Low-risk security reports
14,261 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,165001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
11,051–11,100 of 14,261
V-ZUG AGvzug.com
Manufacturing · Switzerland
77Low
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
V-ZUG AG is a Swiss-based manufacturer specializing in premium household appliances, including kitchen and laundry products. The company positions itself as a provider of high-quality, comfortable appliances targeting discerning consumers and businesses. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content tailored to its audience. Technically, the site leverages modern frameworks such as Angular and SAP Commerce Cloud, integrating analytics and consent management tools to ensure compliance and user experience. Security posture is solid with HTTPS enforcement and security headers, though the absence of a public security policy and incident response contacts suggests room for improvement. The missing WHOIS data raises some concerns about domain registration transparency, but the overall brand presence and content quality support legitimacy. Strategic recommendations include enhancing security transparency and verifying domain registration details to bolster trust.
Gryps AGgryps.ch
Other · Switzerland
78Low
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
Gryps AG operates as an online partner network focused on outsourcing and procurement services tailored for small and medium enterprises (KMU) in Switzerland. The company offers advisory services and facilitates offer comparisons across more than 50 product and service categories including IT, finance, insurance, and HR. Gryps is a subsidiary of Ringier, a reputable media company, which enhances its market credibility. The website is professionally designed with consistent branding and targets SMEs seeking efficient outsourcing solutions. Technically, the site employs modern tracking and marketing technologies such as Google Tag Manager, Microsoft Clarity, and OneTrust for cookie consent, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforced and appropriate security headers implemented. However, the absence of explicit privacy and terms of service pages indicates room for improvement in compliance documentation. Overall, Gryps AG presents a trustworthy and professional online presence with a solid business model and good technical implementation.
Gamepix Srlgamepix.com
Technology · Italy
76Low
NIS2 17 · GDPR 85
NIS2 17 · GDPR 85
Gamepix Srl operates a professional and well-established online gaming platform offering free-to-play games accessible globally. Founded in 2013 and headquartered in Rome, Italy, the company targets a broad audience with a diverse catalog of casual, action, io, and puzzle games. The platform integrates advertising and partner services to monetize its offerings. Technically, the website leverages modern web technologies including SvelteKit, Google Analytics, TikTok Pixel, and Microsoft Clarity, ensuring a fast, mobile-optimized, and accessible user experience. Security posture is strong with HTTPS enforcement and modern security headers, though explicit security policies and incident response information are not publicly disclosed. Privacy and cookie policies are comprehensive and GDPR compliant, reflecting a mature approach to user data protection. The domain WHOIS data is privacy protected, which is common but slightly reduces transparency. Overall, Gamepix presents a trustworthy and professional digital presence in the online gaming sector.
- DDie Schweizerische Post
post.ch
Transportation · Switzerland
80Low
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Die Schweizerische Post AG operates as the national postal service provider in Switzerland, offering a broad range of physical and digital services including mail and parcel delivery, express and courier services, digital mailboxes, and financial services through its subsidiary PostFinance. The company holds a strong market position as a trusted government entity with extensive reach and a large enterprise scale. The website reflects this stature with comprehensive service offerings, multilingual support, and consistent branding. Technically, the site employs modern web technologies such as Sitecore CMS, Coveo search integration, Google Tag Manager, and Usercentrics for consent management, indicating a mature digital infrastructure. Security posture is robust with HTTPS enforcement, input validation, and privacy compliance, although explicit security policies and vulnerability disclosure mechanisms are not publicly detailed. Overall, the website is professional, secure, and user-friendly, supporting a high level of trust and credibility.
CUATRECASAScuatrecasas.com
Other · Spain
80Low
NIS2 47 · GDPR 83
NIS2 47 · GDPR 83
Cuatrecasas is a leading international law firm prominently established in Spain, Portugal, and Latin America, offering a broad range of legal services including corporate and M&A, energy, infrastructure, intellectual property, and venture capital. The firm targets corporate clients, investors, and legal professionals, positioning itself as a top-tier legal advisor in its markets. The website demonstrates a high level of professionalism with excellent content quality, clear navigation, and multi-language support, reflecting a mature digital presence. Technically, the site employs modern frameworks such as Bootstrap and Swiper, integrates Google Tag Manager for analytics, and is optimized for mobile devices with good accessibility and SEO practices. Security-wise, the site uses HTTPS and secure forms but lacks visible security headers and explicit privacy or cookie policies, indicating room for improvement in compliance and transparency. The absence of WHOIS data is notable and warrants further investigation, though the overall site and branding suggest legitimacy. Strategic recommendations include enhancing privacy compliance, publishing security policies, and improving WHOIS transparency to strengthen trust and security posture.
SIX Digital Exchangesdx.com
Finance · Switzerland
84Low
NIS2 10 · GDPR 85
NIS2 10 · GDPR 85
SIX Digital Exchange (SDX) is a pioneering financial market infrastructure provider offering the world's first fully regulated digital exchange and central securities depository based on blockchain technology. It operates under the regulatory oversight of FINMA and is part of the reputable SIX Group. SDX provides a secure and transparent platform for issuance, trading, settlement, and custody of digital assets, targeting institutional investors, issuers, and market participants interested in digital securities and tokenized assets. The website reflects a mature digital presence with comprehensive content, strong branding, and advanced technical implementation using WordPress and Elementor frameworks. Security posture is good with HTTPS and cookie consent mechanisms, though some security headers could be improved. WHOIS data is missing or privacy protected, which slightly reduces transparency but is likely justified given the regulated financial nature of the business. Overall, SDX presents a trustworthy and professional digital asset exchange platform with a strong market position and clear regulatory compliance.
Bullish Globalbullish.com
Finance · Gibraltar
88Low
NIS2 73 · GDPR 100
NIS2 73 · GDPR 100
Bullish Global operates a regulated and audited cryptocurrency exchange platform offering institutional and advanced traders access to spot, derivatives, margin trading, and custody services. The company holds tier-1 licenses, is regulated by the Gibraltar Financial Services Commission, and is audited annually by Deloitte & Touche LLP. Bullish is recognized as a top-five global spot trading venue for Bitcoin, emphasizing its strong market position and liquidity. The platform targets institutional clients and professional investors, providing a unified trading account and API access for advanced trading features. Technically, Bullish employs a modern web infrastructure built on Next.js and React, hosted behind Cloudflare, with integrated analytics via Piwik PRO and Google Tag Manager. The website is fast, mobile-optimized, and accessible, reflecting a mature digital presence. Security practices include HTTPS enforcement, multi-layer custody safeguards, offline key management, and strict segregation of customer assets, supporting a high-security posture. The security posture is robust, with no detected vulnerabilities or exposed sensitive data. The company maintains full reserve backing of customer assets and enforces rigorous KYC/AML compliance. Privacy policies and cookie consent mechanisms are comprehensive and GDPR compliant. However, minor improvements such as enabling DNSSEC and publishing a security.txt file could enhance security transparency. Overall, Bullish presents a trustworthy, professional, and secure platform with strong regulatory compliance and a clear focus on institutional crypto trading. Strategic recommendations include enhancing DNS security, formalizing incident response contacts, and increasing transparency around data protection officer details to further strengthen trust and compliance.
MME Compliance AGmme.ch
Other · Switzerland
76Low
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
MME Compliance AG is a Swiss-based integrated legal, tax, and compliance consultancy firm serving both corporate and private clients domestically and internationally. The company positions itself as an innovative and comprehensive advisory service provider with a strong focus on personalized client support. Their website reflects a professional and modern digital presence, leveraging HubSpot CMS and various analytics and marketing tools to optimize user experience and engagement. The firm maintains clear contact information and multiple office locations in Zurich and Zug, reinforcing accessibility and trust. Technically, the website is built on a robust infrastructure using HubSpot's platform, enhanced with Google Analytics 4, Google Tag Manager, Hotjar, and LinkedIn Insight for marketing and analytics purposes. The site is mobile-optimized, accessible, and SEO-friendly, with a moderate performance profile. Security practices include HTTPS enforcement and cookie consent mechanisms, although some HTTP security headers could be improved. From a security perspective, the site demonstrates good maturity with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with comprehensive privacy and cookie policies and active consent management. However, explicit security policies and incident response information are not publicly available, which could be enhanced to improve transparency and readiness. Overall, MME Compliance AG's website presents a trustworthy, professional, and secure digital front that aligns well with its business objectives and market positioning. Strategic improvements in security headers and disclosure policies would further strengthen its security posture and compliance stance.
Atompixlbar.com
E-commerce
83Low
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Atom operates a curated domain marketplace specializing in premium domain name sales, exemplified by the pixlbar.com domain listing. The website targets business buyers seeking brandable and sophisticated domain names, offering additional services such as free logos with domain purchases. The platform positions itself as a trusted marketplace with a professional and consistent brand presence. Technically, the site employs modern web technologies including New Relic for performance monitoring and Intercom for customer engagement, ensuring a responsive and user-friendly experience. Security posture is adequate with HTTPS enforced, though the absence of explicit security headers and privacy policies indicates room for improvement. Overall, the site is functional and professional but would benefit from enhanced privacy compliance and security transparency.
Moschino Official Storemoschino.com
Retail · Italy
85Low
NIS2 2 · GDPR 100
NIS2 2 · GDPR 100
Moschino Official Store operates a professional luxury fashion e-commerce website offering clothing, bags, shoes, accessories, and fragrances for women, men, and kids. The brand is well-established with a global presence and targets a general audience interested in high-end fashion products. The website is built on the Shopify platform, leveraging modern e-commerce technologies and third-party marketing and analytics tools to provide a seamless shopping experience. The technical infrastructure is robust, with good mobile optimization, accessibility, and SEO practices. Security posture is strong with HTTPS enforced and reputable third-party integrations, although explicit security headers and incident response contacts are not visible in the provided data. Privacy compliance is partially addressed through a cookie consent mechanism, but lacks a clearly linked privacy policy and terms of service pages. WHOIS data is unavailable, likely due to privacy protection, which slightly impacts trust but is common for luxury brands. Overall, the site is professional, secure, and trustworthy with room for improvement in privacy transparency and security disclosures.
- AAngels, Inc
deguest.asia
Other · Japan
87Low
NIS2 2 · GDPR 73
NIS2 2 · GDPR 73
The analyzed website is a LinkedIn public profile page for Jacques Deguest, a tech-savvy Angel Investor and Master of Laws holder based in Tokyo, Japan. The profile is hosted on LinkedIn, a globally recognized professional networking platform. The profile includes professional experience, articles, and publications related to corporate governance and legal topics, targeting business professionals and investors. The website infrastructure leverages LinkedIn's proprietary frontend framework, uses modern web technologies including JSON-LD for structured data, and integrates Google Identity Services for authentication. Security posture is strong with HTTPS enforced, comprehensive security headers, and secure login forms. Privacy and cookie policies are comprehensive and GDPR compliant, with explicit consent mechanisms. No direct company contact information or business registration details are publicly available on the profile page, consistent with LinkedIn's platform model. The domain WHOIS data is privacy protected, typical for a major platform like LinkedIn, with no suspicious indicators. Overall, the website is professional, secure, and trustworthy, serving as a personal branding and networking tool within the LinkedIn ecosystem.
Atabixatabix.com
Government · Netherlands
78Low
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Atabix is a Dutch SaaS provider specializing in digital solutions for government and semi-government organizations. Their offerings include a suite of applications focused on zaakgericht werken (case-oriented working), digital forms, and secure client portals. The company positions itself as both a software vendor and a knowledge partner, providing consultancy, development, and strategy services. Their market presence is supported by over 25 years of experience and a client base that includes prominent Dutch government agencies. Technically, the website is built on Webflow with integrations for Google Tag Manager and HubSpot analytics, reflecting a modern and performant digital infrastructure. Security practices include HTTPS enforcement and a comprehensive cookie consent mechanism, though there is room for improvement in explicit security headers and incident response transparency. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations.
InvestigateTVinvestigatetv.com
Media
76Low
NIS2 29 · GDPR 53
NIS2 29 · GDPR 53
InvestigateTV is a professional investigative journalism media outlet operated under Gray Local Media, focusing on consumer advocacy, health, and in-depth news stories. The website offers video content, livestreams, and full episodes, targeting a general audience interested in trustworthy investigative reporting. The technical infrastructure leverages modern web technologies including React, Arc Publishing CMS, and integrates multiple advertising and analytics platforms such as Google Analytics, Taboola, and PubMatic. The site is mobile-optimized and demonstrates good SEO and accessibility practices. Security posture is solid with HTTPS and security headers in place, though there is room for improvement in publishing explicit security policies and cookie consent mechanisms. The WHOIS data for the domain is missing, which raises some concerns about domain registration transparency, but the website content and branding strongly indicate legitimacy. Overall, the site scores well on content quality, technical implementation, and business credibility, with moderate privacy compliance.
- Southern Cross Life Insurance
southerncrosslife.co.nz
Finance · New Zealand
80Low
NIS2 2 · GDPR 58
NIS2 2 · GDPR 58
Southern Cross Life Insurance, underwritten by Chubb Life Insurance New Zealand Limited, offers life insurance products targeting New Zealand residents. The company positions itself as the most trusted life insurance brand in New Zealand, providing coverage options up to $1 million, with additional benefits such as accidental death cover and advanced funeral benefits. The website is professionally designed with clear navigation and strong branding consistency, supporting a direct-to-consumer business model with online quoting and application capabilities. Technically, the site leverages modern JavaScript libraries, a Sitecore CMS platform, and Azure CDN hosting, delivering moderate performance and good mobile optimization. Security posture is generally strong with HTTPS enforced and no exposed sensitive data, though the absence of security headers and cookie consent mechanisms are areas for improvement. The lack of WHOIS data limits domain trust verification, but the website content and branding strongly support legitimacy. Overall, the site demonstrates a mature digital presence with room for enhanced privacy compliance and security best practices.
Southern Cross Pet Insurance Limitedsoutherncrosspet.co.nz
Other · New Zealand
81Low
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Southern Cross Pet Insurance Limited operates a professional and well-branded website focused on providing pet insurance products to New Zealand pet owners. The company offers two main insurance plans covering illness, injury, and accident-only scenarios, along with a free introductory cover for puppies and kittens. The website is part of the larger Southern Cross group, a trusted name in New Zealand insurance, which enhances its market credibility. The site is well-structured, mobile-optimized, and includes comprehensive policy documents and customer support channels. Technically, the site uses modern JavaScript libraries and integrates multiple marketing and analytics tools such as HubSpot, Google Tag Manager, Facebook Pixel, and Qualtrics for feedback collection. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers could be improved. WHOIS data is unavailable likely due to privacy protection, which is common and justified for commercial entities. Overall, the website demonstrates a mature digital presence with good compliance and trust indicators.
Xumoxumo.com
Media · United States
79Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Xumo operates as a leading free ad-supported streaming television (FAST) service and streaming device provider, backed by major industry players Comcast and Charter. The company offers a smart TV experience (Xumo TV), a streaming device (Xumo Stream Box), and a free streaming service (Xumo Play) with extensive content offerings. The website reflects a mature digital presence with modern technologies such as Next.js, Adobe DTM, and OneTrust for privacy compliance. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though explicit security policies and incident response contacts are not publicly disclosed. The absence of WHOIS data is notable but likely due to privacy or registry policies rather than malicious intent. Overall, Xumo presents a professional, trustworthy brand with a strong market position in the streaming media industry.
DCC Technologyvizio.com
Technology
84Low
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
DCC Technology operates as a major technology distributor, enabling global technology brands to reach customers and businesses across professional technology, information technology, and lifestyle technology sectors. The company is positioned as a large, established entity with a broad portfolio and extensive customer base, supported by its parent company DCC plc. The website demonstrates a high level of professionalism, with rich multimedia content, clear navigation, and consistent branding. Technically, the site uses modern JavaScript libraries and frameworks, including jQuery, GSAP, and Sitecore CMS, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and published security policies are absent. WHOIS data is missing or unavailable, which raises some concerns about domain registration transparency. Overall, the site is trustworthy and business credible but would benefit from enhanced security disclosures and direct contact information.
Samsungsamsungtvplus.com
Technology · Finland
76Low
NIS2 17 · GDPR 85
NIS2 17 · GDPR 85
Samsung's Finnish localized website for Samsung TV Plus showcases their free streaming TV channel service integrated into Samsung Smart TVs. The site is professionally designed, leveraging Adobe Experience Manager and Adobe marketing tools, indicating a mature digital infrastructure. The content is relevant and well-structured, targeting Finnish consumers interested in Samsung's smart TV offerings. Security posture is strong with HTTPS and no visible vulnerabilities, though explicit privacy and cookie policies are not detected in the provided HTML snippet, which is a compliance gap. WHOIS data is not publicly accessible, typical for a major brand, but reduces transparency slightly. Overall, the site is trustworthy and well-positioned in the consumer electronics market.
TraderFox GmbHtraderfox.com
Finance · Germany
86Low
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
TraderFox GmbH is a well-established German company founded in 2006, specializing in trading software and financial research services for retail investors and active traders. Their offerings include a browser-based trading terminal, portfolio analysis tools, stock screeners, real-time news feeds, and educational masterclasses. The company has a strong market position in the German-speaking region with over 100,000 registered users and partnerships with reputable data providers such as dpa-AFX, Morningstar, Factset, and Deutsche Börse. The website is professionally designed, mobile-optimized, and provides clear subscription and product information.
visit.brusselsticketing.brussels
Hospitality · Belgium
78Low
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
The website www.ticketing.brussels serves as the official online ticketing platform for cultural and leisure events in Brussels, including concerts, theatre, museums, festivals, and exhibitions. It targets tourists and residents seeking to purchase tickets conveniently for various events in the city. The platform is associated with the official Visit Brussels tourism organization, lending it credibility and market presence. The business model centers on e-commerce ticket sales, facilitating access to a broad range of entertainment and cultural activities.
P&V Grouptravailleravecvivium.be
Finance · Belgium
77Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
The website travailleravecvivium.be serves as a career and employment portal for Vivium, a brand under the P&V Group, a well-established insurance company in Belgium. The site targets job seekers primarily in the Dutch and French-speaking regions of Belgium, providing information about working at Vivium and related employment opportunities. The business model focuses on insurance services and employer branding to attract talent. The domain is registered since 2016, consistent with the business's operational timeline, and the website branding aligns with the parent company, P&V Group.
P&V Groupwerkenmetvivium.be
Other · Belgium
77Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Werken met Vivium is a corporate platform associated with the P&V Group, likely serving as an employment or collaboration portal for Vivium, an insurance company under the P&V Group umbrella. The website targets employees or job seekers related to Vivium and provides resources relevant to this audience. The platform is built on modern web technologies including React and Liferay CMS, indicating a moderate level of digital maturity. The technical infrastructure supports standard web functionalities with integrations for analytics and cookie consent management. Security posture is adequate with HTTPS enforced and Content-Security-Policy headers present, though there is room for improvement in security headers and explicit security policies. Privacy compliance is basic, with cookie consent implemented but no visible privacy or terms of service policies. Overall, the website is functional and moderately professional but lacks comprehensive privacy and security documentation.
P&V Groeppvgroup.be
Energy · Belgium
80Low
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
P&V Groep is a Belgian cooperative operating primarily in the energy sector, providing energy supply and cooperative membership services. The website reflects a mature business with a domain age of over 13 years, consistent with the cooperative's history. The digital infrastructure is built on the Liferay CMS platform, utilizing modern JavaScript frameworks such as React and jQuery, and integrates third-party services like Google Analytics and Cookiebot for analytics and cookie consent management. The website demonstrates good technical implementation with a strong Content Security Policy and HTTPS enforcement, contributing to a solid security posture. However, explicit privacy policies, terms of service, and contact information are not clearly present in the analyzed content, which impacts privacy compliance and user trust. Overall, the website is professional and safe, targeting a general audience interested in cooperative energy services.
- BuddyNS.com
buddyns.com
Technology
76Low
NIS2 10 · GDPR 35
NIS2 10 · GDPR 35
BuddyNS.com operates as a specialized DNS service provider focusing on secondary DNS solutions that emphasize speed, reliability, and security. The website positions itself as a niche leader offering immediate zone synchronization and 100% uptime, targeting businesses and organizations that require robust DNS backup and replication services. The company leverages modern web technologies such as jQuery, Bootstrap, and Google Analytics to deliver a responsive and user-friendly experience. Despite the professional presentation and positive client testimonials, the absence of WHOIS data raises concerns about domain registration transparency. Security posture is adequate with HTTPS and some best practices, but lacks comprehensive security headers and explicit incident response information. Privacy compliance is basic, with no cookie consent mechanism detected. Overall, the website is trustworthy and technically sound but would benefit from enhanced transparency and privacy features.
US Legal PROuslegalpro.com
Other · United States
76Low
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
US Legal PRO is an established online legal services provider specializing in court eFiling, legal forms, process and mail services, and APIs primarily targeting attorneys and self-filers in select US states such as Texas, California, Illinois, Indiana, and Maryland. The company has been operating since 2013, demonstrating a mature market presence with a focused niche in simplifying legal filings and related services. Their website offers guided filing, self eFiling, and API integrations, positioning them as a technology-enabled legal service provider. Technically, the website employs a modern technology stack including Bootstrap 5, jQuery, Dropzone, Parsley, Quill, PDF.js, and analytics tools like Microsoft Clarity, PostHog, and Statcounter. The site is hosted with DNS managed by Google Cloud DNS and registered through Squarespace Domains, indicating a reliable infrastructure. The website is mobile-optimized and provides a good user experience with clear navigation and relevant content. From a security perspective, the site uses HTTPS with a valid SSL configuration and domain registration protections such as clientDeleteProhibited and clientTransferProhibited statuses. However, DNSSEC is not enabled, and no explicit security headers were detected in the HTML content. There is no visible cookie consent mechanism or published security policy, which are areas for improvement to enhance compliance and security posture. Overall, US Legal PRO presents a trustworthy and professional online legal service platform with good business credibility and technical implementation. Strategic improvements in security headers, DNSSEC, and privacy compliance would further strengthen their security posture and regulatory adherence.
CivicPlus LLCmunicodeweb.com
Government
77Low
NIS2 55 · GDPR 68
NIS2 55 · GDPR 68
CivicPlus LLC operates a comprehensive software platform focused on empowering local governments and public sector organizations with digital solutions that enhance efficiency and resident engagement. Their flagship offering, CivicPlus Municipal Websites, provides customizable, mobile-friendly content management systems tailored for municipalities, enabling digital city halls and integrated government services. The company holds a strong market position with over 5,000 government websites and significant cybersecurity investment. Technically, the website is built on WordPress with modern SEO and analytics tools such as Yoast SEO Premium, Google Analytics, HubSpot, and Algolia Search. The site demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate. Security posture is solid with HTTPS and no exposed sensitive data, but lacks some security headers and explicit security policies. The WHOIS data is missing or not publicly available, which raises some concerns about domain registration transparency. However, the website content, branding, and external integrations strongly support the legitimacy of the business. Privacy and cookie policies are not clearly found, indicating room for improvement in compliance. Overall, CivicPlus presents a professional and trustworthy digital presence with a strong focus on government technology solutions, but should enhance transparency in domain registration and privacy compliance to strengthen trust further.
- PPayments & Services
county-taxes.net
Government
78Low
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website county-taxes.net serves as an online platform for managing and making payments related to government services, specifically bill payments. The site is relatively new, established in 2021, and uses modern web technologies such as Vue.js and Google Tag Manager. The content is minimal but focused on providing a convenient payment service. The lack of detailed business information, contact details, and policies limits the transparency and trustworthiness of the site. From a technical perspective, the site employs a modern JavaScript framework and is hosted with Cloudflare DNS services. However, there is no evidence of DNSSEC, security headers, or comprehensive privacy and cookie policies, which are important for security and compliance. The site is accessible without WAF or security challenge blocks, indicating no immediate access restrictions. Security posture is moderate but could be improved by implementing security headers, enabling DNSSEC, and publishing privacy and cookie policies. No vulnerabilities or exposed sensitive data were detected in the provided content. The domain registration is consistent and appropriate for the business type, registered with a reputable registrar, Cloudflare, Inc. Overall, the site presents a basic but functional government payment service with room for improvement in security, privacy compliance, and business transparency.
GamesRadar+gamesradar.com
Media
82Low
NIS2 2 · GDPR 85
NIS2 2 · GDPR 85
GamesRadar+ is a well-established online media platform focused on video games, movies, TV, and comics. It serves a broad audience of gamers and entertainment enthusiasts by providing news, reviews, guides, and deals. The site is professionally designed and maintained, reflecting a mature digital presence likely under the Future plc media group umbrella. Technically, the site employs modern web technologies including asynchronous JavaScript loading, CDN hosting, and structured data for SEO and social media integration. Security posture is solid with HTTPS and no visible vulnerabilities, though explicit security headers and policies are not publicly visible. Privacy compliance is limited by the absence of visible privacy and cookie policies in the provided content. Overall, the site is trustworthy and high quality but could improve transparency around privacy and security policies.
TechRadartechradar.com.au
Technology · United Kingdom
82Low
NIS2 17 · GDPR 85
NIS2 17 · GDPR 85
TechRadar is a well-established technology news and review platform operated under the parent company Future PLC. It offers comprehensive technology-related content including news, reviews, buying guides, and gaming insights targeted at technology consumers and enthusiasts globally, with localized versions such as the Finnish site analyzed here. The website demonstrates a mature digital infrastructure with modern JavaScript frameworks, structured data for SEO, and integration with major analytics and advertising platforms. Security posture is strong with HTTPS enforced and no evident vulnerabilities, although explicit security policies and vulnerability disclosure mechanisms are not publicly available. Privacy compliance is robust with clear privacy and cookie policies and consent mechanisms. Overall, the site is professional, trustworthy, and well-positioned in the technology media market.
LGT Venture Philanthropylgtvp.com
Non-profit
76Low
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
LGT Venture Philanthropy is a well-established non-profit organization founded in 2007, focused on supporting local organizations in Sub-Saharan Africa and India to address systemic challenges in health, education, and the environment. The organization operates by providing funding, business expertise, and network access to portfolio organizations, aiming to build resilient communities and healthy ecosystems. The website reflects a professional and consistent brand aligned with its parent company, LGT Private Banking. Technically, the website employs modern web technologies including JavaScript, SVG icons, web fonts, and Piwik PRO analytics with privacy-conscious configurations. The site is mobile-optimized, accessible, and SEO-friendly, with structured data enhancing search visibility. No CMS or hosting provider is explicitly identified, but performance is moderate and user experience is excellent. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms, but lacks explicit security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with comprehensive policies and GDPR adherence. The WHOIS data is consistent and supports the legitimacy of the domain and business. Overall, the website presents a low-risk profile with strong business credibility and good privacy practices. Recommendations include publishing a formal security policy, incident response contacts, and a vulnerability disclosure program to further enhance trust and security posture.
- CV Summit
blockchainsummit.ch
Technology · Switzerland
76Low
NIS2 25 · GDPR 68
NIS2 25 · GDPR 68
CV Summit is a leading Swiss conference focused on blockchain, AI, digital assets, and crypto technologies, attracting over 3,000 attendees including industry leaders, investors, and policymakers. The event offers multiple stages, workshops, and networking opportunities, positioning itself as Switzerland's largest event in this sector. The website is professionally designed using WordPress with modern technologies and optimized for mobile devices. It integrates Google Tag Manager for analytics and tracking. Security posture is good with HTTPS and security headers implemented, though explicit security policies and incident response contacts are not published. Privacy compliance is partial due to missing privacy and terms of service pages. Overall, the site is trustworthy and well-positioned in its market niche.
BX Swissbxswiss.com
Finance · Switzerland
76Low
NIS2 2 · GDPR 58
NIS2 2 · GDPR 58
BX Swiss operates as a Swiss regulated stock exchange with a long historical legacy dating back to 1884. The website presents a professional platform offering market data, trading information, and tools for investors and financial professionals. The company targets investors and market participants primarily within Switzerland but also offers access to international shares and ETFs. The business model centers on providing regulated trading services and market infrastructure under FINMA supervision. Technically, the website employs modern JavaScript libraries including SignalR for real-time data, Google Analytics for tracking, and Swiper.js for UI components. The site is mobile optimized, accessible, and SEO friendly, though some improvements in security headers and cookie consent mechanisms are recommended. Performance is moderate with a clean and professional design. Security posture is solid with HTTPS enforced and no visible sensitive data exposure. However, the absence of security headers and lack of published security policies or incident response contacts represent areas for enhancement. Privacy compliance is basic with a privacy policy present but no explicit cookie consent mechanism. Overall, the website is trustworthy and professional, though the lack of WHOIS registration data introduces some uncertainty about domain legitimacy. Strategic recommendations include improving security headers, implementing cookie consent, publishing security and incident response policies, and verifying domain registration transparency.
Local News Livegraydc.com
Media
82Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Local News Live is a digital news media organization delivering national news stories, video content, and livestreams primarily focused on U.S. current events. The website is professionally designed with consistent branding and targets a general audience interested in news and media content. Technically, the site leverages modern web technologies including React, Google Analytics, and Arc Publishing CMS, ensuring good performance and mobile optimization. Security posture is strong with HTTPS enforcement and standard security headers, though explicit privacy policies and contact information are lacking. The absence of WHOIS registration data is a notable anomaly that impacts domain trustworthiness. Overall, the site is functional and credible as a media outlet but would benefit from enhanced transparency and compliance documentation.
- Southern Cross Medical Care Society
southerncross.co.nz
Healthcare · New Zealand
78Low
NIS2 2 · GDPR 58
NIS2 2 · GDPR 58
Southern Cross Medical Care Society operates as New Zealand's largest private healthcare organization, offering a comprehensive range of insurance products including health, travel, life, and pet insurance, alongside a national network of healthcare providers. The organization holds a strong market position with leadership in pet and health insurance sectors and maintains a large customer base. The website reflects a mature digital presence with modern technologies such as Sitecore CMS, Azure CDN hosting, and integration of analytics and marketing tools like Google Tag Manager and Facebook Pixel. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy and cookie policies are present and indicate GDPR compliance. The absence of WHOIS data is noted but likely due to registry policies rather than malicious intent. Overall, the site demonstrates professionalism, trustworthiness, and a strong commitment to community engagement.
ClickReport LLCclickreport.com
Technology
76Low
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
ClickReport LLC operates a specialized SaaS platform focused on automated pay-per-click (PPC) fraud detection, prevention, and real-time reporting to protect digital advertising budgets. The company targets businesses and marketers using PPC platforms such as Google Ads, Yahoo, and Bing, offering tools like daily click reports, real-time alerts, and a four-tiered warning system. The website demonstrates a professional and consistent brand presence with clear calls to action for free trials and signups. Technically, the website employs modern web technologies including Bootstrap 4, jQuery, Google Tag Manager, and tracking pixels from Google and Bing. It is mobile optimized and uses HTTPS with secure forms and consent management, reflecting a mature digital infrastructure. However, some security headers are missing, and no explicit security policy or incident response contacts are published. From a security perspective, the site shows good practices such as HTTPS enforcement and cookie consent but lacks published vulnerability disclosure or security.txt files. The absence of WHOIS data reduces domain trust slightly, though the website content and business model appear legitimate and professional. No adult or questionable content is present, and privacy policies indicate GDPR compliance. Overall, ClickReport presents a credible and focused business with a solid technical foundation and good privacy compliance. Strategic improvements in security transparency and WHOIS data availability would enhance trust and security posture further.
Education · United States
79Low
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
The Gemological Institute of America (GIA) is a globally recognized non-profit organization specializing in gemological research, education, and laboratory services. Established in 1931, GIA serves a diverse audience including gem and jewelry buyers, students, researchers, and industry professionals. The website reflects a mature digital presence with comprehensive educational content, research publications, and service offerings. Technically, the site employs modern web technologies such as Google Tag Manager, Typekit fonts, and slick carousel for enhanced user experience. The site is mobile-optimized and accessible, with good SEO practices and consent management implemented via TrustArc. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though additional security headers and a published security policy would enhance trust. WHOIS data is unavailable, likely due to .edu domain policies, but the brand's longstanding reputation mitigates concerns. Overall, the site is professional, trustworthy, and well-aligned with its educational mission.
METVA.CZmetva.cz
Other · Czech Republic
76Low
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
METVA.CZ is a specialized weather alert service focused on providing up-to-date meteorological warnings for the Czech Republic. The website offers detailed weather warnings including rain, snow, wind, thunderstorms, and freezing rain, updated every five minutes. It targets the general public and possibly emergency services or businesses requiring timely weather information. The service includes interactive maps and options for SMS and email alerts, positioning itself as a regional leader in weather warnings. The domain is mature, registered since 2010, and uses reputable infrastructure and third-party services for analytics and advertising.
UBIMETburzoweinfo.pl
Other · Poland
76Low
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
Burzoweinfo.pl is a specialized weather warning service focused on providing real-time and accurate severe weather alerts for Poland. The website offers detailed weather warnings including rain, snowfall, wind, thunderstorms, and freezing rain, updated every five minutes. It serves a broad audience interested in timely weather information, leveraging partnerships with other European weather alert services. The business operates under the umbrella of UBIMET, a known weather service provider, and has been active since 2011, indicating a mature presence in the regional weather information market. Technically, the site employs modern web technologies such as OpenLayers for mapping, Handlebars.js for templating, and integrates Google Analytics for user insights. It also uses ConsentManager.net to ensure GDPR compliance with a comprehensive cookie consent mechanism. Security-wise, the site enforces HTTPS and uses reputable domain registration but lacks explicit security policies or incident response disclosures. Overall, the site is professional, trustworthy, and compliant with privacy regulations, though it could improve by publishing security policies and vulnerability disclosure information.

—
76Low
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
UWZ.atunwetter.ch
Other · Switzerland
76Low
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
unwetter.ch is a professional weather warning platform focused on providing real-time and accurate severe weather alerts for Switzerland. The site offers free content such as radar, videos, and news, alongside subscription-based premium alert services delivered via SMS and email. It maintains a consistent brand presence and is part of a network of related European weather warning sites. The technical infrastructure leverages modern JavaScript frameworks, OpenLayers for mapping, and integrates Google Analytics and a consent management platform to ensure GDPR compliance. Security posture is strong with HTTPS enforcement and standard security headers, though explicit security policies and incident response contacts are not publicly disclosed. Overall, the site is well-structured, user-friendly, and trustworthy, serving a general audience seeking weather information and alerts.
- Zalo Group
zalo.vn
Technology · Vietnam
77Low
NIS2 2 · GDPR 65
NIS2 2 · GDPR 65
Zalo Group operates the Zalo PC platform, a leading Vietnamese messaging application offering desktop clients for Windows, Mac OS, and web access. The platform targets general users and business teams, providing features such as large file transfers, group chat optimization, and synchronization with mobile devices. The website is professionally designed, consistent in branding, and provides clear navigation and relevant content in Vietnamese. The business model includes free software downloads and additional services for enterprises such as Official Accounts and developer APIs. Technically, the site uses modern JavaScript libraries like jQuery and Bootstrap, integrates Google Analytics and adtima for marketing and tracking, and supports multiple platforms. Performance and mobile optimization are good, though accessibility features are basic. Security posture is moderate with HTTPS implied but lacks DNSSEC and explicit security headers. Privacy compliance is basic with cookie consent implemented but no detailed privacy or security policies visible on the main page. WHOIS data shows privacy protection but domain age and registrar are consistent with a legitimate business. Overall, the site is trustworthy and professional but could improve security and compliance transparency.
Eclipse SRLudesly.com
Technology
76Low
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Udesly is a technology-focused company specializing in no-code Webflow resources and conversion tools that enable users to transform Webflow designs into themes compatible with WordPress, Shopify, Jamstack, and Ghost. Their flagship product, Udesly Nexus, offers a streamlined app experience for these conversions, targeting web designers and agencies seeking efficient multi-platform deployment. The company also provides premium templates, educational resources, and complementary services such as the 'Turn My Figma' design conversion service. The website is professionally designed, mobile-optimized, and integrates modern web technologies including Google Analytics and Shopify chat support. Technically, the site leverages Webflow CMS, jQuery, Google Tag Manager, and third-party integrations to deliver a performant and user-friendly experience. The presence of cookie consent and privacy policies indicates attention to privacy compliance, although explicit security headers and incident response contacts are not publicly documented. The SSL configuration is robust, and no content blocking or WAF challenges were detected, allowing full content accessibility. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and cookie consent mechanisms but lacks visible advanced security headers and public vulnerability disclosure channels. The WHOIS data is unavailable, which slightly reduces trust but is mitigated by consistent branding and professional content. Overall, the site presents a low-risk profile with room for improvement in transparency and security documentation. Strategically, Udesly should focus on enhancing its security posture by implementing recommended HTTP headers, publishing incident response contacts, and possibly a security.txt file. Improving direct contact availability and WHOIS transparency would further bolster business credibility and trust.
- CCoregas
coregas.co.nz
Energy · New Zealand
76Low
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Coregas is a well-established manufacturer and distributor of industrial, medical, and specialty gases operating primarily in New Zealand and Australia. The company is backed by major corporate entities including Nippon Sanso Holdings Corporation and Wesfarmers, positioning it strongly in the energy and manufacturing sectors. Their website reflects a professional and comprehensive digital presence with detailed product ranges, services, and corporate information. The business model focuses on supplying compressed gases and cryogenic liquids to a wide range of industries, supported by technical services and safety training. The target audience includes industrial users, laboratories, and specialty gas consumers.
Kenshoo Skaiskai.io
Technology · United States
83Low
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Kenshoo Skai operates as an omnichannel marketing platform delivering advanced marketing technology solutions to enterprises and marketing professionals. The company focuses on providing tools for campaign optimization and marketing analytics across multiple channels, positioning itself as a significant player in the marketing technology sector. The website reflects a mature digital presence built on WordPress with modern performance optimizations and a consistent branding approach. Security posture is adequate with HTTPS enabled and domain protections in place, though improvements such as enabling DNSSEC and publishing security policies are recommended. Privacy compliance is currently weak due to the absence of explicit privacy and cookie policies. Overall, the website is professional and trustworthy, but enhancing privacy and security transparency would strengthen its credibility.
WCJBwcjb.com
Media · United States
78Low
NIS2 2 · GDPR 65
NIS2 2 · GDPR 65
WCJB is a regional local news media outlet serving North Central Florida, including Gainesville, Ocala, and Lake City. It provides comprehensive news coverage, weather updates, sports reporting, and community engagement content. The website is professionally designed with consistent branding and targets local residents seeking timely and relevant information. WCJB operates under the parent company Gray Television, a reputable media conglomerate, which enhances its market position and trustworthiness. The business model centers on digital media content delivery supported by advertising networks and community partnerships. Technically, WCJB employs a modern technology stack including React, Arc Publishing CMS, and integrates multiple advertising and analytics services such as Taboola, PubMatic, Amazon Ads, Google Analytics, and Comscore. The site is mobile-optimized and demonstrates good SEO and accessibility practices, although some accessibility features could be improved. Performance is moderate, with a well-structured navigation system and clear content hierarchy. From a security perspective, the website enforces HTTPS with strong SSL configuration and includes essential security headers. There is no evidence of exposed sensitive data or vulnerable libraries. However, the absence of a dedicated security policy page and incident response contact information represents an area for improvement. Privacy compliance is well addressed with visible privacy and cookie policies, including GDPR considerations. Overall, WCJB presents a low-risk profile with a solid security posture and good business credibility. The main concern is the lack of WHOIS registration data, which is inconsistent with the active and professional nature of the website. This anomaly should be monitored to ensure domain legitimacy. Strategic recommendations include publishing a security policy, adding vulnerability disclosure information, enhancing accessibility, and maintaining regular audits of third-party scripts.
Grant Thornton Switzerland / Liechtensteingrantthornton.ch
Finance · Switzerland
85Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Grant Thornton Switzerland / Liechtenstein is a well-established professional services firm providing audit, tax, advisory, and consulting services primarily to businesses in Switzerland and Liechtenstein. The firm operates as a member of the global Grant Thornton International network, positioning itself as a leading mid-tier player in the finance sector within its geographic market. The website reflects a professional and consistent brand image aligned with international standards, targeting corporate clients seeking high-quality financial and advisory services. Technically, the website employs modern analytics and marketing technologies such as Google Analytics, Microsoft Clarity, Optimizely, and OneTrust for cookie consent management, indicating a mature digital infrastructure. The site is mobile-optimized with good SEO and accessibility features, although some technical details like CMS and hosting provider are not explicitly identified. From a security perspective, the site enforces HTTPS with strong SSL configuration and implements key security headers. Privacy compliance is robust with comprehensive privacy and cookie policies and active consent mechanisms. However, the absence of a dedicated security policy, incident response information, and vulnerability disclosure mechanisms suggests areas for improvement in transparency and security maturity. Overall, the website presents a low-risk profile with strong business credibility and privacy compliance. Strategic recommendations include publishing explicit security and incident response policies and implementing a vulnerability disclosure program to enhance trust and security posture further.
CV VC AGcvvc.com
Technology · Switzerland
77Low
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
CV VC AG is a Swiss-based blockchain venture capital firm established in 2016, specializing in seed funding and acceleration programs for transformative blockchain startups globally. Positioned as a pioneer in Crypto Valley, Switzerland, CV VC offers investment products to qualified investors and operates an ecosystem arm called CV Labs, which supports startups through coworking spaces and events. The website reflects a professional and modern digital presence with comprehensive content targeting blockchain innovators and investors. Technically, the site is built on Webflow with integrations including Google Analytics, HubSpot, and CookieScript, ensuring good performance and user experience across devices. Security posture is solid with HTTPS and reCAPTCHA usage, though lacks visible HTTP security headers and published security policies. WHOIS data is unavailable, likely due to privacy protection, which slightly impacts trust but is common for VC firms. Overall, the site demonstrates a mature digital footprint suitable for its business domain.
Hauck Aufhäuser Lampe Privatbankhal-privatbank.com
Finance · Germany
82Low
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Hauck Aufhäuser Lampe Privatbank operates as a private banking and wealth management institution primarily targeting private clients and investors. The website presents a professional image with clear branding and a focus on helping clients achieve their financial goals. The technical infrastructure is based on TYPO3 CMS, indicating a mature content management approach with good mobile optimization and accessibility. However, the absence of WHOIS registration data raises concerns about domain legitimacy. Security posture is moderate with HTTPS enabled but lacking advanced security headers and explicit privacy policies. Overall, the site is functional and professional but requires improvements in transparency and security compliance to enhance trust.
LGT Private Bankinglgt.li
Finance · Liechtenstein
77Low
NIS2 25 · GDPR 53
NIS2 25 · GDPR 53
LGT Private Banking is a well-established global private bank with over 100 years of history, specializing in wealth management and investment solutions for wealthy clients. The company emphasizes sustainability and forward-looking investment strategies, serving ultra-high-net-worth individuals and financial intermediaries worldwide. The website reflects a mature digital presence with multiple language and location options, comprehensive content including news, insights, and career opportunities, and secure client login portals. Technically, the site uses modern JavaScript libraries, Piwik PRO analytics, and implements cookie consent mechanisms aligned with GDPR requirements. Security posture is strong with HTTPS enforced and secure cookie handling, though explicit security headers could be improved. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with privacy standards.
VP Bank Ltdvpbank.com
Finance · Liechtenstein
76Low
NIS2 2 · GDPR 65
NIS2 2 · GDPR 65
VP Bank Ltd is a well-established international private bank headquartered in Liechtenstein, offering a broad range of financial services including wealth management, investment advisory, financing, and e-banking. The bank operates across multiple financial centers including Switzerland, Luxembourg, Singapore, and the British Virgin Islands, reflecting a strong international presence and diversified market reach. The website content is professionally presented, targeting private clients and intermediaries with clear navigation and comprehensive service descriptions. Technically, the website is built on Drupal CMS and employs modern web technologies including SVG animations and a self-hosted Matomo analytics platform, complemented by a Usercentrics consent management platform ensuring GDPR compliance. The site is mobile-optimized, accessible, and SEO-friendly, indicating a mature digital infrastructure. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms, with no visible vulnerabilities or exposed sensitive data. However, explicit security headers and a published security.txt file are absent, and incident response contact details are not clearly provided, representing areas for improvement. The WHOIS data is unavailable, likely due to privacy protection, but the overall legitimacy of the domain and business is supported by consistent branding, detailed business information, and international regulatory compliance. Overall, VP Bank Ltd's website demonstrates a high level of professionalism, security awareness, and regulatory compliance, making it a trustworthy platform for its target audience. Strategic recommendations include enhancing security headers, publishing vulnerability disclosure information, and providing clearer incident response contacts to further strengthen trust and security posture.