Low-risk security reports
14,261 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,165001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
10,251–10,300 of 14,261
Western & Southern Financial Groupwesternsouthern.com
Finance · United States
78Low
NIS2 17 · GDPR 58
NIS2 17 · GDPR 58
Western & Southern Financial Group is a well-established financial services company founded in 1888, specializing in life insurance, retirement solutions, and investment services. The company targets families and individuals in the United States seeking comprehensive financial products. Their market position is strong, supported by a large size and multiple subsidiaries, reflecting a diversified business model focused on insurance and investment offerings. The website reflects a professional and consistent brand image with excellent content quality and user experience. Technically, the website is built on a modern stack including Sitecore CMS, with integrations of Google Tag Manager, Hotjar, and Microsoft Application Insights for analytics and monitoring. The site demonstrates good performance, mobile optimization, and SEO practices. Accessibility features are present, enhancing usability for diverse users. From a security perspective, the site enforces HTTPS and employs monitoring tools, but lacks publicly available explicit security policies or incident response information. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data is a concern but does not detract significantly from the overall trustworthiness given the strong business presence and branding. Overall, the website is secure, professional, and compliant with privacy regulations, making it a trustworthy platform for its users. Strategic recommendations include publishing detailed security policies and vulnerability disclosure information to further enhance transparency and trust.
Nationwide Children's Hospitalnationwidechildrens.org
Healthcare · United States
76Low
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Nationwide Children's Hospital is a leading pediatric healthcare provider and research institute in the United States, offering comprehensive medical services and family resources. The website reflects a mature digital presence with a focus on accessibility, user experience, and detailed healthcare information targeting families and medical professionals. The technical infrastructure includes modern analytics and tracking tools, with good mobile optimization and accessibility features. Security posture is solid with HTTPS and asynchronous script loading, though some security headers could be improved. Privacy compliance is evident with clear privacy and cookie policies and consent mechanisms. Overall, the website projects high professionalism and trustworthiness, though WHOIS data is unavailable, limiting domain registration verification.
Insurance and benefits with a purpose | Guardianguardianlife.com
—
78Low
NIS2 55 · GDPR 53
NIS2 55 · GDPR 53
One Model Inc.onemodel.co
Technology · United States
76Low
NIS2 47 · GDPR 68
NIS2 47 · GDPR 68
One Model Inc. is a US-based technology company specializing in People Analytics software that enables organizations to make data-driven workforce decisions. Their platform integrates multiple HR and business data sources, providing dashboards, predictive models, and AI-powered insights to improve talent management and planning. Positioned as a flexible and transparent SaaS solution, One Model targets HR professionals and business leaders seeking advanced analytics capabilities. The website is professionally designed, mobile-optimized, and rich in content including case studies, client logos, and multimedia. Technically, it leverages HubSpot CMS and modern JavaScript libraries, with integrated marketing and analytics tools such as Google Tag Manager and Facebook Pixel. Security posture is strong with HTTPS and ISO 27001 certification, though some security headers are not visibly configured. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. WHOIS data is privacy protected, consistent with industry norms for SaaS companies. Overall, the site demonstrates high professionalism, trustworthiness, and technical maturity.
- HiBob
hibob.com
Technology
76Low
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
HiBob is a technology company offering an award-winning HRIS platform designed to help modern and dynamic companies improve productivity, employee engagement, and retention. The company targets CEOs, HR professionals, and accountants with a SaaS business model focused on delivering comprehensive HR solutions. The website reflects a strong market position with professional branding and a consistent user experience. Technically, the site is built on WordPress with advanced SEO and marketing tools such as Yoast SEO, Google Tag Manager, and Visual Website Optimizer, indicating a mature digital infrastructure. Security posture is robust with HTTPS, security headers, and cookie consent mechanisms, although explicit security policy and incident response information are not publicly detailed. Overall, the site is professional, trustworthy, and compliant with privacy regulations, although WHOIS data is unavailable likely due to privacy protection, which is justified for this business type.
Culture Amp Pty Ltdcultureamp.com
Technology · Australia
82Low
NIS2 25 · GDPR 85
NIS2 25 · GDPR 85
Culture Amp Pty Ltd operates a market-leading employee experience platform designed to empower teams through performance, development, and engagement tools. The company targets HR professionals, executives, managers, and employees with a SaaS model that integrates People Science and AI to deliver actionable insights. The platform is well-positioned in the HR technology sector with a strong brand presence, industry awards, and a comprehensive suite of services including AI Coach, people analytics, and employee engagement surveys. Technically, the website leverages modern frameworks and integrations such as React, HubSpot, and Wistia, ensuring a fast, mobile-optimized, and accessible user experience. Security posture is strong with HTTPS, security headers, and compliance with ISO 27001, SOC II, and GDPR. However, WHOIS data is unavailable, which slightly impacts domain trust assessment but is mitigated by the professional and consistent web presence. Overall, the platform demonstrates high digital maturity and business credibility.
Visiervisier.com
Technology · Canada
84Low
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
Visier is an enterprise SaaS company specializing in people analytics and workforce planning software. Their platform enables business professionals and HR leaders to leverage data-driven insights to improve workforce outcomes and business results. Positioned as a leading people analytics provider, Visier targets medium to large enterprises with a focus on technology-driven HR solutions. The website reflects a mature digital presence with professional branding and comprehensive service descriptions. Technically, the website is built using modern frameworks such as React and Gatsby, with integration of Okta for secure authentication. The site demonstrates fast performance, good mobile optimization, and adherence to SEO and accessibility best practices. Analytics are implemented via Google Analytics and Tag Manager, supporting moderate user tracking with privacy compliance. From a security perspective, Visier employs HTTPS with strong SSL configuration and security headers. The use of Okta indicates a robust authentication mechanism. However, the absence of a dedicated security policy or incident response page and lack of a vulnerability disclosure mechanism are areas for improvement. WHOIS data is unavailable publicly, likely due to privacy protection, which is common for enterprise SaaS companies but slightly reduces transparency. Overall, Visier presents a low-risk profile with strong business credibility and technical maturity. Strategic recommendations include publishing explicit security and incident response policies, adding a vulnerability disclosure page, and enhancing transparency around domain registration to further build trust.
Other
81Low
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
The Institute for Corporate Productivity (i4cp) is a leading human capital research firm specializing in discovering and advancing next practices in HR and workforce productivity. The company serves senior HR leaders, CHROs, and business executives by providing enterprise memberships, advisory services, executive search, and hosting industry-leading conferences. Their market position is strong, supported by partnerships with major global companies and a comprehensive research approach combining data and peer crowdsourcing. Technically, the website employs modern web technologies including Google Analytics, HubSpot, Bootstrap, and Vite for efficient content delivery and user experience. The site is mobile optimized, accessible, and SEO-friendly, with structured data enhancing search visibility. Security posture is solid with HTTPS enforced and Content Security Policy headers, though additional security headers could improve defenses. From a security perspective, no critical vulnerabilities or exposed sensitive data were detected. Privacy and cookie policies are present and indicate GDPR compliance. However, the absence of public WHOIS data suggests domain privacy protection, which is common and justified for this business type. No incident response or vulnerability disclosure information was found, indicating an area for potential improvement. Overall, the website is professional, trustworthy, and well-maintained, reflecting a mature organization with a clear focus on human capital research and leadership. The risk level is low, but enhancing security headers and publishing incident response details would strengthen trust and compliance.
ALPINE PROalpinepro.cz
Retail · Czech Republic
78Low
NIS2 2 · GDPR 100
NIS2 2 · GDPR 100
ALPINE PRO is a Czech Republic-based e-commerce retailer specializing in outdoor clothing and accessories. Established in 2000, the company has a well-established market presence targeting consumers interested in outdoor apparel. The website is professionally designed with consistent branding and offers a user-friendly shopping experience primarily in the Czech language. The business model focuses on direct online sales through its e-shop platform.
Media · Switzerland
83Low
NIS2 2 · GDPR 85
NIS2 2 · GDPR 85
FIAPF is an established international federation representing film producers globally, advocating for diverse audiovisual production and supporting film festivals. The organization operates a professional website built on WordPress, leveraging modern plugins and technologies such as Yoast SEO, Matomo analytics, and GDPR-compliant cookie management. The site is hosted on Infomaniak servers and uses HTTPS with a clientTransferProhibited domain status, indicating a secure and stable online presence. Security posture is solid with room for improvement in DNSSEC and security headers. Privacy compliance is strong with clear policies and consent mechanisms. Overall, the website reflects a credible, professional organization with a clear focus on media industry advocacy.
- MMicrosoft Corporation
msdn.com
Technology · United States
88Low
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Microsoft Learn is a comprehensive educational platform operated by Microsoft Corporation, designed to provide interactive lessons, technical documentation, certifications, and community engagement for developers and IT professionals. The platform supports skill development across a wide range of Microsoft technologies, positioning Microsoft as a leader in technology education and professional development. The website demonstrates a high level of digital maturity with modern web technologies, excellent mobile optimization, and strong SEO practices. Security is robust with HTTPS enforcement, modern security headers, and cookie consent mechanisms, although explicit security policies and incident response contacts are not publicly detailed. Overall, the platform is trustworthy, professional, and well-aligned with Microsoft's brand and business objectives.
- Fobi AI Germany GmbH
passcreator.com
Technology · Germany
80Low
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Passcreator, operated by Fobi AI Germany GmbH, is a mature SaaS platform specializing in the creation and management of digital Wallet passes compatible with Apple Wallet and Google Wallet. Established since 2012, it serves a broad business audience with solutions including loyalty cards, coupons, event tickets, and membership cards. The platform emphasizes seamless integration, real-time updates, and personalized customer engagement without requiring dedicated apps. Its market position is reinforced by partnerships with notable global brands and certifications such as ISO 27001, underscoring its commitment to security and quality. Technically, the website is built on the Neos CMS and Flow PHP framework, leveraging modern web technologies including JavaScript and integrations with payment gateways like Stripe and PayPal. The site demonstrates good mobile optimization, accessibility, and SEO practices. Analytics and marketing tools such as Google Analytics, Hubspot, and Zapier are employed with privacy considerations like IP anonymization and explicit cookie consent mechanisms. From a security perspective, Passcreator shows a strong posture with HTTPS enforcement and ISO 27001 certification. However, the absence of WHOIS data and lack of explicit security headers or public incident response policies represent areas for improvement. No vulnerabilities or exposed sensitive data were detected in the analysis. Overall, Passcreator presents a professional, trustworthy, and technically sound digital service platform with minor gaps in transparency around domain registration and incident response. Strategic enhancements in these areas would further strengthen its security and compliance profile.
Cornelsen Verlag GmbHcornelsen.de
Education · Germany
82Low
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Cornelsen Verlag GmbH is a well-established German educational publisher specializing in school books, workbooks, and teaching materials for learners and educators. The website reflects a mature digital presence with a comprehensive navigation structure covering various educational sectors including primary, secondary, vocational, and adult education. The company leverages modern web technologies such as Neos CMS and Flow PHP framework, hosted on AWS infrastructure, and integrates multiple analytics and marketing tools including Google Tag Manager, Econda, Microsoft Clarity, and social media platforms. Security measures are robust with HTTPS enforcement and a strict Content-Security-Policy, although explicit privacy and cookie policies are not clearly found in the analyzed content. The site is free from WAF blocks or security challenges, indicating full accessibility.
Technology
79Low
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Honeybadger.io is a technology company providing SaaS solutions focused on error tracking and application performance monitoring to help developers and software teams improve their software quality and speed. The website targets developers and software teams, offering tools to monitor and track application errors and performance issues. The business model is subscription-based SaaS, catering to a niche market of software development professionals. The website content is minimal and partially inaccessible, limiting a full assessment of the company's market position and detailed business information. Technically, the site uses modern web technologies including ProfitWell for analytics, Adobe Typekit for fonts, and Font Awesome for icons, with performance optimizations such as preconnect and prefetch hints. However, the site lacks visible security headers, privacy policies, and contact information in the provided content, indicating gaps in compliance and transparency. The WHOIS data is unavailable due to a malformed request or privacy protection, which reduces trust and limits verification of domain legitimacy. Overall, the security posture is weak due to missing security headers and lack of visible SSL details, and privacy compliance is poor with no detected policies. Strategic recommendations include improving transparency with clear privacy and cookie policies, enhancing security headers and SSL configuration, and providing accessible contact and incident response information.
- Stage Entertainment Nederland
stage-entertainment.nl
Hospitality · Netherlands
83Low
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
Stage Entertainment Nederland is a prominent provider of musicals and live theater experiences in the Netherlands, offering popular shows such as Moulin Rouge! De Musical and Disney FROZEN. The company operates a professional and user-friendly website focused on ticket sales, group arrangements, and theater rentals. The site targets a broad audience interested in cultural and entertainment events. Technically, the website is built on Drupal 10 and integrates modern marketing and analytics tools such as HubSpot Forms, Google Tag Manager, and Optimizely, ensuring a mature digital presence with good mobile optimization and accessibility. Security-wise, the site enforces HTTPS, uses Content Security Policy nonces, and implements cookie consent mechanisms, though explicit security policies and incident response contacts are not publicly available. Overall, the domain registration details align well with the business claims, indicating a legitimate and trustworthy entity.
- IONOS Group SE
ionos-group.com
Technology · Germany
87Low
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
IONOS Group SE is a leading European digitalization partner specializing in SMB and enterprise cloud and web presence solutions. The company operates multiple well-known brands and serves approximately 6.4 million customers across 18 markets in Europe and North America. Their business model focuses on providing comprehensive hosting, cloud, and domain registration services supported by strong customer care and infrastructure. The website reflects a mature digital presence with investor relations, corporate governance, and press information, indicating a publicly listed and transparent organization. Technically, the website is built on TYPO3 CMS, uses modern web technologies, and integrates Adobe Analytics for user tracking. The site is mobile optimized and demonstrates good SEO and accessibility practices, although some accessibility features could be improved. Hosting appears to be managed internally or via a dedicated CDN. Performance is moderate with room for optimization. Security posture is strong with HTTPS enforced and a robust cookie consent mechanism supporting GDPR compliance. However, explicit security headers are missing, and no public security policy or incident response contacts are published. The WHOIS data is incomplete or privacy protected, which is common for large enterprises but reduces transparency. No vulnerabilities or suspicious content were detected. Overall, the website and business present a low risk profile with strong credibility and compliance. Strategic recommendations include enhancing security headers, publishing security policies, and improving accessibility to further strengthen trust and compliance.
- Schlund Technologies GmbH
schlundtech.com
Technology · Germany
79Low
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
SchlundTech is a medium-sized European technology provider specializing in domain registration, encryption products, and cloud server hosting. The company, founded in 1995 and part of the 1&1 group, offers a comprehensive Control Center platform for managing domains, encryption certificates, and cloud infrastructure. The website is professionally designed, mobile-optimized, and provides clear navigation and relevant business content targeting entrepreneurs and professional users. Technically, the site uses TYPO3 CMS, integrates Google Tag Manager and Usercentrics for consent management, and employs HTTPS with good security practices. However, the WHOIS data for the domain is missing or not publicly available, which raises concerns about domain registration legitimacy despite the strong business presence and branding. Privacy policies and cookie consent mechanisms are well implemented, indicating GDPR compliance. Overall, the website demonstrates a mature digital presence with a strong security posture but requires verification of domain registration details to fully confirm legitimacy.
PADIpadi.com
Education
80Low
NIS2 17 · GDPR 85
NIS2 17 · GDPR 85
PADI is a globally recognized leader in scuba diving education, offering a comprehensive range of courses, certifications, and dive-related services. The website reflects a mature digital presence with multilingual support, e-commerce capabilities, and integrated travel and conservation initiatives. Technically, the site is built on Drupal 10 and leverages modern analytics and marketing tools, ensuring good performance and user experience. Security posture is strong with HTTPS, consent management, and no visible vulnerabilities, although explicit security headers should be verified at the HTTP level. WHOIS data is unavailable, likely due to privacy protection, which is common for large brands. Overall, the site is professional, trustworthy, and well-optimized for its audience.
- Stage Entertainment
stage-entertainment.com
Media
84Low
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
Stage Entertainment is a prominent global producer and operator of musical theatre productions, attracting millions of visitors annually. The company operates multiple theatres across Europe and collaborates with international partners to produce and license major musicals. The website reflects a mature digital presence built on Drupal 10, with modern content delivery via AWS Cloudfront and integrated analytics through Google Tag Manager. Security posture is solid with HTTPS and cookie consent mechanisms in place, though explicit privacy and security policies are not directly visible. The absence of WHOIS data for the domain is a notable gap but does not detract significantly from the professional presentation and operational legitimacy of the site. Overall, the company demonstrates a strong market position in the entertainment sector with a well-structured online presence.
- mlive
mlive.com
Media · United States
78Low
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
MLive.com is a prominent regional news website providing comprehensive coverage of Michigan local news, sports, weather, and entertainment. The site targets Michigan residents and general news consumers interested in regional updates. It operates on a business model combining advertising revenue and subscription-based content access, evidenced by subscriber-exclusive articles and paywall technologies. The website is part of a broader media group with multiple regional partner sites, indicating a strong market position in local news media. Technically, the site employs modern web technologies including React, Arc Fusion CMS, and integrates multiple advertising and analytics platforms to optimize content delivery and monetization. Security posture is generally good with HTTPS enforced and adblock detection mechanisms in place; however, the absence of visible security headers and lack of published security policies suggest areas for improvement. Privacy compliance is limited as no explicit privacy or cookie policies were detected in the provided content, which could pose regulatory risks. Overall, the website is professional, content-rich, and trustworthy, but would benefit from enhanced transparency and security best practices.
Cin7cin7.com
Technology
80Low
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Cin7 is a cloud-based inventory management software provider targeting modern sellers including startups, scaling businesses, manufacturers, wholesalers, and retailers. The company offers a comprehensive SaaS platform that integrates inventory, order management, manufacturing, and sales channels with AI-driven forecasting and over 700 app integrations. The website is professionally designed, mobile-optimized, and rich in content, reflecting a mature digital presence. The technical infrastructure leverages HubSpot CMS, modern JavaScript libraries, and analytics tools, ensuring good performance and user experience. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though a dedicated security policy and incident response information are absent. Privacy compliance is well addressed with a cookie consent mechanism and GDPR-aligned privacy policy. WHOIS data is unavailable, which limits domain registration insights, but the overall trust indicators and business information support legitimacy. Strategic recommendations include publishing explicit security and incident response policies and establishing a vulnerability disclosure program.
Boardableboardable.com
Non-profit
79Low
NIS2 17 · GDPR 95
NIS2 17 · GDPR 95
Boardable is a specialized SaaS provider offering a comprehensive board management platform tailored for nonprofit organizations. The company has established a strong market position since its founding in 2009, focusing on streamlining nonprofit board operations through integrated video conferencing, agenda building, document management, and AI-powered tools. The website reflects a mature digital presence with excellent content quality, professional design, and clear navigation aimed at nonprofit executives, administrators, and board members. Technically, the site is built on WordPress and leverages a robust technology stack including HubSpot for marketing automation, multiple analytics platforms (Heap, Hotjar, Google Analytics), and various advertising and tracking pixels. The hosting infrastructure appears reliable with AWS DNS services. Performance and mobile optimization are excellent, supporting a seamless user experience. From a security perspective, the website enforces HTTPS, employs domain locking mechanisms, and integrates security best practices, though DNSSEC is not enabled. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. However, explicit security policies and incident response contacts are not publicly available. Overall, Boardable presents a low-risk profile with a strong business credibility, good security posture, and compliance maturity. Strategic recommendations include enabling DNSSEC, publishing a security policy, and adding a vulnerability disclosure channel to further enhance trust and security transparency.
ShipEngineshipengine.com
Transportation
81Low
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
ShipEngine operates as a technology platform specializing in multi-carrier shipping and logistics APIs, serving platforms, third-party logistics providers, brands, and developers. The company positions itself as a leading API provider with a significant shipment volume, offering services such as shipping APIs, address validation, tracking, rate comparison, and embeddable components. The website reflects a mature digital presence with modern technologies including WordPress CMS, jQuery libraries, Google Tag Manager, and Optimizely for marketing and analytics. Privacy compliance is supported by a cookie consent mechanism, although explicit privacy and terms of service pages were not detected in the provided content. Security posture is moderate with HTTPS implied but lacking visible security headers or published security policies. WHOIS data for the www subdomain is unavailable, which is unusual but does not detract from the professional appearance and trustworthiness of the site. Overall, the website demonstrates a strong business and technical foundation with room for improvement in security transparency and contact information clarity.
Audienceaudience.io
Media
78Low
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
Audience is a professional audience management platform focused on helping brands and media companies grow, engage, and monetize their audiences through interactive campaigns and data-driven tools. The platform boasts a large number of campaigns and data points collected, supported by extensive integrations with advertising and marketing services. The website demonstrates a mature digital presence with modern technologies and strong marketing infrastructure. Technically, the site is built on Webflow CMS and uses a variety of modern analytics and marketing tools including Google Analytics, HubSpot, Facebook Pixel, and LinkedIn Insight Tag. The site is well optimized for performance, mobile responsiveness, and accessibility, reflecting a high level of digital maturity. From a security perspective, the website enforces HTTPS and uses secure third-party services. While some security headers are not explicitly detected, no critical vulnerabilities or exposed sensitive data were found. Privacy and cookie policies are present and comprehensive, indicating good compliance with data protection regulations. Overall, the website and business appear legitimate and professional, with no signs of suspicious activity. The lack of WHOIS data is due to privacy protection, which is common and justified for this type of business. Strategic recommendations include enhancing security headers and publishing a formal security policy or vulnerability disclosure to further improve trust and security posture.
RevContent, LLCrevcontent.com
Media
79Low
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
RevContent, LLC operates a performance-driven native advertising platform that connects advertisers with highly engaged audiences across premium publisher sites. The company targets both advertisers seeking quality traffic and publishers aiming to monetize content without compromising user experience. The website demonstrates a strong market position with trusted partnerships and industry certifications such as IAB membership. Technically, the site is built on modern web technologies including Webflow CMS, Amazon Cloudfront CDN, and integrates analytics and chat support tools, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced and no exposed sensitive data, though improvements could be made by adding security headers and explicit incident response policies. Overall, the site is professional, well-structured, and compliant with privacy regulations, supporting a high level of trustworthiness.
Ascentialascential.com
Media · United Kingdom
79Low
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Ascential is a specialist information, data, and analytics company focused on enabling smart decision-making for businesses. The company provides business-critical information, events, intelligence, and advisory services. Recently acquired by the Informa Group, Ascential's brands and services have been integrated into Informa's portfolio, particularly under Informa Festivals. The website analyzed is a legacy site, no longer updated, directing users to informa.com for current information. The business targets enterprises and professionals seeking industry insights and event participation.
Marsellomarsello.com
Retail
76Low
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Marsello is a medium-sized SaaS company specializing in customer loyalty and marketing software tailored for omnichannel retailers, including retail and hospitality sectors. Their platform integrates POS and eCommerce data to enable loyalty programs, referral marketing, email and SMS campaigns, and AI-driven customer insights. The website is professionally designed, mobile-optimized, and rich in content, showcasing strong branding and customer success stories. Technically, the site leverages HubSpot CMS and modern JavaScript libraries, with extensive use of analytics and marketing tools. Security posture is good with HTTPS and cookie consent mechanisms, though explicit security policies and WHOIS transparency are lacking. Overall, Marsello presents a credible and mature digital presence with room for improvement in domain registration transparency and security disclosures.
Intuit Inc.intuit.com
Finance · United States
87Low
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
Intuit Inc. is a leading financial software company providing a suite of products including TurboTax, Credit Karma, QuickBooks, and Mailchimp. The company targets individual consumers, small and medium businesses, and accounting professionals, offering SaaS-based solutions that empower users with financial confidence. Intuit holds a strong market position as a trusted brand in the finance and technology sectors. The website reflects a mature digital infrastructure leveraging modern web technologies such as React and Next.js, optimized for performance and mobile responsiveness. Security posture is robust with HTTPS enforcement, comprehensive security headers, and privacy compliance mechanisms including GDPR adherence and cookie consent management. While WHOIS data is privacy protected, the domain and website content align with Intuit's corporate identity, supporting legitimacy. Overall, the website demonstrates high professionalism, trustworthiness, and compliance with industry best practices.
GEORG BÖRNERgeorgboerner.de
Transportation · Germany
82Low
NIS2 17 · GDPR 95
NIS2 17 · GDPR 95
GEORG BÖRNER operates a professional website focused on providing sealing systems for civil engineering projects, targeting infrastructure and transportation sectors. The company positions itself as a specialized B2B supplier with a medium-sized market presence in Germany. The website is built on the Magento e-commerce platform, leveraging modern frontend technologies such as RequireJS, jQuery, KnockoutJS, and Algolia Search for enhanced user experience and search capabilities. Analytics and monitoring are implemented via Matomo and New Relic, indicating a mature digital infrastructure. Security posture is generally good with HTTPS enforced and cookie consent mechanisms in place, though improvements in security headers and explicit security policies are recommended. Overall, the website is professional, trustworthy, and safe for general audiences.
Plzeňská vstupenkaplzenskavstupenka.cz
Hospitality · Czech Republic
85Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Plzeňská vstupenka is an established online ticket sales platform founded in 2004, specializing in cultural events such as theatre, concerts, musicals, opera, and ballet in the Pilsen region of the Czech Republic. The website offers a comprehensive range of event listings and ticket purchasing options, targeting residents and visitors interested in cultural experiences. The platform positions itself as the largest provider of event tickets in the region, emphasizing a broad and diverse catalog of cultural offerings. Technically, the website is built using modern web technologies including Next.js and React, with integration of Google Tag Manager, Facebook Pixel, and Cookiebot for analytics and privacy compliance. Hosting is provided by REG-WEBGLOBE, consistent with the domain registration data. Security posture is solid with HTTPS enforced and a detailed cookie consent mechanism, although explicit security headers and incident response policies are not publicly visible. Privacy compliance is strong, with GDPR-aligned cookie consent and detailed cookie declarations. Overall, the website demonstrates a professional and trustworthy digital presence with good user experience and content quality.
Adevintaadevinta.com
E-commerce
85Low
NIS2 25 · GDPR 68
NIS2 25 · GDPR 68
Adevinta is a prominent online classifieds group operating digital marketplaces primarily across Europe. The company focuses on sustainable commerce, promoting reuse and circular economy principles through its various brands and platforms. Their market position is strong, with a large footprint in e-commerce sectors including real estate, mobility, and job listings. The website reflects a professional and modern digital presence, leveraging WordPress CMS with SEO and tracking integrations such as Yoast SEO and Google Tag Manager. Security posture is solid with HTTPS enforced and domain protections in place, though there is room for improvement in DNSSEC and security headers. Privacy compliance is well addressed with clear cookie consent and privacy policies. Overall, the site is trustworthy and well-structured, targeting a general audience interested in digital marketplaces and sustainable commerce.
- LLee Enterprises
buffalonews.com
Media · United States
79Low
NIS2 17 · GDPR 95
NIS2 17 · GDPR 95
Buffalo News is a well-established regional news media outlet serving Buffalo, NY, and Erie County, operated under Lee Enterprises. The website provides comprehensive local news, weather, entertainment, and event coverage, supported by subscription and advertising revenue models. The digital platform is built on a modern technology stack including Google Analytics, Google Tag Manager, Amazon Publisher Services, and a proprietary CMS (BLOX). It demonstrates good mobile optimization, accessibility, and SEO practices. Privacy compliance is robust with a clear privacy policy, cookie consent mechanism, and GDPR adherence. Security posture is strong with HTTPS enforcement, reCAPTCHA Enterprise integration, and consent management, though some security headers could be improved. The domain is longstanding and consistent with the business profile, enhancing trustworthiness. Overall, the website is professional, secure, and compliant, serving a general audience with safe content.
- Advance Local Media LLC
cleveland.com
Media · United States
78Low
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
Cleveland.com is a prominent local news website serving Cleveland, Ohio, and the broader Northeast Ohio region. It provides comprehensive coverage including local news, sports, weather, and entertainment. The site is part of Advance Local Media LLC, a major media company with a network of regional news sites. The platform targets residents and visitors seeking timely and relevant local information. Its business model relies on digital advertising, subscription services, and sponsored content. The website demonstrates a professional design and consistent branding, supporting its position as a leading regional news source. Technically, the site employs modern web technologies including React and Arc Publishing CMS, supported by a robust ad and analytics ecosystem featuring Google Tag Manager, Amazon Ads, Rubicon Project, and others. Performance is moderate with good mobile optimization and SEO practices. Accessibility is basic but functional. Security posture is solid with HTTPS enforced and use of adblock detection, though explicit security headers are not clearly visible in the provided content. No critical vulnerabilities were detected. Privacy compliance is limited based on the provided content, with no explicit privacy or cookie policies found, which is a gap for a site handling extensive user data and tracking. The WHOIS data is missing or unavailable, which is unusual and reduces trust slightly, but the website's content and branding strongly indicate legitimacy. No direct contact emails or phone numbers were found, and no security or incident response policies are publicly visible. Overall, Cleveland.com is a credible and professional local news platform with strong business credibility and technical infrastructure. Enhancements in privacy transparency and security header implementation are recommended to improve compliance and security posture.
KUOW Public Radiokuow.org
Media · United States
80Low
NIS2 17 · GDPR 70
NIS2 17 · GDPR 70
KUOW Public Radio operates as Seattle's NPR affiliate, providing independent, award-winning journalism, podcasts, and community events targeting the Seattle and Western Washington audience. The organization is a nonprofit entity with a strong market position in public radio media. Technically, the website employs a modern tech stack including Ruby on Rails, React, and integrates multiple analytics and advertising platforms, ensuring a responsive and accessible user experience. Security posture is robust with HTTPS enforcement, CSRF protections, and use of reCAPTCHA, though explicit incident response and vulnerability disclosure mechanisms could be improved. Overall, KUOW demonstrates a mature digital presence with good privacy compliance and strong trust indicators, though WHOIS data is unavailable likely due to privacy protection.
Springer Nature Limitednature.com
Media
81Low
NIS2 17 · GDPR 95
NIS2 17 · GDPR 95
Nature.com is the official website of Nature, the world’s leading multidisciplinary science journal published by Springer Nature Limited. The site offers high-quality peer-reviewed research articles, news, commentary, and career resources targeted at scientists, researchers, and decision-makers globally. It operates on a hybrid access publishing model, combining subscription and open access content, and maintains a strong market position as a flagship journal in the scientific publishing industry. The website is professionally designed with excellent content quality, consistent branding, and clear navigation optimized for both desktop and mobile users. Technically, the website employs modern web technologies including ES6 JavaScript, Google Tag Manager, Google Ads, and a consent management platform to ensure compliance with privacy regulations. The site is fast, accessible, and SEO optimized, with robust HTTPS security and appropriate security headers. Advertising and analytics are managed transparently with user consent mechanisms in place. From a security perspective, Nature.com demonstrates a mature posture with enforced HTTPS, cookie consent banners, and no visible vulnerabilities or exposed sensitive data. However, explicit security policies, incident response contacts, and vulnerability disclosure information are not publicly available, representing areas for improvement. The WHOIS data for the domain is unavailable, likely due to privacy protection, which is justified given the nature of the business. Overall, the website is trustworthy, safe, and professionally maintained. Recommendations include publishing detailed security and incident response policies, providing clear contact information for security issues, and enhancing transparency around vulnerability disclosures and data protection officer contacts to further strengthen trust and compliance.
Soprema Méxicosoprema.com.mx
Manufacturing · Mexico
86Low
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
Soprema México operates as a regional branch of the international Soprema group, specializing in manufacturing and distributing innovative building envelope products such as waterproofing, insulation, soundproofing, and vegetative solutions. The website targets construction professionals and building owners in Mexico, providing a comprehensive product catalog and resources. Technically, the site is built on Magento 2 with a modern tech stack including RequireJS, jQuery, and Algolia Search, supported by Google Tag Manager and ElasticSuite for analytics and tracking. The site demonstrates good digital maturity with responsive design and SEO optimizations. Security posture is solid with HTTPS enforced and standard security headers present, though explicit security policies and incident response contacts are not found. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanism. Overall, the website is professional, trustworthy, and aligned with the business's market position.
Soprema Méxicosoprema.mx
Manufacturing · Mexico
86Low
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
Soprema México operates as a regional branch of the international Soprema group, specializing in manufacturing and supplying innovative building envelope solutions including waterproofing, thermal and acoustic insulation, and vegetative roofing. The company targets construction professionals, architects, and installers, positioning itself as a trusted expert in roofing and building envelope technologies within the Mexican market. The website reflects a mature digital presence with a Magento 2 e-commerce platform, integrated advanced search via Algolia, and comprehensive content supporting its B2B business model. Technical infrastructure is robust, leveraging modern JavaScript frameworks and third-party integrations such as Google Tag Manager and New Relic for analytics and performance monitoring. Security posture is solid with HTTPS enforcement, security headers, and CAPTCHA protections on forms, although explicit security policies and incident response contacts are not publicly disclosed. Privacy compliance is well addressed with cookie consent mechanisms and a detailed privacy policy in Spanish. Overall, the website demonstrates a professional and trustworthy online presence aligned with the company's market position and business objectives.
Soprema Norwaysoprema.no
Manufacturing · Norway
83Low
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
Soprema Norway is a specialized manufacturing company focused on waterproofing and insulation solutions, targeting construction professionals and businesses within Norway. The website demonstrates a solid market position as an expert in its field, offering a range of construction materials and services. The digital infrastructure is built on a Magento e-commerce platform, enhanced with modern technologies such as Algolia for search and Google Tag Manager for analytics, indicating a mature digital presence. Security posture is generally good with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in security headers and explicit privacy documentation. Overall, the website is professional and trustworthy, supporting the company's business objectives effectively.
SOPREMA Irelandsoprema.ie
Manufacturing · Ireland
83Low
NIS2 17 · GDPR 95
NIS2 17 · GDPR 95
SOPREMA Ireland is a well-established business specializing in waterproofing, insulation, and green building solutions, targeting construction professionals and building owners in Ireland. The company operates a professional Magento-based e-commerce platform that showcases its product offerings and services, reflecting a strong market position within the manufacturing and construction sectors. The website demonstrates a good level of digital maturity with modern technologies such as Algolia search, Google Tag Manager, and New Relic monitoring integrated for performance and analytics. From a security perspective, the website enforces HTTPS and employs cookie consent mechanisms aligned with GDPR requirements. While explicit security policies and incident response disclosures are not publicly available, the use of monitoring tools and privacy compliance indicates a reasonable security posture. No critical vulnerabilities or suspicious activities were detected in the website content or technical setup. Overall, the website presents a trustworthy and professional front for SOPREMA Ireland, with good content quality, technical implementation, and privacy compliance. The lack of WHOIS data limits full domain trust analysis but does not raise immediate concerns. Strategic recommendations include publishing a formal security policy, adding vulnerability disclosure information, and enhancing accessibility features to further strengthen the security and compliance posture.
Soprema NL B.V.soprema.nl
Manufacturing · Netherlands
82Low
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
Soprema NL B.V. is a well-established manufacturer and supplier specializing in waterproofing, insulation, and roofing solutions primarily serving the construction and industrial sectors in the Netherlands and Europe. The company operates a professional and well-branded website built on the Magento 2 platform, integrating advanced search capabilities via Algolia and comprehensive analytics through Google Tag Manager and Maze. The website demonstrates a mature digital presence with good SEO, privacy compliance, and user experience. Security posture is strong with HTTPS enforcement, security headers, and no visible vulnerabilities, although there is room for improvement in publishing explicit security policies and incident response contacts. Overall, Soprema NL B.V. presents a credible and trustworthy online presence aligned with its business operations.
Soprema UKsoprema.co.uk
Manufacturing · United Kingdom
82Low
NIS2 17 · GDPR 95
NIS2 17 · GDPR 95
Soprema UK is a leading manufacturer and supplier of waterproofing, roofing, and insulation solutions tailored for the construction industry in the United Kingdom. The company holds a strong market position as a trusted provider with ISO certifications, serving primarily B2B clients such as contractors and building professionals. Their website reflects a professional and consistent brand image, offering detailed product information and services. Technically, the site is built on Magento 2, leveraging modern JavaScript libraries and search technologies like Algolia, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforcement, security headers, and cookie consent mechanisms, although public security policies and vulnerability disclosures are absent. The WHOIS data is unavailable due to domain naming rules errors, which slightly reduces domain trustworthiness but does not detract from the overall legitimacy of the business. Recommendations include improving accessibility, publishing security policies, and adding vulnerability disclosure channels to enhance trust and compliance.
Soprema Swedensoprema.se
Manufacturing · Sweden
76Low
NIS2 17 · GDPR 55
NIS2 17 · GDPR 55
Soprema Sweden operates a professional e-commerce website focused on providing sustainable waterproofing and insulation solutions primarily for the Swedish market. The company positions itself as an established manufacturer with a focus on quality and environmental considerations. The website is built on a Magento platform, leveraging modern JavaScript frameworks and third-party services such as Algolia for search and Google Tag Manager for analytics. The technical infrastructure reflects a mature digital presence with asynchronous loading and performance optimizations. Security posture is generally good with HTTPS enforced and cookie consent mechanisms in place; however, the absence of explicit privacy policies, security headers, and WHOIS transparency slightly reduce trust. Overall, the website is professional and trustworthy, serving a B2B audience in the construction and manufacturing sector.
- SOPREMA GmbH
soprema.de
Manufacturing · Germany
81Low
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
SOPREMA GmbH is a leading German manufacturer specializing in sealing systems, insulation materials, and sustainable building solutions such as photovoltaic and green roof systems. The company targets construction professionals, architects, and planners, offering a broad portfolio of products and technical services. Their market position is strong within the manufacturing sector, emphasizing innovation and sustainability. The website is built on TYPO3 CMS and incorporates modern web technologies including Bootstrap, jQuery, and Font Awesome, ensuring a responsive and accessible user experience. Hosting is managed via Gandi.net, a reputable provider. Security posture is solid with HTTPS enforced, cookie consent mechanisms in place, and use of analytics tools respecting user privacy. However, explicit security policies and incident response contacts are not published, representing an area for improvement. Overall, the site is professional, trustworthy, and well-optimized for its audience.
SOPREMA Beluxsoprema.be
Manufacturing · Belgium
83Low
NIS2 17 · GDPR 95
NIS2 17 · GDPR 95
SOPREMA Belux is a well-established business specializing in manufacturing and supplying innovative and sustainable building materials, focusing on waterproofing, insulation, green roofs, and solar solutions for construction professionals. The website reflects a mature digital presence built on Magento 2, integrating modern technologies such as Algolia search and Google Tag Manager for enhanced user experience and analytics. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, although explicit security policies and incident response contacts are not publicly available. The domain WHOIS data is restricted, which is common for privacy but limits transparency. Overall, the website is professional, trustworthy, and compliant with GDPR, serving a B2B audience in Belgium and surrounding regions.
SOPREMAsoprema.us
Manufacturing · United States
85Low
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
SOPREMA is a well-established international manufacturer specializing in waterproofing, insulation, soundproofing, and vegetated roofing solutions. The company targets construction professionals, contractors, architects, and engineers, offering a broad portfolio of products and services. The website reflects a mature digital presence with a professional design, comprehensive content, and clear navigation, supporting its market position as a leading manufacturer in its sector. Technically, the site is built on Magento CMS, leveraging modern technologies such as RequireJS, Algolia Search, and Google Tag Manager, indicating a commitment to performance and user experience. Security posture is solid with HTTPS enforcement, cookie consent mechanisms, and monitoring tools like New Relic, although explicit security policies and vulnerability disclosures are absent. Overall, the site demonstrates a high level of professionalism and trustworthiness, with room for improvement in publishing security policies and enhancing accessibility. The absence of WHOIS data suggests privacy protection, which is justified for a company of this size and industry. Strategic recommendations include enhancing security transparency, publishing vulnerability disclosure policies, and improving accessibility features to further strengthen trust and compliance.
Sopremasoprema.ca
Manufacturing · Canada
84Low
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
Soprema is an established international manufacturer specializing in roofing and building envelope solutions, including waterproofing, insulation, soundproofing, and vegetated roofing products. The company targets construction professionals and building owners, positioning itself as a trusted expert in the industry with a broad product portfolio. The website reflects a mature digital presence with a Magento-based eCommerce platform, integrated advanced search capabilities via Algolia, and comprehensive privacy compliance mechanisms including GDPR-aligned cookie consent. The technical infrastructure is modern and well-implemented, leveraging multiple analytics and monitoring tools such as New Relic and Maze Analytics to ensure performance and user experience. Security posture is solid with HTTPS enforced and captcha protections on login forms, though there is room for improvement in implementing additional security headers and explicit security policies. Overall, the domain appears legitimate and privacy protected, consistent with corporate best practices for a large manufacturer. The website is professional, trustworthy, and compliant with relevant privacy regulations.
Soprema Francesoprema.fr
Manufacturing · France
82Low
NIS2 17 · GDPR 95
NIS2 17 · GDPR 95
Soprema France operates as a leading provider of sustainable and innovative building solutions, specializing in waterproofing, insulation, and construction materials. The company targets construction professionals and architects, positioning itself as a key player in the European building materials market. The website reflects a mature digital presence with a Magento-based e-commerce platform, integrated advanced search capabilities via Algolia, and comprehensive analytics through Google Tag Manager and Maze. Privacy compliance is well addressed with cookie consent mechanisms and GDPR-aligned policies. Security posture is solid with HTTPS enforcement and security headers, though explicit security policies and incident response details are not publicly disclosed. The absence of WHOIS data limits domain trust verification but does not detract from the professional appearance and operational maturity of the site.
Contact Privacy Inc. Customer 0152436388aus.social
Technology · Canada
76Low
NIS2 17 · GDPR 58
NIS2 17 · GDPR 58
Aus.Social operates as an independent Mastodon instance branded as 'thundertoot', providing a federated social networking platform within the fediverse. It targets general users interested in decentralized social media without ads or algorithms. The platform leverages the open-source Mastodon software, currently running version 4.5.0-alpha.1, and employs modern web technologies including React and JavaScript ES modules. Hosting and CDN services are provided via bunny.net, ensuring fast content delivery and good mobile optimization. The website design is professional and consistent with Mastodon's branding, offering clear navigation and user-friendly experience.
Middle East Eyemiddleeasteye.net
Media
78Low
NIS2 25 · GDPR 68
NIS2 25 · GDPR 68
Middle East Eye is a professional online news media platform focused on delivering news, opinion, video, and analysis related to the Middle East and surrounding regions. The website demonstrates a strong market position as a regional news outlet with a consistent and professional brand presence. Technically, the site is built on Drupal CMS with modern web technologies including Font Awesome, Google Analytics, Google Tag Manager, and Cookiebot for consent management. The site is mobile optimized and accessible with good SEO practices. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and explicit policies are missing. The absence of publicly available WHOIS data and explicit privacy policies slightly reduce trust and compliance confidence. Overall, the site is well-maintained and trustworthy for general audiences interested in Middle East affairs.
Optable Technologies Inc.optable.co
Technology · Canada
82Low
NIS2 35 · GDPR 95
NIS2 35 · GDPR 95
Optable Technologies Inc. operates a sophisticated identity management and data collaboration platform designed for the advertising ecosystem, focusing on privacy-first solutions. The company targets publishers, media owners, and ad platforms, enabling them to build and manage identity graphs to optimize advertising revenues. Positioned as a next-generation technology provider, Optable integrates with major ID frameworks and marketplaces to enhance programmatic and direct ad sales. The website reflects a mature digital presence with comprehensive content, professional design, and strong branding consistency. Technically, the site leverages modern web technologies including Webflow CMS, Google Analytics, HubSpot forms, and multilingual support via Weglot, hosted on Webflow's platform with fast performance and excellent mobile optimization. Security posture is solid with HTTPS, SOC 2 certification, cookie consent mechanisms, and a responsible disclosure program, though explicit security headers and incident response contacts could be improved. WHOIS data is privacy protected, which is typical for tech companies, and does not detract from the overall legitimacy supported by business and trust indicators. Overall, the site demonstrates a high level of professionalism, compliance, and technical maturity suitable for its B2B SaaS market niche.