Slovakia. It serves as a central information hub for residents and visitors, providing news, announcements, contact details, public documents, and weather forecasts. The site also promotes mobile applications for Android and iOS, enhancing accessibility and engagement. The business model is focused on public sector service delivery and community communication, positioning itself as a trusted local government resource. Technically, the website employs modern web technologies including JavaScript, Google reCAPTCHA for form security, Facebook SDK for social integration, and the Bulma CSS framework for responsive design. The site is mobile optimized and accessible, with good SEO practices evident in meta tags and structured content. Performance is moderate, with room for optimization. From a security perspective, the website uses HTTPS and standard security measures such as CAPTCHA to protect forms. However, it lacks explicit security headers and does not provide visible privacy or cookie policies, nor incident response or vulnerability disclosure information. These gaps represent opportunities for improving compliance and user trust. Overall, the website is a professional and trustworthy municipal portal with good content quality and technical implementation. Strategic improvements in privacy compliance and security transparency would enhance its security posture and regulatory adherence.
Obec Malá Domašamaladomasa.sk
Government · Slovakia
76Low
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
Obec Malá Domaša operates an official municipal website serving the local community in Slovakia. The site provides comprehensive information about the municipality including news, contact details, public notices, event calendars, weather forecasts, and photo galleries. The business model is focused on government service delivery and community engagement. The website is positioned as a trusted source for residents and visitors, with clear branding and consistent content quality. Technically, the website employs modern web technologies including JavaScript, Google reCAPTCHA for bot protection, and cookie consent mechanisms to comply with privacy regulations. The platform used is ModerneObce.sk, a specialized solution for municipal websites. The site is mobile optimized, accessible, and SEO friendly, with good performance and structured navigation. From a security perspective, the website enforces HTTPS, includes security headers, and integrates reCAPTCHA to protect forms. Privacy compliance is strong with a clear privacy policy and cookie consent banner. No critical vulnerabilities or exposed sensitive data were detected. However, the site lacks explicit security policy and incident response contact information. Overall, the website presents a low-risk profile with strong legitimacy and trust indicators. It effectively balances user experience, privacy, and security for its audience. Strategic recommendations include enhancing security transparency and incident response readiness to further strengthen its posture.
- idealo
idealo.es
E-commerce · Spain
76Low
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
idealo.es is a well-established Spanish price comparison website offering consumers the ability to compare prices and find the best deals across a wide range of product categories. The platform is part of the idealo group with multiple country-specific sites, indicating a strong European market presence. The website leverages modern web technologies including React and Usercentrics for consent management, ensuring a contemporary and user-friendly experience. Security posture is solid with HTTPS enforced and consent mechanisms in place, although explicit privacy and terms of service pages were not detected in the provided content. Overall, idealo.es demonstrates a mature digital infrastructure suitable for its e-commerce comparison business model.
- idealo internet GmbH
idealo.co.uk
E-commerce · United Kingdom
77Low
NIS2 17 · GDPR 65
NIS2 17 · GDPR 65
idealo.co.uk is a prominent UK-based price comparison website offering consumers access to over 650,000 products from thousands of retailers. The platform provides comprehensive price comparison, product search, price alerts, and shopping advice, positioning itself as a leading player in the UK e-commerce market. Owned by Axel Springer SE, idealo demonstrates strong market presence and brand consistency. Technically, the website employs modern web technologies including React with Next.js, and integrates consent management platforms to ensure GDPR compliance. The site is well-optimized for performance, mobile responsiveness, and accessibility, delivering an excellent user experience. Security-wise, idealo enforces HTTPS, uses security headers, and manages user login states securely, though it lacks a publicly available dedicated security policy or incident response information. Overall, idealo.co.uk is a trustworthy and professional e-commerce platform with a mature digital infrastructure.
- idealo
idealo.at
E-commerce · Austria
81Low
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
idealo.at is a leading Austrian price comparison website offering consumers access to over 100 million offers from more than 18,000 shops. The platform provides comprehensive purchase advice and expert opinions to help users make informed buying decisions and save money. It operates as part of the idealo group, which has multiple localized sites across Europe. The website is well-branded, professionally designed, and targets general consumers in Austria seeking competitive pricing on a wide range of products. From a technical perspective, idealo.at employs modern web technologies including React (Preact), Next.js for server-side rendering, and advanced consent management tools to ensure GDPR compliance. The site is optimized for performance and mobile responsiveness, providing a smooth user experience. Security best practices are observed with HTTPS enforcement, secure cookie handling, and no visible vulnerabilities or exposed sensitive data. While explicit WHOIS data is unavailable due to privacy protection, the website's consistency, trust signals, and compliance with privacy regulations indicate a mature and legitimate business. However, the site lacks publicly available security policies or vulnerability disclosure mechanisms, which could be improved to enhance transparency and incident response readiness. Overall, idealo.at demonstrates a strong digital presence with robust technical infrastructure and a solid security posture, making it a trustworthy platform for consumers. Strategic recommendations include publishing detailed security policies, implementing a security.txt file, and providing clear security contact channels to further strengthen trust and compliance.
- idealo
idealo.it
E-commerce · Italy
78Low
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
idealo.it is a well-established Italian price comparison website operated by idealo internet GmbH, a reputable company based in Germany. The platform offers consumers the ability to compare prices across thousands of online stores, access product reviews, and receive price alerts. It targets general consumers in Italy looking for the best deals across various product categories. The website demonstrates a mature digital infrastructure using modern web technologies such as React and Next.js, with strong mobile optimization and accessibility features. Security practices include HTTPS enforcement, content security policies, and GDPR-compliant consent management, though explicit security policies and incident response details are not publicly disclosed. Overall, idealo.it presents a professional, trustworthy, and user-friendly e-commerce service with a strong market position in Italy.
Tropical Islands Berlintropical-islands.de
Hospitality · Germany
82Low
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
Tropical Islands Berlin operates Europe's largest tropical holiday world, offering a comprehensive leisure and hospitality experience including waterpark entertainment, diverse accommodation options, spa and wellness services, and event hosting. The website reflects a mature digital presence with a professional design, clear navigation, and multilingual support, targeting families and tourists seeking tropical leisure experiences in Germany. Technically, the site leverages Adobe Experience Manager CMS, integrates modern tracking and consent management tools, and employs security best practices such as HTTPS and Content Security Policy, although some enhancements are recommended for CSP strictness and incident response transparency. The domain registration and WHOIS data align well with the business identity, reinforcing trustworthiness. Overall, the site demonstrates a strong security posture and compliance with GDPR, supported by comprehensive privacy and cookie policies.
G DATA CyberDefense AGgdata.ch
Technology · Switzerland
81Low
NIS2 74 · GDPR 58
NIS2 74 · GDPR 58
G DATA CyberDefense AG is a well-established German cybersecurity company providing comprehensive IT security solutions including managed detection and response, endpoint security, and security awareness training. The company targets a broad audience ranging from small businesses to large enterprises and public sector organizations, emphasizing 'Made in Germany' quality and compliance. Their market position is strong, supported by multiple certifications and industry awards. Technically, the website is built on TYPO3 CMS with modern JavaScript libraries and includes consent management and analytics tools, reflecting a mature digital infrastructure. Security posture is robust with ISO 27001 certification and managed incident response services, though some improvements in security headers and vulnerability disclosure transparency are recommended. Overall, the website is professional, trustworthy, and compliant with GDPR and cookie regulations, offering a positive user experience and clear business credibility.
G DATA Software Sp. z o.o.gdata.pl
Technology · Poland
83Low
NIS2 10 · GDPR 88
NIS2 10 · GDPR 88
G DATA Software Sp. z o.o. is a well-established Polish company specializing in antivirus and IT security software solutions for both businesses and individual users. Founded in 1995, the company boasts a long history and a strong market position as a leading provider of cybersecurity products. Their website, gdata.pl, reflects a professional and comprehensive digital presence, offering a range of security products and services with clear branding and consistent messaging. The company targets a broad audience including small to medium enterprises and private customers, emphasizing protection against internet threats and hacking attacks. Technically, the website is built on WordPress with WooCommerce and Elementor, integrating modern marketing and analytics tools such as Google Tag Manager, SalesManago, and Cookiebot for consent management. The site demonstrates good SEO optimization, mobile responsiveness, and moderate performance. Privacy compliance is well addressed with explicit privacy and cookie policies, including GDPR consent mechanisms. From a security perspective, the site uses HTTPS with good SSL configuration and employs cookie consent to manage tracking. However, some security headers are not explicitly detected, and there is no visible security policy or incident response information published. No vulnerabilities or suspicious content were found, indicating a solid security posture but with room for improvement in transparency and formal security documentation. Overall, gdata.pl presents a trustworthy and professional online presence consistent with its business claims. The domain's long age and WHOIS data support legitimacy. Strategic recommendations include enhancing security headers, publishing a security policy and incident response contacts, and considering a vulnerability disclosure policy to further strengthen trust and compliance.
G DATA CyberDefense AGgdata.at
Technology · Austria
77Low
NIS2 74 · GDPR 33
NIS2 74 · GDPR 33
G DATA CyberDefense AG is a well-established cybersecurity company providing comprehensive IT security solutions and managed services primarily targeting businesses and private customers in Austria and Germany. Their offerings include managed detection and response (MXDR), endpoint security software, security awareness training, OEM solutions, and incident response services. The company emphasizes 'Made in Germany' IT security, underscored by their ISO 27001:2022 certification and multiple industry awards, positioning them as a trusted leader in the cybersecurity market. The website is professionally designed, mobile-optimized, and rich in relevant content, supporting a strong digital presence. Technically, the site uses TYPO3 CMS with modern JavaScript libraries and integrates consent management and analytics tools responsibly. Security posture is robust with HTTPS, security best practices, and clear incident response contact channels. However, WHOIS data is unavailable, which limits domain registration trust verification but is offset by strong business and security indicators. Overall, the site reflects a mature, secure, and trustworthy cybersecurity provider with a strong focus on compliance and customer support.
G DATA CyberDefense AGgdatasoftware.co.uk
Technology · United Kingdom
76Low
NIS2 65 · GDPR 58
NIS2 65 · GDPR 58
G DATA CyberDefense AG is a well-established cybersecurity company founded in 1987, specializing in antivirus and comprehensive IT security solutions for both private users and businesses. The company emphasizes German quality and innovation, offering products such as antivirus software for Windows and Mac, internet security suites, VPN services, and mobile security applications. Their market position is supported by multiple industry awards and certifications, including Microsoft Azure certification and Virus Bulletin accolades. The website reflects a professional and consistent brand image targeting a broad audience with a focus on security and privacy.
G DATA CyberDefense AGgdatasoftware.com
Technology · Germany
78Low
NIS2 65 · GDPR 53
NIS2 65 · GDPR 53
G DATA CyberDefense AG is a well-established cybersecurity company founded in 1987, specializing in antivirus and comprehensive IT security solutions for both private users and businesses. The company emphasizes German quality and has a strong market presence supported by multiple awards and independent test recognitions. Their product portfolio includes antivirus software for Windows and Mac, internet security suites, mobile security for Android and iOS, VPN services, and security awareness training. The website is professionally designed, multilingual, and targets a broad audience including private consumers and enterprises. Technically, the website is built on TYPO3 CMS and integrates modern technologies such as ConsentManager for cookie compliance, Matomo and Google Analytics for tracking, and Google Tag Manager for marketing. The site is mobile-optimized, accessible, and SEO-friendly. Security posture is good with HTTPS enforced and consent mechanisms in place, though explicit security headers are not detected. No direct contact emails or phone numbers are published, with contact primarily via web forms. The WHOIS data for the domain www.gdatasoftware.com is unavailable, which raises some transparency concerns. However, the website content, branding, and external references strongly support the legitimacy of the business. No signs of WAF blocking or content restrictions were detected. Privacy and cookie policies are comprehensive and GDPR compliant. No adult or questionable content is present, making the site safe for general audiences. Overall, G DATA CyberDefense AG demonstrates a mature digital presence with strong business credibility and security awareness. The main risks relate to the lack of WHOIS transparency and absence of explicit security headers and incident response contacts. Addressing these gaps would further enhance trust and security posture.
Schwarz Digitsschwarz-digits.de
Technology · Germany
79Low
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
Schwarz Digits is the IT and digital division of the Schwarz Gruppe, offering digital products and services that comply with stringent German data protection standards. The website positions the company as a digital powerhouse within the enterprise technology sector, targeting businesses requiring secure and compliant IT solutions. The technical infrastructure leverages modern JavaScript modules, OneTrust for cookie consent, and Google Tag Manager for analytics, hosted on a cloud object storage platform. The website demonstrates good design quality, mobile optimization, and SEO practices, though explicit contact and privacy policy details are not evident in the provided content. Security posture is adequate with HTTPS and cookie consent but lacks visible advanced security headers and incident response information. Overall, the domain appears legitimate and consistent with the business claims, though WHOIS data is minimal. Strategic recommendations include enhancing security headers, publishing privacy and security policies, and providing clear contact channels for security incidents.
6Minutes Media GmbHmydealz.de
E-commerce · Germany
85Low
NIS2 17 · GDPR 85
NIS2 17 · GDPR 85
mydealz.de is a leading German e-commerce community platform operated by 6Minutes Media GmbH, a subsidiary of Atolls GmbH. Founded in 2007, it serves as a large-scale shopping community where users share deals, coupons, and discounts. The platform is well-positioned in the market as the largest shopping community worldwide, offering key services such as deal sharing, voucher distribution, community discussions, and deal alerts. The target audience primarily consists of consumers seeking savings and smart shopping decisions. The business model leverages community engagement combined with affiliate marketing and advertising revenue streams. Technically, the website employs modern web technologies including Vue.js, ES modules, and Cloudflare DNS/CDN services, ensuring fast performance and mobile optimization. The site uses structured data (JSON-LD) for enhanced SEO and integrates advertising scripts responsibly. Security posture is strong with HTTPS enforced and Cloudflare protection, though explicit security headers and policies could be more visible. Privacy compliance is basic with cookie consent implemented but lacking explicit privacy and terms of service pages in the analyzed content. Overall, the security posture is good with no detected vulnerabilities or blocking mechanisms. The WHOIS data aligns well with the business claims, showing a consistent and legitimate registration. The site maintains a high level of professionalism, trustworthiness, and user experience, making it a reliable platform for deal seekers. Strategic improvements include publishing comprehensive privacy and security policies and enhancing transparency around incident response and vulnerability disclosures.
- Made by Dave
madebydave.org
Technology · United Kingdom
78Low
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
Made by Dave is a UK-based specialist Squarespace expert web design agency founded in 2018. They provide bespoke Squarespace website design, consultancy, project management, and development services, targeting businesses and individuals seeking professional, responsive websites. The company holds recognized Squarespace badges indicating market leadership and community involvement. Technically, the website is built on the Squarespace platform, leveraging modern web technologies and third-party analytics tools. The site is well-optimized for mobile and accessibility, with good SEO practices. Security posture is strong with HTTPS and HSTS enabled, though DNSSEC is not configured. Privacy compliance is partial, with a cookie consent banner but no explicit privacy policy or terms of service pages. Overall, the website is professional and trustworthy, with minor gaps in privacy documentation.
renaultrenault.sk
Transportation · Slovakia
78Low
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
Renault Slovakia operates a comprehensive automotive website offering new, used, and commercial vehicles, including electric and hybrid models. The site targets Slovak consumers interested in Renault's vehicle range and related services such as financing and after-sales support. The website demonstrates a solid market position as part of the global Renault brand, with consistent branding and a professional presentation. Technically, the site uses modern web technologies including React, optimized images, and integrates Google Analytics and Tag Manager for tracking. Cookie consent is managed via OneTrust, indicating attention to privacy compliance, though explicit privacy and terms of service pages were not found in the provided content. Security posture is good with HTTPS enforced, but could be improved by adding security headers and publishing security policies. Overall, the site is trustworthy and well-maintained, suitable for its business purpose.
SoundHound AI, Inc.amelia.com
Technology · United States
78Low
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
SoundHound AI, Inc. operates the Amelia Platform, a leading enterprise conversational AI and agentic AI solution provider. The company targets enterprise customers across industries such as finance, healthcare, and hospitality, offering AI agents that listen, reason, and act to enhance customer and employee experiences. The website reflects a mature digital presence with comprehensive product information, multimedia content, and strong calls to action for demos and expert contact. Technically, the site is built on WordPress with modern plugins and integrates Google Tag Manager and Vimeo for analytics and video content. Security posture is good with HTTPS and cookie consent mechanisms, though explicit security headers and incident response information are absent. WHOIS data is unavailable, which slightly reduces trust but is offset by strong branding and industry recognition. Overall, the site is professional, secure, and compliant with privacy regulations, making it a credible source for enterprise AI solutions.
Centrum právnej pomocicentrumpravnejpomoci.sk
Government · Slovakia
77Low
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
Centrum právnej pomoci is a Slovak government-funded organization established in 2006 to provide legal aid to citizens in material need. It offers a broad range of legal services including civil, family, labor law, and personal bankruptcy assistance. The website serves as an official portal with comprehensive information, contact details, and access to services. The organization holds a strong market position as the official legal aid provider in Slovakia with multiple offices nationwide. Technically, the website uses AngularJS, Bootstrap, and integrates Google Analytics and Tag Manager for tracking. It is mobile-optimized and accessible, with good SEO practices. Security measures include HTTPS, CSRF tokens, and cookie consent mechanisms, though additional security headers and a formal security policy could enhance the posture. The security posture is solid with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent. The domain registration data aligns with the organization's government affiliation and history, supporting legitimacy. Overall, the website is professional, trustworthy, and serves its public service mission effectively. Strategic improvements in security headers and incident response transparency would further strengthen its security and compliance stance.
- GGipoNext
gipo.it
Healthcare · Italy
76Low
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
GipoNext is a well-established Italian healthcare software provider specializing in management solutions for medical centers, clinics, and dental practices. The company operates under the parent company Docplanner and offers a comprehensive SaaS platform that integrates appointment scheduling, clinical records, billing, and compliance with Italian health regulations. The website reflects a mature digital presence with professional design, clear navigation, and rich content tailored to healthcare professionals. Technically, the site leverages HubSpot CMS, modern analytics, and video embedding technologies, ensuring a robust user experience. Security posture is strong with HTTPS and DNSSEC enabled, though explicit security headers and privacy disclosures could be improved. Overall, the domain's WHOIS data aligns with the business claims, indicating high legitimacy and trustworthiness.
DoktorTakvimidoktortakvimi.com
Healthcare · Turkey
77Low
NIS2 2 · GDPR 65
NIS2 2 · GDPR 65
DoktorTakvimi is a prominent Turkish online healthcare platform specializing in doctor search, appointment booking, and patient reviews. It operates as part of the Docplanner group, a recognized leader in healthcare technology. The website offers a comprehensive database of over 181,000 doctors and specialists, facilitating easy access to healthcare services for patients in Turkey. The platform supports online consultations and integrates modern digital tools to enhance user experience. Technically, the site employs a robust tech stack including JavaScript frameworks, Algolia search, Google Analytics, and HubSpot marketing tools, ensuring efficient performance and user engagement. Security measures such as HTTPS enforcement, security headers, and cookie consent mechanisms are well implemented, although explicit security policies and incident response details are not publicly available. The absence of WHOIS registration data is a notable anomaly but does not detract significantly from the platform's legitimacy given its professional presentation and market presence. Overall, DoktorTakvimi demonstrates a mature digital infrastructure with good privacy compliance and a strong market position in Turkey's healthcare sector.
MioDottoremiodottore.it
Healthcare · Italy
82Low
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
MioDottore.it is a leading Italian online healthcare platform that enables patients to find doctors and clinics, read reviews, and book appointments online. It operates as part of the Docplanner group, leveraging a robust technical infrastructure with modern analytics and marketing tools. The website demonstrates good digital maturity with mobile optimization, SEO best practices, and user-friendly design. Security posture is strong with HTTPS enforcement, security headers, and GDPR-compliant consent management. However, explicit security policies and incident response contacts are not publicly available, representing an area for improvement. Overall, the platform is trustworthy, professional, and well-positioned in the Italian healthcare market.
Förderverein für regionale Entwicklung e.V.gesundheit-intranet.de
Healthcare · Germany
81Low
NIS2 17 · GDPR 95
NIS2 17 · GDPR 95
The website gesundheit-intranet.de is operated by the Förderverein für regionale Entwicklung e.V. and offers modular digital solutions aimed at healthcare providers to improve internal communication, time tracking, appointment booking, and document management. The business targets medical practices and healthcare employees, providing a SaaS model with a focus on GDPR compliance and ISO 27001 certified hosting in Germany. The site is well-structured, professionally designed, and provides clear contact channels including phone, email, and demo request forms with CAPTCHA protection. Technically, the site uses modern web technologies such as jQuery, Slick Slider, and a proprietary Portuna framework, ensuring good mobile responsiveness and accessibility. Security posture is strong with SSL encryption and certified hosting, though security headers could be improved. No blocking or WAF mechanisms were detected, allowing full content access and analysis.
Sparkasse Westmünsterlandstadtsparkasse-haltern.de
Finance · Germany
76Low
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Sparkasse Westmünsterland is a regional German savings bank offering a comprehensive range of financial services including retail banking, loans, insurance, investment products, and private banking. The website targets both private and corporate customers, providing secure online banking and extensive product information. The bank maintains a strong local presence supported by digital services and a professional online platform. The site is well-branded, consistent, and includes multiple trust indicators such as certifications and awards. Technically, the website is built on modern web standards, likely using Adobe Experience Manager as its CMS. It employs HTTPS, cookie consent mechanisms, and integrates analytics tools like Google Analytics and Dynatrace. The site is mobile-optimized, accessible, and SEO-friendly, providing a good user experience with clear navigation and professional design. From a security perspective, the site enforces HTTPS and uses secure forms for login and consent. While explicit security headers are not fully confirmed, the overall posture is strong with no visible vulnerabilities or exposed sensitive data. Privacy compliance is robust, with clear privacy and cookie policies aligned with GDPR requirements. However, the site lacks a published security policy or incident response contact details. Overall, the website is trustworthy, professionally maintained, and compliant with relevant privacy regulations. It presents minimal risk and serves as a reliable digital channel for the bank's customers.
INWXinwx.com
Technology
79Low
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
INWX is a domain registrar offering a wide range of domain registration and management services, including real-time registration, API access, and SSL certificates. The company has been active since 2004 and serves over 100,000 customers globally. The website is professionally designed with good navigation and mobile optimization, supporting a broad portfolio of TLDs with competitive pricing. Technically, the site uses established JavaScript libraries and Matomo analytics, indicating a moderate level of digital maturity. Security features such as two-factor authentication, DNSSEC, and Whois privacy are highlighted, although explicit security headers are not detected. The absence of WHOIS data for the domain reduces transparency but does not negate the legitimacy of the business based on website content. Overall, the site presents a trustworthy and professional domain registration service with room for improvement in privacy compliance and security header implementation.
IONOS Inc.ionos.com
Technology · United States
77Low
NIS2 55 · GDPR 65
NIS2 55 · GDPR 65
IONOS Inc. is a well-established enterprise-level hosting provider and cloud solutions company based in the United States. The company offers a broad range of services including domain registration, website building, eCommerce solutions, hosting (shared, VPS, dedicated), WordPress hosting, email and office productivity tools, servers, and cloud infrastructure. Their market position is strong, targeting businesses and individuals seeking reliable and scalable digital infrastructure. The website is professionally designed with clear navigation and comprehensive content, reflecting a mature digital presence. Technically, the website leverages modern web technologies such as React and Next.js, ensuring fast performance and excellent mobile optimization. The use of multiple analytics and marketing tools indicates a sophisticated digital marketing strategy. Security best practices are observed with HTTPS enforcement and security headers, although explicit security policies and incident response information are not prominently published. The security posture is solid with no evident vulnerabilities or exposed sensitive data. Privacy compliance is good, with clear privacy and cookie policies and GDPR compliance indicators. However, WHOIS data is unavailable, which may be due to privacy protection or registry policies, but the overall trustworthiness remains high based on website professionalism and business information. Overall, IONOS presents a low-risk profile with strong business credibility and technical maturity. Strategic recommendations include publishing detailed security policies, vulnerability disclosure information, and data protection officer contacts to enhance transparency and trust further.
Wiremowiremo.co
E-commerce · United States
76Low
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Wiremo is a SaaS company providing a customer review platform tailored for eCommerce businesses. Their service focuses on enabling easy integration of customer review widgets to enhance user-generated content and improve Google search rankings. The company targets eCommerce website owners seeking to leverage customer feedback to boost sales and brand trust. The website is professionally designed, mobile-optimized, and built on a WordPress platform with modern performance enhancements such as NitroPack and Cloudflare CDN. Security posture is solid with HTTPS enforced and domain locked via registrar status flags, though DNSSEC is not enabled and no explicit security or incident response policies are published. Privacy and cookie policies are present with consent mechanisms, indicating basic GDPR compliance. Overall, Wiremo presents as a legitimate, small-sized technology company with a focused market niche and a good digital maturity level.
KaktusAppskaktusapp.com
E-commerce
81Low
NIS2 2 · GDPR 95
NIS2 2 · GDPR 95
KaktusApps is a specialized eCommerce development company providing a suite of innovative apps designed to enhance online store performance, increase sales, and improve customer engagement. Their product portfolio includes tools for pre-order management, upselling, discount management, cart optimization, and customer reviews, primarily targeting Shopify and other eCommerce platforms. The company positions itself as a growth enabler for online retailers with a strong focus on user experience and revenue maximization. Technically, the website is built on Webflow, uses Cloudflare DNS, and integrates modern JavaScript libraries and marketing tools such as Google Tag Manager and Crisp Chat. The site is mobile-optimized, fast, and well-structured, reflecting a mature digital presence. Security-wise, the site uses HTTPS with a reputable registrar and DNS provider, but lacks DNSSEC and visible security headers, and does not publish security or incident response policies. Privacy compliance is weak due to the absence of privacy and cookie policies and consent mechanisms. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and security disclosures.
rku.it GmbHrku-it.de
Technology · Germany
80Low
NIS2 10 · GDPR 88
NIS2 10 · GDPR 88
rku.it GmbH is a medium-sized German IT service provider specializing in tailored IT solutions for the energy, public transport, and municipal sectors. The company positions itself as a knowledgeable partner combining market expertise with IT competence to deliver digital transformation and managed services. Their website reflects a professional and modern digital presence powered by TYPO3 CMS, featuring comprehensive service descriptions, customer references, and partner networks. Technically, the site uses modern JavaScript libraries and includes bot protection on contact forms. Security posture is solid with HTTPS and CAPTCHA, though security headers and explicit incident response policies are absent. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. Overall, the website and domain data indicate a legitimate, established business with a strong market position and credible digital infrastructure.
Kreis Recklinghausenkreis-re.de
Government · Germany
79Low
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Kreis Recklinghausen operates as a governmental authority providing a wide range of public services to residents and businesses within the Recklinghausen district in Germany. The website serves as an information portal and service gateway, offering access to citizen services, administrative information, economic development, education, and leisure activities. The site is well-positioned as a regional government entity with a clear focus on serving its local community. Technically, the website employs standard web technologies including jQuery and Cookiebot for cookie consent management. The site is hosted on INWX infrastructure and demonstrates good mobile optimization and accessibility features. While the site lacks a detected CMS or advanced frameworks, it maintains a moderate performance level and basic SEO optimizations. From a security perspective, the site enforces HTTPS and integrates a comprehensive cookie consent mechanism with blocking capabilities. However, it lacks explicit security headers and publicly available security or incident response policies. No vulnerabilities or suspicious content were detected, indicating a generally secure posture appropriate for a governmental website. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, particularly in privacy and cookie management. The absence of direct contact emails or phone numbers is mitigated by the presence of a contact form. Strategic recommendations include enhancing security headers, publishing security policies, and improving SEO and technical modernization to further strengthen the site's security and user experience.
Retention.comretention.com
Technology
79Low
NIS2 22 · GDPR 68
NIS2 22 · GDPR 68
Retention.com is a technology company specializing in identity resolution and retention marketing solutions primarily for ecommerce brands, publishers, and retailers. Their platform enables businesses to convert anonymous website visitors into known customers, boosting email list growth, remarketing effectiveness, and overall revenue. The company positions itself as an industry leader with over 1500 brands served and showcases strong customer success stories demonstrating significant ROI. The website is professionally designed, mobile-optimized, and integrates multiple modern marketing and analytics technologies including HubSpot, Facebook Pixel, ProfitWell, and Hotjar. Privacy and cookie compliance are well addressed with clear policies and consent mechanisms. Security posture is solid with HTTPS and SOC2 Type 2 certification, though some security headers could be improved and incident response details are not publicly available. The WHOIS data is missing or protected, which slightly reduces trustworthiness but is mitigated by the professional web presence and certifications. Overall, Retention.com presents as a credible and mature SaaS provider in the ecommerce marketing space.