Medium-risk security reports
99,068 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,171001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
11,451–11,500 of 99,068
- Concrete Pump Repair South
concretepumpssouth.com
Transportation · United States
69Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Concrete Pump Repair South is a specialized service provider focused on concrete pump repair and parts distribution, particularly Schwing OEM parts. The company operates as a Small Line Dealer and satellite CPR Repair center in the Southeastern United States, emphasizing quality and customer support. The website is professionally designed using the Squarespace platform, featuring clear navigation and responsive design, though it lacks explicit contact details and privacy-related policies. Technically, the site benefits from HTTPS and HSTS, ensuring secure connections, but could improve by adding additional security headers and privacy compliance features. The absence of WHOIS data reduces domain trustworthiness, suggesting recent registration or privacy protection, which should be monitored. Overall, the site presents a credible business front but requires enhancements in privacy, contact transparency, and security best practices to strengthen trust and compliance.
- wbv Media
wbv-media.de
Media · Germany
62Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
wbv Media is a well-established German family-owned media and logistics company with over 150 years of history. It operates through three main business units: Distribution, Communication, and Publication, serving public clients, scientific communities, and online shops. The company positions itself as a reliable partner with scalable logistics and communication services, emphasizing tradition and innovation. Technically, the website uses modern frameworks like UIkit and jQuery, is mobile-optimized, and implements a cookie consent mechanism with blocking access until consent is given. Security posture is solid with HTTPS and no visible vulnerabilities, though explicit security headers and policies are not published. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.
Rynek.Pro | Lokalni-Profesjonalnirynek.pro
Retail · Poland
54Medium
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Rynek.Pro is a local business directory portal primarily serving Polish and Lithuanian markets, offering categorized listings for production, retail trade, wholesale, and services. The platform targets local consumers and businesses seeking reliable contractors and professional services. It operates as an online advertisement and business listing service with an interactive map feature to enhance user experience. The website is built on WordPress using the TownHub theme and integrates modern technologies such as Elementor, WooCommerce, and Matomo Analytics, reflecting a moderate to good level of digital maturity. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although some security headers and explicit security policies are absent. The domain WHOIS data is privacy protected but registered through a reputable registrar, consistent with the business type. Overall, the site demonstrates good professionalism, privacy compliance, and user experience, making it a trustworthy platform for local business promotion.
- Formspree
formspree.io
Technology · United States
72Medium
NIS2 2 · GDPR 70
NIS2 2 · GDPR 70
Formspree, Inc is a US-based technology company founded in 2014 that provides a SaaS form backend, API, and email service tailored for developers and businesses seeking to embed custom forms without server code. The company enjoys a strong market position, trusted by over 500,000 users including freelancers, agencies, and Fortune 500 companies such as Amazon, OpenAI, and Adobe. Their key services include spam filtering, email notifications, third-party integrations, and easy-to-use popup forms, positioning them as a reliable form solution provider in the developer tools space. Technically, the website is built using the Hugo static site generator and leverages modern analytics platforms including Google Analytics, Amplitude, and PostHog. Hosting and DNS services are provided by Cloudflare, ensuring fast performance and robust infrastructure. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital presence. Security practices include HTTPS enforcement, machine learning spam filtering, reCaptcha integration, and custom spam rules, although DNSSEC is not enabled and some security headers may be missing. From a security standpoint, Formspree demonstrates a solid posture with no visible vulnerabilities or exposed sensitive data. Privacy and terms of service policies are comprehensive and GDPR compliant, though explicit incident response contacts and vulnerability disclosure policies are absent. The domain registration data aligns well with the website content, reinforcing legitimacy and trustworthiness. Overall, Formspree presents a professional, secure, and privacy-conscious service with excellent content quality and technical implementation. Strategic improvements could include enabling DNSSEC, publishing a security.txt file, and adding cookie consent mechanisms to enhance compliance and security transparency.
- MAFRA, a.s.
harpersbazaar.cz
Media · Czech Republic
65Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Harper's Bazaar Czech Republic is a well-established online fashion and lifestyle magazine operated by MAFRA, a.s., a recognized media company. The website offers daily fashion news, beauty tips, art, lifestyle, and celebrity content targeted primarily at Czech-speaking audiences interested in high-end fashion and culture. The business model includes content publishing and subscription sales, supported by a mature digital marketing and advertising infrastructure. Technically, the site uses modern JavaScript libraries, consent management platforms, and integrates multiple analytics and advertising services, reflecting a high level of digital maturity. Security posture is solid with HTTPS and consent mechanisms, though some security headers and explicit policies are missing. Overall, the site is professional, trustworthy, and compliant with GDPR, though it would benefit from publishing privacy and terms policies explicitly and enhancing security headers. The domain registration is consistent and legitimate, reinforcing the site's credibility.
Other · Czech Republic
72Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
The website kodo.cz is a Czech inbound marketing service provider focused on helping small and medium honest businesses, farms, and local producers leverage internet marketing to grow their operations. The company appears to have been established since 2006, indicating a mature presence in the local market. The website uses modern frontend technologies such as React and service workers, hosted behind Cloudflare DNS, suggesting a reasonable level of technical maturity. However, the site lacks visible privacy and cookie policies, security headers, and explicit contact information, which are important for compliance and trust. The security posture is moderate with HTTPS implied but missing advanced security headers and vulnerability disclosures. Overall, the website is professional and well-designed but could improve in privacy compliance and security transparency to enhance trust and regulatory adherence.
Vonovia SEwohnen-und-gesellschaft.de
Real Estate · Germany
72Medium
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
Vonovia SE operates the website wohnen-und-gesellschaft.de, focusing on housing and societal topics related to the concept of 'Heimat' (home). The site serves as a platform to engage residents and stakeholders in the real estate sector, reflecting Vonovia's position as a leading real estate enterprise in Germany. The website content is professionally presented with consistent branding and targets a general audience interested in housing and community issues. Technically, the site leverages Azure DNS infrastructure and integrates Cookiebot for GDPR-compliant cookie consent management, indicating a moderate level of digital maturity. However, explicit privacy policies and terms of service pages are not clearly found, which could be improved for transparency. Security posture is moderate with no visible security headers or incident response contacts, but the use of HTTPS is assumed given the domain and cookie consent implementation. Overall, the site is trustworthy and professionally managed but would benefit from enhanced security and compliance disclosures.
Akademie 21 Poličkaakademie21.cz
Education · Czech Republic
57Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Akademie 21 Polička is a regional educational and cultural center based in the Polička region of the Czech Republic, founded in 2020. The website serves as an informational portal for local educational programs, cultural events, and historical lectures, targeting the local community and learners interested in regional topics. The business model is non-commercial and focused on education and awareness. The website is built on WordPress CMS using Bootstrap and jQuery, indicating a moderate level of digital maturity with a responsive design and basic SEO features. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks security headers and formal privacy or cookie policies, which are important for GDPR compliance. No contact emails or phone numbers are explicitly provided, limiting direct communication channels. Overall, the website is functional and professional but could improve in privacy compliance and security best practices.
TRENZ GmbHtrenz-ppu.com
Transportation · Germany
74Medium
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
TRENZ GmbH operates a specialized e-commerce website offering high-performance portable pilot units (PPUs) designed for the maritime industry. Their products focus on precise GNSS navigation, advanced sensor integration, and rugged design for maritime professionals and pilots. The company positions itself as a niche provider with a strong emphasis on product quality and customer support, including firmware updates and device management applications. The website is built on the Shopify platform, leveraging modern web technologies and e-commerce capabilities to serve its target audience effectively. Technically, the website demonstrates a mature digital infrastructure with fast performance, mobile optimization, and integration of analytics and marketing tools such as Google Analytics and Klaviyo. Security measures include HTTPS enforcement and hCaptcha for form protection, although some security headers are missing, which could be improved. Privacy compliance is well addressed with GDPR-aligned cookie consent and privacy policies. The security posture is generally good, with no evident vulnerabilities or exposed sensitive data. However, the absence of WHOIS registration data for the domain raises concerns about domain legitimacy and trustworthiness. This discrepancy should be investigated further to ensure the domain's authenticity and reduce risk. Overall, the website presents a professional and trustworthy front for a specialized maritime technology business, but domain registration inconsistencies and minor security header gaps suggest areas for improvement to enhance trust and security.
- GGalileo Corporation s.r.o.
centralni-adresa.net
Government · Czech Republic
55Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website centralni-adresa.net serves as an informational portal for a Czech government registry concerning declarations of activities, property, income, gifts, and liabilities under law 159/2006 Sb. The site is operated by Galileo Corporation s.r.o., a small company providing niche registry services to public officials and government entities. The content is primarily legal and regulatory in nature, targeting officials and citizens interested in conflict of interest declarations. The site is modest in design and content quality, with basic navigation and limited interactivity. Technically, the website employs standard web technologies including HTML5, CSS, and JavaScript, with resources hosted on the same domain. The site uses HTTPS, but lacks visible advanced security headers such as CSP or HSTS. There is no evidence of a CMS or modern frameworks, and the site appears to have been last updated in 2017, indicating potential technical debt and outdated content. Mobile optimization and accessibility are basic but present. From a security perspective, the site does not expose sensitive data or forms on the main page, which reduces risk. However, the absence of security headers and privacy/cookie policies indicates gaps in compliance and best practices. The WHOIS data is missing or unavailable, which raises concerns about domain registration transparency and legitimacy, although the site content and footer indicate a legitimate business operator. Overall, the site is functional and serves its informational purpose but requires improvements in security posture, privacy compliance, and domain registration transparency to enhance trustworthiness and regulatory compliance.
- Tomáš Michálek, fyzická osoba
meteo-roven.cz
Other · Czech Republic
54Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
The website meteo-roven.cz serves as a regional weather information portal focused on eastern Czech Republic, providing real-time data from multiple local meteorological stations. It also offers additional services such as webcams and an e-shop for weather-related products. The business appears to be a small, locally focused entity operated by an individual, with a domain age consistent with its operational history since 2016. The website uses a modern frontend technology stack including Bootstrap 4, jQuery, and various UI plugins, hosted on infrastructure associated with the WEDOS registrar and nameservers. The site is mobile responsive and offers a generally good user experience, though some minor code quality issues are present as evidenced by PHP notices in the navigation menu.
- ZŠ A MŠ DOBŘÍKOV
zsdobrikov.cz
Education · Czech Republic
64Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
The website www.zsdobrikov.cz represents a small local educational institution, ZŠ a MŠ Dobříkov, offering basic and kindergarten education with a focus on a family-like atmosphere and innovative teaching methods. The school emphasizes individual attention, project-based learning, and digital competence development. The site is built on the Webnode platform and hosted via AWS Cloudfront, reflecting a moderate level of technical maturity with good mobile optimization and basic SEO. Security posture is adequate with HTTPS and cookie consent implemented, but lacks advanced security headers and a public privacy policy, which are areas for improvement. The absence of public WHOIS data suggests privacy protection, common for small entities, but limits transparency. Overall, the site is trustworthy and safe for general audiences, with room to enhance compliance and security practices.
Richard Závodskýekroniky.cz
Other · Czech Republic
60Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
ekroniky.cz is a small Czech website focused on providing historical chronicles and a virtual chronicler service powered by artificial intelligence. The business appears to be newly established in late 2023, targeting a general audience interested in history and AI-assisted content. The website uses WordPress CMS with common plugins and themes, indicating a moderate level of technical maturity. While the site is accessible and uses HTTPS, it lacks advanced security headers and explicit cookie consent mechanisms, which are areas for improvement. Contact information is clearly provided, enhancing business credibility, but no social media presence or analytics tools were detected. Overall, the site is functional but basic in content and technical sophistication.
UKi Media & Eventstiretechnologyinternational.com
Manufacturing · United Kingdom
62Medium
NIS2 2 · GDPR 80
NIS2 2 · GDPR 80
Tire Technology International is a specialized media publication and event organizer focused on the tire industry, serving professionals such as chemists, suppliers, designers, engineers, and CEOs. The website provides industry news, online magazines, and event information, positioning itself as a key resource within the tire manufacturing and transportation sectors. The business operates under UKi Media & Events, a known media company in the UK. Technically, the website is built on WordPress with modern plugins like Yoast SEO and Elementor, and integrates analytics tools such as Google Tag Manager and Plausible Analytics, reflecting a mature digital infrastructure. Security posture is generally good with HTTPS enforced and no visible sensitive data exposure, though the absence of security headers and explicit privacy policies indicates room for improvement. The lack of WHOIS data for the domain is a concern for domain legitimacy, but the professional content and branding mitigate some risk. Overall, the site is trustworthy and well-maintained but would benefit from enhanced transparency and security practices.
- UKi Media & Events
automotivepowertraintechnologyinternational.com
Transportation · United Kingdom
63Medium
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
Automotive Powertrain Technology International is a specialized media outlet operated by UKi Media & Events, focusing on the latest developments in automotive and truck powertrain components including internal combustion, electric, hybrid, and fuel cell technologies. The website serves industry professionals and stakeholders by providing news, features, online magazines, webinars, and events. It holds a niche position within the transportation and energy sectors, targeting a professional audience interested in powertrain innovations. The technical infrastructure is built on WordPress CMS with modern plugins such as Yoast SEO and Elementor, supported by analytics tools like Plausible Analytics and Google Tag Manager. The site demonstrates good mobile optimization and SEO practices, though performance is moderate. Advertising is managed through Revive Adserver and UKI Media Events' ad network, with cookie consent mechanisms in place to comply with GDPR. Security posture is adequate with HTTPS enabled and domain transfer protections, but lacks DNSSEC and explicit security policies or incident response contacts. Privacy compliance is partial due to the absence of a visible privacy policy and terms of service. Overall, the website is professional and trustworthy but could improve transparency and security practices. Strategically, the site should focus on publishing comprehensive privacy and security policies, enabling DNSSEC, and enhancing security headers to strengthen its security posture and compliance. These improvements will enhance trust and reduce risk exposure.
UKi Media & Eventsautomotiveinteriorsworld.com
Transportation · United Kingdom
68Medium
NIS2 47 · GDPR 80
NIS2 47 · GDPR 80
Automotive Interiors World is a specialized media publication focused on the automotive interiors industry, providing daily news, features, and online magazines that highlight current and emerging technologies, design concepts, and industry trends. The website is professionally designed, well-structured, and targets automotive industry professionals and enthusiasts interested in interior materials and technologies. The business operates under UKi Media & Events, a known media and events company, positioning itself as a premier source for automotive interiors content. Technically, the website is built on WordPress using modern plugins such as Yoast SEO and Elementor, with integrations for Google Tag Manager, Facebook Pixel, LinkedIn Insight Tag, and Plausible Analytics. The site is mobile-optimized and performs moderately well, with good SEO practices and accessibility features. Security is solid with HTTPS enforced, though some security headers are missing, and no explicit security policies or vulnerability disclosures are present. The security posture is generally good, with no visible vulnerabilities or exposed sensitive data. However, the absence of privacy and cookie policies and the lack of WHOIS registration data reduce compliance and trust scores. The domain WHOIS query returned no match, which is unusual for an active .com domain and may indicate privacy protection or a query limitation. Overall, the website presents a professional and trustworthy front for its niche media business but should improve privacy compliance and transparency regarding domain registration to enhance trust and security posture.
WTWH Media, LLCrd100conference.com
Technology · United States
66Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
The R&D 100 Awards Banquet website represents a well-established and prestigious innovation awards program managed by WTWH Media, LLC. The site serves as a hub for event information, registration, and showcasing finalists and winners, targeting R&D professionals and technology innovators. The business model revolves around event organization and media publishing, with a strong market position as a recognized awards program in the technology sector. Technically, the site is built on WordPress using Elementor and Yoast SEO, providing a modern and responsive user experience with embedded multimedia content. Security posture is generally good with HTTPS enabled and no visible sensitive data exposure, though security headers and explicit security policies are absent. Privacy compliance is partial, with a comprehensive privacy policy linked externally but no cookie consent mechanism on-site. The absence of WHOIS data for the domain is a notable anomaly that slightly reduces trust but does not detract from the site's professional presentation and business credibility. Overall, the site is a reliable and professional platform for the R&D 100 Awards community.
WTWH Media, LLCdevicetalks.com
Healthcare · United States
59Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
DeviceTalks is a specialized media and events platform operated by WTWH Media, LLC, focusing on the medical technology industry. It offers a comprehensive suite of services including in-person conferences across multiple U.S. regions, a broad podcast network, webinars, and sponsorship opportunities. The platform targets professionals such as innovators, engineers, investors, and regulatory experts within the medtech sector, positioning itself as a key industry connector and knowledge hub. Technically, the website is built on WordPress with modern plugins and integrations such as Yoast SEO, Revolution Slider, and Google Tag Manager, reflecting a mature digital infrastructure. The site is well-optimized for SEO and mobile devices, with good content quality and user experience. Security-wise, the site enforces HTTPS and uses several third-party marketing and analytics tools, but lacks explicit security policies or incident response information. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanisms. The absence of WHOIS registration data slightly reduces trust but is mitigated by the professional presentation and active social media presence. Overall, DeviceTalks presents a credible and professionally managed digital presence in the medtech media space.
RoboBusinessrobobusiness.com
Technology
63Medium
NIS2 17 · GDPR 58
NIS2 17 · GDPR 58
RoboBusiness is a professional event and conference platform dedicated to the global robotics industry, targeting commercial robotics developers and industry professionals. The website serves as a hub for event information, speaker details, sponsorship opportunities, and industry news. It positions itself as a leading event in the robotics ecosystem, offering networking and educational opportunities. Technically, the site is built on WordPress with Elementor and integrates multiple modern web technologies and marketing tools such as Google Analytics, AdRoll, and Lytics. The site is well-structured with good SEO practices and mobile optimization. Security posture is generally good with HTTPS enabled and no visible vulnerabilities, though security headers are not explicitly detected. Privacy and cookie policies are absent, which is a compliance gap. The WHOIS data is missing, raising concerns about domain registration legitimacy, but the professional presentation and content suggest a legitimate business. Overall, the site is functional and professional but would benefit from enhanced privacy compliance and clearer domain registration transparency.
s.m.s, smart microwave sensors GmbHsmartmicro.com
Technology · Germany
73Medium
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
smartmicro® is a German-based company specializing in the design, development, and manufacture of advanced radar solutions for traffic management, automotive, and airborne applications. With over 26 years of experience, the company positions itself as a leading specialist in high-performance radar technology, offering products and engineering services tailored to professional and industrial clients. Their website reflects a strong market presence with detailed product information, use cases, and a clear focus on innovation and quality. The technical infrastructure of the website is built on TYPO3 CMS with modern frontend frameworks like Bootstrap and jQuery, complemented by marketing and analytics tools such as Google Analytics, Pardot, and Cookiebot for privacy compliance. The site is mobile-optimized, accessible, and SEO-friendly, indicating a mature digital presence. From a security perspective, the website enforces HTTPS and implements cookie consent mechanisms, but lacks explicit security policies or incident response contacts. Security headers are partially implemented, and no vulnerabilities were detected in the visible content. The absence of WHOIS registration data is a notable anomaly that slightly diminishes trust but does not directly impact the website's operational security. Overall, smartmicro® presents a professional and trustworthy online presence with strong business credibility and good privacy compliance. Strategic improvements in security transparency and domain registration clarity would further enhance their security posture and stakeholder confidence.
Nota AInota.ai
Technology · Germany
73Medium
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
Nota AI is a technology company specializing in hardware-aware AI model optimization and on-device AI solutions tailored for various industries such as industrial safety, surveillance, intelligent transportation systems, and driver monitoring. The company positions itself as a provider of seamless AI optimization platforms and AI solutions, including the NetsPresso® LLM Optimization Service for foundation models at the edge. The website is professionally designed using Squarespace, featuring modern technologies and good mobile optimization. It integrates Google Analytics and Tag Manager for tracking and Weglot for multilingual support. Security posture is strong with HTTPS and HSTS enabled, though the absence of explicit privacy policies and terms of service pages slightly reduces privacy compliance. The WHOIS data is unavailable due to privacy protection, which is typical for tech companies but limits transparency. Overall, the site is trustworthy and business credible, with a moderate to good security and privacy posture.
- S
Other · United Kingdom
62Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website at wj.uk currently serves a security verification page that employs Google reCAPTCHA invisible challenge to prevent automated access. This indicates the presence of a Web Application Firewall (WAF) or similar bot protection mechanism, which blocks direct content access and limits the ability to analyze the full website content. The domain is registered with Total Web Solutions Ltd in the UK since 2014, showing a mature registration history and consistent WHOIS data. However, the website itself lacks visible business information, privacy policies, or contact details, which reduces trust and transparency. Technically, the site uses modern Bootstrap CSS and Google reCAPTCHA for security but lacks visible security headers or advanced configurations. Overall, the site is functional for bot protection but provides minimal user-facing content or business information.
Re-flowre-flow.co.uk
Transportation · United Kingdom
58Medium
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Re-flow is a UK-based company founded in 2015 that offers a comprehensive field operations software platform designed to streamline workforce management, compliance, scheduling, and real-time communication for industries such as highways, civils, utilities, and commercial landscaping. The platform is trusted by thousands of users and features strong client testimonials, case studies, and industry awards, positioning it as a leading solution in its market segment. Technically, the website employs modern JavaScript frameworks like Vue.js, integrates with multiple analytics and marketing platforms including HubSpot, Google Tag Manager, and Microsoft Clarity, and uses secure HTTPS connections with a cookie consent mechanism to comply with GDPR requirements. Security posture is solid with no visible vulnerabilities or exposed sensitive data, though explicit security policies and incident response information are not published. Overall, the website demonstrates a high level of professionalism, technical maturity, and business credibility, making it a trustworthy platform for its target audience.
- Traffic Group Signals
trafficgroupsignals.com
Transportation · United Kingdom
69Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Traffic Group Signals is a UK-based company specializing in the supply of portable and temporary traffic light systems, including advanced technologies such as AutoGreen and wireless Urban Traffic Control (UTC). Positioned as a leading supplier in the UK transportation sector, the company targets businesses and organizations involved in roadworks and traffic management. Their offerings include product sales, professional services, maintenance, and support, supported by a well-structured and professional website that reflects their market position. The website infrastructure is built on WordPress with modern JavaScript libraries and integrates analytics and marketing tools such as Google Analytics, HubSpot, and Lead Forensics. The site is mobile-optimized and includes cookie consent mechanisms, reflecting a good level of digital maturity and privacy compliance. However, some technical improvements are possible, including the addition of security headers and enhanced accessibility features. From a security perspective, the site enforces HTTPS and uses cookie consent banners, but lacks visible security headers and explicit incident response or security policy documentation. The absence of WHOIS data for the domain reduces trust in domain registration transparency, though the website content and professional presentation mitigate some concerns. Overall, the security posture is moderate with room for improvement. Strategically, the company should focus on enhancing domain registration transparency, implementing comprehensive security headers, and publishing clear security and incident response policies to strengthen trust and compliance. Continued investment in technical modernization and privacy compliance will support their market leadership and customer confidence.
Attack-konferansenattack-konferansen.no
Technology · Norway
50Medium
NIS2 59 · GDPR 35
NIS2 59 · GDPR 35
Attack-konferansen is a Norwegian cybersecurity conference organized by Teknisk Ukeblad and TEK Norge, focusing on digital threats to critical infrastructure. It serves as a key networking and knowledge-sharing platform for decision makers across government, defense, technology, and industry sectors. The conference is well-positioned in the Norwegian cybersecurity market with reputable partners and sponsors. Technically, the website is built on WordPress with modern plugins and tracking tools, offering good mobile optimization and SEO. Security posture is solid with HTTPS and no visible vulnerabilities, though security headers and explicit privacy/cookie policies are missing. Overall, the site reflects a professional and trustworthy event organization with room for improvement in privacy compliance and security best practices.
- TTeknisk Ukeblad Media AS
tekjobb.no
Technology · Norway
63Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
Tekjobb.no is a well-established Norwegian job portal specializing in connecting engineers and technologists with attractive technology companies. Operated by Teknisk Ukeblad Media AS, the site benefits from a strong market position within the Norwegian technology recruitment sector. The platform offers job listings, employer branding, and recruitment services tailored to a professional audience. The website demonstrates a high level of professionalism, consistent branding, and clear communication of business information, targeting a medium-sized enterprise audience primarily in Norway.
- Teknisk Ukeblad Media AS
tumedia.no
Media · Norway
63Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Teknisk Ukeblad Media AS is a well-established Norwegian media company specializing in technology and industry news, with a history dating back to 1854. The company operates multiple media brands including TU.no, Digi.no, and Tekjobb.no, serving Norwegian technologists, engineers, and the broader technology-interested public. Their business model combines editorial content, subscription services, and advertising solutions. The website reflects a mature digital presence with modern technologies such as React and Next.js, providing a fast, mobile-optimized, and accessible user experience. Security posture is solid with HTTPS and no visible vulnerabilities, though improvements in security headers and formal policies are recommended. Privacy compliance is partially addressed with a comprehensive privacy policy but lacks cookie consent mechanisms. Overall, the company demonstrates high business credibility and trustworthiness.
Teknisk Ukebladtu.no
Media · Norway
63Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Teknisk Ukeblad is a leading Norwegian technology news media outlet providing comprehensive coverage of technology sectors including energy, maritime, construction, industry, health, electric vehicles, aviation, and transportation. The website targets Norwegian technology professionals and enthusiasts with subscription and advertising-based business model. The digital infrastructure is built on modern web technologies such as React and Next.js, with integration of video streaming and consent management platforms to ensure GDPR compliance. Security posture is moderate with HTTPS usage and consent management but lacks visible security headers and explicit incident response policies. The domain WHOIS data is unavailable, limiting trust assessment, but the professional content and consistent branding indicate a legitimate and established business. Overall, the website offers excellent content quality and user experience with room for security and transparency improvements.
CiTTi Awards by Akabo Media (Publisher of CiTTi Magazine)cittiawards.co.uk
Transportation · United Kingdom
65Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
The CiTTi Awards website represents a professional event platform celebrating urban mobility and transport innovation in the UK. The event is scheduled for November 25, 2025, and targets industry professionals and stakeholders. The site offers detailed information about the awards, judges, categories, sponsors, and event logistics, supported by a modern technical infrastructure including the SHOWOFF CMS and popular JavaScript libraries. Social media integration and Google Analytics are used for marketing and user engagement. Security posture is solid with HTTPS enforced and secure form handling, though some security headers and cookie consent mechanisms are missing. The absence of WHOIS data due to domain registration issues slightly impacts trust but does not detract from the website's professional presentation and content quality.
Aurora Insightsaurorainsights.co.uk
Transportation · United Kingdom
68Medium
NIS2 17 · GDPR 85
NIS2 17 · GDPR 85
Aurora Insights operates as a specialized research and insights provider focusing on supply chain, logistics, tolling, and sustainability sectors. The company offers subscription-based access to a Knowledge Hub featuring executive summaries, literature reviews, podcasts, legislation updates, and curated data. Their business model includes bespoke research services and report sales, targeting industry leaders and professionals seeking actionable intelligence. The website is professionally designed, leveraging WordPress with WooCommerce and Elementor, and integrates modern SEO and analytics tools. Security posture is adequate with HTTPS enforced and cookie consent implemented, though explicit security policies and incident response contacts are absent. The domain WHOIS data is unavailable due to a naming rules violation error, which raises some concerns about registration legitimacy. Overall, the website presents a credible business presence with room for improvement in privacy and security transparency.
Professional Headshotprofessional-headshot.com
Technology · Canada
66Medium
NIS2 25 · GDPR 65
NIS2 25 · GDPR 65
Professional Headshot is a technology-driven company specializing in AI-generated professional headshots designed to enhance corporate and personal branding. Positioned as a leading AI headshot generator, it offers users the ability to upload photos and select from various styles to create high-quality profile images quickly and conveniently. The business targets professionals seeking to elevate their online presence on social media and professional platforms. The website demonstrates a modern technical infrastructure leveraging Next.js, React, and multiple analytics and advertising tools, reflecting a mature digital presence. Security posture is strong with HTTPS and security headers implemented, though the absence of explicit privacy and terms policies and missing WHOIS data present areas for improvement. Overall, the platform is professional, user-friendly, and trustworthy, with recommendations to enhance compliance and transparency.
Wedding Photo Dressweddingphotodress.com
Technology · Canada
66Medium
NIS2 25 · GDPR 65
NIS2 25 · GDPR 65
Wedding Photo Dress is a technology-driven company specializing in AI-generated wedding and corporate profile photos. Their platform leverages advanced AI to provide users with realistic and customizable headshots and wedding photo dress try-ons, targeting individuals and professionals seeking high-quality digital images for social media and branding. The company positions itself as a leader in AI photography solutions with a focus on ease of use and innovation. Technically, the website is built on modern frameworks such as Next.js and React, incorporating Google Fonts, Font Awesome, and multiple analytics and advertising tools including Google Analytics, Microsoft Clarity, and Google Adsense. The site is mobile-optimized and demonstrates good SEO practices, although some accessibility features could be enhanced. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data, but lacks several security headers and visible security policies. The absence of WHOIS data raises some concerns about domain registration transparency, although the professional presentation and active social media presence mitigate some risks. Overall, the site presents a moderate risk profile with room for improvement in privacy compliance and security transparency. Strategic recommendations include publishing comprehensive privacy and terms policies, enhancing security headers, and clarifying incident response procedures to build greater trust and compliance.
Interior AI Designsinterioraidesigns.com
Technology
71Medium
NIS2 17 · GDPR 65
NIS2 17 · GDPR 65
Interior AI Designs is a technology-driven company specializing in AI-powered interior and exterior design visualization tools. Positioned as a leading AI interior designer and virtual staging platform, it targets homeowners, real estate professionals, and entrepreneurs seeking innovative design solutions. The website showcases a professional and modern digital presence with strong branding and positive user feedback, indicating a solid market position in the AI design space. The technical infrastructure leverages modern web frameworks such as Next.js and React, combined with Google Fonts and Font Awesome for UI, and integrates analytics and advertising tools like Google Analytics, Microsoft Clarity, and Google Adsense. The site is mobile-optimized and demonstrates good SEO practices, though some performance optimizations could be enhanced. Security posture is generally strong with HTTPS enforced and no visible sensitive data exposure. However, the absence of explicit security headers and formal privacy and terms policies indicates room for improvement in compliance and security best practices. The WHOIS data is unavailable, which slightly reduces trust but does not negate the professional appearance and functionality of the site. Overall, the website presents a low to moderate risk profile with recommendations to improve privacy compliance, security headers, and WHOIS transparency to enhance trust and regulatory adherence.
- CCATIOAPPS
catioapps.com
Technology
67Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
CATIOAPPS is a newly established technology company (founded in 2023) specializing in AI-powered API services for photo shoot generation and image processing. Their platform offers developers and businesses easy integration of AI features through pre-set prompts and models, eliminating the need for complex prompt engineering or image storage management. The company positions itself as a niche provider in the AI API market with clear subscription-based pricing plans and a focus on rapid integration. Technically, the website is built using modern web technologies including JavaScript and CSS, with indications of Laravel framework usage on the backend. Hosting and DNS services are provided by IONOS SE and Cloudflare respectively. The site demonstrates good performance, mobile optimization, and basic SEO practices, though accessibility features are minimal. From a security perspective, the site enforces HTTPS and has domain transfer protections but lacks DNSSEC and important security headers. There is no visible security policy or incident response contact information published, and no cookie consent mechanism is implemented, which may impact privacy compliance. No vulnerabilities or exposed sensitive data were detected in the analysis. Overall, CATIOAPPS presents a professional and functional online presence suitable for its business model, but should improve privacy compliance and security posture to enhance trust and regulatory adherence.
- PPhoto AI Studio
photoaistudio.com
Technology · Canada
71Medium
NIS2 25 · GDPR 65
NIS2 25 · GDPR 65
Photo AI Studio is a technology-driven company specializing in AI-powered photo generation services. It offers users the ability to create professional, realistic photos from selfies using advanced AI models, targeting professionals, content creators, and social media users globally. The company operates primarily online with additional mobile applications, providing a seamless user experience and a variety of photo styles and packages. The business is positioned as an innovative leader in AI photography with a strong reputation and positive customer feedback. Technically, the website leverages modern web technologies including Next.js and React, integrates multiple analytics and advertising pixels, and uses Stripe for secure payment processing. The platform is optimized for performance, mobile responsiveness, and accessibility, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS, employs standard security headers, and follows best practices for data protection and privacy compliance, including GDPR adherence. However, explicit security policies and incident response details are not publicly available, representing an area for improvement. Overall, the website presents a low-risk profile with strong business credibility and technical robustness. The absence of WHOIS data slightly reduces trust but is mitigated by the professional presentation and operational transparency. Strategic recommendations include enhancing security transparency and formalizing vulnerability disclosure mechanisms.
Other
75Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
The website at replicate.delivery is currently inaccessible, returning a minimal JSON error message indicating the requested file was not found. The lack of accessible content, metadata, or structured data prevents a meaningful assessment of the business, its services, or market positioning. The domain WHOIS data is unavailable or unsupported for this TLD, with no registrar creation or expiry dates, registrant information, or nameservers provided. This lack of transparency and minimal website presence results in a low trust and legitimacy score. Technically, no technologies, frameworks, or hosting details could be identified, and no security headers or HTTPS information were available. Overall, the site appears either under development, misconfigured, or blocked, limiting any further analysis.
DVV Media Group GmbHshipandoffshore.net
Media · Germany
72Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Ship & Offshore is a specialized maritime industry media platform operated by DVV Media Group GmbH, providing news, reports, and subscription-based specialist publications focused on shipbuilding, offshore, and maritime technology sectors. The website demonstrates a mature digital infrastructure using TYPO3 CMS, integrated with modern analytics and consent management tools, ensuring compliance with privacy regulations. Security posture is strong with HTTPS enforcement and consent-based tracking, though explicit security headers could be improved. The absence of WHOIS registration data for the domain is a notable concern, potentially indicating privacy protection or domain registration issues, which impacts trustworthiness from a domain legitimacy perspective. Overall, the site offers professional content and user experience suitable for maritime professionals and industry stakeholders.
Other · Germany
67Medium
NIS2 25 · GDPR 60
NIS2 25 · GDPR 60
The website www.trenz.de appears to be a small business site hosted on the Wix platform, utilizing standard Wix technologies and Google Tag Manager for analytics. The content available in the provided HTML snippet is minimal and primarily technical, with no visible business descriptions, contact information, or policy documents. The site is accessible without any WAF or security challenge blocking access. Security posture is basic with HTTPS enabled but lacking security headers and privacy compliance documentation. Overall, the site demonstrates a basic digital presence with room for improvement in content richness, privacy compliance, and security best practices.
DVV Media Group GmbHdvvmedia.com
Media · Germany
68Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
DVV Media Group GmbH is a well-established media company specializing in transport, logistics, and mobility sectors. With over 70 years of experience and a strong presence in Germany and the UK, it provides a wide range of media products including magazines, newsletters, websites, and events. The company operates under the umbrella of the Rheinische Post Mediengruppe, enhancing its credibility and market reach. The website is professionally designed, multilingual, and optimized for modern devices, reflecting a mature digital infrastructure. Security posture is adequate with HTTPS and domain transfer protections, though some security headers and DNSSEC are missing. Privacy compliance is strong with a comprehensive GDPR-aligned privacy policy and cookie consent mechanisms. Overall, the site is trustworthy and serves its target audience effectively.
- Login · My iTero
myitero.com
Other
65Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website at https://bff.cloud.myitero.com/login serves as a login portal for My iTero, likely a business or service platform. The site is built using Angular 17.3.3, indicating a modern frontend framework, but the content is minimal, focusing solely on user authentication without additional business or informational content. The lack of WHOIS data for the subdomain suggests it is part of a larger domain infrastructure, but no registrant or registrar information is publicly available, limiting trust verification. Security posture is weak due to absence of visible HTTPS confirmation, security headers, and privacy policies. No contact or compliance information is present, which reduces transparency and user trust. Overall, the site appears functional but lacks comprehensive security and compliance features.
- Align Technology, Inc.
itero.com
Healthcare · United States
72Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
iTero.com is the official website for iTero intraoral dental 3D scanners, a product line of Align Technology, Inc., a leading enterprise in the healthcare technology sector. The company specializes in advanced digital scanning solutions for restorative and orthodontic dental practices, integrating with Invisalign workflows to enhance clinical productivity and patient engagement. The website targets dental professionals including general practitioners and orthodontists, offering product information, customer testimonials, and support resources. The technical infrastructure is modern and robust, leveraging Next.js and React frameworks with Mantine UI components, hosted on AWS with Cloudfront CDN for performance and scalability. The site is well-optimized for mobile devices and accessibility, employing multiple analytics and marketing tools such as Google Tag Manager, Facebook Pixel, Hotjar, and Optimizely to monitor user engagement and optimize experience. Security posture is strong with HTTPS enforced, domain transfer protections, and cookie consent mechanisms in place. However, DNSSEC is not enabled and no explicit security policy or vulnerability disclosure page is present. No direct company contact emails or phone numbers are publicly listed, with contact primarily via a detailed form. Privacy compliance is well addressed with comprehensive privacy and cookie policies, including GDPR considerations. Overall, the website reflects a mature, enterprise-grade digital presence with high content quality, strong branding, and good security hygiene. Strategic recommendations include enabling DNSSEC, publishing a security policy and vulnerability disclosure, and providing explicit security contact information to further enhance trust and compliance.
DVV Media Group GmbHmaritime-archives.com
Transportation · Germany
57Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Maritime Archives is a specialized digital archive platform operated by DVV Media Group GmbH, providing access to maritime industry publications such as Schiff&Hafen, Ship&Offshore, and New Ships. The platform targets maritime professionals and researchers, offering subscription-based and pay-per-access services. The website is professionally designed with consistent branding and good content relevance, supporting German and English languages. Technically, the site is built on ASP.NET WebForms with jQuery and Bootstrap, hosted on plusserver.com, and integrates Usercentrics for cookie consent and Google Analytics with IP anonymization for privacy compliance. Security posture is adequate with HTTPS enforced and domain transfer protection, though improvements like DNSSEC and security headers are recommended. No critical vulnerabilities or suspicious content were detected, and the domain registration data aligns well with the business history, indicating legitimacy. Overall, the site scores well on business credibility and privacy compliance, with moderate technical and security scores.
DVV Media Groupdvvmedia-shop.de
Media · Germany
59Medium
NIS2 22 · GDPR 28
NIS2 22 · GDPR 28
DVV Media Shop is a specialized e-commerce platform operated by DVV Media Group, offering subscriptions, books, and event access focused on transport, logistics, rail, maritime, defense, and industrial sectors. The website targets professionals and businesses seeking up-to-date trade media and industry insights. The platform is well-positioned in its niche market with a professional digital presence and consistent branding. Technically, the website employs modern security and privacy tools including HTTPS, Google reCAPTCHA v3, Matomo analytics, and Usercentrics consent management, hosted on PlusServer infrastructure. Security posture is solid with room for improvement in security headers and explicit security policies. Privacy compliance is supported by a cookie consent mechanism but lacks a clearly linked privacy policy and terms of service in the analyzed content. Overall, the website is trustworthy, professional, and safe for general audiences.
Transportation · United Kingdom
75Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Farnborough International Exhibition & Conference Centre operates as a venue specializing in hosting automotive events, launches, and exhibitions. The website targets event organizers and automotive industry professionals, positioning itself as a reputable medium-sized venue in the UK transportation sector. The content is professionally presented with a clear focus on event hosting services. Technically, the website employs a modern technology stack including Google Analytics, Hotjar, Microsoft Clarity, LinkedIn Insight Tag, and Cookiebot for consent management. The site is mobile-optimized, accessible, and SEO-friendly, with a moderate performance profile. Security measures include HTTPS enforcement and bot protection via Google reCAPTCHA, though some security headers are missing. The security posture is solid with no evident vulnerabilities, but the absence of explicit privacy policy and terms of service pages, as well as missing contact information, represent compliance and trust gaps. The WHOIS data is unavailable, which raises concerns about domain registration legitimacy, though the website content and technical setup suggest a legitimate business. Overall, the website is functional and professional but would benefit from enhanced transparency through published policies and contact details. Strategic recommendations include publishing privacy and security policies, adding incident response contacts, and improving security headers to strengthen trust and compliance.
- Uutiset | HS.fi
hs.fi
—
74Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
- Fotos de Perfil
la.network
Technology · Canada
71Medium
NIS2 25 · GDPR 65
NIS2 25 · GDPR 65
Fotos de Perfil is a specialized AI-driven photo generation platform that transforms user selfies into professional-quality images suitable for social media, branding, and personal use. Founded in 2022 and based in Canada, the company leverages advanced AI technologies including ControlNet to deliver hyper-realistic photos with a variety of styles and themes. The platform supports creation of personalized AI models and synthetic AI influencers, catering to professionals, content creators, and individuals worldwide. The business model is subscription and credit-based, offering multiple photo packages and virtual try-on features for clothing. Technically, the website is built on modern frameworks such as Next.js and React, with integrations for Google Analytics 4, Google Ads, Stripe for payments, and Crisp for customer support chat. The site is well-optimized for mobile and desktop, with fast loading times and good SEO practices. Security posture is strong with HTTPS enforced, security headers present, and secure payment processing. However, cookie consent mechanisms and incident response disclosures are areas for improvement. Overall, Fotos de Perfil demonstrates a mature digital presence with strong trust indicators including extensive user reviews, clear contact information, and professional branding. The lack of WHOIS transparency is mitigated by consistent business information and no suspicious patterns. Strategic recommendations include enhancing privacy compliance with visible cookie consent, publishing security policies, and maintaining vigilance on third-party scripts to sustain security and trust.
CiTTi Magazinecittimagazine.co.uk
Transportation · United Kingdom
52Medium
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
CiTTi Magazine is a specialized online media publication focused on city transport and traffic innovation news, providing insights into urban mobility technologies and policies. The website offers a range of content including news articles, digital magazines, webinars, and events, targeting professionals and stakeholders in the transportation sector. The site is built on WordPress with modern plugins and design frameworks, ensuring a good user experience and mobile optimization. Security posture is solid with HTTPS and no visible vulnerabilities, though security headers and explicit policies could be improved. Privacy compliance is partial, with a cookie consent mechanism present but no clear privacy or terms of service pages detected. WHOIS data for the queried subdomain is unavailable, limiting full domain trust verification. Overall, the site is professional and trustworthy within its niche, with room for enhanced transparency and security documentation.
Teknisk Ukeblad Media ASveier24.no
Media · Norway
63Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Teknisk Ukeblad Media AS operates the website tu.no, a leading Norwegian technology news platform focusing on sectors such as energy, transportation, maritime, and industrial technology. The site offers extensive news coverage, analysis, and commentary targeted at technology professionals and enthusiasts in Norway. The business model is primarily subscription and advertising-based, supported by a modern digital infrastructure. The company maintains a strong market position as a trusted source of technology news in Norway. The website is built on a modern tech stack including React and Next.js, with integration of advanced analytics and subscription management tools such as Piano and Cxense. The site demonstrates excellent performance, mobile optimization, and SEO practices, ensuring a high-quality user experience. The technical infrastructure supports extensive content delivery and user engagement features. From a security perspective, the site enforces HTTPS, employs multiple security headers, and integrates a GDPR-compliant consent management platform. No critical vulnerabilities or exposed sensitive data were detected. However, explicit security policies and incident response information are not publicly available, representing an area for improvement. Overall, the website presents a low-risk profile with strong business credibility and technical maturity. Strategic recommendations include enhancing transparency around security policies, adding vulnerability disclosure mechanisms, and maintaining up-to-date domain registration information to further strengthen trust and compliance.
The Robot Reporttherobotreport.com
Technology
63Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
The Robot Report is a specialized media outlet providing news, research, analysis, and investment tracking focused on the robotics industry. Established since 2012, it targets engineers, technology professionals, and business stakeholders interested in robotics technologies and market developments. The website offers categorized content covering technologies, development, robots, business, resources, events, and podcasts, positioning itself as a key information source in the robotics sector. Technically, the site is built on WordPress with common SEO and advertising plugins, leveraging Google Tag Manager and Google Ad Manager for analytics and monetization. The site is mobile optimized with good navigation and content quality. Security-wise, the site uses HTTPS with good SSL configuration but lacks explicit security headers and published security policies. Privacy compliance is weak, with no visible privacy or cookie policies or consent mechanisms. The absence of WHOIS data for the domain is a notable concern, although the website content and external references suggest legitimacy. Overall, the site is a professional and relevant resource for robotics industry news but would benefit from improved privacy and security transparency.
- UKi Media & Events
autonomousvehicleinternational.com
Transportation · United Kingdom
62Medium
NIS2 47 · GDPR 80
NIS2 47 · GDPR 80
ADAS & Autonomous Vehicle International is a specialized media outlet providing news, features, and event coverage for the autonomous vehicle and driverless technology industry. The website targets professionals and stakeholders in this sector, offering industry insights, online magazines, and information about related events and awards. The site is operated under the UKi Media & Events brand, a known entity in media and event management. Technically, the website is built on WordPress using popular plugins such as Yoast SEO and Elementor, with integration of modern analytics and advertising tools. The site demonstrates good design quality, mobile optimization, and SEO practices, although some accessibility features could be improved. Security posture is adequate with HTTPS enforced but lacks some security headers and explicit privacy and terms documentation. WHOIS data for the domain is missing, which raises concerns about domain registration legitimacy, though the website content and branding appear professional and consistent. Overall, the site is a credible source of industry information but would benefit from enhanced transparency and security practices.