Low-risk security reports
14,261 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,165001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
11,001–11,050 of 14,261
Invescoinvesco.com
Finance · United States
89Low
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
Invesco is a global investment management firm providing asset management and financial advisory services. The website serves as a corporate portal offering company news, financial information, and business updates targeted at a general audience including clients and investors. The company holds a strong market position as a longstanding enterprise in the finance sector with a broad portfolio of investment solutions. The digital infrastructure is modern, leveraging Adobe Experience Manager CMS, Adobe Launch for tag management, OneTrust for cookie consent, and New Relic for performance monitoring, indicating a mature technical environment. Security posture is robust with HTTPS enforcement, security headers, and privacy compliance measures including GDPR adherence. However, the absence of WHOIS data reduces transparency slightly, though the overall trustworthiness remains high due to professional content and comprehensive policies. Strategic recommendations include publishing explicit security policies and incident response contacts to enhance transparency and trust.
SNOCKSsnocks.com
E-commerce · Germany
80Low
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
SNOCKS is a well-established German e-commerce retailer specializing in high-quality socks, underwear, and related apparel. Founded in 2002, the company has built a strong online presence with a professional website hosted on Shopify, targeting a broad general audience seeking quality basics at fair prices. The website demonstrates a mature digital infrastructure with extensive use of modern marketing, analytics, and customer engagement tools, including Google Analytics, Hotjar, TikTok Pixel, and Klaviyo. Privacy compliance is robust, featuring a comprehensive cookie consent mechanism and multilingual support. Security posture is strong with HTTPS enforcement and domain registration consistency, although DNSSEC is not enabled. No critical vulnerabilities or blocking mechanisms were detected, indicating a secure and accessible platform.
flaconi GmbHflaconi.de
E-commerce · Germany
76Low
NIS2 17 · GDPR 48
NIS2 17 · GDPR 48
flaconi GmbH operates a large-scale e-commerce platform specializing in beauty products including perfumes, make-up, and skincare. The website targets consumers primarily in Germany, offering over 30,000 products from more than 600 brands. The business model focuses on online retail with value-added services such as free shipping and promotional deals. The company holds a strong market position as a leading online beauty retailer in Germany.
zondacryptozondacrypto.com
Finance · Poland
80Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
zondacrypto is a Poland-based cryptocurrency exchange platform founded in 2022, offering services to buy, sell, and store Bitcoin and various altcoins. The platform targets cryptocurrency traders and investors, providing a mobile app and a growing ecosystem including the ZND platform. The website is professionally designed with multi-language support and clear legal documentation, positioning itself as a trusted EU-based exchange with notable sports partnerships. Technically, the site uses modern frameworks such as React and Liferay, with Cloudflare DNS and Google Analytics integration, delivering a good user experience and mobile optimization. Security posture is solid with HTTPS enforcement and domain transfer protection, though DNSSEC is not enabled and security.txt or explicit security policies are absent. Overall, the site demonstrates a mature digital presence suitable for its business model.
DotRoll Kft.dotroll.com
Technology · Hungary
88Low
NIS2 37 · GDPR 88
NIS2 37 · GDPR 88
DotRoll Kft. is a well-established Hungarian domain registrar and web hosting provider founded in 2008. The company holds direct accreditations for major TLDs including .hu, .eu, .com, .net, and .org, positioning itself as a leading player in the Hungarian and regional domain market. Their service portfolio includes domain registration, various web hosting solutions (SSD, cPanel, NVMe, WordPress), VPS hosting, email hosting, and security services such as SSL certificates and Bitdefender antivirus products. The company targets businesses and individuals primarily within Hungary and the European Union, offering reseller programs and domain backorder services as well.
Schroders globalschro.link
—
87Low
NIS2 25 · GDPR 85
NIS2 25 · GDPR 85
- Bee.pl
bee.pl
E-commerce · Poland
85Low
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
Bee.pl is a well-established Polish e-commerce platform specializing in healthy and ecological groceries, cosmetics, and products for children and pets. The website targets general consumers interested in natural and organic products, offering a comprehensive online shopping experience. The business model is retail-focused with a strong online presence and integration of multiple marketing and analytics tools. Technically, the website employs modern technologies such as Google Tag Manager, Facebook Pixel, and Cookiebot for consent management, ensuring a good level of digital maturity. Security-wise, the site uses HTTPS and Content Security Policy headers, demonstrating a solid security posture, although some additional headers could enhance protection. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, Bee.pl presents a trustworthy and professional online retail platform with a good balance of business credibility and technical implementation.
Ovoltovolt.eu
E-commerce · Finland
81Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Ovolt is an e-commerce retailer specializing in household appliances, RTV, and electronics primarily targeting Finnish consumers. The website is professionally designed with good navigation and mobile optimization, leveraging modern technologies such as Google Tag Manager, Microsoft Clarity, and Cookiebot for analytics and privacy compliance. However, the absence of a visible privacy policy, terms of service, and contact information limits the overall trust and compliance posture. Security practices include HTTPS and cookie consent, but lack of security headers and incident response contacts are notable gaps. Overall, the site is functional and safe but would benefit from enhanced transparency and security documentation.
StreamYardstreamyard.com
Technology
83Low
NIS2 25 · GDPR 88
NIS2 25 · GDPR 88
StreamYard is a well-established technology company providing a professional live streaming and recording platform accessible via web browsers. It serves a large user base of over 12 million creators, offering services such as multistreaming, branding, guest management, and video repurposing. The platform targets content creators and businesses seeking easy-to-use streaming solutions with a SaaS subscription model. Technically, StreamYard employs modern web technologies including React and Next.js, integrates with trusted third-party services like Stripe for payments, and uses Cloudflare for DNS. The website is fast, mobile-optimized, and accessible, reflecting a mature digital infrastructure. Security-wise, the site enforces HTTPS, implements key security headers, and avoids exposing sensitive data, though enabling DNSSEC and publishing a formal security policy could enhance trust. Privacy compliance is strong with clear policies and consent mechanisms. Overall, StreamYard presents a professional, trustworthy, and secure online presence with no critical issues detected.
- Privacy service provided by Withheld for Privacy ehf
switchboard.xyz
Technology · Iceland
78Low
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Switchboard.xyz operates as a permissionless oracle network providing decentralized applications with real-world data feeds, randomness, and oracle aggregation services. Founded in 2020, it has established itself as a trusted technology provider across multiple blockchain networks, securing over $5 billion in value and serving more than 51 leading projects. The website reflects a mature and professional digital presence with excellent design, clear navigation, and strong branding consistency. The technical infrastructure leverages modern web technologies including React, Cloudflare hosting, and Google Tag Manager for analytics, ensuring fast performance and mobile optimization. Security posture is strong with HTTPS enforced and domain transfer protections, though DNSSEC is not enabled and some security headers are not explicitly detected. Privacy compliance is partial, with a comprehensive privacy policy present but lacking a cookie consent mechanism. No direct contact information or incident response policies are published, which could be improved to enhance trust and compliance. Overall, the site is safe, professional, and well-positioned in the blockchain oracle market.
World Refining Associationworldrefiningassociation.com
Energy
81Low
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
The World Refining Association is a niche industry association focused on connecting downstream leaders in the refining sector through networking events, conferences, exhibitions, and an online content portal. The website presents a professional and consistent brand image with relevant industry content targeting professionals in the energy refining sector. Technically, the site is built on WordPress using the Divi theme, leveraging modern web fonts and analytics tools such as Google Tag Manager and LinkedIn Insight Tag. Hosting and DNS are managed via Cloudflare, providing basic security and performance benefits. Security posture is moderate with HTTPS enabled and domain status protections in place; however, DNSSEC is not enabled and security headers are missing, representing areas for improvement. Privacy compliance is weak due to the absence of privacy and cookie policies or consent mechanisms. No contact information or incident response details are found, limiting direct communication channels. Overall, the site is functional and professional but would benefit from enhanced privacy, security, and transparency measures.
Parkinson Verenigingparkinson-vereniging.nl
Healthcare · Netherlands
78Low
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
The Parkinson Vereniging website serves as the digital presence of a Dutch non-profit association dedicated to supporting people with Parkinson's disease and related disorders. It offers comprehensive information, community support, educational resources, and event listings tailored to patients and their families. The organization holds a strong market position within the Netherlands as a trusted source for Parkinson-related support and advocacy. Technically, the site is built on the Procurios CMS platform, leveraging modern analytics tools such as Google Analytics and Microsoft Clarity, and integrates Google Maps for location-based services. The website demonstrates good performance, mobile optimization, and accessibility standards. Security-wise, the site enforces HTTPS and employs cookie consent mechanisms, but lacks explicit security headers and published security policies, which could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR, making it a reliable resource for its audience.
Menzis Zorgkantoormenziszorgkantoor.nl
Healthcare · Netherlands
80Low
NIS2 2 · GDPR 73
NIS2 2 · GDPR 73
Menzis Zorgkantoor is a regional healthcare organization in the Netherlands focused on facilitating long-term care services for consumers in the Arnhem, Groningen, and Twente regions. The website provides comprehensive information and support for individuals needing intensive care, including services related to personal budgets (PGB) and care provider searches. The organization positions itself as a trusted intermediary between care recipients and providers, emphasizing personalized support and regional expertise. Technically, the website employs modern web technologies including JavaScript, Microsoft Application Insights for telemetry, and Google Analytics for user behavior tracking. The site is hosted likely on Microsoft Azure infrastructure, ensuring reliable performance and security. The design is responsive and accessible, with clear navigation and professional content presentation. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms aligned with GDPR requirements. However, explicit security headers and a published security policy or incident response contacts are absent, representing areas for improvement. No vulnerabilities or suspicious content were detected, and privacy compliance is well addressed through clear policies and user consent options. Overall, the website demonstrates a mature digital presence suitable for a healthcare service provider, with good content quality, technical implementation, and business credibility. Strategic enhancements in security transparency and incident response readiness would further strengthen trust and compliance.
Menzismenzis.nl
Healthcare · Netherlands
85Low
NIS2 2 · GDPR 73
NIS2 2 · GDPR 73
Menzis is a major Dutch health insurance provider offering a range of insurance products including basic, supplementary, collective, and dental insurance. The website targets consumers in the Netherlands seeking health insurance and related services. It provides clear navigation, comprehensive service information, and digital tools such as a mobile app to enhance customer experience. The company positions itself as a non-profit insurer with a strong customer base and positive ratings. Technically, the website employs modern JavaScript frameworks, Google Tag Manager, and Microsoft Application Insights for analytics and monitoring. The site is mobile optimized, accessible, and SEO friendly. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and incident response information are lacking. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.
Stichting kanker.nlkanker.nl
Healthcare · Netherlands
81Low
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
Kanker.nl is a well-established Dutch non-profit foundation providing reliable cancer-related information, treatment options, and patient support services. It serves patients, caregivers, and healthcare professionals primarily in the Netherlands. The website is positioned as a leading cancer information portal with a strong focus on trustworthy content and community support. Technically, the site is built on Drupal CMS, employs modern JavaScript libraries, and integrates analytics and optimization tools such as Piwik/Matomo and Visual Website Optimizer. Security posture is strong with HTTPS enforcement, security headers, and no detected vulnerabilities. Privacy compliance is evident through comprehensive privacy and cookie policies with GDPR adherence. Overall, the site demonstrates a mature digital presence with good user experience and professional content.
- Longfonds
longfonds.nl
Healthcare · Netherlands
76Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Longfonds is a Dutch non-profit organization dedicated to promoting healthy lungs and clean air for everyone. The website serves as a platform for health advocacy, supporting scientific research, and raising public awareness about respiratory health. The organization targets the general public concerned with lung health and related issues. The website is built on Drupal 10 and integrates modern marketing and analytics tools such as Google Analytics, Google Tag Manager, Visual Website Optimizer, and Cookiebot for cookie consent management. The technical infrastructure reflects a moderate level of digital maturity with good mobile optimization and basic accessibility features. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks publicly visible security policies and incident response information. Overall, the website is professional, trustworthy, and safe for general audiences, though it would benefit from publishing explicit privacy, terms of service, and security policies to enhance compliance and transparency.
Nederlandse Coeliakie Verenigingglutenvrij.nl
Healthcare · Netherlands
81Low
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
The website www.glutenvrij.nl is operated by the Nederlandse Coeliakie Vereniging, a Dutch non-profit organization dedicated to supporting individuals affected by coeliac disease and gluten intolerance. The site offers comprehensive medical information, recipes, dietary advice, community activities, and membership benefits, positioning itself as a leading resource in the Netherlands for gluten-free living. The target audience includes patients, families, and caregivers seeking trustworthy information and support. Technically, the website is built on the Procurios CMS platform, utilizing JavaScript and CSS with frameworks such as Prototype.js. The site demonstrates good mobile optimization, accessibility, and SEO practices, although hosting details are not explicitly identified. Performance is moderate, with no critical technical issues detected. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism aligned with GDPR requirements. However, it lacks visible security policies, incident response contacts, and advanced security headers, which are recommended for enhanced protection. No vulnerabilities or exposed sensitive data were found during analysis. Overall, the website is professional, trustworthy, and compliant with privacy regulations, serving its community effectively. Strategic improvements in security transparency and incident response readiness would further strengthen its posture.
BVKZbvkz.nl
Healthcare · Netherlands
80Low
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
BVKZ is a well-established Dutch branch association representing 450 small-scale healthcare providers across sectors such as elderly care, mental health, district nursing, disability care, and youth care. The organization supports its members through knowledge sharing, advocacy, and resources tailored to the healthcare sector. The website reflects a mature digital presence with a focus on accessibility, GDPR compliance, and user engagement via newsletters and webinars. Technically, the site is built on WordPress with modern plugins like Elementor and WooCommerce, ensuring a responsive and SEO-optimized experience. Security posture is solid with HTTPS, DNSSEC, and anti-spam measures, though additional security headers could enhance protection. Overall, BVKZ demonstrates a credible and professional online presence aligned with its business objectives.
Alzheimer Nederlandalzheimer-nederland.nl
Healthcare · Netherlands
78Low
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Alzheimer Nederland is a leading Dutch non-profit organization dedicated to improving the lives of people affected by dementia and their families. The organization focuses on awareness, support services, research funding, advocacy, and fundraising activities. Their website is professionally designed, highly accessible, and optimized for mobile devices, providing comprehensive information and resources for their target audience including patients, caregivers, researchers, and donors. The site integrates multiple third-party analytics and marketing tools with a strong cookie consent mechanism ensuring GDPR compliance. Technically, the website uses modern SPA frameworks, cloud hosting, and robust performance optimizations. Security posture is strong with HTTPS enforcement, security headers, and anti-CSRF protections, although explicit security and incident response policies are not publicly available. Overall, the website reflects a mature digital presence with high trustworthiness and excellent content quality.
ActiZactiz.nl
Healthcare · Netherlands
81Low
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
ActiZ is a prominent Dutch healthcare branch association representing approximately 400 care organizations specializing in eldercare and chronic illness care. The website serves as a comprehensive platform for information dissemination, member services, and sector news, targeting healthcare professionals, policymakers, and stakeholders in the eldercare sector. The organization maintains a strong market position within the Netherlands, supported by a large membership base and extensive staff representation. Technically, the website is built on Drupal 10, integrating modern analytics and user behavior tracking tools such as Google Analytics and Hotjar, ensuring a mature digital infrastructure. The site is well-optimized for mobile devices, accessible, and professionally designed, reflecting high content quality and user experience standards. Security posture is solid with HTTPS enforcement and cookie consent mechanisms; however, explicit security policies and incident response contacts are not publicly disclosed, representing an area for improvement. Overall, the domain registration data aligns with the organization's profile, confirming legitimacy and trustworthiness. The website is safe for general audiences with no adult or explicit content detected.
- Swann
swannstore.com
Technology · United States
82Low
NIS2 17 · GDPR 85
NIS2 17 · GDPR 85
Swann is a globally recognized provider of home security camera systems and accessories, specializing in do-it-yourself security solutions. The company operates a professional e-commerce website hosted on the BigCommerce platform, targeting homeowners and small businesses seeking reliable security products. The website demonstrates a mature digital infrastructure with integrations for analytics, marketing, and customer support, including Google Analytics 4, Facebook Pixel, Bing Ads, Trustpilot, and Zendesk. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, although some security headers could be improved. The absence of WHOIS data suggests privacy protection, which is common for commercial domains. Overall, the site is trustworthy, well-branded, and compliant with privacy regulations.
Invictiinvicti.com
Technology · United States
82Low
NIS2 65 · GDPR 68
NIS2 65 · GDPR 68
Invicti is a leading enterprise cybersecurity company specializing in automated web application and API security testing. The company offers a DAST-first application security platform designed to secure thousands of websites, applications, and APIs. Their market position is strong within the technology sector, targeting enterprise clients with a SaaS and enterprise software business model. The website reflects a professional and consistent brand image with comprehensive content tailored to security professionals and enterprise decision-makers. Technically, the website is built on WordPress with modern frameworks like Tailwind CSS and integrates multiple marketing and analytics tools such as Google Tag Manager, Marketo, and Clearbit. The site is mobile optimized and performs moderately well. Security-wise, the site enforces HTTPS, implements key security headers, and avoids exposing sensitive data, indicating a mature security posture. However, the absence of a public WHOIS record and lack of explicit security policy or incident response pages suggest areas for improvement. Overall, the website is trustworthy and professional, with a high security and privacy compliance level, suitable for its enterprise audience.
Basic Attention Tokenbasicattentiontoken.org
Technology · Iceland
88Low
NIS2 47 · GDPR 53
NIS2 47 · GDPR 53
Basic Attention Token (BAT) is a blockchain-based digital advertising token designed to tokenize user attention on the internet. It operates primarily through integration with the Brave browser, enabling users to earn BAT tokens by viewing privacy-respecting ads, supporting content creators, and providing advertisers with improved ad effectiveness while preserving user privacy. The website demonstrates a mature and well-established presence with a strong market position as one of the most widely adopted tokens in the crypto space, supported by tens of millions of users and nearly two million verified creators. The business model centers on a user-first attention economy, leveraging blockchain technology to disrupt traditional digital advertising paradigms. Technically, the website is built using the Hugo static site generator, served via Cloudflare DNS and CDN services, and employs Matomo for analytics, indicating a modern and privacy-conscious technology stack. The site is well-optimized for performance, mobile responsiveness, and SEO, with clear navigation and professional design. Security posture is strong with HTTPS enforced and domain transfer protections, though there is room for improvement in DNSSEC adoption and explicit security headers. Privacy compliance is supported by comprehensive privacy and terms of service policies, though a cookie consent mechanism is not evident. From a security perspective, the site shows no signs of vulnerabilities or malicious content. The use of privacy protection in WHOIS is justified and consistent with the business type. However, the absence of published security policies or incident response contacts suggests an opportunity to enhance transparency and readiness. Overall, the website is trustworthy, professional, and aligned with industry best practices, supporting a high level of confidence for users and partners.
Brave Software Incbrave.app
Technology · United States
86Low
NIS2 35 · GDPR 58
NIS2 35 · GDPR 58
Brave Software Inc operates the Brave browser, a privacy-centric web browser designed to block ads and trackers by default, offering users faster and more secure browsing experiences. The company also provides complementary services such as Brave Search, a privacy-focused search engine, Brave Firewall + VPN, and a digital wallet for cryptocurrency management. Positioned as a strong alternative to mainstream browsers, Brave emphasizes user privacy, security, and control over personal data. The website reflects a mature digital presence with comprehensive multilingual support and detailed product information. Technically, the website is built using modern web technologies including the Hugo static site generator, JavaScript, and Lottie animations for interactive content. Hosting and DNS services are provided via Cloudflare, ensuring fast and secure content delivery. The site employs Matomo analytics, indicating a privacy-conscious approach to user data collection. The website is well-optimized for performance, mobile responsiveness, accessibility, and SEO. From a security perspective, Brave demonstrates strong practices such as HTTPS enforcement, domain transfer protection, and an active vulnerability disclosure program via HackerOne. However, DNSSEC is not enabled, and explicit security policy documentation is not found on the site. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is robust with a comprehensive privacy policy and GDPR adherence, though a cookie consent mechanism is absent. Overall, Brave's website and business operations present a low-risk profile with high trustworthiness, strong privacy and security postures, and a clear commitment to user-centric technology. Strategic recommendations include enabling DNSSEC, publishing detailed security policies, and implementing cookie consent to further enhance compliance and user trust.
Finance · Switzerland
78Low
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
21.co is a Switzerland-based financial technology company specializing in wrapped tokens that provide onchain access to cross-chain liquidity. Their wrapped tokens are fully collateralized by underlying assets held in institutional-grade cold storage, managed via their proprietary Onyx operating system. The company targets institutional investors and DeFi participants seeking secure and flexible token exposure across multiple blockchain networks. The website reflects a mature market position with strong trust signals including third-party security audits and transparent operational processes. Technically, the site is built on modern web technologies including Webflow CMS, Google Tag Manager, and Hotjar, ensuring good performance, mobile optimization, and user experience. Security posture is strong with HTTPS, security headers, and secure mint/burn processes, though explicit security policies and incident response details are not published. Privacy compliance is well addressed with GDPR-compliant privacy and cookie policies and consent mechanisms. Overall, 21.co presents a professional, trustworthy, and technically sound digital presence aligned with its institutional finance focus.
- premium.pl Sp. z o.o.
vod.pl
Media · Poland
84Low
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
Player.pl is a well-established Polish video on demand and live TV streaming platform, offering a wide range of TVN programs, movies, and children's content. The service targets Polish-speaking audiences, including those abroad, providing access to popular Polish TV channels and on-demand content. The website demonstrates a mature digital infrastructure with modern JavaScript frameworks, cookie consent management via OneTrust, and integration of analytics and advertising technologies. Security posture is adequate with HTTPS enforced and cookie consent mechanisms, though explicit security headers and policies are not evident. The domain registration data aligns well with the website's business claims, indicating a legitimate and trustworthy service.
Other
81Low
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website www.property.com.au is currently inaccessible or blocked by a security mechanism, as evidenced by minimal HTML content containing only JavaScript and iframe placeholders. No meaningful metadata, content, or contact information is available for analysis. The WHOIS query returned a malformed request with no registrant or domain metadata, limiting the ability to assess domain legitimacy or business information. Technically, the site uses JavaScript but lacks detectable frameworks, CMS, or hosting details. Security posture cannot be evaluated due to lack of headers and content. Overall, the site appears either under protection or non-functional, resulting in a low trust and security score.
Iressiress.com
Finance
76Low
NIS2 20 · GDPR 65
NIS2 20 · GDPR 65
Iress is a well-established technology company specializing in software solutions for the financial services industry. Their offerings target financial advisers, wealth managers, traders, and mortgage brokers, positioning them as a market leader with a large user base globally. The website reflects a professional and consistent brand image with comprehensive product information and user engagement features such as podcasts and case studies. Technically, the site employs modern JavaScript frameworks, analytics, and marketing tools, ensuring a good user experience and mobile optimization. Security posture is solid with HTTPS and privacy compliance, though explicit security headers and vulnerability disclosure mechanisms could be improved. The absence of WHOIS data introduces some uncertainty about domain registration legitimacy, but the overall digital presence supports a credible business profile.
Proofpointproofpointessentials.com
Technology · United States
82Low
NIS2 47 · GDPR 53
NIS2 47 · GDPR 53
Proofpoint is a leading enterprise cybersecurity company specializing in protecting people, data, and brands from cyber attacks. Their website showcases a comprehensive portfolio of cybersecurity solutions including email protection, user protection, data loss prevention, and security awareness training. The company targets large enterprises and organizations, with a strong market presence evidenced by their claim of protecting over 2 million customers and 85 of the Fortune 100 companies. The website is professionally designed, mobile-optimized, and rich in content, reflecting a mature digital presence. Technically, the site leverages modern web technologies including Drupal CMS, extensive JavaScript libraries, and multiple analytics and marketing tools such as Google Analytics, New Relic, and Visual Website Optimizer. Security best practices are observed with HTTPS enforcement and multiple security headers. Privacy and cookie policies are comprehensive and GDPR compliant, indicating attention to regulatory requirements. Security posture is strong with no evident vulnerabilities or exposed sensitive data. However, explicit incident response contacts and vulnerability disclosure mechanisms are not found, which could be improved to enhance trust and transparency. The WHOIS data for the domain is unavailable, which limits domain registration trust analysis, but the overall legitimacy of the website and company is high based on content and market indicators. Overall, Proofpoint's website reflects a robust cybersecurity business with strong technical and security maturity, suitable for enterprise clients. Strategic recommendations include publishing incident response contacts, adding vulnerability disclosure information, and enhancing transparency on certifications and compliance frameworks.
21Shares21shares.com
Finance
77Low
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
21Shares is a leading issuer of crypto exchange-traded products (ETPs), offering a broad range of investment products for both institutional and retail investors. The company positions itself as the world's first and largest crypto ETP issuer, providing easy access to crypto assets through traditional brokerage and banking channels. Their product portfolio includes single asset ETPs, diversified index ETPs, smart index ETPs, staking products, and specialized categories such as 'Made in America' and 'Culture & Community'. The website is professionally designed, well-branded, and provides comprehensive product and market insights, targeting investors interested in regulated crypto investment vehicles. Technically, the website is built on the Webflow platform, utilizing modern web technologies including JavaScript frameworks, 3D animations via Spline, and third-party integrations such as Google Tag Manager, Hotjar, Cookiebot for consent management, and GeoTargetly for geolocation services. The site is mobile optimized with good SEO and accessibility features, although some security headers are missing. The SSL configuration is excellent, ensuring secure communications. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms aligned with GDPR requirements. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not found, representing areas for improvement. No critical vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS data for the domain raises some concerns about domain registration transparency, but the professional nature of the site and its market presence mitigate this risk. Overall, 21Shares presents a trustworthy and professional digital presence consistent with a reputable financial services company specializing in crypto investment products. Strategic recommendations include enhancing security headers, publishing explicit security and incident response policies, and improving domain registration transparency to strengthen trust further.
Walder Wyss AGwalderwyss.com
Finance · Switzerland
78Low
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Walder Wyss AG is a leading Swiss law firm specializing in economic law with approximately 300 legal professionals including lawyers, tax experts, and notaries. The firm maintains a strong market position in Switzerland, offering specialized legal services tailored to selected industries and product groups. Their website reflects a professional and comprehensive digital presence, targeting business professionals and corporate clients seeking expert legal advice. The site is well-structured, mobile-optimized, and includes relevant content such as news, career opportunities, and legal competencies. Technically, the website employs modern web technologies including JavaScript and Google Analytics, with a cookie consent mechanism ensuring GDPR compliance. Security posture is good with HTTPS enabled and domain registration consistent with the firm's identity, though DNSSEC is not enabled and some security headers are missing. No incident response or security policy information is publicly available, representing an area for improvement. Overall, the website is trustworthy, professional, and compliant with privacy regulations, supporting the firm's reputation as a top-tier Swiss law firm.
- VISCHER
vischer.com
Other · Switzerland
81Low
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
VISCHER is a prominent Swiss law firm specializing in legal solutions for business, tax, and regulatory matters. The firm offers a broad range of legal services including banking and finance law, labor law, intellectual property, and life sciences, positioning itself as a top-tier legal service provider in Switzerland. The website is professionally designed, multilingual, and rich in content, reflecting a mature digital presence. Technically, the site is built on TYPO3 CMS and integrates modern analytics and tracking tools such as Google Analytics, Hotjar, and HubSpot Analytics, indicating a well-maintained infrastructure. Security posture is strong with HTTPS enforcement and security headers, though there is room for improvement in cookie consent and explicit security policies. The absence of WHOIS data is a notable anomaly but does not detract significantly from the overall trustworthiness given the professional nature of the site and external trust signals. Strategic recommendations include enhancing privacy compliance with explicit cookie consent, publishing security and incident response policies, and providing direct security contact information.
- BBlack Lives Matter Global Network Foundation
blacklivesmatter.com
Non-profit
76Low
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Black Lives Matter Global Network Foundation operates as a leading non-profit organization advocating for Black liberation, justice, and community empowerment. The website serves as a comprehensive platform to communicate their mission, showcase their work, and engage supporters globally. Their market position is strong within social justice and non-profit sectors, supported by a large audience and active social media presence. The organization offers key services including advocacy, grantmaking, educational resources, and community organizing. Technically, the website is built on WordPress with a modern tech stack including jQuery, Google Tag Manager, and Facebook Pixel for analytics and marketing. The site is hosted with Cloudflare DNS and CDN services, ensuring good performance and availability. SEO and accessibility are well implemented, contributing to a positive user experience. From a security perspective, the site uses HTTPS with a valid SSL certificate and domain registration protections. However, it lacks DNSSEC, explicit security policies, and vulnerability disclosure mechanisms. Privacy compliance is limited due to the absence of visible privacy and cookie policies, which could be improved to meet GDPR standards. Overall, the website is professional, trustworthy, and content-rich, but could enhance its privacy and security posture to better protect users and comply with regulations. Strategic improvements in these areas would strengthen the organization's digital trust and resilience.
GLAADglaad.org
Non-profit · United States
79Low
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
GLAAD is a well-established non-profit organization dedicated to LGBTQ advocacy, focusing on cultural change and media representation to advance acceptance. The organization operates a comprehensive website with rich content including reports, news, advocacy programs, and events. Their market position is strong within the LGBTQ advocacy space, supported by a large audience and active social media presence. Technically, the website is built on WordPress with Elementor, leveraging modern web technologies and third-party services for analytics and anti-spam protection. The site is mobile optimized and performs moderately well. Security posture is good with HTTPS and anti-spam measures, though there is room for improvement in security headers and explicit security policies. Privacy compliance is limited by the absence of visible privacy and cookie policies on the main site. Overall, the domain is trustworthy, with a long history and justified use of privacy protection. Strategic recommendations include enhancing privacy disclosures, implementing security headers, and publishing a vulnerability disclosure policy.
Enflow B.V.redirect.pizza
Technology · Netherlands
81Low
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
redirect.pizza is a specialized SaaS provider offering domain redirection services with full HTTPS support and API integration. Founded in 2018 and based in the Netherlands, the company targets businesses and individuals seeking hassle-free domain redirects without hosting burdens. Their global edge network ensures fast and reliable redirects worldwide. The website demonstrates a mature digital presence with professional design, clear navigation, and comprehensive service descriptions. Technical infrastructure leverages modern JavaScript frameworks, analytics, and a global CDN-like network for performance and scalability. Security posture is strong with HTTPS enforcement and domain transfer protections, though DNSSEC is not enabled and no explicit security policy is published. Privacy compliance is partial, lacking a cookie consent mechanism but providing a clear privacy policy and contact information. Overall, redirect.pizza presents a trustworthy and professional service with room for minor improvements in privacy and security transparency.
Invictinetsparker.com
Technology · United States
82Low
NIS2 65 · GDPR 68
NIS2 65 · GDPR 68
Invicti is a leading enterprise-focused company specializing in automated web application and API security testing. The company offers a DAST-first application security platform designed to secure thousands of websites, applications, and APIs. Their market position is strong within the cybersecurity technology sector, targeting enterprise customers and security teams. The website demonstrates a high level of professionalism, with comprehensive content and consistent branding that supports their business model of software and SaaS sales. Technically, the site is built on WordPress with modern technologies such as Tailwind CSS and integrates multiple marketing and analytics tools, indicating a mature digital infrastructure. Security-wise, HTTPS is enabled and best practices are partially observed, though the absence of security headers and explicit security policy pages suggests room for improvement. The lack of WHOIS data reduces trust slightly but does not detract significantly from the overall credibility. Overall, Invicti presents a professional and trustworthy online presence suitable for its enterprise audience.
- Swann Communications
swann.com
Technology · United States
82Low
NIS2 17 · GDPR 85
NIS2 17 · GDPR 85
Swann Communications operates a professional e-commerce website specializing in home and business security camera systems and accessories. The company positions itself as a pioneer in do-it-yourself security solutions with over 35 years of experience, targeting homeowners and small businesses seeking reliable security products. The website offers a broad product range including DVR, NVR, wireless, and wired cameras, along with subscription-based services and professional installation options. The platform is built on BigCommerce, leveraging modern web technologies and multiple marketing and analytics tools to optimize user experience and business insights. Technically, the website demonstrates a mature digital infrastructure with fast performance, mobile optimization, and good accessibility. It employs a comprehensive set of tracking and marketing scripts managed through consent mechanisms, ensuring compliance with privacy regulations such as GDPR. Security measures include HTTPS enforcement, strong security headers, and no visible vulnerabilities or exposed sensitive data, reflecting a robust security posture. While WHOIS data for the subdomain us.swann.com is unavailable, this is typical for subdomains and does not detract from the legitimacy of the main domain or business. The website maintains high trustworthiness with clear contact information, support channels, and customer reviews integrated via Trustpilot. Overall, Swann's online presence is professional, secure, and compliant, supporting its market position as a leading security solutions provider.
Snap Onesnapav.com
Technology · United States
83Low
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
Snap One operates as a leading manufacturer and distributor specializing in Audio Video, Networking, Surveillance, Power, and Structured Wiring products tailored for custom integrators and professional installers. The company maintains a strong market position within the technology and B2B e-commerce sectors, offering a comprehensive product portfolio to its target audience. The website reflects a professional and consistent brand image, supporting its business model effectively. From a technical perspective, the website leverages a modern technology stack including JavaScript frameworks, Google Analytics, Google Tag Manager, Dynamic Yield for personalization, FullStory for session replay, and OneTrust for cookie consent management. The platform appears to be built on IBM WebSphere Commerce, indicating a robust e-commerce infrastructure. The site is mobile-optimized and demonstrates good SEO and accessibility practices, although some accessibility enhancements could be made. Security posture is solid with HTTPS enforced, CSRF protection tokens in forms, and use of security best practices. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not evident and should be implemented to enhance protection. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR consent mechanisms. Overall, the website is trustworthy and professionally maintained, with no signs of malicious activity or content blocking. The lack of publicly available WHOIS data suggests privacy protection, which is common and justified for commercial entities. Strategic recommendations include enhancing security headers, improving accessibility, and establishing a formal security policy and incident response contact to further strengthen trust and compliance.
World Architecture Newsworldarchitecturenews.com
Media
76Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
World Architecture News operates as a specialized media platform delivering architecture and design news, project showcases, and industry awards globally. The website targets architects, designers, and industry professionals, providing sector-specific content across transport, residential, commercial, healthcare, education, and humanitarian projects. The platform maintains a moderate market position within the architecture media niche, leveraging partnerships with related awards sites to enhance its offerings. Technically, the site employs a mix of legacy and modern technologies including jQuery, Google Tag Manager, OneTrust for cookie consent, and New Relic for performance monitoring. The site is mobile optimized with good navigation and content relevance. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks explicit security headers and published privacy or security policies. WHOIS data is unavailable, which reduces trustworthiness but the site content and external references suggest legitimacy. Overall, the site is functional and professional but would benefit from enhanced transparency and security practices.
Ministerie van Binnenlandse Zaken en Koninkrijksrelatiesgoudenpiramide.nl
Government · Netherlands
76Low
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Gouden Piramide is an official Dutch government website managed by the Ministry of the Interior and Kingdom Relations, dedicated to promoting and awarding excellence in public sector commissioning through the Gouden Piramide prize. The site targets government agencies, public sector organizations, architects, and contractors involved in public construction projects. It serves as an informational and news platform about the award and its nominees. Technically, the website is built using modern web technologies including React and Next.js, with a custom or proprietary CMS likely provided by the Dutch government. The site demonstrates good performance, mobile optimization, accessibility, and SEO practices. Security is robust with HTTPS enforced, multiple security headers, and no visible vulnerabilities. Privacy and cookie policies are comprehensive and GDPR compliant. The security posture is strong, with best practices observed in SSL configuration and script handling. However, explicit security policy and incident response information are not published, and a vulnerability disclosure policy is absent. Overall, the website is trustworthy, professional, and well-maintained, reflecting its government affiliation. Strategic recommendations include publishing a dedicated security policy, providing incident response contact channels, and implementing a vulnerability disclosure framework to enhance transparency and security readiness.
Proofpointsendmail.org
Technology · United States
82Low
NIS2 59 · GDPR 53
NIS2 59 · GDPR 53
Proofpoint is a leading cybersecurity company specializing in enterprise email protection and security solutions. Their Sendmail Sentrion platform targets large, complex environments requiring scalable and secure messaging infrastructure. The website reflects a mature digital presence with comprehensive product information, security advisories, and enterprise-grade trust signals. Technically, the site leverages Drupal CMS and integrates multiple analytics and marketing tools, maintaining good performance and accessibility standards. Security posture is strong with HTTPS enforcement, security headers, and signed software releases, although WHOIS data is unavailable, likely due to privacy protections. Overall, the site demonstrates a high level of professionalism and trustworthiness suitable for enterprise customers.
Demantdemant.com
Healthcare · Denmark
87Low
NIS2 17 · GDPR 95
NIS2 17 · GDPR 95
Demant is a globally recognized leader in hearing healthcare, offering a comprehensive portfolio that spans hearing aids, implants, diagnostic instruments, and professional hearing care services. With a heritage dating back to 1904 and headquartered in Denmark, Demant operates in over 130 countries with more than 22,000 employees. The company emphasizes innovation, sustainability, and customer-centric solutions, positioning itself strongly in the healthcare sector. Technically, the website demonstrates a mature digital infrastructure leveraging modern JavaScript frameworks, third-party analytics, and consent management tools. Hosting appears to be on Microsoft Azure, ensuring robust performance and scalability. The site is well-optimized for mobile and accessibility, with clear navigation and professional design. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms aligned with GDPR requirements. However, some security headers are not explicitly detected, and there is no public security policy or incident response contact, which are areas for improvement. The absence of WHOIS data is notable but does not detract significantly from the overall legitimacy given the strong corporate presence. Overall, Demant's website reflects a professional, secure, and compliant digital presence suitable for its enterprise stature. Strategic enhancements in security transparency and WHOIS data availability would further strengthen trust and compliance.
- DotControl
dotcontrol.nl
Technology · Netherlands
81Low
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
DotControl is a well-established full-service digital agency based in Rotterdam, Netherlands, founded in 2002. The company specializes in digital marketing, content creation, website development, and e-commerce solutions, targeting businesses seeking to enhance their digital presence. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the site uses modern technologies including Umbraco CMS, Google Analytics, Facebook Pixel, and Cookiebot for consent management, hosted on Vevida infrastructure. Security posture is solid with HTTPS enabled and anti-CSRF measures, though DNSSEC is not enabled and some security headers appear missing. Privacy compliance is strong with a comprehensive privacy policy and cookie consent mechanism. No terms of service or explicit security policies were found. The domain registration data is consistent with the business claims, showing a long domain age and transparent WHOIS data. Overall, the website is trustworthy, secure, and compliant with relevant privacy regulations.
Patiëntenfederatie Nederlandzorgkaartnederland.nl
Healthcare · Netherlands
78Low
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
ZorgkaartNederland is a well-established Dutch online platform operated by Patiëntenfederatie Nederland, focused on providing independent patient reviews and choice assistance for healthcare providers. It serves both patients seeking suitable care and healthcare providers aiming to improve based on patient feedback. The platform enjoys a strong market position supported by numerous partnerships with healthcare organizations and patient associations. Technically, the website employs modern web technologies including JavaScript, Bootstrap, and Google Tag Manager, delivering a responsive and accessible user experience. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though formal security policies and incident response contacts are not publicly disclosed. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with privacy regulations, making it a reliable resource in the Dutch healthcare sector.
- PPost CH Network Ltd
postshop.ch
Transportation · Switzerland
82Low
NIS2 17 · GDPR 65
NIS2 17 · GDPR 65
The website shop.post.ch is the official online shop of Swiss Post, operated by Post CH Network Ltd. It offers a wide range of products including stamps, philatelic items, electronics, gift cards, and household goods. The platform targets general consumers primarily in Switzerland, providing a trusted e-commerce channel for postal and related products. The site demonstrates a solid market position as the official postal service's retail outlet. Technically, the website is built using modern web technologies such as Angular, integrates Google Tag Manager for analytics, and employs Usercentrics for consent management. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. Performance is moderate, with CDN usage and asynchronous script loading enhancing user experience. From a security perspective, the site enforces HTTPS, uses captcha for form protection, and integrates secure payment libraries. While explicit security headers are not fully confirmed, the overall SSL configuration is excellent. Privacy policies and cookie consent mechanisms are comprehensive and GDPR compliant. However, the absence of a public security policy or vulnerability disclosure program suggests room for improvement in transparency and incident response readiness. Overall, the website is trustworthy, professionally maintained, and compliant with relevant privacy regulations. Strategic recommendations include publishing a dedicated security policy, enhancing security header implementation, and establishing a vulnerability disclosure channel to further strengthen security posture and user trust.
- Petbarn
petbarn.com.au
Retail · Australia
82Low
NIS2 47 · GDPR 73
NIS2 47 · GDPR 73
Petbarn is a leading Australian pet retailer offering a wide range of pet food, supplies, and accessories through its e-commerce platform and physical stores. The website demonstrates a mature digital presence with a comprehensive product catalog, repeat delivery options, and store locator features. The company targets pet owners across Australia, positioning itself as the market leader in pet retail. The website's technical infrastructure is built on Magento CMS, leveraging modern JavaScript libraries and analytics tools such as Adobe Analytics and New Relic for performance monitoring and user tracking. The site is mobile-optimized and provides a professional user experience with clear navigation and branding consistency. Security posture is strong with HTTPS enforcement, security headers, and no visible vulnerabilities, although public security policies and incident response contacts are not published. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website is trustworthy and professionally maintained, supporting a large-scale retail operation.
Independent Reserveindependentreserve.com
Finance · Australia
78Low
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Independent Reserve is a well-established cryptocurrency exchange founded in 2013, operating primarily in Australia, New Zealand, and Singapore. The company offers a comprehensive suite of crypto trading services including OTC desk, leveraged trading, API access, and portfolio tracking. It targets both individual and institutional investors, positioning itself as a trusted and licensed platform with strong security and compliance credentials. The website reflects a professional and user-friendly design with clear navigation and mobile optimization, supporting a positive user experience. Technically, the site employs modern JavaScript frameworks and integrates analytics and marketing tools such as Google Analytics, Facebook Pixel, and HubSpot, indicating a mature digital infrastructure. Security-wise, Independent Reserve demonstrates a robust posture with ISO 27001 certification, external financial audits, segregated customer funds, and regular penetration testing. Privacy and cookie policies are present with consent mechanisms, aligning with GDPR compliance. However, the absence of WHOIS data for the domain slightly reduces trustworthiness, though the overall business credibility remains high due to visible certifications and partner associations. Strategic recommendations include publishing a dedicated vulnerability disclosure policy, providing explicit incident response contacts, and enhancing transparency on data retention policies to further strengthen trust and compliance.
Atabixatabix.nl
Technology · Netherlands
78Low
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Atabix is a Dutch SaaS provider specializing in digital solutions for government and business clients, focusing on zaakgericht werken (case-oriented working). With over 25 years of experience, Atabix offers a suite of products including a case management system, digital forms, and client portals, complemented by consultancy and implementation services. The company is well-positioned in the government technology sector, serving municipalities, provinces, and other public organizations. Technically, the website is built on Webflow with modern JavaScript libraries and integrates Google Tag Manager and HubSpot for analytics and marketing. The site is fast, mobile-optimized, and accessible, reflecting a mature digital infrastructure. Security-wise, Atabix enforces HTTPS, implements cookie consent mechanisms, and maintains pages dedicated to certifications and vulnerability disclosures, indicating a strong security posture. Overall, the website projects professionalism, trustworthiness, and compliance with GDPR, making it a reliable digital presence for the company.
American Expressamericanexpress.ch
Finance · Switzerland
80Low
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
American Express Switzerland operates a comprehensive website offering credit card products and related financial services tailored for private and business customers in Switzerland. The site reflects a strong market position as part of the global American Express brand, with localized services issued by Swisscard AECS GmbH. The website provides detailed product information, travel benefits, rewards programs, and customer support resources, demonstrating a mature digital presence. Technically, the site employs modern web technologies including React, Adobe DTM, and advanced analytics tools, ensuring fast performance, mobile optimization, and accessibility compliance. Security posture is strong with HTTPS enforcement, security headers, and cookie consent mechanisms, although explicit security policies and incident response contacts are not publicly detailed. Overall, the domain registration and website content are consistent and legitimate, supporting a high trustworthiness rating.
Schweizer Fleischschweizerfleisch.ch
Other · Switzerland
79Low
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Schweizer Fleisch is a Swiss-focused informational and promotional website dedicated to educating consumers about Swiss meat, its quality, safety, and sustainability. The site offers recipes, cooking tips, and detailed content aimed at encouraging the consumption of Swiss meat products. The platform appears to be professionally managed, likely by industry stakeholders, and targets consumers interested in high-quality, locally sourced meat. Technically, the website is built on Drupal 10 and incorporates modern web technologies including Google Tag Manager and Mailchimp for marketing and analytics. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS with a good SSL configuration but lacks visible security headers and explicit privacy and terms of service policies, which are areas for improvement. Overall, the domain registration data aligns well with the website's Swiss identity and business focus, indicating legitimacy and trustworthiness.