Low-risk security reports
14,261 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,165001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
10,551–10,600 of 14,261
Amazon Web Services, Inc.aws.com
Technology · United States
83Low
NIS2 25 · GDPR 73
NIS2 25 · GDPR 73
Amazon Web Services, Inc. (AWS) is a leading global cloud computing services provider offering a broad set of reliable, scalable, and inexpensive cloud infrastructure services. AWS serves a wide range of customers including developers, enterprises, startups, and government agencies, providing services such as compute, storage, databases, networking, machine learning, and analytics. As a subsidiary of Amazon.com, Inc., AWS holds a dominant market position in the cloud industry with a pay-as-you-go business model and extensive global infrastructure. The website demonstrates a mature technical infrastructure leveraging modern technologies such as React and AWS CloudFront for hosting and content delivery. The site is well-optimized for performance, mobile responsiveness, and accessibility, reflecting a high level of digital maturity. Security is robust with HTTPS enforcement, strong Content Security Policy headers, and adherence to multiple compliance frameworks including ISO 27001, SOC reports, PCI DSS, and FedRAMP. AWS maintains a strong security posture with no detected vulnerabilities or exposed sensitive data. The company provides clear privacy policies, cookie consent mechanisms, and incident response contacts, indicating a commitment to privacy and regulatory compliance. The domain's WHOIS data for the subdomain is unavailable as expected, but the overall trustworthiness is high given the brand reputation and security practices. Overall, AWS's website and digital presence reflect a highly professional, secure, and trustworthy cloud services provider with excellent compliance and security standards.
neu-medianet GmbHfitflat.de
Telecommunications · Germany
78Low
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
fitflat, operated by neu-medianet GmbH, is a regional German telecommunications provider offering bundled internet, HD-TV, and telephone services. The company targets both private and business customers with a focus on fiber optic broadband and security packages. The website demonstrates a solid market position with over 37,000 TV customers and 24,000 internet and telephone customers. Technically, the site uses modern JavaScript libraries such as jQuery and Bootstrap, is mobile responsive, and implements cookie consent mechanisms, reflecting a moderate to good digital maturity. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, though security headers and incident response information are absent. Overall, the website is professional, trustworthy, and compliant with GDPR requirements.
Tourismusverband Mecklenburg-Vorpommern e.V.auf-nach-mv.de
Hospitality · Germany
83Low
NIS2 2 · GDPR 80
NIS2 2 · GDPR 80
The website www.auf-nach-mv.de is the official tourism portal for Mecklenburg-Vorpommern, Germany, operated by the Tourismusverband Mecklenburg-Vorpommern e.V. It provides comprehensive information on vacation types, activities, destinations, events, and travel services targeting a broad audience including families and nature enthusiasts. The site is well-branded, professionally designed, and offers rich multimedia content including images and videos. It serves as a key digital touchpoint for regional tourism promotion. Technically, the website employs modern web technologies including JavaScript, CSS, and embedded services like Google Tag Manager and YouTube. It appears to be built on a custom or proprietary CMS platform. The site is mobile-optimized, accessible, and SEO-friendly, with good performance characteristics. Security best practices such as HTTPS and CAPTCHA on forms are implemented, though explicit security policies and incident response contacts are not published. From a security perspective, the site has a strong posture with no visible vulnerabilities or blocking mechanisms. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. However, terms of service and vulnerability disclosure policies are absent. The WHOIS data is limited but does not raise concerns about legitimacy. Overall, the website is a trustworthy, professional, and well-maintained platform supporting regional tourism. Strategic recommendations include enhancing security transparency by publishing security policies and incident response contacts, and adding a vulnerability disclosure mechanism to further strengthen trust and compliance.
- Jannys Eis
jannys.de
Retail · Germany
84Low
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
Jannys Eis is a German retail ice cream brand operating over 100 physical shops nationwide, offering natural and innovative ice cream products. The website presents a professional and visually appealing digital presence, leveraging modern technologies such as Blazor WebAssembly and MudBlazor, hosted on Microsoft Azure infrastructure. The site includes cookie consent management via Cookiebot and integrates Microsoft Application Insights for analytics. Security posture is generally good with HTTPS and anti-forgery protections, though some security headers are missing. Privacy compliance is partially addressed with cookie consent but lacks a clearly accessible privacy policy page. WHOIS data is unavailable, which slightly impacts trust but the website content and branding are consistent and professional.
Algeco UKalgeco.co.uk
Manufacturing · United Kingdom
79Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Algeco UK operates as a leading provider of modular buildings, site accommodation, and shipping containers across the UK and Europe. The company offers a broad range of temporary and permanent modular building solutions tailored to sectors such as construction, education, healthcare, and energy. Their market position is strong, supported by a large fleet and nationwide service centers. Technically, the website is built on Drupal 10 with modern libraries and includes cookie consent mechanisms, indicating a moderate level of digital maturity. Security posture is adequate but could be improved by implementing security headers and publishing security policies. Overall, the website is professional, accessible, and trustworthy, though WHOIS data is unavailable, which slightly impacts trust verification.
Provincie Limburglimburg.nl
Government · Netherlands
81Low
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Provincie Limburg operates as the official provincial government entity for Limburg in the Netherlands, providing comprehensive public information and services including governance details, subsidies, permits, news, and contact resources. The website serves residents and stakeholders with a clear focus on transparency and accessibility. The business model is centered on governmental public service, with a strong market position as the authoritative source for provincial matters. Technically, the website employs a modern CMS (iprox) and integrates various web technologies such as jQuery UI, ReadSpeaker for accessibility, and Slick Carousel for dynamic content presentation. The site demonstrates good mobile optimization, accessibility, and SEO practices, contributing to a positive user experience and digital maturity. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, reflecting compliance with privacy regulations like GDPR. While explicit security headers are not evident, no vulnerabilities or exposed sensitive data were detected. The absence of a public incident response or vulnerability disclosure page suggests room for improvement in transparency and security readiness. Overall, the website is trustworthy, professional, and well-maintained, with strong alignment between domain registration data and business claims. Strategic recommendations include enhancing security headers, publishing incident response information, and adopting a security.txt file to improve vulnerability disclosure and incident management capabilities.
DEK a.s.nemopas.cz
Real Estate · Czech Republic
83Low
NIS2 2 · GDPR 73
NIS2 2 · GDPR 73
NEMOPAS, operated under DEK a.s., is a professional property inspection service provider with over 20 years of experience, serving the Czech and Slovak markets. The company offers a broad range of inspection and diagnostic services including property inspections, online inspections, construction monitoring, expert services, and energy performance certificates. Their network includes over 40 inspectors, positioning them as one of the largest providers in the region. The website is well-designed, mobile-optimized, and provides comprehensive content in Czech, targeting property buyers, sellers, and real estate professionals. Technically, the site uses modern JavaScript libraries, Google Tag Manager, and CookieHub for cookie consent management, reflecting a mature digital infrastructure. Security posture is good with HTTPS enforced and cookie consent implemented, though additional security headers and policies could enhance protection. The absence of WHOIS data is a notable concern for domain legitimacy but does not detract significantly from the professional presentation and trustworthiness of the business. Overall, the site demonstrates a solid business presence with room for improvement in transparency and security disclosures.
Algeco UKelliottuk.com
Other · United Kingdom
79Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Algeco UK is a well-established provider of modular buildings, site accommodation, and shipping containers, serving a broad range of sectors including construction, education, healthcare, and commercial industries. The company positions itself as a market leader in the UK with extensive nationwide coverage and a large fleet. The website is professionally designed, mobile-optimized, and provides comprehensive information about products and services, supporting a B2B business model focused on rental and turnkey solutions. Technically, the website is built on Drupal 10 and integrates modern web technologies such as Google Tag Manager, HubSpot Analytics, and CookieYes for cookie consent management. The site demonstrates good SEO and accessibility practices, though performance is moderate. Security posture is adequate with HTTPS usage and cookie consent, but lacks visible security headers and explicit security policies. The WHOIS data for the exact domain queried is unavailable due to domain naming rules, indicating the domain is a subdomain rather than a registered domain itself. This is consistent with UK domain structures but reduces the ability to verify domain registration details. No privacy policy or terms of service pages were detected in the provided content, which is a gap in privacy compliance. Overall, the website presents a professional and trustworthy business front with room for improvement in security transparency and privacy documentation.
- Algeco B.V.
algeco.nl
Real Estate · Netherlands
76Low
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Algeco B.V. is a well-established Dutch company specializing in modular housing solutions with over 65 years of experience. The company targets businesses and organizations requiring flexible, temporary, or permanent modular buildings, positioning itself as a reliable and expert partner in the modular construction sector. The website reflects a mature digital presence built on Drupal 9, integrating modern analytics and marketing tools such as HubSpot and Google Analytics, ensuring good performance and user experience across devices. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although explicit security policies and incident response contacts could be enhanced. Privacy compliance is robust with clear privacy and cookie policies and consent mechanisms. Overall, the site demonstrates high professionalism, trustworthiness, and business credibility.
- Algeco
algeco.be
Real Estate · Belgium
76Low
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Algeco Belgium is a leading European provider of modular units and buildings, offering turnkey solutions, rental, sales, and comprehensive 360° services. The website is professionally designed using Drupal 9 CMS, with modern technologies and analytics tools such as Matomo and Google Tag Manager. Contact information including phone, email, and physical address is clearly presented, alongside active social media channels. The security posture is solid with HTTPS usage and no visible vulnerabilities, though explicit security policies are not publicly disclosed. Privacy compliance is partially addressed with a cookie consent mechanism but lacks a clearly accessible privacy policy page. WHOIS data is restricted, which is common for commercial entities but limits domain registration transparency. Overall, the site reflects a trustworthy and professional business presence in Belgium's modular construction sector.
Woodcote Media Ltdbiofuels-news.com
Energy · United Kingdom
80Low
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Biofuels International Magazine, operated by Woodcote Media Ltd, is a well-established UK-based publication specializing in biofuels, biodiesel, bioethanol, and biomass sectors. The website serves as a leading global platform providing news, features, events, and subscription services to professionals and stakeholders in the renewable energy industry. The business model centers on media publishing, advertising, and event hosting, positioning itself as a key information source in the biofuels market. Technically, the website is built on WordPress with a modern tech stack including Google Analytics, Facebook Pixel, and LinkedIn Insight Tag for analytics and marketing. Hosting is provided by Nimbushosting with a stable DNS setup. The site demonstrates good mobile optimization, SEO practices, and moderate performance. Cookie consent and privacy policies are implemented, reflecting compliance with GDPR requirements. From a security perspective, the site uses HTTPS with a good SSL configuration and domain status flags that prevent unauthorized transfers. However, DNSSEC is not enabled, and some security headers like Content-Security-Policy are missing. No explicit security or incident response policies are publicly available. The site uses reCAPTCHA to protect forms and has no visible vulnerabilities or malicious content. Overall, the website is professional, trustworthy, and compliant with privacy regulations. It effectively serves its niche audience with relevant content and maintains a solid technical and security posture. Strategic improvements in security headers and vulnerability disclosure could further enhance its security maturity.
JobRouter AGjobrouter-workflow.com
Technology · Germany
83Low
NIS2 35 · GDPR 68
NIS2 35 · GDPR 68
JobRouter AG operates a sophisticated low-code digital process automation platform designed to help enterprises automate and optimize complex business workflows. With over 20 years of experience and a broad international customer base, JobRouter offers modular, scalable solutions including workflow automation, document management, and cloud services. The company maintains a strong partner network and integrates with major enterprise systems such as SAP and Microsoft Office. Technically, the website is built on TYPO3 CMS and employs Matomo for privacy-conscious analytics. The site is well-structured, mobile-optimized, and provides comprehensive privacy and cookie policies with user consent mechanisms. Security posture is solid with HTTPS and vulnerability disclosure policies, though explicit security headers are not evident in the provided data. The absence of WHOIS registration data is a notable gap, warranting further verification. Overall, JobRouter presents as a credible and professional technology provider with a mature digital presence.
Avrilgroupeavril.com
Energy · France
79Low
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
Avril is a leading French industrial group specializing in oils and plant proteins, with a strong commitment to sustainability and addressing climate and demographic challenges. The company operates across multiple sectors including renewable energies, food production, specialty chemicals, agricultural solutions, incubators, and investments. Their market position is strong in France and internationally, supported by a broad portfolio of subsidiaries and brands. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content focused on their business mission and sustainability goals. Technically, the site uses modern web technologies including WordPress CMS, jQuery, and privacy-focused analytics (Matomo). Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. The WHOIS data is unavailable, which slightly reduces domain trustworthiness, but the website content and branding strongly indicate a legitimate and established business. Overall, Avril demonstrates a solid digital maturity and business credibility with room for minor security enhancements.
- Nidoma
nidoma.com
Technology
78Low
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Nidoma is a specialized domain registration, backorder, and brokerage service operating since 2010. The company offers a range of domain-related services including auctions, premium domain sales, and domain appraisals, targeting domain buyers, sellers, and brokers. The website is professionally designed with clear navigation and good content relevance, supporting a positive user experience. Technically, the site uses a modern tech stack including Bootstrap, jQuery, Cookiebot for cookie consent, and hCaptcha for bot protection, hosted behind Cloudflare for DNS and CDN services. Security posture is solid with HTTPS enforced and domain transfer protections, though some security headers could be improved. Privacy compliance is well addressed with a comprehensive cookie policy and GDPR consent mechanisms. Contact is primarily via a web form, with no direct emails or phone numbers publicly listed. Overall, Nidoma presents a trustworthy and professional online presence in the domain services industry.
Energie Grazenergie-graz.at
Energy · Austria
85Low
NIS2 2 · GDPR 100
NIS2 2 · GDPR 100
Energie Graz is a regional energy service provider based in Graz, Austria, offering electricity, natural gas, district heating, and a variety of energy-related services including photovoltaics and electromobility. The company positions itself as a sustainable and reliable energy partner with a strong focus on customer service and environmental responsibility. Their website reflects a mature digital presence built on Magento, featuring modern web technologies and integrated analytics tools. Security posture is solid with HTTPS enforcement, cookie consent mechanisms, and CSRF protections, although explicit security policies and incident response contacts are not publicly disclosed. Overall, the site is professional, accessible, and compliant with GDPR requirements, supporting a trustworthy user experience.
Avrilavril.com
Energy · France
79Low
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
Avril is a major French industrial group specializing in oils and plant proteins, with a strong commitment to sustainability and serving the earth through addressing climate and demographic challenges. The company operates multiple subsidiaries and brands, offering services across renewable energies, food production, specialty chemicals, agricultural solutions, incubators, and investments. The website is professionally designed, mobile-optimized, and rich in content, reflecting a mature digital presence. Technically, the site uses modern JavaScript libraries, cookie consent management, and privacy-focused analytics (Matomo), but lacks some advanced security headers and explicit security policies. The WHOIS data is missing or unavailable, which raises some concerns about domain registration transparency, but the overall business credibility and trust signals are strong. Privacy compliance is well implemented with clear cookie policies and GDPR adherence. Overall, the site presents a secure and trustworthy digital front for a large industrial enterprise.
Allanitech Services Inc.casinoscad.com
Other · Canada
77Low
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
CasinosCAD is a newly established Canadian website focused on providing casino-related content, including reviews and bonus offers, targeting Canadian casino players. The business operates in the entertainment sector with a niche focus on gambling. The website uses WordPress CMS, is hosted with Cloudflare DNS services, and employs Google Tag Manager for analytics. The technical infrastructure is modern but basic, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the domain registration is consistent with the business claims, though the domain is recently created. Strategic improvements in privacy compliance and security practices are recommended to enhance trust and compliance.
- VVELUX
veluxshop.at
Retail · Austria
76Low
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
VELUXshop.at is the official Austrian e-commerce platform for VELUX, a well-established brand specializing in roof window blinds, shutters, insect screens, and related accessories. The website offers a comprehensive product catalog with detailed descriptions, pricing, and warranty information, targeting homeowners and installers in Austria. The platform demonstrates a mature digital infrastructure built on modern technologies such as Nuxt.js and Vue.js, ensuring fast performance and excellent mobile optimization. Security posture is strong with HTTPS enforced and appropriate security headers, although explicit security policies and incident response contacts are not publicly available. Overall, the site is professional, trustworthy, and compliant with GDPR, providing clear contact information and customer support channels.
Kifli.hukifli.hu
E-commerce · Hungary
83Low
NIS2 17 · GDPR 95
NIS2 17 · GDPR 95
Kifli.hu is a large Hungarian online supermarket offering a wide range of grocery products including fresh, organic, and specialty items with home delivery service. The website demonstrates a mature digital infrastructure using modern technologies such as React and Next.js, supported by robust performance and mobile optimization. Security measures include HTTPS, security headers, and a consent management platform, although explicit privacy and security policies are not directly found on the site. Overall, the platform is professional and trustworthy, serving a general to mature audience with some alcohol product offerings.
- Studio Najbrt
najbrt.cz
Other · Czech Republic
79Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Studio Najbrt is a leading Czech graphic design studio specializing in a wide range of creative services including branding, visual identity, motion graphics, 3D design, web design, and more. The company targets clients seeking comprehensive and lasting design solutions with a blend of precision, boldness, humor, and surprise. The website reflects a professional and consistent brand image with excellent content quality and user experience. Technically, the site uses a modern CMS platform (Solidpixels) and integrates popular libraries and tools such as Google Tag Manager, Swiper.js, and Fancybox. Security posture is good with HTTPS enforced and error monitoring via Sentry, though some security headers and policies could be improved. Privacy compliance is basic with a cookie consent mechanism but lacks explicit privacy and terms of service pages. WHOIS data is unavailable, which limits domain trust assessment. Overall, the site is professional, secure, and trustworthy but would benefit from enhanced transparency and security documentation.
Other · Germany
78Low
NIS2 22 · GDPR 85
NIS2 22 · GDPR 85
The Deutsche Landwirtschafts-Gesellschaft (DLG) operates a professional and content-rich website focused on agriculture and food industry sectors in Germany. The organization serves a large membership base and provides networking, testing, awards, and event services. The website is built on TYPO3 CMS with modern web technologies and demonstrates good design, navigation, and mobile optimization. Security posture is strong with HTTPS and consent management, though explicit security headers and detailed privacy policies are lacking. WHOIS data is unavailable due to query failure, which limits domain trust analysis but the website content and structure indicate a legitimate and established entity.
Woodcote Media Ltdbioenergy-news.com
Energy · United Kingdom
81Low
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Bioenergy Insight, published by Woodcote Media Ltd, is a specialized media outlet providing news, analysis, and technical articles focused on the biomass, biogas, and biopower industries. The website targets bioenergy professionals and offers a mix of news feeds, feature articles, magazine subscriptions, and advertising opportunities, positioning itself as a leading publication in the bioenergy sector. The company is registered in the UK and maintains a professional online presence with consistent branding and quality content. Technically, the website is built on WordPress using the Metropolis theme and integrates multiple modern technologies including Google Analytics (GA4), Google Tag Manager, Facebook Pixel, LinkedIn Insight Tag, and various WordPress plugins for advertising, consent management, and social media feeds. The site is mobile optimized with good SEO practices and moderate performance. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks some advanced security headers and explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS registration data is a notable concern, potentially indicating privacy protection or data source issues, which slightly reduces domain trustworthiness. Overall, the website is a credible and professional resource for the bioenergy industry with good content quality and technical implementation. However, improvements in domain transparency and security policy publication are recommended to enhance trust and compliance.
- DOX-AL Italia Spa
doxal.com
Manufacturing · Italy
80Low
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
DOX-AL Italia Spa is an established Italian company specializing in innovative products for animal nutrition and health, boasting 40 years of experience and 18 international patents. The company targets professional audiences including breeders, feed manufacturers, integrators, and veterinarians worldwide. The website reflects a mature digital presence built on WordPress with Elementor, incorporating modern SEO and privacy compliance tools such as Yoast SEO and Iubenda cookie solutions. Security posture is solid with HTTPS and GDPR-compliant cookie consent, though additional security policies and incident response information are absent. The lack of WHOIS registration data raises concerns about domain legitimacy, warranting further verification. Overall, the site is professional, trustworthy, and well-structured, supporting the company's market position in manufacturing and animal health sectors.
EUROLYSINEeurolysine.com
Manufacturing · France
77Low
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
EUROLYSINE is a French company specializing in the design and production of amino acid-based nutritional solutions for farm animals such as poultry, swine, and fish. Established in 1976 and now part of the Avril group, the company emphasizes sustainability and innovation through fermentation-based low-carbon amino acids and customized solutions. Their market position is that of a medium-sized, reputable player in the animal nutrition manufacturing sector, targeting livestock producers and agricultural professionals. Technically, the website employs modern web technologies including AngularJS and Bootstrap, with good mobile optimization and SEO practices. The presence of JSON-LD structured data enhances search engine understanding. Performance is moderate, and accessibility is good. The site uses HTTPS and implements a cookie consent mechanism, reflecting awareness of privacy regulations. From a security standpoint, the site has a solid SSL configuration but lacks explicit security headers and published security policies or incident response information. No vulnerabilities or exposed sensitive data were detected in the provided content. The WHOIS data for the subdomain is unavailable, which is typical and not suspicious. Overall, the security posture is good but could be improved by adding security headers and transparency about security practices. The overall risk is low with no signs of malicious activity or content safety concerns. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and adding vulnerability disclosure information to improve trust and compliance.
- ACTIVE 24, s.r.o.
domeny.sk
Technology · Slovakia
77Low
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
ACTIVE 24, s.r.o. is a Slovak-based technology company specializing in domain registration and related web services. The website offers a comprehensive portfolio of over 380 domain extensions, including popular country-code and generic TLDs. Their business model focuses on providing domain registration, DNS management, web hosting, email services, and security features such as DNSSEC. The company targets individuals and businesses primarily in Slovakia and Central Europe, positioning itself as a reliable and established regional provider with transparent pricing and customer support.
- EURAXESS
euraxess.at
Education · Austria
84Low
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
EURAXESS Austria is a professional pan-European platform supported by the European Commission, providing comprehensive information and support services to researchers, entrepreneurs, universities, and businesses. The website offers job listings, funding opportunities, career development tools, and assistance for living and working in Austria. It is well-positioned in the education and government sectors, targeting researchers and related stakeholders. The platform is free of charge and integrates with a broader EURAXESS network across Europe and worldwide hubs. Technically, the website is built on Drupal 10, leveraging modern web technologies and European Commission web tools. It demonstrates good mobile optimization, accessibility, and SEO practices. Performance is moderate, with room for improvement in security headers and explicit incident response information. The site uses Matomo analytics with privacy-conscious configurations. From a security perspective, the site enforces HTTPS and cookie consent mechanisms, but lacks some advanced security headers and explicit security policies. No vulnerabilities or exposed sensitive data were detected. WHOIS data confirms the legitimacy and consistency of the domain with the European Commission's initiative. Overall, EURAXESS Austria presents a trustworthy, professional, and well-maintained platform with strong content quality and privacy compliance. Strategic improvements in security headers and incident response transparency would further enhance its security posture and user trust.
sevDesksevdesk.de
Technology · Germany
77Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
sevDesk is a leading German SaaS provider specializing in accounting software tailored for small and medium-sized businesses. The platform offers comprehensive services including invoice creation, bookkeeping, customer and inventory management, positioning itself as a market leader in Germany. The website is professionally designed, localized in German, and targets primarily German-speaking markets such as Germany and Austria. Technically, the site leverages modern web technologies including Webflow CMS, Cloudflare for DNS and CDN, Google Tag Manager, and New Relic for monitoring, indicating a mature digital infrastructure. Security-wise, the site enforces HTTPS, implements robust cookie consent mechanisms, and uses security headers effectively, though it lacks explicit incident response and vulnerability disclosure information. Overall, the site demonstrates a strong security posture with no visible vulnerabilities or exposed sensitive data, complemented by good privacy compliance and extensive use of analytics and marketing tools with user consent. Strategic recommendations include publishing explicit security incident contacts, adding a vulnerability disclosure policy, enhancing accessibility, and expanding direct contact information to further improve trust and compliance.
ACTIVE 24, s.r.o.active24.com
Technology · Czech Republic
83Low
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
ACTIVE 24, s.r.o. is a Czech-based technology company specializing in domain registration, professional web hosting, email solutions, servers, website building, and e-commerce platforms. The company positions itself as a certified top-level .CZ domain registrar with a strong market presence supported by customer testimonials and certifications. Their services target individuals and businesses seeking reliable online presence solutions with a focus on security, green energy, and customer support. Technically, the website employs modern tracking and marketing technologies such as Google Tag Manager, Facebook Pixel, and reCAPTCHA, indicating a mature digital infrastructure. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is strong with HTTPS enforcement, daily backups, and security offerings like Web Security services, though there is room for improvement in publishing formal security policies and incident response plans. The absence of WHOIS data transparency is a notable concern but does not significantly detract from the overall trustworthiness given the company's certifications and customer feedback. Overall, ACTIVE 24 demonstrates a solid business and technical foundation with moderate risk primarily due to WHOIS data opacity.
illwerke vkw AGvkw.at
Energy · Austria
80Low
NIS2 2 · GDPR 95
NIS2 2 · GDPR 95
illwerke vkw AG operates as a regional energy provider in Vorarlberg, Austria, offering a broad portfolio of energy-related services including electricity, natural gas, biogas, heating solutions, photovoltaic system planning and installation, and e-mobility products. The company targets households, businesses, agricultural customers, and institutions with a focus on sustainable and renewable energy solutions. Their market position is that of a trusted, established regional supplier emphasizing energy efficiency and customer service. Technically, the website employs modern web technologies such as Bootstrap, jQuery, Google Tag Manager, and Usercentrics for consent management, indicating a mature digital infrastructure with moderate performance and good mobile optimization. Security posture is solid with HTTPS enforced and consent-based analytics, though explicit security headers and incident response information are absent. Overall, the website is professional, trustworthy, and compliant with GDPR and cookie regulations, supporting a positive user experience and business credibility.
Hypo Vorarlberg Bank AGhypovbg.at
Finance · Austria
77Low
NIS2 2 · GDPR 95
NIS2 2 · GDPR 95
Hypo Vorarlberg Bank AG is a well-established financial institution based in Austria, specializing in business banking, residential construction financing, and investment services. The website reflects a strong market position as a leading regional bank with a clear focus on entrepreneurs, home builders, and investors. Their digital presence is built on TYPO3 CMS, integrating modern analytics and marketing tools such as Google Tag Manager, Cookiebot, and Piwik PRO, indicating a mature technical infrastructure. The site is well-designed, mobile-optimized, and provides a comprehensive cookie consent mechanism aligned with GDPR requirements. Security posture is robust with HTTPS enforcement and standard security headers, though explicit security policies and incident response contacts are not publicly visible. Overall, the website demonstrates high professionalism and trustworthiness, suitable for a financial services provider.
Wienerbergerwienerberger.at
Manufacturing · Austria
79Low
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Wienerberger is a leading Austrian manufacturer specializing in bricks and building materials for walls, roofs, and facades. The company targets construction professionals and consumers interested in high-quality building products. Their website reflects a mature digital presence built on Adobe Experience Manager, integrating advanced marketing and analytics tools such as Adobe Launch, Google Tag Manager, and Cookiebot for consent management. The site is well-branded, professionally designed, and optimized for mobile devices, providing a good user experience. Security posture is strong with HTTPS and cookie consent mechanisms, though explicit security headers and incident response information are not publicly visible. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent banner. Overall, the website demonstrates a solid enterprise-level digital infrastructure aligned with the company's market position.
mmcitémmcite.com
Other
78Low
NIS2 17 · GDPR 95
NIS2 17 · GDPR 95
mmcité is a company specializing in the design and manufacture of street furniture and smart urban solutions aimed at making cities smarter and more beautiful. The website presents a professional image with a clear business focus on B2B clients such as municipalities, urban planners, and architects. The company positions itself as a specialized provider in the urban design sector, offering innovative and aesthetic products for city environments. The website content is well-structured, with good SEO and mobile optimization, and includes a comprehensive cookie consent mechanism reflecting GDPR compliance. However, explicit contact information and detailed security policies are not readily found on the homepage content. Technically, the site uses modern web technologies including Bootstrap, jQuery, Google Tag Manager, and Sentry for error tracking, indicating a mature digital infrastructure. Security posture is moderate with HTTPS enforced and cookie consent implemented, but lacks visible HTTP security headers and published incident response policies. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, which impacts overall trustworthiness. Strategic recommendations include improving transparency with contact and security policies, implementing security headers, and verifying domain registration details to enhance credibility and security posture.
Weingut MUSTER.gamlitz GmbHmuster-gamlitz.at
Hospitality · Austria
82Low
NIS2 2 · GDPR 85
NIS2 2 · GDPR 85
Weingut MUSTER.gamlitz GmbH is a small Austrian winery specializing in the production and sale of wines and spirits, with a strong emphasis on traditional craftsmanship and generational knowledge. The company operates both an online shop and physical hospitality services including wine tastings and guest accommodations, positioning itself as a regional leader with award-winning products. The website reflects a professional and consistent brand image, targeting wine consumers and tourists interested in authentic regional wine experiences. Technically, the site is built on WordPress with WooCommerce and employs modern plugins for SEO, analytics, and cookie compliance, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Overall, the site is compliant with GDPR and provides clear contact information, enhancing trustworthiness. No critical vulnerabilities or suspicious activities were detected, supporting a high legitimacy score.
Aerisaeris.de
E-commerce · Germany
78Low
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
Aeris operates a professional e-commerce website specializing in ergonomic office chairs and furniture designed to promote movement and comfort at work. The company targets office workers and businesses seeking ergonomic solutions, leveraging a Shopify platform with multilingual support and a comprehensive customer claims portal. The website is well-structured, with good content quality and consistent branding, supporting a medium-sized business presence in Germany. Technically, the site uses modern web technologies including Shopify, Google Analytics, Hotjar, and GDPR-compliant cookie consent mechanisms, ensuring a solid digital infrastructure. Security posture is strong with HTTPS enforced and no exposed sensitive data, although explicit security policies and incident response information are absent. Overall, the site is professional, trustworthy, and compliant with privacy regulations, with room for improvement in security transparency and accessibility. Strategic recommendations include publishing a security policy, adding a vulnerability disclosure channel, and enhancing accessibility features to further strengthen trust and compliance.
Born Digital s.r.o.borndigital.ai
Technology · Czech Republic
79Low
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
Born Digital s.r.o. operates the website borndigital.ai, offering an AI Agent platform designed to automate customer interactions and back-office workflows across multiple industries including finance, energy, telecommunications, and healthcare. The platform emphasizes no-code deployment, scalability, and integration of AI-powered automation tools such as digital humans and customer insight analytics. The company targets businesses seeking to enhance operational efficiency and customer engagement through intelligent automation solutions. The website presents a professional and consistent brand image with clear navigation and multilingual support, reflecting a mature digital presence for a company founded in 2020. Technically, the website is built on WordPress with Elementor, leveraging modern marketing and analytics technologies including Google Tag Manager, Hotjar, Microsoft Clarity, LinkedIn Insight, and HubSpot. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Performance is moderate, with room for improvement in loading speed and accessibility compliance. From a security perspective, the site uses HTTPS with a good SSL configuration and domain transfer protection. However, it lacks visible security headers, published security policies, incident response information, and vulnerability disclosure mechanisms. Privacy compliance is limited due to the absence of privacy and cookie policies and consent mechanisms, which poses compliance risks under GDPR and related regulations. Overall, the website demonstrates a solid business credibility and technical foundation but requires enhancements in privacy compliance and security transparency to strengthen trust and regulatory adherence. Strategic improvements in these areas will support the company’s growth and reputation in the competitive AI automation market.
- NNikon Corporation
nikon.com
Technology · Japan
78Low
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
Nikon Corporation operates a comprehensive corporate website showcasing its global business in imaging and precision technology solutions. The company emphasizes innovation and sustainability aligned with its corporate philosophy. The website targets both business and consumer audiences worldwide, offering detailed product, service, and corporate information. Technically, the site employs modern web standards, responsive design, and privacy-compliant cookie management, reflecting a mature digital infrastructure. Security posture is strong with HTTPS and cookie consent mechanisms, though explicit security headers and incident response details are absent. The domain WHOIS data is unavailable, likely due to privacy or registry policies, but the website's professional presentation and trust signals affirm its legitimacy. Overall, the site scores highly on content quality, technical implementation, security, privacy compliance, and business credibility, making it a reliable and authoritative corporate web presence.
Stuttgarter Zeitungstuttgarter-zeitung.de
Media · Germany
82Low
NIS2 2 · GDPR 85
NIS2 2 · GDPR 85
Stuttgarter Zeitung is a well-established German regional newspaper founded in 1945, offering current news, photo galleries, and reportages primarily focused on Stuttgart and Baden-Württemberg. The website serves a broad general audience with a business model combining digital subscriptions and advertising revenue. It maintains a strong market position as a reputable media outlet with consistent branding and verified social media presence. Technically, the site employs a modern tech stack including JavaScript frameworks, paywall integration via Piano, and multiple advertising and tracking services, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforcement, consent management for GDPR compliance, and no detected vulnerabilities, though additional security headers could enhance protection. Overall, the site is professional, trustworthy, and compliant with privacy regulations, with room for improvement in explicit incident response and vulnerability disclosure policies.
Media · Germany
76Low
NIS2 22 · GDPR 60
NIS2 22 · GDPR 60
noz.de is a well-established regional news portal serving Osnabrück and surrounding areas in Germany. It provides current news in politics, economy, technology, and sports, targeting a general audience interested in local and regional news. The business model is primarily based on digital news publishing with subscription options and advertising revenue. The website demonstrates consistent branding and a professional digital presence with a strong social media footprint. Technically, the site employs modern web technologies including JavaScript, CSS, and HTML5, with integrations for paywall management (Piano), ad security (Confiant), and advertising delivery (Nativendo). The hosting is managed via basecom.de nameservers, indicating a stable infrastructure. Performance and mobile optimization are good, though accessibility features are basic. SEO is well implemented with proper meta tags and structured data. From a security perspective, the site enforces HTTPS and uses a consent management platform for GDPR compliance. However, explicit security headers like CSP and X-Frame-Options are not clearly present, and there is no published security policy or incident response information. No vulnerabilities or exposed sensitive data were detected in the provided content. Overall, the website is safe, professional, and trustworthy with no adult or questionable content. The main areas for improvement include publishing clear privacy and terms of service policies, enhancing security headers, and providing incident response contacts to strengthen compliance and user trust.
- Ddizen
dizen.digital
Other · Czech Republic
84Low
NIS2 25 · GDPR 88
NIS2 25 · GDPR 88
The Facebook page 'dizen' represents a small graphic design studio based in Jihlava, Czech Republic, specializing in creative design services. The business leverages the Facebook platform to showcase its portfolio and engage with a local audience, maintaining a modest but active follower base. The page content is professional and clearly communicates the studio's niche within the Bohemian-Moravian Highlands region. Technically, the page benefits from Facebook's robust infrastructure, ensuring fast loading times, mobile optimization, and secure HTTPS delivery. However, the page lacks direct privacy and cookie policies, which is typical for Facebook pages but may impact compliance perceptions. Security posture is strong due to Facebook's platform controls, though explicit security headers and incident response information are absent. Overall, the business presents a trustworthy and professional front with room for enhanced privacy transparency.
Leonardo S.p.A.leonardo.com
Technology · Italy
78Low
NIS2 47 · GDPR 73
NIS2 47 · GDPR 73
Leonardo S.p.A. is a global leader in aerospace, defense, and security sectors, offering advanced technology solutions including aerospace systems, defense electronics, cybersecurity, space technology, and automation. The company targets government agencies, defense contractors, and security organizations, operating primarily in a B2B model with a strong market position. The website reflects a mature digital presence with professional design and comprehensive content. Technically, the site uses modern technologies such as Liferay CMS, JavaScript frameworks, and Google Tag Manager for analytics, ensuring good performance and mobile optimization. Security posture is strong with HTTPS enforcement, security headers, and no visible vulnerabilities, supported by certifications like ISO 27001 and NATO AQAP. Privacy compliance is robust with clear policies and consent mechanisms. Overall, the domain and website present a trustworthy and professional image, though WHOIS data is unavailable likely due to privacy protection, which is justified given the business nature.
Vipps MobilePay ASvippsmobilepay.com
Finance · Finland
85Low
NIS2 17 · GDPR 95
NIS2 17 · GDPR 95
Vipps MobilePay AS operates a modern, well-branded payment platform targeting businesses in Finland and the Nordic region. The website presents a professional and user-friendly interface, emphasizing seamless payment solutions both online and in physical stores. The company leverages a modern technology stack including Next.js and Azure hosting, ensuring good performance and mobile optimization. Security posture is strong with HTTPS enforcement and domain transfer locks, though DNSSEC is not enabled and explicit incident response contacts are not published. Privacy compliance is robust, featuring a comprehensive cookie consent mechanism aligned with GDPR requirements. Overall, the site reflects a mature fintech business with a clear market position and trustworthy digital presence.
- TThorne
thorne.com
Healthcare
78Low
NIS2 17 · GDPR 58
NIS2 17 · GDPR 58
Thorne is a premium health and wellness company specializing in dietary supplements and health testing solutions. Their website showcases a comprehensive product catalog emphasizing clinical research, ingredient quality, and allergen considerations. The company targets health-conscious consumers seeking scientifically validated health products. Technically, the website is built on modern frameworks such as Nuxt.js and Tailwind CSS, hosted on AWS Cloudfront, and integrates multiple marketing and analytics tools including Google Tag Manager, Dynamic Yield, and Kochava. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response information are not publicly available. Privacy compliance is addressed with visible privacy and cookie policies and consent mechanisms. However, the lack of WHOIS registration data reduces transparency and slightly impacts trust. Overall, the website is professional, secure, and user-friendly, supporting a strong market position in the healthcare e-commerce sector.
UFC Collectiblesufccollectibles.com
E-commerce
79Low
NIS2 17 · GDPR 85
NIS2 17 · GDPR 85
UFC Collectibles operates as an official licensed e-commerce store specializing in UFC memorabilia, targeting MMA fans and collectors. The business leverages Shopify's robust platform and integrates multiple marketing and analytics tools to optimize customer engagement and sales. The website demonstrates a professional design with clear branding and trust signals such as official partnership claims and customer reviews. Technically, the site is well-implemented with modern technologies, fast performance, and good mobile optimization. Security posture is solid with HTTPS enforcement and domain locking, though DNSSEC is not enabled and explicit security policies are absent. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanisms. Overall, UFC Collectibles presents a credible and trustworthy online retail presence with room for improvement in security transparency and DNS security.
- Ultimate Fighting Championship (UFC)
ufcfightclub.com
Media
80Low
NIS2 2 · GDPR 65
NIS2 2 · GDPR 65
UFC Fight Club is an official membership platform targeting MMA enthusiasts, offering exclusive benefits such as pre-sale ticket access, travel discounts, dining deals, and premium experiences. The website reflects a strong brand presence consistent with UFC's global reputation and leverages modern web technologies including React, Material-UI, and major analytics and marketing tools. The technical infrastructure is robust, hosted behind Cloudflare DNS and CDN services, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforced and domain protections in place, though DNSSEC is not enabled and some HTTP security headers could be improved. Privacy compliance is well addressed with a comprehensive privacy policy and a consent management platform in use. Overall, the site is professional, trustworthy, and well-aligned with UFC's business model and audience.
Stellantis Europe S.p.A.fiat.com
Transportation · Italy
81Low
NIS2 2 · GDPR 85
NIS2 2 · GDPR 85
Fiat's official website serves as a comprehensive digital platform showcasing the brand's automotive models, heritage, and latest news. It targets a global audience interested in Fiat's vehicles, emphasizing Italian design and innovation, including electric and hybrid models. The site is part of Stellantis Europe S.p.A., reflecting a large enterprise with a strong market position in the transportation sector. Technically, the website leverages Adobe Experience Manager CMS, integrates multiple analytics and marketing tools, and provides a mobile-optimized, user-friendly experience. Security posture is solid with HTTPS and consent mechanisms, though explicit security headers could be improved. Privacy compliance is robust with clear policies and GDPR adherence. The absence of WHOIS data is notable but likely due to privacy or registry issues, not detracting from the site's legitimacy. Overall, the site is professional, trustworthy, and well-maintained.
- Bontonfilm CZ
bontonfilm.cz
Media · Czech Republic
76Low
NIS2 17 · GDPR 95
NIS2 17 · GDPR 95
Bontonfilm CZ operates as a media and film entertainment company primarily targeting the Czech Republic market. The website serves as a platform for film-related content and distribution, leveraging a modern Squarespace CMS infrastructure. The company maintains an active social media presence across major platforms including Facebook, Instagram, YouTube, LinkedIn, and TikTok, enhancing its digital footprint and audience engagement. However, the website lacks explicit business contact details and comprehensive descriptive content, which limits transparency. Technically, the website employs contemporary web technologies such as jQuery, Google Tag Manager, Cookiebot for cookie consent, and reCAPTCHA for bot protection. The site is hosted on Squarespace, ensuring reliable hosting and SSL encryption. Performance and mobile optimization are adequate, though accessibility features are basic. SEO practices are implemented with proper meta tags and Open Graph data. From a security perspective, HTTPS is enforced with a valid SSL certificate, and cookie consent mechanisms are in place, demonstrating compliance with GDPR. However, the absence of security headers and explicit security policies reduces the overall security posture. The lack of WHOIS data for the domain raises concerns about domain legitimacy and transparency, which impacts trustworthiness. Overall, the website presents a professional and functional digital presence for Bontonfilm CZ but would benefit from enhanced transparency, improved security headers, and visible contact information to strengthen trust and compliance. Strategic improvements in these areas will support better risk management and user confidence.
HarperCollinsharpercollins.com
Media · United States
78Low
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
HarperCollins is a globally recognized book publisher with a rich history dating back to 1817. The company operates a professional e-commerce website built on the Shopify platform, offering a wide range of books and author-related content. The site targets a general audience including readers, educators, and book clubs, positioning itself as a world-leading publisher with a strong market presence. The website features comprehensive content, clear navigation, and consistent branding, reflecting a mature digital presence. Technically, the website leverages modern web technologies including Vue.js, jQuery, Algolia for search, and integrates multiple analytics and marketing tools such as Google Tag Manager, Facebook Pixel, and Visual Website Optimizer. Hosting and content delivery are managed via Shopify's CDN, ensuring fast performance and mobile optimization. Accessibility and SEO practices are well implemented, contributing to a positive user experience. From a security perspective, the site enforces HTTPS with strong SSL configuration and employs secure authentication via Auth0. While explicit security policies and incident response contacts are not published, the site uses CAPTCHA protections and avoids exposing sensitive data. Privacy and cookie policies are present with consent mechanisms, indicating good compliance with GDPR and related regulations. However, the absence of WHOIS data transparency for the domain is a concern, potentially due to privacy protection services. Overall, HarperCollins.com demonstrates a strong business and technical foundation with good security hygiene. The main risk lies in the lack of domain registration transparency and absence of published security policies. Strategic recommendations include enhancing security disclosures, publishing incident response contacts, and improving WHOIS transparency to bolster trust and compliance.
Clifford Chancecliffordchance.com
Finance · United Kingdom
86Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Clifford Chance is a leading international law firm with a significant global presence across five continents. The firm offers a broad range of legal services including corporate law, financial regulation, risk management, real estate, tax, and dispute resolution. Their website reflects a mature digital infrastructure with comprehensive content tailored to corporate clients and legal professionals. The firm leverages modern technologies such as Adobe Experience Manager for content management, Okta for authentication, and OneTrust for cookie consent, indicating a high level of digital maturity. Security posture is strong with HTTPS enforced, use of trusted authentication mechanisms, and privacy compliance measures in place, although explicit security policies and incident response contacts are not publicly detailed. Overall, the website and digital presence project a professional, trustworthy, and well-established business entity.
A&O Shearmanallenovery.com
Other
85Low
NIS2 67 · GDPR 100
NIS2 67 · GDPR 100
A&O Shearman is a global law firm specializing in U.S. and English law, targeting international corporate clients and legal professionals. The website presents a professional and well-branded digital presence, leveraging modern web technologies such as React, Next.js, and Sitecore CMS. The site is mobile-optimized and offers a good user experience with clear navigation and relevant content. Security posture is generally strong with HTTPS enforced and no visible vulnerabilities, although the absence of security headers suggests room for improvement. Privacy compliance is limited as no explicit privacy or cookie policies were detected in the provided content. The WHOIS data is notably missing or inaccessible, raising concerns about domain registration legitimacy. Overall, the website is professional and trustworthy in appearance but requires verification of domain registration and enhancement of privacy and security policies.
Squire Patton Boggssquirepattonboggs.com
Other · United States
78Low
NIS2 47 · GDPR 88
NIS2 47 · GDPR 88
Squire Patton Boggs is a globally recognized full-service law firm providing comprehensive legal services at the intersection of law, business, and government. The firm targets businesses, government entities, and legal professionals worldwide, offering a broad range of legal advisory, litigation, and regulatory compliance services. The website reflects a mature, enterprise-level organization with consistent branding and high-quality content. Technically, the site employs modern web technologies including AngularJS, Google Tag Manager, and OneTrust for cookie consent, indicating a well-maintained digital infrastructure. Security posture is strong with HTTPS enforcement and multiple security headers, though explicit security policies and incident response contacts are not prominently published. Overall, the site is professional, trustworthy, and compliant with privacy regulations, though WHOIS data is privacy-protected, limiting transparency. Strategic recommendations include publishing detailed security policies and incident response information to enhance trust and compliance visibility.