Low-risk security reports
14,261 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,165001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
10,651–10,700 of 14,261
- HH5 Ravintolat Oy
h5bar.fi
Hospitality · Finland
84Low
NIS2 2 · GDPR 95
NIS2 2 · GDPR 95
H5 Ravintolat Oy operates the H5 Bar & Barrel, a hospitality venue located in Tampere, Finland, offering a relaxed bar experience with live music and DJ events. The business targets adults interested in nightlife and quality bar services, positioning itself as a local nightlife hub with a focus on atmosphere and entertainment. The website reflects a small-sized hospitality business with a clear focus on customer engagement through events and reservations. Technically, the website is built on WordPress using the FoundationPress theme and integrates common plugins such as Cookiebot for GDPR compliance and Ninja Forms for contact management. The site demonstrates moderate digital maturity with good mobile optimization and basic SEO practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though additional security headers could enhance protection. Privacy compliance is well addressed via Cookiebot, ensuring GDPR adherence. Overall, the website is professional, trustworthy, and aligned with the business's hospitality focus.
Skydda Suomi Oyskydda.fi
Manufacturing · Finland
76Low
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Skydda Suomi Oy is a Finnish company specializing in supplying personal protective equipment primarily for the industrial and construction sectors in Northern Europe. The company positions itself as a leading supplier in this niche, targeting B2B customers requiring safety solutions. The website reflects a professional business presence with consistent branding and relevant content tailored to its target audience. Technically, the site is built on the HubSpot CMS platform, leveraging Cloudflare for security and performance, and integrates modern marketing and analytics tools such as Google Analytics 4, Google Tag Manager, and HubSpot analytics. The cookie consent mechanism is comprehensive and GDPR compliant, indicating a mature approach to privacy. Security posture is solid with HTTPS enforced and Cloudflare protections, though some improvements such as explicit security policies and updated libraries could enhance the overall security maturity. No critical vulnerabilities or suspicious content were detected, and the domain registration data aligns well with the business claims, supporting legitimacy. Overall, the website demonstrates a good balance of business credibility, technical implementation, and privacy compliance, suitable for its professional audience.
Industrieverband Feuerverzinken e.V.feuerverzinken.com
Manufacturing · Germany
84Low
NIS2 2 · GDPR 100
NIS2 2 · GDPR 100
The Industrieverband Feuerverzinken e.V. is a German industry association specializing in corrosion protection of steel through hot-dip galvanizing (Feuerverzinken). The website serves as a comprehensive resource for planners, engineers, and industry professionals, offering detailed information on sustainability, technical standards, and applications of galvanized steel. The organization holds a strong market position as a leading industry body with a medium-sized footprint and a focus on manufacturing and non-profit sectors. Technically, the website is built on TYPO3 CMS with modern JavaScript and analytics integrations, providing a good user experience with mobile optimization and accessibility. Security posture is solid with HTTPS and cookie consent mechanisms, though improvements could be made by implementing security headers and publishing explicit security policies. The absence of WHOIS registration data is a notable anomaly but does not detract from the overall legitimacy indicated by the website content and social media presence. Overall, the site is professional, trustworthy, and well-maintained.
TwentyThreetwentythree.com
Technology
80Low
NIS2 2 · GDPR 95
NIS2 2 · GDPR 95
TwentyThree is a leading European video marketing platform specializing in providing businesses with comprehensive video software solutions including webinar hosting, video analytics, and video management. The company targets B2B customers seeking to enhance their marketing strategies through video content. The website demonstrates a professional and consistent brand presence with good content quality and user experience. Technically, the site leverages modern technologies such as HubSpot CMS, Tailwind CSS, and AWS Cloudfront for hosting, ensuring fast performance and mobile optimization. Security posture is strong with HTTPS enforcement and appropriate security headers, although explicit security policies and incident response contacts are not publicly disclosed. Privacy compliance is well addressed with comprehensive privacy and cookie policies and consent mechanisms. However, the absence of WHOIS domain registration data introduces some uncertainty regarding domain legitimacy. Overall, the site is trustworthy and well-maintained, but domain registration verification is recommended to fully confirm legitimacy.
- SIGN+DESIGN GmbH
signunddesign.com
Media · Germany
78Low
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
SIGN+DESIGN GmbH is a well-established German advertising agency based in Schwalmtal, offering a broad range of services including strategy, digital and print media, web design, graphic design, photography, videography, augmented reality, and rental of construction site signs. The company positions itself as a trusted partner with over 20 years of experience and a strong market presence in Germany. Their website is professionally designed, mobile-optimized, and SEO-friendly, reflecting a mature digital infrastructure. Technically, the site runs on WordPress with modern JavaScript libraries and is hosted by IONOS SE, a reputable provider. Security posture is good with HTTPS enabled and domain transfer protection, though DNSSEC is not enabled and some security headers are missing. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. Overall, the business demonstrates high credibility with transparent contact information and positive trust signals.
Väre Oyvare.fi
Energy · Finland
83Low
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
Väre Oy is a well-established Finnish energy company founded in 2006, recognized as one of the largest electricity sellers in Finland. The company focuses on providing modern energy services to both private consumers and businesses, emphasizing ease of use with online contract capabilities. Their market position is strong within the Finnish energy sector, supported by a professional and user-friendly website that clearly communicates their offerings and brand identity. The website is built on WordPress with WooCommerce integration, leveraging modern web technologies and analytics tools such as Google Tag Manager and HubSpot, indicating a mature digital infrastructure. Security-wise, the site enforces HTTPS, employs security headers, and integrates cookie consent mechanisms compliant with GDPR, reflecting a solid security posture. No critical vulnerabilities or suspicious activities were detected. Overall, Väre Oy demonstrates a high level of business credibility, technical sophistication, and privacy compliance, making it a trustworthy and professional energy service provider.
- Alma Media Oyj
aamulehti.fi
Media · Finland
79Low
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
The website www.aamulehti.fi is a regional news media portal serving Tampere and the Pirkanmaa region in Finland. Operated by Alma Media Oyj, it provides news, live broadcasts, and digital subscription services. The site targets a general audience interested in local news and events. The business model revolves around digital content publishing and advertising revenue, supported by subscription offerings. The site holds a strong market position as a leading regional news source with consistent branding and recognized trust signals. Technically, the website employs modern web technologies including React and Next.js frameworks, with integrations for analytics and advertising such as Google Tag Manager, Adobe DTM, and Conductrics. The site is mobile optimized and shows moderate performance. Accessibility features are basic but present. SEO optimization is basic with room for improvement. From a security perspective, the site enforces HTTPS and includes standard security headers like CSP and HSTS. No critical vulnerabilities or exposed sensitive data were detected. However, the site lacks visible privacy, cookie, and security policies, as well as incident response or vulnerability disclosure information, which are important for compliance and user trust. Overall, the website is professionally designed and trustworthy, but improvements in privacy compliance and transparency are recommended to enhance user confidence and regulatory adherence.
Bauderbauder.co.uk
Manufacturing · United Kingdom
78Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Bauder is a leading UK-based manufacturer and expert provider of commercial flat roofing systems, specializing in waterproofing, green roofs, and photovoltaic solutions. The company targets commercial clients seeking high-quality roofing services and solutions. The website demonstrates a mature digital presence with modern technologies such as React, Google Tag Manager, and Cookiebot for consent management. The site is well-structured, mobile-optimized, and professionally designed, reflecting Bauder's market position as a trusted roofing expert. From a security perspective, the website enforces HTTPS and employs cookie consent mechanisms aligned with GDPR requirements. While explicit security headers are not fully confirmed, the use of reCAPTCHA and consent management indicates a proactive approach to security and privacy. No critical vulnerabilities or suspicious content were detected. However, the WHOIS lookup for the subdomain www.bauder.co.uk failed due to domain naming rules, suggesting the need to verify domain registration details for the main domain bauder.co.uk. Overall, Bauder's website presents a secure, compliant, and professional front that supports its business credibility. Strategic recommendations include enhancing transparency around security policies and incident response, confirming security header implementations, and ensuring WHOIS data accuracy for domain legitimacy verification.
Messukeskusmessukeskus.com
Hospitality · Finland
77Low
NIS2 47 · GDPR 53
NIS2 47 · GDPR 53
Messukeskus is Finland's largest event venue and a leading event media company, providing exhibition spaces and event hosting services. The website reflects a mature digital presence with professional design, clear navigation, and multilingual support. The technical infrastructure is based on WordPress CMS with modern JavaScript frameworks and analytics tools, indicating a well-maintained platform. Security posture is good with HTTPS enforced and no visible vulnerabilities, though explicit security headers could be improved. Privacy and cookie policies are present with consent mechanisms, supporting GDPR compliance. However, the absence of WHOIS registration data raises concerns about domain legitimacy, which should be investigated further to ensure trustworthiness.
Haaga-Helia ammattikorkeakoulu Oyhaaga-helia.fi
Education · Finland
82Low
NIS2 2 · GDPR 95
NIS2 2 · GDPR 95
Haaga-Helia is a prominent Finnish university of applied sciences specializing in business, hospitality, IT, and sports education. The institution targets students, professionals, and corporate partners, offering bachelor's and master's degree programs, continuing education, and research services. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content tailored to its audience. Technically, the site is built on Drupal CMS, leveraging modern libraries and third-party integrations such as Cookiebot for consent management and Google Tag Manager for analytics. The security posture is strong, with HTTPS enforced and multiple security headers present, although a dedicated security policy page and incident response contacts are absent. Privacy compliance is robust, featuring GDPR-aligned cookie consent mechanisms and a clear privacy policy. Overall, the website demonstrates high professionalism, trustworthiness, and alignment with business objectives.
Löfbergslofbergs.fi
Retail · Finland
81Low
NIS2 2 · GDPR 95
NIS2 2 · GDPR 95
Löfbergs is a well-established coffee company based in Finland, specializing in dark roast filter coffee since 1906. The website reflects a mature retail business with a focus on coffee products and brand heritage. The company targets general consumers interested in premium coffee products. Technically, the website is built on WordPress with modern SEO and cookie consent tools, indicating a good level of digital maturity. Security posture is strong with HTTPS and security headers properly configured, although explicit privacy and terms policies are not found in the provided content. The site uses multiple third-party analytics and marketing tools, managed via Cookiebot for GDPR compliance. Overall, the website is professional, trustworthy, and well-optimized for its business domain.
Vantaan kaupunkivantaa.fi
Government · Finland
77Low
NIS2 25 · GDPR 25
NIS2 25 · GDPR 25
The website www.vantaa.fi is the official municipal portal for the city of Vantaa, Finland, serving over 250,000 residents. It provides comprehensive information about city services, governance, urban planning, events, and citizen participation. The site targets residents, businesses, and stakeholders interested in municipal affairs. Technically, it is built on Drupal 10, employs modern web technologies, and integrates analytics and cookie consent mechanisms, reflecting a mature digital infrastructure. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although explicit security policies and incident response details are not published. Overall, the site is trustworthy, well-structured, and compliant with GDPR, supporting a positive user experience and public trust.
Sanoma Media Finland Oyruutu.fi
Media · Finland
77Low
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Ruutu.fi is a leading Finnish streaming platform operated by Sanoma Media Finland Oy, offering a wide range of entertainment including popular TV series, movies, sports, children's programming, and podcasts. The service integrates content from multiple partners such as SkyShowtime, Pluto TV, and Elisa Viihde, targeting Finnish-speaking audiences with a subscription and ad-supported business model. The website is professionally designed with excellent content quality and user experience, optimized for mobile and desktop platforms. Technically, it leverages modern web technologies including Next.js and React, with fast loading times and good SEO practices. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although explicit security policies and incident response information are not publicly detailed. Privacy and cookie policies are comprehensive and GDPR compliant, reflecting good privacy compliance. Overall, the domain registration and business information are consistent and trustworthy, supporting a high legitimacy score. Strategic recommendations include publishing explicit security policies, vulnerability disclosure mechanisms, and enhancing direct contact information for security matters.
Kiinteistö Oy Hämeenlinnakeskuskauppakeskusgoodman.fi
Retail · Finland
77Low
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Kauppakeskus Goodman is a well-established shopping center located in Hämeenlinna, Finland, operated by Kiinteistö Oy Hämeenlinnakeskus. The website presents a clear business focus on retail and leisure services, targeting local residents and visitors. The site offers a comprehensive range of shops, cafes, and restaurants, positioning itself as a community hub. The domain age and registrant information align well with the business claims, indicating legitimacy and transparency. Technically, the website is built on WordPress with modern SEO and analytics tools such as Yoast SEO, Google Tag Manager, and Cookiebot for cookie consent management. The site is mobile-optimized, accessible, and performs moderately well. Security best practices are observed with HTTPS, security headers, and no visible vulnerabilities. Cookie consent is implemented with detailed categorization, supporting GDPR compliance. Security posture is strong with no critical issues detected. However, the site lacks explicit security policy and incident response contact information, which could enhance trust and compliance. Privacy compliance is good, supported by cookie consent and a privacy policy, though explicit contact emails and phone numbers are not present in the analyzed HTML. Overall, Kauppakeskus Goodman demonstrates a solid digital presence with good security and privacy practices. Strategic improvements could include publishing security policies and incident response details to further strengthen trust and compliance.
Teerenpeliteerenpeli.com
Hospitality · Finland
78Low
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
Teerenpeli is a well-established Finnish company operating as a brewery, distillery, and restaurant chain with a strong national presence. Founded in 1994, it offers a variety of alcoholic beverages including beers, ciders, long drinks, whiskies, and gins, alongside hospitality services across multiple cities in Finland. The website reflects a mature business with a clear brand identity and comprehensive product offerings, supported by an e-commerce platform and active social media engagement. Technically, the website is built on WordPress with WooCommerce, utilizing modern frameworks like Bootstrap and jQuery. It incorporates GDPR-compliant cookie consent mechanisms and an age gate to restrict access to adult content, demonstrating good digital maturity and regulatory compliance. Performance and mobile optimization are good, with clear navigation and SEO best practices implemented. From a security perspective, the site enforces HTTPS and employs domain transfer protection, but lacks DNSSEC and some advanced security headers. No critical vulnerabilities or WAF blocking were detected. Privacy compliance is strong, with clear policies and consent management. However, no explicit security policy or incident response contacts are published. Overall, the website is professional, trustworthy, and well-aligned with the business's market position. Strategic recommendations include enhancing DNS security, publishing security policies, and continuous monitoring of third-party scripts to maintain a robust security posture.
- EETICSConfigurator
eticsconfigurator.com
Other
82Low
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website eticsconfigurator.com currently serves a 404 error page with minimal content, indicating either a misconfiguration or an unavailable resource. The site uses Angular 13.3.11 as its frontend framework and is hosted on infrastructure associated with Akamai, a reputable content delivery network. However, the lack of substantive content, metadata, and contact information limits the ability to fully assess the business or technical maturity. Security posture is weak due to absence of security headers and no visible HTTPS enforcement data. Privacy and compliance policies are missing, which is a significant gap for user trust and regulatory adherence. Overall, the site appears to be in an early or incomplete state, requiring substantial improvements in content, security, and compliance to be considered professional and trustworthy.
- Nelonen Media Live Oy
abiristeilyt.fi
Media · Finland
81Low
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
Abiristeilyt.fi is a professionally managed event website operated by Nelonen Media Live Oy, a Finnish media company. The site promotes and organizes legendary high school graduation parties on day cruises to Stockholm, targeting Finnish abiturients and young adults. The business is well-established with a domain age since 2003 and is supported by a parent company Sanoma Oyj, indicating strong market presence and credibility. The website offers ticket sales, event information, artist lineups, and social media engagement to enhance user experience and event promotion. Technically, the site runs on WordPress with modern plugins for SEO, galleries, and filtering, ensuring good performance and mobile optimization. Security posture is solid with HTTPS, no exposed sensitive data, and privacy compliance linked to Sanoma's comprehensive policies. Overall, the site is trustworthy, well-branded, and serves its niche audience effectively.
- Nelonen Media Live Oy
kuopiorock.fi
Media · Finland
78Low
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
Kuopiorock is a well-established rock music festival organized by Nelonen Media Live Oy, a Finnish media company under the Sanoma group. The festival targets rock music enthusiasts primarily in the Savonia region and broader Finland, offering a large lineup of popular and diverse rock artists. The website serves as the main digital platform for event promotion, ticket sales, and information dissemination. Technically, the site is built on WordPress with a modern plugin ecosystem, including SEO and gallery management tools, and integrates Google Tag Manager for analytics. The site is well-optimized for mobile and desktop users, with good navigation and content quality. Security-wise, the site uses HTTPS and shows signs of standard security practices, though some security headers could be enhanced. No critical vulnerabilities or suspicious activities were detected. Privacy compliance is well addressed with visible privacy and cookie policies and consent mechanisms. Overall, the website and domain registration data align well, indicating a legitimate and trustworthy business presence.
Nelonen Media Live Oytammerfest.fi
Media · Finland
78Low
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
Tammerfest.fi is the official website for Tammerfest, Finland's largest urban music festival held annually in Tampere. The site is managed by Nelonen Media Live Oy, a subsidiary of Sanoma, indicating a strong media and entertainment business backing. The festival targets Finnish music fans and the general public, offering ticket sales, event schedules, VIP services, and media content. The website is professionally designed with excellent content quality and clear navigation, optimized for mobile users. Technically, it is built on WordPress with modern plugins and tracking tools, hosted likely via Gandi SAS. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities. Privacy and cookie policies are comprehensive and GDPR compliant. The WHOIS data is transparent and consistent with the business, reinforcing legitimacy. Overall, the site demonstrates a mature digital presence suitable for a major event organizer.
Nelonen Media Live Oywanajafestival.fi
Media · Finland
77Low
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
Wanaja Festival is a well-established Finnish music festival organized by Nelonen Media Live Oy, a subsidiary of the Sanoma group. The festival is held annually in Hämeenlinna and features prominent domestic artists, targeting a Finnish-speaking audience interested in cultural and music events. The website serves as a comprehensive platform for event information, ticket sales, artist lineups, and news updates, reflecting a mature and professional digital presence. Technically, the website is built on WordPress with modern plugins and integrations such as Yoast SEO, Instagram Feed, and Adobe DTM for tag management. It uses HTTPS with no detected security warnings, indicating a secure infrastructure. The site is mobile-optimized and includes accessibility features, although there is room for improvement in security headers and accessibility compliance. From a security perspective, the site demonstrates good practices including encrypted connections, privacy management scripts, and cookie consent mechanisms. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is transparent and consistent with the business, enhancing trustworthiness. Overall, the site presents a low risk profile with strong business credibility and compliance with GDPR. Strategically, the festival benefits from strong partnerships and sponsorships, enhancing its market position. The website effectively supports business goals through clear navigation, quality content, and integrated marketing tools. Continued focus on security enhancements and accessibility will further strengthen the platform.
- Nelonen Media Live Oy
jysari.fi
Media · Finland
76Low
NIS2 17 · GDPR 28
NIS2 17 · GDPR 28
Jysäri.fi is the official website for the Jysäri music festival held annually in Finland, organized by Nelonen Media Live Oy. The site provides comprehensive information about the festival, including artist lineups, schedules, ticket sales, and event news. The business is well-established with a domain age of over a decade, indicating stability and ongoing operations. The website targets music festival attendees primarily in Finland and offers a user-friendly experience with clear navigation and mobile optimization. Technically, the site is built on WordPress with modern plugins and tracking tools, hosted likely via Gandi.net, and uses HTTPS for secure communications. Security posture is solid but could be improved with additional security headers and DNSSEC implementation. Privacy compliance is partially addressed with a privacy policy present but lacks a cookie consent mechanism. Overall, the site demonstrates a professional and trustworthy online presence for the festival.
Nelonen Media Live Oyiskelmafestivaali.fi
Media · Finland
77Low
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
Iskelmä Festivaali is a well-established Finnish music festival brand operating since 2008, organized by Nelonen Media Live Oy, a company linked to the SANOMA media group. The website serves as a comprehensive platform for festival promotion, ticket sales, artist lineups, schedules, and visitor information targeting Finnish music fans. The digital infrastructure is built on WordPress with modern SEO and analytics tools, reflecting a mature and professional online presence. Security posture is solid with HTTPS and privacy consent mechanisms, though explicit privacy and terms policies are not clearly presented. Overall, the domain registration and website content align well, indicating a legitimate and trustworthy business entity.
- Nelonen Media Live Oy
tahkojuhannus.fi
Media · Finland
80Low
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
Tahko Juhannus is a Finnish music festival event organized by Nelonen Media Live Oy, a subsidiary of Sanoma. The event is well-established since 2014 and targets festival-goers and music fans in Finland. The website provides comprehensive event information, ticket sales, and media content, supported by a professional digital infrastructure. The technical setup leverages WordPress CMS with modern plugins and tracking tools, ensuring good SEO and user experience. Security posture is solid with HTTPS and no visible vulnerabilities, though some improvements in security headers are recommended. Privacy compliance is strong, linking to the parent company's detailed policies. Overall, the website and domain registration details align well, indicating a trustworthy and legitimate business presence.
- Nelonen Media Live Oy
rmj.fi
Media · Finland
78Low
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
Raumanmeren Juhannus is a well-established Finnish music festival organized by Nelonen Media Live Oy, a subsidiary of SANOMA. The festival targets music fans and attendees in Finland, offering a beach festival experience with a strong lineup of artists. The website serves as the primary information and ticket sales platform, reflecting a medium-sized business with a solid market position in the Finnish event industry. The digital presence is supported by WordPress CMS, enhanced with SEO and analytics tools such as Yoast SEO and Google Tag Manager, indicating a mature technical infrastructure. Security posture is good with HTTPS and standard security headers, though DNSSEC is not implemented. Privacy and cookie policies are present and GDPR compliant, supporting regulatory adherence. Overall, the website and domain registration details are consistent and trustworthy, with no signs of malicious activity or suspicious patterns.
- Nelonen Media Live Oy
himosjuhannus.fi
Media · Finland
78Low
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
Himos Juhannus is Finland's largest midsummer festival, organized by Nelonen Media Live Oy, a Finnish media company. The website serves as the primary digital platform for festival information, ticket sales, artist lineups, schedules, and news updates. It targets festival attendees and music enthusiasts, positioning itself as a major event in the Finnish entertainment calendar. The business model revolves around event management and ticket sales, supported by media and marketing activities. The website reflects a medium-sized enterprise with a solid market presence and a parent company affiliation with SANOMA, a major Finnish media group. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and integrates Google Tag Manager for analytics. It uses HTTPS and is hosted with Gandi SAS nameservers. The site demonstrates good mobile optimization, SEO practices, and a moderate performance profile. Accessibility is basic but functional. The technical infrastructure supports a professional and user-friendly experience. From a security perspective, the site employs HTTPS and avoids exposing sensitive data. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not evident and should be implemented to enhance security posture. No vulnerabilities or malicious indicators were detected. Privacy and cookie policies are present and indicate GDPR compliance, reflecting a responsible approach to data protection. Overall, the website is trustworthy, professionally maintained, and aligned with the business it represents. It provides comprehensive festival information and maintains a good balance between user experience, technical quality, and security. Strategic recommendations include enhancing security headers, maintaining up-to-date software, and publishing explicit security and incident response policies to further strengthen trust and compliance.
Bizzdesignbizzdesign.com
Technology
83Low
NIS2 25 · GDPR 73
NIS2 25 · GDPR 73
Bizzdesign is a well-established enterprise architecture software company, founded in 1999, offering a powerful SaaS platform designed to support organizations in their digital transformation journeys. The company holds a strong market position as a leader in the Gartner Magic Quadrant for EA tools for nine consecutive years, serving enterprise clients across various industries. Their key services include enterprise architecture management, business architecture, application portfolio management, and risk security management, targeting roles such as CIOs, enterprise architects, and business leaders. The website reflects a mature digital presence with professional design, comprehensive content, and strong branding consistency. Technically, the website is built on WordPress with a modern tech stack including Yoast SEO, Google Analytics, Hotjar, Pardot, and other marketing and analytics tools. The site is mobile-optimized, accessible, and SEO-friendly, with moderate performance. Hosting is provided by Hosting Concepts B.V., and the domain is long-established and consistent with the business history. From a security perspective, the site enforces HTTPS with good SSL configuration and uses clientTransferProhibited domain status to prevent unauthorized transfers. However, DNSSEC is not enabled, and some security headers like Content-Security-Policy and X-Content-Type-Options are missing. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with a comprehensive privacy and cookie policy and consent mechanism in place, though no explicit security policy or incident response contacts are published. Overall, the website presents a low risk profile with strong business credibility and digital maturity. Strategic recommendations include enabling DNSSEC, adding missing security headers, publishing a security policy and incident response contacts, and considering a vulnerability disclosure policy to enhance trust and security posture.
iSpring Solutions, Inc.ispring.eu
Education · United States
85Low
NIS2 47 · GDPR 83
NIS2 47 · GDPR 83
iSpring Solutions, Inc. is a well-established company founded in 2001, specializing in eLearning authoring tools and learning management systems designed to help organizations create effective online training programs. The company serves a global audience with over 61,000 clients in 173 countries and supports 1.75 million users daily. Their product suite includes iSpring Suite, iSpring Learn LMS, and other eLearning solutions, targeting training organizations and professionals. The website is professionally designed, mobile-optimized, and provides comprehensive content including customer testimonials and certifications, reflecting a strong market position in the education technology sector. Technically, the website employs modern JavaScript libraries such as Tiny-slider and MicroModal, integrates marketing automation tools like Diffuser and Prism, and uses Sentry for error tracking. The site is hosted with CDN support, ensuring fast performance and excellent mobile responsiveness. SEO and accessibility practices are well implemented, contributing to a positive user experience. From a security perspective, the site enforces HTTPS with a good SSL configuration and uses reputable third-party scripts. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not clearly present, and there is no visible security policy or vulnerability disclosure page. No vulnerabilities or exposed sensitive data were detected, indicating a mature security posture but with room for improvement in formal security documentation. Overall, the website is trustworthy and professional, with strong business credibility and compliance indicators. The absence of WHOIS data is a notable gap but does not significantly detract from the overall legitimacy given the comprehensive business information and social proof available. Strategic recommendations include enhancing security headers, publishing a security policy, and adding a vulnerability disclosure mechanism to further strengthen trust and compliance.
- GE Aerospace
geaerospace.com
Transportation · United States
81Low
NIS2 2 · GDPR 73
NIS2 2 · GDPR 73
GE Aerospace is a leading global provider of jet and turboprop engines and integrated aircraft systems serving commercial, military, business, and general aviation sectors. The company offers a broad portfolio of propulsion products and services, including engine maintenance and customer support, positioning itself as a key player in the aerospace industry. The website reflects a mature enterprise with comprehensive content targeting industry professionals, investors, and potential employees. Technically, the website is built on Drupal 10 and incorporates modern web technologies such as Google Tag Manager and Evidon for cookie consent, ensuring a responsive and accessible user experience. The site demonstrates good SEO practices, mobile optimization, and accessibility features, contributing to a professional digital presence. From a security perspective, the site enforces HTTPS, employs security headers, and integrates consent mechanisms for privacy compliance. However, it lacks a public vulnerability disclosure policy and incident response contact details, which are recommended for enhanced transparency and security readiness. Overall, the website is trustworthy and professionally maintained, though the absence of WHOIS domain registration data raises questions about domain legitimacy that warrant further verification. Strategic improvements in security disclosure and incident response communication would strengthen the security posture and stakeholder confidence.
NÉPRAwearnepra.com
Retail · Finland
83Low
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
NÉPRA is an ethical, minimalist activewear brand based in Finland, operating primarily through an e-commerce platform hosted on Shopify. The website presents a professional and well-structured online store with clear navigation and a focus on sustainable fashion. The technical infrastructure leverages modern web technologies, including Shopify's Stiletto theme, and integrates multiple analytics and marketing tools such as Google Analytics, Facebook Pixel, and Mailchimp. Security posture is strong with HTTPS enforced and standard security headers likely managed by Shopify. Privacy compliance is addressed with a comprehensive cookie consent mechanism and GDPR-aligned privacy policy. However, the absence of WHOIS registration data and lack of explicit contact information slightly diminish business credibility. Overall, the site is functional, secure, and user-friendly, serving a niche market of ethical activewear consumers.
NOCCOnocco.com
Retail · Sweden
78Low
NIS2 17 · GDPR 95
NIS2 17 · GDPR 95
NOCCO is a Swedish-based company specializing in functional, sugar-free energy drinks enriched with caffeine, vitamins, and BCAA, targeting active and exercising adults. The brand has established a strong international presence, available in over 40 markets, and is supported by a professional, multi-language website that highlights product offerings, brand ambassadors, and company news. The business operates primarily in the retail sector with an e-commerce component, under the parent company Vitamin Well AB.
Rehband Limitedrehband.fi
Retail · Cyprus
80Low
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
Rehband Limited operates a professional e-commerce website specializing in sports support products such as knee sleeves, knee pads, and functional clothing. Established in 1955, the company positions itself as a premium brand designed in Sweden and manufactured in Europe, targeting active lifestyle consumers and athletes. The website is built on the Shopify platform, leveraging modern technologies and third-party integrations for reviews, marketing, and cookie consent management. The site demonstrates good design quality, mobile optimization, and SEO practices, providing a positive user experience. However, explicit privacy and terms of service policies are not clearly found, which impacts compliance confidence. The WHOIS data for the subdomain is unavailable, limiting domain registration verification but not necessarily indicating risk.
Finnfoam Oyfinnfoam.fi
Energy · Finland
83Low
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Finnfoam Oy is a Finnish family-owned company specializing in advanced structural energy efficiency solutions with over 40 years of experience. The company is a leading manufacturer of thermal insulation products in the Baltic Sea region, offering a range of XPS, PIR, EPS insulation boards, and innovative waterproofing solutions like TULPPA. Their website reflects a mature digital presence with comprehensive product information, multilingual support, and strong branding consistency. Technically, the site is built on WordPress with modern frameworks and includes SEO and accessibility best practices. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. The WHOIS data confirms the legitimacy and long-standing presence of the company, matching the website's claims. Overall, Finnfoam demonstrates a professional, trustworthy, and well-managed online presence suitable for its industry and market position.
Wisenetwork Oywisenetwork.fi
Technology · Finland
86Low
NIS2 17 · GDPR 95
NIS2 17 · GDPR 95
Wisenetwork Oy is a Finnish technology company specializing in software solutions for access control, membership management, and event registration. Established in 2012, the company serves business clients primarily in Finland, offering integrated systems that include CRM, invoicing, and e-commerce functionalities. The website reflects a mature business with a niche focus, supported by a custom CMS and hosted on Google Cloud infrastructure. The technical stack includes legacy jQuery and Bootstrap, with modern integrations such as Google reCAPTCHA and Cookiebot for privacy compliance. Security measures are basic, with room for improvement in security headers and updated libraries. The absence of explicit privacy and terms of service pages suggests an area for compliance enhancement. Overall, the domain registration data aligns well with the website content, indicating a legitimate and stable business presence.
Datadogdatadog.com
Technology · United States
90Low
NIS2 29 · GDPR 83
NIS2 29 · GDPR 83
Datadog is a leading enterprise SaaS provider specializing in cloud monitoring and security services. Founded in 2010 and headquartered in New York, it offers a comprehensive platform that integrates infrastructure monitoring, application performance monitoring, log management, security monitoring, and AI observability. The company targets IT, DevOps, and security teams in large enterprises, positioning itself as a market leader with strong industry recognition such as Gartner Magic Quadrant and Forrester Wave leadership. The website reflects a mature digital presence with professional design, clear navigation, and extensive product information. Technically, the site is built using modern web technologies including the Hugo static site generator, Alpine.js, and integrates advanced analytics and consent management tools. It is optimized for performance, mobile responsiveness, and SEO, indicating a high level of digital maturity. Security posture is strong with HTTPS enforcement, security headers, and no visible vulnerabilities, although explicit security policies and incident response details are not publicly disclosed. Overall, Datadog's website and business presence demonstrate a robust security and compliance posture suitable for an enterprise SaaS provider. The absence of WHOIS data is a notable anomaly but does not detract significantly from the legitimacy given the company's established market position and transparent business information. Strategic recommendations include publishing detailed security and incident response policies, establishing a vulnerability disclosure program, and enhancing transparency around data protection officer contacts and data retention policies to further strengthen trust and compliance.
Veganstartveganstart.de
Non-profit · Germany
76Low
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
Veganstart is a German-language non-profit platform affiliated with PETA, dedicated to supporting individuals transitioning to a vegan lifestyle. The website offers vegan recipes, product recommendations, and educational content delivered via email and a mobile app. It targets German-speaking audiences interested in sustainable and vegan living. The business model is educational and advocacy-focused, operating under the umbrella of PETA, a well-known animal rights organization. The site is professionally designed with consistent branding and good content quality, reflecting its non-profit mission. Technically, the website is built on WordPress with modern SEO and performance optimization plugins such as Yoast SEO and WP Rocket. It uses Cloudflare for DNS and CDN services, ensuring fast loading times and robust infrastructure. The site is mobile-optimized and accessible, with proper meta tags and structured data enhancing search engine visibility. Analytics and tracking are implemented via Google Analytics and Google Tag Manager, balanced with a OneTrust cookie consent mechanism to comply with privacy regulations. From a security perspective, the site enforces HTTPS and uses Cloudflare services, which provide a solid security foundation. While explicit security headers are not fully confirmed, no vulnerabilities or exposed sensitive data were detected in the HTML content. However, the site lacks a published security policy, incident response contacts, and vulnerability disclosure mechanisms, which are recommended for transparency and trust. Overall, Veganstart presents a low-risk profile with a strong alignment between domain registration and business purpose. The site is trustworthy, professionally maintained, and compliant with GDPR-related cookie consent requirements. Strategic recommendations include enhancing security header implementation, publishing security and incident response policies, and adding vulnerability disclosure information to further improve trust and compliance.
Sportingtechsportingtech.com
Technology
77Low
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
Sportingtech is a medium-sized technology company founded in 2016 that provides an award-winning iGaming platform offering turnkey solutions for casino and sportsbook operators worldwide. The company positions itself as a customizable and localized platform provider with strategic partnerships and GLI certification, indicating regulatory compliance and market readiness. The website is professionally designed using WordPress and Elementor, hosted on AWS infrastructure, and supports multiple languages. It employs Google Analytics for user tracking and CookieYes for cookie consent management. Security posture is solid with HTTPS enforced and domain registration transparency, though improvements can be made by enabling DNSSEC and adding security headers. No explicit privacy policy or terms of service were found in the provided content, which is a gap in privacy compliance. Overall, the website is trustworthy, professional, and business-focused with no adult or explicit content.
- Nelonen Media Live
nelonenmedialive.fi
Media · Finland
79Low
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
Nelonen Media Live is a major Finnish festival and event organizer producing over 20 festivals, concerts, and cruises annually across Finland. The company holds a strong market position as one of the largest event producers in the country, targeting Finnish festival-goers and music enthusiasts. Their website reflects a professional digital presence with rich event content, social media integration, and clear branding. Technically, the site is built on WordPress with modern plugins and tracking tools, hosted likely via Gandi SAS, and optimized for mobile and SEO. Security posture is solid with HTTPS, privacy management, and no visible vulnerabilities, though explicit security headers could be improved. Privacy and cookie policies are comprehensive and GDPR compliant, supporting user trust. Overall, the domain registration details align well with the business claims, indicating legitimacy and transparency.
ACTIVE 24, s.r.o.active24.eu
Technology · Czech Republic
81Low
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
ACTIVE 24, s.r.o. operates the Active24.eu website providing domain registration, web hosting, and webmail services primarily targeting businesses and individuals in the Czech Republic and surrounding regions. The company positions itself as a reliable regional provider with a focus on customer support and fast hosting services. The website is professionally designed, mobile-optimized, and integrates modern technologies such as WordPress CMS, Alpine.js, and Google Tag Manager. Security measures include HTTPS enforcement, cookie consent with granular controls, and integration of security monitoring tools. However, explicit security policies and incident response contacts are not publicly available, representing an area for improvement. Overall, the website demonstrates a solid security posture and good privacy compliance, with clear contact information and trust indicators enhancing business credibility.
Wienerbergerwienerberger.cz
Manufacturing · Czech Republic
83Low
NIS2 2 · GDPR 100
NIS2 2 · GDPR 100
Wienerberger.cz is the Czech Republic website for Wienerberger, a leading manufacturer of building materials including bricks, roof tiles, facing bricks, and paving products. The site targets construction professionals and homeowners seeking quality building solutions. The company is positioned as a major player in the manufacturing sector with a broad product portfolio. Technically, the website is built on Adobe Experience Manager, leveraging modern marketing and analytics tools such as Google Tag Manager, Cookiebot for consent management, and Hotjar for user behavior analysis. The site is well-optimized for SEO and mobile devices, with good design and user experience. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers could be further verified. The absence of WHOIS data limits domain trust verification, but the professional presentation and compliance with GDPR indicate a legitimate business. Overall, the website is secure, compliant, and professionally maintained, supporting Wienerberger's market presence.
Sympa HRsympahr.net
Technology
76Low
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
Sympa HR is a technology company providing a human resources management platform, as evidenced by the branded login portal. The website is primarily a login interface targeting organizations and HR professionals who use their SaaS platform. The technical infrastructure is based on ASP.NET WebForms with jQuery and New Relic monitoring, indicating a moderately modern but somewhat dated technology stack. The site enforces HTTPS but lacks visible advanced security headers and privacy policies, which limits its compliance posture. The absence of WHOIS registration data raises concerns about domain legitimacy and ownership transparency. Overall, the site is functional but minimalistic, focusing on user authentication without public-facing marketing or informational content.
- TTeemill
teemill.com
E-commerce · United Kingdom
78Low
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Teemill is a UK-based company specializing in sustainable print on demand services, offering a platform for startups, creators, and businesses to build e-commerce websites, place custom orders, and integrate via API. The company emphasizes sustainability and circular economy principles, positioning itself as an award-winning and trusted provider in the e-commerce print on demand market. Technically, the website uses modern frameworks such as Vue.js, is hosted on AWS infrastructure, and employs Google reCAPTCHA for form security. However, it lacks visible privacy and cookie policies, and no security headers were detected, indicating room for improvement in privacy compliance and security posture. The domain registration is consistent with the business claims, with a domain age appropriate for the company's maturity. Overall, the website is professional, well-designed, and trustworthy, but should enhance privacy and security disclosures to improve compliance and user trust.
Austral Locksausloc.com
Manufacturing · Australia
84Low
NIS2 20 · GDPR 88
NIS2 20 · GDPR 88
Austral Locks is a well-established Australian manufacturer and market leader in premium door and window locking hardware. The company operates under the global security leader Allegion and offers a range of locking solutions for windows, security screen doors, and sliding patio doors. The website reflects a mature business with a clear market position and professional branding. Technically, the site is built on WordPress with WooCommerce and uses modern monitoring and consent tools such as New Relic and OneTrust. Security posture is good with HTTPS enforced and domain protections in place, though some security headers and DNSSEC could be improved. Privacy compliance is well addressed with cookie consent and a comprehensive privacy policy. Overall, the website is professional, secure, and trustworthy, supporting the company's business credibility.
Gainsborough Hardwaregainsboroughhardware.com.au
Retail · Australia
83Low
NIS2 20 · GDPR 88
NIS2 20 · GDPR 88
Gainsborough Hardware is a well-established Australian brand specializing in door hardware products including handles, locks, deadbolts, and security hardware. With over 50 years of innovation, the company targets homeowners, builders, and hardware retailers, positioning itself as a reliable and stylish provider in the retail sector. The website reflects a mature digital presence with clear navigation, comprehensive product listings, and active social media engagement. Technically, the site is built on Adobe Experience Manager CMS, leveraging modern web technologies such as Bootstrap, jQuery, and Adobe Launch for analytics and marketing. Security measures include HTTPS enforcement and Google reCAPTCHA integration, though some security headers could be enhanced. Privacy compliance is strong with visible policies and consent mechanisms. Overall, the site demonstrates a solid security posture and professional business credibility, with no critical vulnerabilities detected.
Allegion (UK) Ltdbriouk.com
Manufacturing · United Kingdom
84Low
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Brio UK is a medium-sized manufacturing business specializing in high-quality sliding and folding door hardware, operating as part of the Allegion family. The website presents a professional and consistent brand image, targeting architects, builders, distributors, and end customers seeking door hardware solutions. The business model focuses on manufacturing and distribution with a strong emphasis on product quality and technical support through a resource center. The company has an established market position supported by a domain age of over 14 years and clear parent company affiliation.
Petaluma | Sustainable Dog Foodfeedpetaluma.com
—
79Low
NIS2 17 · GDPR 85
NIS2 17 · GDPR 85
LA Girl USAlagirlusa.com
Retail · United States
84Low
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
LA Girl USA operates as an e-commerce retailer specializing in beauty and cosmetic products, targeting consumers interested in makeup and personal care. The website is built on the Shopify platform, leveraging modern e-commerce technologies and standard security practices such as HTTPS, Google reCAPTCHA, and cookie consent mechanisms. The site presents a professional design with good navigation and mobile optimization, supporting a positive user experience. However, the absence of WHOIS registration data raises concerns about domain legitimacy and transparency. No direct company contact emails or phone numbers are publicly available, limiting business credibility from a contact perspective. Security posture is generally strong with proper headers and encryption, but lacks published security policies or incident response information. Overall, the website is functional and trustworthy for consumers but would benefit from improved transparency and security disclosures.
Delavie Sciencesdelaviesciences.com
E-commerce
78Low
NIS2 2 · GDPR 70
NIS2 2 · GDPR 70
Delavie Sciences operates as a niche e-commerce skincare brand specializing in premium anti-aging and skin health products. The company leverages Shopify as its platform and integrates multiple marketing and analytics tools to enhance customer engagement and sales performance. The website is professionally designed with good navigation and mobile optimization, reflecting a solid digital maturity level. Security posture is adequate with HTTPS enforced and reputable third-party services used, though explicit security headers and policies are not fully evident. Privacy compliance is limited due to missing explicit privacy and cookie policies, which should be addressed to meet regulatory standards. The absence of WHOIS registration data raises questions about domain legitimacy and warrants further investigation. Overall, the site presents a trustworthy and professional front for its business but would benefit from enhanced transparency and security documentation.
CoyoteVest Pet Body Armorcoyotevest.com
—
81Low
NIS2 2 · GDPR 73
NIS2 2 · GDPR 73
- CCIRCULAR PATH
circularpathusa.com
Retail · United States
78Low
NIS2 2 · GDPR 85
NIS2 2 · GDPR 85
Circular Path USA is a newly established e-commerce retailer specializing in fashion apparel and accessories, operating on the Shopify platform. The website offers a variety of clothing collections including seasonal wear and collaborations, targeting fashion-conscious consumers primarily in the United States. The business model is direct-to-consumer online retail with integrated customer review and support tools. Technically, the site leverages modern web technologies and Shopify's ecosystem, providing a good user experience with mobile optimization and clear navigation. Security posture is solid with HTTPS, domain transfer protection, and cookie consent mechanisms, though there is room for improvement in DNS security and formal security policies. Overall, the site presents a professional and trustworthy front for a small retail business with a strong foundation for growth.
Alchimie Foreveralchimie-forever.com
E-commerce · Switzerland
82Low
NIS2 2 · GDPR 85
NIS2 2 · GDPR 85
Alchimie Forever is a Swiss-based e-commerce skincare brand specializing in vegan, antioxidant, and anti-inflammatory products formulated by a leading dermatologist. The website presents a professional and consistent brand image targeting consumers seeking clean and clinically effective skincare solutions. The platform is built on Shopify, leveraging a modern tech stack with multiple marketing and analytics integrations, ensuring a robust digital presence. Security posture is strong with HTTPS and security headers in place, though explicit security policies and incident response contacts are not publicly disclosed. Privacy and cookie policies are comprehensive and GDPR compliant. Overall, the site demonstrates a mature e-commerce operation with good technical and business credibility.