Low-risk security reports
14,261 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,165001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
10,801–10,850 of 14,261
THL-Luna, a.s.thlluna.cz
Transportation · Czech Republic
77Low
NIS2 2 · GDPR 55
NIS2 2 · GDPR 55
THL-Luna, a.s. is a Czech logistics company specializing in comprehensive supply chain solutions including warehousing, container transport, and logistics outsourcing. The company operates multiple strategically located warehouse centers across the Czech Republic, serving businesses requiring efficient storage and distribution services. The website is professionally designed using WebJET CMS and modern web technologies, providing clear navigation and relevant business content primarily in Czech. Security posture is solid with HTTPS enforced and GDPR-compliant cookie consent mechanisms, though some security headers are not explicitly detected. The absence of WHOIS data reduces transparency but the presence of legal company information and contact details supports legitimacy. Overall, the site reflects a medium-sized logistics provider with a stable market position and a parent company affiliation.
CCM Hockeyccmhockey.com
Retail · Finland
80Low
NIS2 2 · GDPR 95
NIS2 2 · GDPR 95
CCM Hockey is a well-established brand specializing in the retail of ice hockey equipment, targeting the Finnish market through this localized e-commerce website. The site offers a comprehensive range of hockey gear including skates, sticks, protective equipment, and apparel, supported by a 30-day free return and satisfaction guarantee. The business operates on a medium scale with a clear focus on hockey enthusiasts and players in Finland, leveraging the global CCM brand's reputation. Technically, the website is built on Salesforce Commerce Cloud, integrating modern marketing and analytics tools such as Cookiebot for consent management, Signifyd for fraud protection, and Yotpo for customer reviews, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved and explicit security policies are not published. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, with no signs of blocking or WAF interference, making it accessible and user-friendly.
- Discord
bkmbfans.cz
Technology
81Low
NIS2 2 · GDPR 58
NIS2 2 · GDPR 58
Discord is a leading global communication platform primarily serving communities and gamers. The analyzed page is an invite to a Discord server dedicated to the BK Mladá Boleslav hockey club community, reflecting Discord's core service of enabling community engagement through chat and voice. The platform is well-established with a domain age of over 20 years and uses modern web technologies including React and WebSocket for real-time communication. Hosting and DNS services are provided by Cloudflare, ensuring robust infrastructure and performance. Security posture is strong with HTTPS enforced and domain registration protections in place, though some improvements such as enabling DNSSEC and adding explicit security headers could enhance security further. Privacy compliance is supported by comprehensive privacy and terms policies linked from the main domain, but the invite page lacks a cookie consent mechanism. Overall, the website is professional, trustworthy, and safe for general audiences.
Glatt GmbHtechnology-training-center.com
Technology · Germany
76Low
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
Technology Training Center (TTC), a division of Glatt GmbH, specializes in providing hands-on workshops and practical training focused on the latest processing technologies for pharmaceutical, chemical, food, and cosmetic industries. The center emphasizes objective evaluation of processing techniques and fosters industry networking. The website is built on a modern WordPress platform using Elementor and WooCommerce, featuring good mobile optimization and SEO practices. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though DNSSEC and additional security headers could enhance protection. Overall, TTC presents a professional and trustworthy online presence aligned with its business objectives.
LAMAXlamax-electronics.com
E-commerce · Czech Republic
79Low
NIS2 10 · GDPR 85
NIS2 10 · GDPR 85
LAMAX operates a professional e-commerce website specializing in electric mobility products and consumer electronics, leveraging the Shopify platform. The website is well-structured with good SEO and accessibility features, targeting consumers interested in electric vehicles and photo/video equipment primarily in Central Europe. The technical infrastructure includes modern tracking and consent management tools, ensuring GDPR compliance and effective marketing analytics. Security posture is solid with HTTPS and cookie consent mechanisms, though improvements can be made by enabling DNSSEC and adding explicit security headers and policies. Overall, the domain registration data aligns well with the business profile, indicating a legitimate and mature online presence.
Cryptomania s.r.o.cryptomania.cz
Other · Czech Republic
79Low
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Cryptomania s.r.o. operates a niche entertainment website focused on original puzzle hunts, targeting puzzle enthusiasts and gamers primarily in the Czech Republic. The website presents a professional and consistent brand image with clear descriptions of its puzzle hunt events. The business model revolves around organizing and promoting puzzle-based entertainment events, positioning itself as a specialized player in this niche market. Technically, the website is built on WordPress and leverages modern web technologies including Bootstrap for responsive design, Font Awesome for icons, and integrates Google Analytics and Google Tag Manager for analytics and marketing. The site is well-optimized for mobile devices and SEO, with appropriate meta tags and structured data enhancing search engine visibility. From a security perspective, the website enforces HTTPS and implements cookie consent mechanisms, reflecting good privacy compliance with GDPR. However, it lacks some advanced security headers and explicit incident response contacts, which could be improved. No vulnerabilities or exposed sensitive data were detected in the content analyzed. Overall, the website is safe, accessible, and professionally maintained, with a moderate to good security posture. The absence of WHOIS data due to privacy protection is typical for small businesses and does not detract significantly from trustworthiness. Strategic improvements in security headers and incident response transparency would enhance the site's security maturity and user trust.
Government
78Low
NIS2 25 · GDPR 68
NIS2 25 · GDPR 68
The United Nations Office for Disaster Risk Reduction (UNDRR) operates as the lead UN agency coordinating global efforts to reduce disaster risk and promote resilience. The website serves as a comprehensive platform providing information on their mission, key frameworks like the Sendai Framework, regional offices, publications, events, and training opportunities. It targets governments, partners, and communities involved in disaster risk reduction worldwide. Technically, the site is built on Drupal 10 with modern JavaScript frameworks and includes analytics and cookie consent mechanisms, reflecting a mature digital infrastructure. Security posture is strong with HTTPS and privacy policies in place, though explicit security headers and incident response information are absent. The lack of WHOIS data is likely due to privacy protection but does not detract from the site's legitimacy given its UN affiliation and consistent branding. Overall, the site is professional, trustworthy, and well-maintained, serving as a critical resource in the disaster risk reduction domain.
- FRISCHBETON s.r.o.
frischbeton.cz
Manufacturing · Czech Republic
77Low
NIS2 7 · GDPR 100
NIS2 7 · GDPR 100
FRISCHBETON s.r.o. is a large Czech concrete manufacturing company operating under the STRABAG SE construction group. It produces concrete mixtures and related products across the Czech Republic and Slovakia, positioning itself as one of the largest producers in the market. The website reflects a professional business presence with clear branding and comprehensive information about products, certifications, and compliance. Technically, the site uses a mix of legacy and modern web technologies, including jQuery, Bootstrap, and OneTrust for cookie consent, hosted on a Lotus Domino CMS platform. Security posture is solid with HTTPS enforced and cookie consent implemented, though there is room for improvement in incident response transparency and vulnerability disclosure. Overall, the site is accessible, well-structured, and compliant with GDPR requirements.
- Skanska a.s.
skanska.cz
Real Estate · Czech Republic
77Low
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Skanska a.s. is a leading construction and development company operating in the Czech Republic, specializing in residential and commercial real estate development, infrastructure projects, and related services such as facility management and equipment rental. The company is part of the global Skanska Group and maintains a strong market position with a focus on sustainability and innovation. The website reflects a mature digital presence with comprehensive content, clear navigation, and active social media engagement. Technically, the site uses modern frameworks and analytics tools, ensuring good performance and mobile optimization. Security posture is strong with HTTPS, security headers, and form protections in place, although explicit security policies and incident response details are not publicly disclosed. Overall, the domain registration and WHOIS data align well with the company's identity, supporting legitimacy and trustworthiness.
TTC Technology Training Centerttc-binzen.de
Manufacturing · Germany
76Low
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
Technology Training Center (TTC) is a specialized provider of hands-on workshops and technology evaluation services primarily targeting the pharmaceutical, chemical, food, and cosmetic manufacturing industries. The company operates as a division of Glatt GmbH, based in Germany, and focuses on bridging the gap between theoretical knowledge and practical application through interactive training sessions. TTC positions itself as a niche leader offering objective assessments of processing technologies, enabling industry professionals to make informed decisions for their product development and manufacturing processes. The website reflects a professional and well-structured digital presence with clear branding and comprehensive content tailored to its target audience. From a technical perspective, the website is built on WordPress using Elementor and WooCommerce, supplemented by Gravity Forms for data collection and Brevo for marketing automation. The site demonstrates good SEO practices, mobile optimization, and accessibility features, although performance is moderate. Security measures include HTTPS, Google reCAPTCHA on forms, and cookie consent mechanisms, but could benefit from enhanced DNS security and additional HTTP security headers. The security posture is solid with no evident vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR consent mechanisms. However, the WHOIS data presents inconsistencies, notably a domain creation date in the future relative to the website content, which warrants further verification to confirm domain legitimacy. Overall, TTC's website is a trustworthy and professional platform supporting its business objectives, with recommendations to improve domain security and WHOIS data accuracy to enhance trustworthiness further.
Pharmatronic AGpharmatronic.ch
Healthcare · Switzerland
82Low
NIS2 10 · GDPR 83
NIS2 10 · GDPR 83
Pharmatronic AG is a Swiss-based company founded in 1985, specializing in project and lifecycle solutions for the pharmaceutical, biotech, medtech, food, and cosmetics industries. As part of the global Glatt Group, it benefits from a strong engineering network and offers services including qualification, validation, calibration, automation, consulting, and recruitment. The company targets regulated life science sectors requiring compliance with national and international standards. Technically, the website is built on WordPress with a modern theme and SEO plugins, featuring cookie consent mechanisms and integration with Google Analytics. Security posture is solid with HTTPS and cookie management, though some security headers could be improved. Contact information is transparent with multiple physical locations and professional email addresses. Overall, the website reflects a mature, trustworthy business with good digital maturity and compliance awareness.
ADD Technologies Ltdingredientpharm.com
Healthcare · Switzerland
77Low
NIS2 2 · GDPR 73
NIS2 2 · GDPR 73
Ingredientpharm, operated by ADD Technologies Ltd, is a Swiss-based company specializing in the development and marketing of niche pharmaceutical excipients, particularly for solid dosage forms with controlled release and taste masking capabilities. The company targets pharmaceutical and consumer health product developers, offering tailored solutions and supply agreements. The website reflects a professional and consistent brand image with good content quality and clear business focus. Technically, the site is built on WordPress with WooCommerce and uses modern web technologies, providing a moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers, which are recommended for enhancement. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the business.
hollomet GmbHhollomet.com
Manufacturing · Germany
81Low
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
hollomet GmbH is a specialized German company providing innovative cellular materials made from metallic and ceramic substances, focusing on sectors such as heat management, process technology, lightweight construction, energy absorption, and design. The company positions itself as a competent development and manufacturing partner offering tailored solutions for industrial clients, particularly in automotive and machinery sectors. The website is professionally designed, multilingual, and optimized for SEO, reflecting a mature digital presence. Security posture is good with HTTPS and cookie consent mechanisms, though some security headers are missing and media content has minor loading issues. WHOIS data is unavailable or indicates a very new domain, which slightly reduces trust but does not contradict the professional business presentation. Overall, the site is trustworthy, GDPR compliant, and business credible.
—
80Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Mountfieldmountfield.cz
Retail · Czech Republic
85Low
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
Mountfield.cz is a leading Czech retailer specializing in garden technology, furniture, and pools, operating both online and through over 50 physical stores. The website is professionally designed with a clear focus on consumer garden products and services, offering a comprehensive shopping experience including customer support and after-sales services. The technical infrastructure leverages modern web technologies and integrates multiple analytics and marketing tools, ensuring good performance and user experience across devices. Security posture is strong with HTTPS enforcement and cookie consent mechanisms, though some security headers could be explicitly verified or enhanced. The absence of WHOIS data is likely due to privacy protection, which is justified for a large retail business. Overall, the website is trustworthy, compliant with GDPR, and free from adult or questionable content, making it suitable for a general audience.
euroAWK s.r.o.euroawk.cz
Media · Czech Republic
76Low
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
euroAWK s.r.o. is a medium-sized Czech Republic based company specializing in outdoor advertising, particularly billboards and citylight vitrines. It is part of the Freund group headquartered in Koblenz and is recognized as one of the largest providers of outdoor advertising in Europe. The company offers a portfolio of advertising media including municipal furniture and provides services such as campaign documentation, monitoring, and printing. The website is professionally designed with good content quality and consistent branding, targeting businesses seeking outdoor advertising solutions in the Czech market. Technically, the site uses modern JavaScript libraries and analytics tools, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks advanced security headers and explicit incident response policies. WHOIS data is unavailable, which slightly reduces domain trustworthiness, but the overall business credibility remains moderate to good. Strategic recommendations include improving security headers, publishing incident response and vulnerability disclosure policies, and enhancing accessibility features.
LAMAXlamax.cz
E-commerce · Czech Republic
79Low
NIS2 10 · GDPR 85
NIS2 10 · GDPR 85
LAMAX operates a professional e-commerce website specializing in electric mobility products such as e-quads, e-scooters, and e-dirtbikes, alongside photo and video equipment and audio accessories. The company targets consumers interested in reliable and durable everyday technology, positioning itself as a niche player with a focus on quality and fair pricing. The website is built on the Shopify platform, leveraging modern web technologies and integrations with major analytics and marketing tools, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced, GDPR-compliant cookie consent, and no visible vulnerabilities, although some improvements like DNSSEC and explicit security policies could enhance trust further. Overall, the site presents a trustworthy and professional online presence suitable for its market segment.
DronProdronpro.cz
Retail · Czech Republic
81Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
DronPro is the largest drone specialty retailer in the Czech Republic, established in 2015. The company focuses on selling drones, providing education on drone usage, and offering consultancy on drone legislation. Their market position is strong within the Czech drone community, supported by a high customer rating and a physical store in Prague. Technically, the website uses modern web technologies including jQuery, Google Tag Manager, and Cookiebot for GDPR compliance, hosted behind Cloudflare DNS and CDN services. The site is mobile-optimized and performs moderately well. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website is professional, trustworthy, and compliant with privacy regulations.
Zabbixzabbix.com
Technology
80Low
NIS2 52 · GDPR 53
NIS2 52 · GDPR 53
Zabbix is a globally recognized enterprise-class open-source network and application monitoring solution. The company offers a comprehensive suite of products including on-premise software, a fully managed cloud platform, professional services, and extensive training and certification programs. Their market position is strong, supported by a large deployment base and trusted by Fortune 500 companies and government entities. The website reflects a mature digital presence with professional design, clear navigation, and multilingual support. Technically, the site uses modern JavaScript libraries and tracking tools, with good performance and mobile optimization. Security posture is solid with HTTPS enforced and published security policies, though some security headers could be improved and a cookie consent mechanism is missing, which may affect GDPR compliance. Overall, the business credibility is high, supported by case studies, partner programs, and active community engagement. The WHOIS data is unavailable or protected, which is a minor concern but does not detract from the overall trustworthiness given the company's established reputation.
- ZZvířetice Vision 21
zvireticevision.com
Other
85Low
NIS2 25 · GDPR 88
NIS2 25 · GDPR 88
Zvířetice Vision 21 is a small Facebook community page focused on community engagement through photo and video sharing. The page has a modest following with 301 likes and 339 followers, indicating a niche or local audience. The business model is primarily social and community-driven, leveraging the Facebook platform for content distribution and interaction. The website is hosted and managed by Facebook, utilizing modern web technologies such as React and JavaScript, ensuring a stable and performant user experience. Mobile optimization is good, consistent with Facebook's platform standards. Security posture is strong due to Facebook's infrastructure, with HTTPS enforced and robust SSL configuration. However, the page lacks explicit privacy, cookie, and security policies, which limits privacy compliance and transparency. No direct contact or incident response information is provided, which is typical for Facebook community pages but may impact trust for business users. Overall, the domain is highly legitimate as it is part of Facebook's main domain, but the page itself offers limited business credibility and compliance information.
Delskadeac.lv
Energy
83Low
NIS2 55 · GDPR 95
NIS2 55 · GDPR 95
Delska operates as a sustainable data center provider in Northern Europe, particularly focusing on the Baltic region. The company emphasizes green energy usage, GDPR compliance, and robust security, positioning itself as a leading medium-sized player with over 25 years of experience. Their business model centers on providing environmentally friendly data center services to enterprises requiring secure and compliant hosting solutions. The website content is professionally presented with consistent branding and clear messaging targeting enterprise customers interested in sustainable IT infrastructure. Technically, the website employs modern web technologies including Bootstrap, Material Design Icons, and Google Fonts, hosted behind Cloudflare DNS services. It integrates multiple third-party analytics and marketing tools such as Google Analytics, Meta Pixel, Twitter Pixel, Reddit Pixel, and Hotjar, managed through Google Tag Manager. Cookie consent is managed comprehensively via Cookiebot, ensuring GDPR compliance. The site is mobile-optimized and performs moderately well, though accessibility features are basic. From a security perspective, the site enforces HTTPS, uses domain transfer locks, and implements CSRF protection cookies. However, DNSSEC is not enabled, and explicit security policies or incident response contacts are not published. No critical vulnerabilities or exposed sensitive data were detected. The domain is newly registered but consistent with the business's claims, suggesting a recent domain acquisition or rebranding. Overall, the website presents a trustworthy and professional front with good privacy compliance and security posture. Strategic improvements include enabling DNSSEC, publishing detailed security and incident response policies, adding terms of service, and enhancing accessibility. These steps would further strengthen the company's digital maturity and trustworthiness.
Wellness Kuřim s.r.o.wellnesskurim.cz
Hospitality · Czech Republic
78Low
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Wellness Kuřim s.r.o. operates a multi-service wellness and recreational facility in the Czech Republic, offering aquapark, fitness, relaxation and massage services, a restaurant, and an e-shop for related products and vouchers. The company targets families, fitness enthusiasts, and wellness customers, positioning itself as a local/regional leader in hospitality and wellness services. The website is professionally designed with clear navigation and mobile optimization, integrating social media and cookie consent mechanisms. Technically, it uses common web technologies including jQuery, Google Analytics, Facebook SDK, and CookieHub for cookie management. Security posture is moderate with HTTPS implied but lacking explicit security headers and detailed security policies. WHOIS data is unavailable, which reduces transparency and trustworthiness. Contact information is clearly provided, but privacy and terms of service policies are not explicitly found. Overall, the website is functional, user-friendly, and trustworthy from a business perspective but could improve in security and compliance documentation.
Digitální a informační agenturaidentitaobcana.cz
Government · Czech Republic
78Low
NIS2 17 · GDPR 55
NIS2 17 · GDPR 55
The website www.identita.gov.cz is an official Czech government portal managed by the Digitální a informační agentura, providing digital identity services to Czech citizens. It facilitates secure login and identity management for multiple government and public service portals, including Mobilní klíč eGovernmentu, NIA ID, and bankovní identita. The portal is well-positioned as a central hub for digital identity in the Czech Republic, offering comprehensive services and user support.
Movisio s.r.o.movisio.com
Technology · Czech Republic
80Low
NIS2 2 · GDPR 85
NIS2 2 · GDPR 85
Movisio s.r.o. is a medium-sized technology company based in Prague, Czech Republic, specializing in digital business services including 3D visualization, interactive 3D, software development, linear constructions, and BIM solutions. With over 20 years of experience and a team exceeding 50 employees, Movisio serves corporations and large to medium-sized companies globally, positioning itself as a trusted partner in digital transformation and visualization technologies. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to its B2B audience. Technically, the website employs modern web technologies including Google Tag Manager, Google Analytics, Facebook Pixel, Smartlook, and Piwik/Matomo for analytics and user tracking. The site is mobile-optimized with good SEO practices and uses custom CMS infrastructure. Performance is moderate with room for improvement in accessibility and security headers. The cookie consent mechanism is comprehensive and GDPR compliant, reflecting a mature approach to privacy. From a security perspective, the site enforces HTTPS and uses cookie consent banners but lacks visible security headers and explicit security or incident response policies. The absence of WHOIS domain registration data is a notable concern, potentially indicating privacy protection or registration inconsistencies, which slightly lowers the trust score. No critical vulnerabilities or exposed sensitive data were detected in the content. Overall, Movisio's website demonstrates a solid digital presence with good content quality and privacy compliance but would benefit from enhanced security practices and transparency in domain registration details to improve trustworthiness and security posture.
SAKO Brno, a.s.sako.cz
Energy · Czech Republic
78Low
NIS2 2 · GDPR 80
NIS2 2 · GDPR 80
SAKO Brno, a.s. is a large waste management company based in Brno, Czech Republic, providing comprehensive services including waste collection, sorting, and energy recovery. The company targets citizens, businesses, and municipalities with a strong local market presence and multiple related projects such as ReSAKO and specialized collection centers. The website is professionally designed using Drupal 10, with modern tracking and cookie consent technologies, ensuring good user experience and compliance with GDPR. Security posture is solid with HTTPS and cookie consent, though lacking explicit security headers and published security policies. WHOIS data is unavailable, limiting domain trust assessment, but the website's transparency and social presence support legitimacy. Overall, the site is well-structured, secure, and compliant, serving as a reliable digital front for the company.
Promonpromon.io
Technology · Norway
78Low
NIS2 55 · GDPR 80
NIS2 55 · GDPR 80
Promon is a specialized mobile and desktop application security company with nearly two decades of experience, offering no-code solutions that protect apps, APIs, and SDKs across multiple industries including finance, healthcare, gaming, and government. Their product suite includes runtime protection, code obfuscation, app attestation, and asset protection, supported by recognized certifications such as EMVCO and ISO 27001. The website is professionally designed, mobile-optimized, and built on HubSpot CMS with modern analytics and consent management tools. Security posture is strong with HTTPS and privacy mechanisms, though explicit security headers and incident response contacts are not publicly visible. WHOIS data shows privacy protection typical for tech firms, with no suspicious indicators. Overall, Promon presents a credible, trustworthy, and technically mature digital presence.
Engitel S.p.A.engitel.com
Technology · Italy
78Low
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Engitel S.p.A. is an established Italian digital agency and software factory operating since 1994 with offices in Milan and Turin. The company offers a broad range of high-technology and creative digital services including app and web development, CMS, AI, UX/UI design, SEO, e-commerce, data analytics, IoT, and emerging technologies such as blockchain and metaverse solutions. Their client portfolio includes notable brands, reflecting a strong market position in the technology sector. Technically, the website employs modern JavaScript libraries and Matomo analytics, indicating a privacy-conscious approach. The site is well-designed, mobile-optimized, and accessible, with comprehensive privacy and cookie policies and visible certifications. However, the absence of WHOIS data for the domain raises concerns about domain registration transparency. Security posture is good with cookie consent and privacy policies, but could be improved by adding security headers and a vulnerability disclosure policy. Overall, the website presents a professional and trustworthy digital presence with minor areas for security enhancement.
- MapTiler
maptiler.com
Technology
76Low
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
MapTiler is a technology company specializing in providing mapping platforms and tools designed primarily for developers and enterprises. Their offerings include ready-to-use map styles, custom map design, interactive SDKs, location services such as geocoding and IP geolocation, and secure on-premises hosting solutions. The company positions itself as a reliable alternative to major mapping providers, serving a diverse clientele including Siemens, Oracle, and Cisco. The website demonstrates a mature digital presence with comprehensive content, active news updates, and strong branding consistency. Technically, the website is built on modern frameworks such as Next.js and TypeScript, leveraging Bootstrap for responsive design and AWS for media hosting. It integrates analytics tools like Google Tag Manager and Fathom Analytics, indicating a focus on performance and user behavior insights. The site is well-optimized for mobile devices and accessibility, with good SEO practices. From a security perspective, the site enforces HTTPS, employs multiple security headers, and avoids exposing sensitive information. However, it lacks publicly available security policies or incident response contacts, which could be improved to enhance trust and compliance. The WHOIS data is unavailable publicly, likely due to privacy protection, but the website's professional appearance and client trust signals mitigate concerns about legitimacy. Overall, MapTiler presents a strong, professional, and secure online presence suitable for its target audience of developers and businesses needing mapping solutions. Strategic improvements in transparency around security policies and incident response would further strengthen its security posture and trustworthiness.
- Bitcoin.com
bitcoin.com
Finance
81Low
NIS2 17 · GDPR 58
NIS2 17 · GDPR 58
Bitcoin.com is a well-established cryptocurrency platform offering a comprehensive suite of services including wallets, exchange, news, education, and crypto rewards. The website targets cryptocurrency users and investors seeking an all-in-one platform to manage digital assets. With approximately 10 years in business, Bitcoin.com positions itself as a trusted gateway to Bitcoin and other cryptocurrencies, emphasizing ease of use and accessibility. Technically, the website is built on a modern React-based Gatsby framework, leveraging JavaScript and third-party services such as Google Analytics and CookieYes for tracking and compliance. The site demonstrates good mobile optimization and a professional design, although some accessibility features could be enhanced. The absence of explicit security headers and detailed privacy or terms of service pages suggests room for improvement in compliance and security transparency. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms, but lacks visible security policies, incident response contacts, or vulnerability disclosure information. The WHOIS data is unavailable, which limits domain registration transparency and slightly impacts trustworthiness. However, the overall content quality, user testimonials, and broad ecosystem of related domains support a positive security posture. Overall, Bitcoin.com presents a professional and trustworthy platform with moderate technical maturity and security posture. Strategic improvements in security headers, privacy documentation, and domain registration transparency would enhance its risk profile and user trust.
Promonpromon.co
Technology · Norway
78Low
NIS2 55 · GDPR 80
NIS2 55 · GDPR 80
Promon is a specialized mobile app security company offering a comprehensive suite of products designed to protect mobile, desktop, and SDK applications from tampering, reverse engineering, and fraud. With nearly two decades of experience, Promon serves a diverse set of industries including finance, healthcare, gaming, and government. Their solutions emphasize no-code integration, operational efficiency, and multi-layered protection. The website reflects a mature digital presence with strong branding, rich content, and a focus on enterprise customers. Technically, the site uses modern technologies such as HubSpot CMS, Google Tag Manager, and Cookiebot for consent management, ensuring good performance and compliance. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities. However, explicit privacy policies and terms of service pages are not found in the provided content, which slightly impacts privacy compliance scoring. Overall, Promon demonstrates a high level of professionalism and trustworthiness in the mobile app security market.
Crewfarecrewfare.com
Hospitality · United States
82Low
NIS2 2 · GDPR 95
NIS2 2 · GDPR 95
Crewfare is a technology company specializing in travel solutions tailored for event creators, hotels, travel agencies, and attendees. Their platform offers tools to source hotel room blocks, manage internal travel, and monetize attendee bookings, positioning them as a key player in the event-centric hospitality technology market. The website reflects a mature digital presence with modern technologies such as Next.js, React, and integrations with major analytics and marketing platforms. Security posture is strong with HTTPS, security headers, and domain management best practices, although DNSSEC is not enabled. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, Crewfare presents a professional, trustworthy, and technically sound online presence suitable for its business objectives.
- Visit Costa Rica
costaricapuremeetings.com
Hospitality · Costa Rica
76Low
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
Visit Costa Rica's meetings page is a professionally designed tourism and event promotion website focused on attracting business meetings and events to Costa Rica. The site highlights the country's sustainability leadership, connectivity, and meeting infrastructure, targeting event planners and professionals. Technically, the site uses Drupal 10 CMS, integrates Google Tag Manager and reCAPTCHA, and employs cookie consent management via OneTrust, reflecting a modern digital infrastructure. Security posture is generally good with HTTPS and anti-bot measures, but lacks explicit security headers and visible security policies. WHOIS data is missing, which reduces transparency and trust slightly. Overall, the site is functional, well-branded, and suitable for its business purpose but could improve privacy and security disclosures.
Calaméoradarmagazine.com.br
Media
80Low
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
Calaméo is a digital publishing platform specializing in the creation and distribution of interactive digital magazines, catalogs, and documents. The platform targets business decision makers and market participants, particularly in the M.I.C.E. sector, offering services such as PDF to HTML conversion and ePaper flipbook software. The website demonstrates a consistent brand presence and good content quality, supporting its position as an established player in the digital publishing media industry. Technically, the site employs modern web technologies including JavaScript, Google Publisher Tags, and Cookiebot for consent management, ensuring a responsive and user-friendly experience across devices. Security-wise, the site enforces HTTPS and integrates cookie consent mechanisms, though it lacks explicit security headers and published security policies. Privacy compliance is strong with a comprehensive privacy policy and cookie consent banner, reflecting adherence to GDPR standards. Overall, the website is professional, trustworthy, and well-optimized, with room for improvement in security transparency and contact information availability.
Marek Ztracený – Oficiální web: Tour, hudba, novinky, merchmarekztraceny.cz
Media · Czech Republic
77Low
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
The website www.marekztraceny.cz serves as the official online presence for the Czech music artist Marek Ztracený. It provides visitors with access to his music, tour dates, news updates, videos, blog content, and merchandise offerings. The site targets fans and followers of the artist, primarily within the Czech Republic. The business model centers around artist promotion and direct merchandising, leveraging digital channels to engage the audience. Technically, the site is built on the Webflow platform, utilizing modern web technologies including Google Fonts, Google Analytics, Facebook Pixel, and Cookiebot for cookie consent management. The hosting is provided via Webflow's CDN, ensuring moderate performance and good mobile optimization. The site implements HTTPS with a strong SSL configuration, though lacks some recommended security headers which could enhance its security posture. From a security perspective, the site demonstrates good practices such as encrypted connections and a comprehensive cookie consent mechanism with granular user controls. However, the absence of visible privacy policy and terms of service pages, as well as missing security headers, represent areas for improvement. No vulnerabilities or malicious content were detected, and the site does not contain adult or questionable content. Overall, the website is a professionally designed and trustworthy platform for the artist's digital presence. The lack of WHOIS data limits the ability to fully verify domain registration legitimacy, but the content and technical setup support a positive risk assessment. Strategic recommendations include adding explicit privacy and terms of service pages, enhancing security headers, and maintaining regular audits of third-party scripts to ensure ongoing security and compliance.
- Captain Morgan
captainmorgan.com
Retail · United States
82Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Captain Morgan is a well-established brand specializing in spiced rum and related alcoholic beverages, holding a strong market position as America’s #1 Spiced Rum. The website serves as a comprehensive platform for product information, cocktail recipes, and brand engagement, targeting adult consumers interested in alcoholic beverages. Technically, the site is built using modern frameworks such as Next.js and React, with good performance, mobile optimization, and accessibility features. Security posture is strong with HTTPS enforcement and standard security headers, although some improvements could be made in transparency around incident response and vulnerability disclosures. Privacy compliance is robust, featuring comprehensive privacy and cookie policies with consent management. However, the absence of WHOIS data and direct contact information slightly reduces business credibility. Overall, the site is professional, trustworthy, and well-maintained, suitable for its target audience.
Mogo Latvia SIAmogo.lv
Finance · Latvia
76Low
NIS2 2 · GDPR 48
NIS2 2 · GDPR 48
Mogo Latvia SIA operates as a financial services provider specializing in auto loans and leasing solutions for both individuals and legal entities within Latvia. The company is part of the larger Mogo Finance Group and has established a solid market presence since its founding in 2013. Their website clearly targets Latvian customers seeking vehicle financing, offering a range of loan and leasing products. The business model focuses on accessible auto financing, leveraging digital channels for customer engagement. Technically, the website employs modern web technologies including Vue.js and Tailwind CSS, with integration of Google Analytics and Google Tag Manager for performance and marketing insights. The site is mobile-optimized and demonstrates good SEO practices, although accessibility features are basic. Hosting details are not explicitly disclosed, but the site uses HTTPS with strong security headers, indicating a secure infrastructure. From a security perspective, the website enforces HTTPS, uses reCAPTCHA on forms to prevent abuse, and implements several security headers to mitigate common web vulnerabilities. However, there is no publicly available security policy or incident response information, and no vulnerability disclosure program or security.txt file was found. The overall security posture is good but could be enhanced by publishing formal security policies and disclosure mechanisms. Overall, the website is professional, trustworthy, and compliant with GDPR, featuring clear privacy and cookie policies with consent mechanisms. The domain registration data aligns well with the business claims, supporting legitimacy. Recommendations include enhancing accessibility, publishing security policies, and establishing a vulnerability disclosure process to further strengthen trust and security maturity.
Energy · Poland
77Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Polskie Górnictwo Naftowe i Gazownictwo S.A. (PGNiG) operates the website pgnig.pl, providing energy services such as gas and electricity supply primarily targeting residential customers in Poland. The website is professionally designed, consistent with the company's branding, and offers comprehensive privacy and cookie policies compliant with GDPR. The site uses modern technologies including Liferay CMS, Google Tag Manager, and Cookiebot for consent management, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforced and multiple security headers present, though explicit security and incident response policies are not publicly available. Overall, the domain registration data aligns well with the business identity, supporting legitimacy and trustworthiness.
Proadax sp. z o.o.proadax.pl
Technology · Poland
76Low
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
Proadax sp. z o.o. is a Polish interactive agency specializing in creating modern, responsive websites and e-commerce stores primarily serving clients in Oświęcim, Wadowice, Andrychów, Chrzanów, and across Poland. The company offers a comprehensive suite of digital services including web design, graphic projects, marketing, social media management, and maintenance of online platforms. Their market position is that of a regional digital agency with a strong focus on quality and client satisfaction, supported by excellent Google and Facebook reviews. Technically, the website is built on WordPress with modern SEO and analytics tools integrated, including Yoast SEO, Google Tag Manager, and Hotjar, ensuring good digital maturity and performance. Security posture is solid with HTTPS enforced, cookie consent management, and bot protection via Google reCAPTCHA, though some security headers could be improved. Overall, the site demonstrates good privacy compliance and business credibility with transparent contact information and legal disclosures.
Profitroomprofitroom.pl
Hospitality · Poland
84Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Profitroom is a technology company specializing in providing direct booking solutions for hotels, resorts, and hotel groups, primarily targeting the hospitality industry in Poland. Their platform offers advanced booking engines and reservation management tools designed to enhance hotel direct sales and reduce reliance on third-party channels. The website reflects a professional and modern digital presence, leveraging HubSpot CMS and integrating multiple marketing and analytics tools such as Google Tag Manager and Cookiebot for consent management. Structured data and SEO optimizations are implemented to improve search visibility and user experience. Security posture is generally good with HTTPS enforced and cookie consent mechanisms in place; however, the absence of explicit security headers and privacy policy pages indicates areas for improvement. The WHOIS data is unavailable, which slightly reduces trust but does not significantly impact the overall legitimacy given the professional website content and technology usage. Strategic recommendations include publishing comprehensive privacy and security policies, enhancing security headers, and providing clear contact information to improve transparency and compliance.
Hotel Zamek Gniew Sp. z o.o.zamek-gniew.pl
Hospitality · Poland
78Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Hotel Zamek Gniew is a medium-sized hospitality business operating a historic castle hotel in Poland, offering accommodation, spa services, conference facilities, and event hosting. The website targets families, couples, and business travelers, positioning itself as a quality regional destination with a medieval atmosphere. Technically, the site uses modern web technologies including Google Tag Manager, Google Analytics, and the Profitroom booking platform, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though lacks published privacy and security policies. Overall, the site is professional and trustworthy but could improve compliance transparency.
澳門特別行政區政府gov.mo
Government · Macau
78Low
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
The website www.gov.mo is the official portal of the Macau Special Administrative Region Government, providing authoritative information on government departments, public services, legal regulations, tourism, and news. It targets Macau residents, visitors, and businesses seeking official government information. The site is multilingual, supporting Traditional and Simplified Chinese, Portuguese, and English, reflecting Macau's linguistic diversity. The business model is government service delivery and information dissemination, positioning itself as the primary official source for Macau SAR government-related content. Technically, the website is built on WordPress with a modern tech stack including Bootstrap, jQuery, Owl Carousel, and uses analytics tools such as Google Analytics, Google Tag Manager, and Matomo. The site is mobile-optimized, accessible, and SEO-friendly, with good performance characteristics. Security is well implemented with HTTPS and no visible vulnerabilities, although some security headers could be improved. Privacy compliance is basic with clear privacy and cookie policies but lacks explicit GDPR compliance indicators. Security posture is solid with encrypted connections and no exposed sensitive data. However, the absence of a published security policy or incident response contact and lack of vulnerability disclosure mechanisms are areas for improvement. Overall, the site is trustworthy, professional, and serves its government function effectively. The risk assessment is low, with no signs of malicious content or security issues. Strategic recommendations include enhancing security headers, publishing a security policy and incident response contacts, and implementing a vulnerability disclosure program to further strengthen trust and security culture.
Redirectingdiscoverhongkong.com
Other
76Low
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website www.discoverhongkong.com currently serves as a minimal redirect page targeting multiple localized versions for different markets. The lack of substantive content, absence of privacy and cookie policies, and missing contact information limit the ability to assess the business comprehensively. The WHOIS query returned no registration data, indicating the domain may be unregistered, recently registered with privacy protection, or WHOIS data is restricted. Technically, the site uses basic JavaScript and meta tags for redirection but lacks visible security headers or SSL/TLS information. The security posture is weak due to missing HTTPS confirmation and no evident security best practices. Overall, the site appears incomplete or in a transitional state, with low trust and credibility scores.
WebNICwebnic.cc
Technology
85Low
NIS2 47 · GDPR 53
NIS2 47 · GDPR 53
WebNIC is an established ICANN Accredited Registrar and B2B Internet Service Wholesaler specializing in domain registration and cybersecurity solutions. The company offers a broad portfolio of services including domain wholesale, premium DNS, SSL certificates from reputable providers like DigiCert, Sectigo, and GlobalSign, as well as brand protection and reseller programs. The website targets business customers and resellers globally, positioning itself as a trusted partner in the domain and cybersecurity market. Technically, the website is built on WordPress with Elementor and integrates modern tracking and marketing tools such as Google Analytics, Facebook Pixel, and TikTok Pixel. Security measures include HTTPS enforcement and hCaptcha for form protection, though explicit security headers and privacy compliance documentation are lacking. The absence of WHOIS registration data reduces transparency but does not significantly detract from the site's legitimacy given the professional branding and market presence. Overall, WebNIC demonstrates a solid digital maturity with room for improvement in privacy compliance and security policy transparency.
- Leipziger Messe GmbH
zuliefermesse.de
Manufacturing · Germany
76Low
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
The website www.zuliefermesse.de represents the Subcontracting fair Z, a leading international trade fair focused on parts, components, modules, and technologies within the manufacturing sector. Operated by Leipziger Messe GmbH, the site serves as an information and networking platform for industry professionals, particularly those involved in early and middle production stages and industrial services. The event is scheduled for March 2027 in Leipzig, Germany, and runs concurrently with the Intec trade fair, covering the entire production value chain. The website targets decision-makers and professionals from machine tool engineering, automotive, toolmaking, and related industries.
Leipziger Messe GmbHleipziger-messe.de
Hospitality · Germany
77Low
NIS2 2 · GDPR 100
NIS2 2 · GDPR 100
Leipziger Messe GmbH operates as a prominent event management and venue services provider based in Leipzig, Germany. The company offers a wide range of event locations including exhibition halls, outdoor areas, and congress centers, targeting event organizers, exhibitors, and visitors. The website reflects a well-established market position with strong trust indicators such as industry memberships and service awards. Technically, the website employs modern technologies including Google Tag Manager and a consent management platform, ensuring compliance with privacy regulations. The site is well-structured, mobile-optimized, and provides a good user experience. Security posture is strong with HTTPS enforcement and cookie consent mechanisms, though explicit security headers could be improved. Overall, the domain registration aligns with the business, showing no suspicious patterns despite limited WHOIS data due to DENIC policies.
AlmiDécoralmidecor.com
Retail · Poland
82Low
NIS2 2 · GDPR 100
NIS2 2 · GDPR 100
AlmiDécor is a well-established Polish e-commerce retailer specializing in stylish and designer furniture, lighting, and home decorations. Founded in 2000, the company has built a solid market presence targeting consumers seeking elegant interior furnishings. The website is built on the Magento platform, leveraging modern web technologies and integrating multiple marketing and analytics tools such as Google Analytics, Facebook Pixel, and Cookiebot for privacy compliance. The technical infrastructure is robust with Cloudflare DNS and GoDaddy domain registration, ensuring reliable hosting and domain management. Security practices include HTTPS enforcement and domain status locks, although DNSSEC is not enabled, representing an area for improvement. Privacy and cookie policies are comprehensive and GDPR compliant, with active consent mechanisms. Overall, the website demonstrates good content quality, user experience, and business credibility, making it a trustworthy platform for customers.
Media · Germany
77Low
NIS2 2 · GDPR 43
NIS2 2 · GDPR 43
HOCHZWEI Büro für visuelle Kommunikation GmbH & Co. KG is a medium-sized full-service advertising agency based in Germany, serving clients primarily in Northern Germany. The company offers a broad range of services including communication strategies, consulting, corporate design, online and social media marketing, print, film, and web development. The website is professionally designed using TYPO3 CMS and integrates modern marketing and analytics tools such as Google Analytics, Facebook Pixel, Matomo, and Cookiebot for GDPR-compliant consent management. The agency demonstrates strong GDPR compliance and provides clear privacy and cookie policies. Security posture is solid with HTTPS enforced and appropriate security headers, though no explicit security policy or incident response contacts are publicly available. Overall, the website reflects a trustworthy and professional business with a strong regional market position and good digital maturity.
- TTork
tork.pl
Retail · Poland
77Low
NIS2 17 · GDPR 65
NIS2 17 · GDPR 65
Tork is a leading global brand specializing in professional hygiene and cleaning products, targeting businesses across various industries. The website presents a comprehensive portfolio of hygiene articles, cleaning products, dispensers, and related services tailored for business customers. The brand is positioned as a market leader under the parent company Essity, reflecting a strong market presence and trusted reputation. Technically, the website leverages modern web technologies including React and Next.js, ensuring fast performance, mobile responsiveness, and good SEO practices. Privacy compliance is robust with GDPR-aligned policies and a consent management platform in place. Security posture is strong with HTTPS enforcement, security headers, and anti-bot measures like Google reCAPTCHA Enterprise. However, the absence of WHOIS domain registration data and explicit security policies slightly detract from overall trust. Strategic recommendations include publishing detailed security and incident response policies, adding vulnerability disclosure mechanisms, and verifying domain registration details to enhance credibility and trust.
Stäublistaubli.pl
Manufacturing · Switzerland
78Low
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Stäubli is a well-established global industrial and mechatronic solutions provider with a strong presence in multiple sectors including Electrical Connectors, Fluid Connectors, Robotics, and Textile. The company operates internationally with a workforce of approximately 6,000 employees and has a history dating back to 1892. The website reflects a mature digital presence built on Adobe Experience Manager, incorporating modern analytics and consent management tools. Security posture is generally good with HTTPS and cookie consent mechanisms in place, though explicit security policies and incident response information are not publicly visible. The absence of WHOIS registration data slightly reduces transparency but does not significantly detract from the overall trustworthiness given the professional presentation and global footprint. Strategic recommendations include enhancing security headers, publishing vulnerability disclosure policies, and improving contact transparency.
- Leipziger Messe GmbH
messe-intec.de
Manufacturing · Germany
76Low
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
The website www.messe-intec.de represents the Intec International Trade Fair, a major European event focused on machine tools, manufacturing, and automation industries. It is organized by Leipziger Messe GmbH, a reputable event management company based in Germany. The site serves as an information and networking platform for industry professionals, manufacturers, and service providers, positioning itself as a key industry event with a strong market presence. The business model revolves around trade fair organization and providing a comprehensive event experience including exhibitor information, visitor guidance, and media resources. Technically, the website employs modern web technologies including JavaScript, Google Tag Manager, and a consent management platform to ensure compliance with privacy regulations. The site is well-structured, mobile-optimized, and includes SEO best practices. The presence of a cookie consent banner with granular controls indicates a mature approach to privacy compliance. However, no explicit security policy or incident response information is published, which could be improved. From a security perspective, the site uses HTTPS and does not expose sensitive data. The cookie consent mechanism and absence of suspicious content contribute to a strong security posture. No critical vulnerabilities or security headers were explicitly detected in the provided data, suggesting room for enhancement in security headers implementation. Overall, the website is professional, trustworthy, and compliant with GDPR requirements. It effectively serves its target audience of manufacturing industry professionals and decision-makers. Strategic recommendations include publishing a dedicated security policy, incident response contacts, and enhancing security headers to further strengthen the security posture.