Medium-risk security reports
99,068 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,171001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
11,551–11,600 of 99,068
- MAXIMETAL
maximetal.com
Manufacturing · Canada
68Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
MAXIMETAL is a Canadian manufacturing company specializing in custom fire apparatus and utility trucks with over 40 years of industry experience. The company serves major fire departments and utility companies across Canada and the United States, leveraging partnerships with industry leaders such as Oshkosh Corporation and Pierce Manufacturing. Their website reflects a mature business with a clear market position and professional branding. Technically, the website is built on WordPress with modern plugins and technologies including Google Analytics, reCAPTCHA, and SEO optimizations. The site is mobile-friendly and provides a good user experience with clear navigation and relevant content. Security practices include HTTPS enforcement and CAPTCHA on forms, though some security headers are missing. The security posture is generally strong with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanisms. However, the absence of WHOIS registration data introduces some uncertainty about domain registration legitimacy, which slightly impacts trust. Overall, MAXIMETAL presents a credible and professional online presence with solid business and technical foundations. Strategic recommendations include enhancing security headers, verifying domain registration details, and adding explicit security policies to further strengthen trust and compliance.
Kewauneekewauneefabrications.com
Manufacturing · United States
66Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Kewaunee Fabrications is a specialized heavy fabrication company operating under the parent company Oshkosh Corporation. The company offers a comprehensive range of manufacturing services including welding, finishing, assembly, machining, fabrication, and quality inspection, supported by ISO 9001 certification and certified weld inspectors. Their market position is that of a trusted industrial fabricator serving B2B clients in manufacturing sectors. The website is professionally designed using WordPress, with good SEO and mobile optimization, hosted on AWS infrastructure. Security posture is solid with HTTPS and domain EPP protections, though DNSSEC is not enabled and security headers are missing. Privacy compliance is basic but includes a cookie consent mechanism and a privacy policy hosted on the parent company domain. Overall, the site is trustworthy and professionally maintained, reflecting a mature business presence.
Iowa Mold Tooling Co., Inc.imt.com
Manufacturing · United States
69Medium
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
Iowa Mold Tooling Co., Inc. is a well-established manufacturing company specializing in the design and production of mechanics trucks, lube trucks, tire trucks, air compressors, and truck mounted cranes. The company operates as a subsidiary of Oshkosh Corporation, indicating a strong market position and corporate backing. Their website reflects a professional and consistent brand image, targeting industrial customers and distributors with detailed product information and support resources. The business model focuses on manufacturing and distribution through a network of partners and direct sales. Technically, the website is built on WordPress using Elementor, with integrations for Google Analytics and social media feeds, hosted on AWS infrastructure. The site is mobile-optimized and SEO-friendly, providing a good user experience.
- Frontline Communications
frontlinecomm.com
Transportation · United States
73Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Frontline Communications is a specialized manufacturer of custom command and communication vehicles serving government and emergency response sectors. The company operates as a division of Pierce Manufacturing Inc., itself part of Oshkosh Corporation, indicating strong corporate backing and market presence. Their product range includes mobile command centers, EOD vehicles, SWAT trucks, and other specialty communication vehicles designed for high reliability and operational efficiency. The website reflects a professional and consistent brand image with clear business focus and target audience alignment. Technically, the website is built on the HubSpot CMS platform, leveraging modern web technologies including jQuery, Google Analytics, and Facebook SDK for marketing and analytics purposes. The site is mobile optimized with good SEO and accessibility basics, though some accessibility features could be enhanced. Performance is moderate, typical for CMS-driven marketing sites. Security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. However, the site lacks some security best practices such as security headers, a published security policy, and vulnerability disclosure mechanisms. Privacy compliance is well addressed through a comprehensive privacy policy linked to the parent company and a cookie consent mechanism. Overall, the website presents a trustworthy and professional front for Frontline Communications, though the absence of WHOIS registration data and direct contact information slightly reduces transparency. Strategic improvements in security disclosures and contact availability would enhance trust and compliance.
ezra. Opferberatung Thüringenopferhilfe-thueringen.de
Non-profit · Germany
60Medium
NIS2 17 · GDPR 28
NIS2 17 · GDPR 28
ezra. Opferberatung Thüringen is a specialized non-profit organization providing counseling and support services to victims of right-wing, racist, and antisemitic violence in the German state of Thüringen. The organization targets affected individuals, their relatives, and witnesses, offering victim assistance, incident documentation, and a victim aid fund. The website is professionally designed, multilingual, and well-structured, reflecting a clear mission and strong regional presence. It is supported by official funding bodies and partners, enhancing its credibility and trustworthiness. Technically, the site is built on WordPress, hosted by Raidboxes, and uses common plugins and libraries such as Contact Form 7 and Font Awesome. The site is mobile-optimized and SEO-friendly, though performance is moderate. Security posture is good with HTTPS enforced and no visible vulnerabilities, but lacks some security headers and a cookie consent mechanism, which are recommended for GDPR compliance. Overall, the site is trustworthy and serves an essential social function with a strong regional focus.
Ferienhaus "Brückenhaus Naumburg"brueckenhaus-naumburg.de
Hospitality · Germany
59Medium
NIS2 2 · GDPR 48
NIS2 2 · GDPR 48
Ferienhaus "Brückenhaus Naumburg" is a small hospitality business offering a lovingly restored historic holiday home located in Naumburg, Germany. The website provides detailed information about the rental property, pricing, availability, and booking options, targeting tourists seeking accommodation in the Saale-Unstrut region. The business positions itself as a niche provider of heritage vacation rentals with a focus on comfort and local charm. Technically, the website is built on WordPress using popular plugins such as Yoast SEO and Slider Revolution, with a booking system integrated for user convenience. The site is mobile-optimized and well-structured, providing a good user experience and clear navigation. Security-wise, the site uses HTTPS and a cookie consent mechanism but lacks some advanced security headers and explicit privacy or security policies. Overall, the website is professional and trustworthy, though it could improve privacy compliance and security posture by adding missing policies and headers.
Förderverein Moritzkirche Naumburg (Saale) e.V.moritzkirche-naumburg.de
Non-profit · Germany
53Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
The website represents the Förderverein Moritzkirche Naumburg (Saale) e.V., a non-profit organization dedicated to preserving and promoting the cultural and religious heritage of the St. Moritz church in Naumburg, Germany. It offers information about church services, exhibitions, concerts, and historical lectures, targeting local visitors and cultural enthusiasts. The site is well-branded and provides clear contact and donation information, reflecting a trustworthy community institution. Technically, the website uses modern front-end technologies such as Bootstrap, jQuery, and slick carousel, delivering a good user experience with mobile optimization and clear navigation. However, it lacks explicit privacy and cookie policies, which are important for GDPR compliance. Security-wise, HTTPS is used, but no security headers or vulnerability disclosures are present, indicating room for improvement in security posture. Overall, the site is safe, professional, and credible but would benefit from enhanced privacy and security measures.
Evangelische Schulstiftung in Mitteldeutschland St. Johannesschulstiftung-ekm.de
Education · Germany
57Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
The Evangelische Schulstiftung in Mitteldeutschland St. Johannes operates as a large non-profit educational foundation managing 42 educational institutions across the German states of Saxony, Saxony-Anhalt, and Thuringia. It serves over 7,000 students with a staff of approximately 900, offering a broad range of school types including primary, secondary, and special education. The foundation also provides career opportunities and professional development programs, positioning itself as a key regional player in evangelical education. Technically, the website employs a modern front-end stack including Bootstrap, jQuery, and various UI libraries, delivering a responsive and well-structured user experience. While performance is moderate, the site is mobile-optimized and SEO-friendly. Analytics are handled via Matomo/Piwik, reflecting a moderate level of user tracking with some privacy considerations. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and published security policies or incident response contacts, which are areas for improvement. Privacy compliance is strong regarding GDPR with a comprehensive privacy policy, but the absence of a cookie consent mechanism is a notable gap. Overall, the website is professional, trustworthy, and well-aligned with its educational mission. Strategic enhancements in security headers, cookie consent, and incident response transparency would further strengthen its security posture and compliance.
Octadeskoctadesk.com
Technology · Brazil
75Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
Octadesk is a Brazilian technology company providing a comprehensive SaaS platform for omnichannel customer service and sales automation. The platform integrates AI chatbots, ticketing, workflow automation, and analytics to optimize customer interactions and operational efficiency. With over 4000 companies using its services, Octadesk holds a strong market position in Brazil's customer service technology sector. The website demonstrates a mature digital infrastructure leveraging Webflow CMS, HubSpot marketing tools, and multiple analytics and advertising pixels, indicating advanced digital marketing and user engagement strategies. Security posture is robust with HTTPS, security headers, and secure forms, although explicit security policies and incident response information are not publicly detailed. The absence of WHOIS domain registration data is a notable concern but does not detract significantly from the overall trustworthiness given the professional website and business presence. Strategic recommendations include publishing detailed security policies, adding vulnerability disclosure mechanisms, and enhancing transparency around data protection roles. Overall, Octadesk presents as a credible and professional technology provider with a strong digital presence and good security hygiene.
AMBESTam-best.com
Transportation
58Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
AMBEST is a well-established, member-owned network of independent truck stops and service centers operating nationwide since 1988. The company focuses on providing quality facilities, competitive fuel pricing, expert maintenance, and a loyalty rewards program (AMBUCK$) targeted at drivers and fleets in the transportation sector. The website reflects a professional and consistent brand image emphasizing family-owned values and service excellence. Technically, the site uses modern JavaScript frameworks (Vue.js, Quasar) and is hosted with Cloudflare DNS, delivering moderate performance and good mobile optimization. Security posture is adequate with HTTPS and domain registration protections but lacks important security headers and DNSSEC. Privacy compliance is weak due to missing privacy and cookie policies and no consent mechanisms. Contact information is minimal and no incident response or vulnerability disclosure policies are published, which could be improved to enhance trust and compliance. Overall, the website is safe, professional, and credible but would benefit from enhanced privacy and security practices.
- AAccelerator
accelerator.net
Technology
60Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Accelerator.net presents a minimalistic website with very limited content, primarily a heading and a brief tagline describing a "Lightning-fast global delivery network." The domain is well-established, created in 2004, and registered through Amazon Registrar, Inc., indicating a legitimate registration history. However, the website lacks essential business information, contact details, privacy policies, and security disclosures, which limits its credibility and user trust. The technical infrastructure appears basic, leveraging Google Fonts and AWS DNS services, but lacks modern SEO, accessibility, and security enhancements. Security posture is minimal with no detected security headers or DNSSEC enabled, and no evidence of privacy or cookie compliance mechanisms. Overall, the site is accessible without WAF or blocking mechanisms but requires significant improvements in content, security, and compliance to meet professional standards.
Agder fylkeskommuneagderfk.no
Government · Norway
74Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
Agder fylkeskommune is a regional government entity in Norway focused on improving living conditions and reducing greenhouse gas emissions in the Agder region. The website serves as an official portal providing information and services to residents and stakeholders. The digital infrastructure employs a mixed technology stack including legacy jQuery libraries and modern JavaScript modules, with analytics tools such as Microsoft Clarity and Monsido Heatmaps integrated for user behavior insights. The site demonstrates good design quality, mobile optimization, and accessibility, reflecting a mature digital presence for a government organization. Security posture is moderate with HTTPS usage implied, but lacks explicit security headers and published security policies. Privacy compliance is basic, with a cookie consent mechanism present but no visible privacy or terms of service pages. WHOIS data confirms domain legitimacy and consistency with the entity's founding in 2020. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and security disclosures.
NKRFnkrf.no
Government · Norway
65Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
NKRF is a well-established Norwegian professional association specializing in municipal auditing and control, founded in 1945. The organization provides a range of services including courses, conferences, publications, and professional resources targeted at municipal auditors and public sector professionals. The website reflects a mature digital presence with consistent branding and relevant content tailored to its audience. Technically, the site uses modern web technologies such as Craft CMS, Google Analytics, and Material Design Icons, and is optimized for mobile and accessibility. Security posture is solid with HTTPS and IP anonymization in analytics, though it lacks some security headers and a cookie consent mechanism. The absence of WHOIS data is typical for .no domains and does not detract from the site's legitimacy. Overall, NKRF's website is professional, trustworthy, and serves its niche audience effectively.
KS Digitalksdigital.no
Government · Norway
71Medium
NIS2 25 · GDPR 35
NIS2 25 · GDPR 35
KS Digital is a Norwegian government-affiliated digital service provider delivering sustainable shared digital services tailored to the needs of the municipal sector. The company is relatively new, founded in 2024, and targets Norwegian municipalities with digital solutions that align with sector requirements. The website reflects a professional and consistent brand presence with clear messaging about its mission and services. Technically, the site is built on WordPress with modern plugins and frameworks such as React, indicating a moderate level of digital maturity. The site is mobile optimized and SEO friendly, leveraging Yoast SEO and structured data for enhanced search visibility. Security posture is adequate with HTTPS implied, but lacks explicit security headers and detailed security or privacy policies. No forms or direct contact information are present on the homepage, which may impact user engagement and trust. Overall, the site is trustworthy and professional but would benefit from enhanced privacy compliance and security transparency.
—
75Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
Cloud Security Alliance Norway Chaptercloudsecurityalliance.no
Technology · Norway
66Medium
NIS2 17 · GDPR 58
NIS2 17 · GDPR 58
The Cloud Security Alliance Norway Chapter website serves as the local representation of the global Cloud Security Alliance organization, focusing on cloud security education, networking, and community engagement within Norway. Founded in 2015, the chapter provides members with access to events, research, and professional development opportunities in cloud security. The website is hosted on the Higher Logic platform, leveraging ASP.NET WebForms and common web technologies such as jQuery and Bootstrap for its frontend implementation. From a technical perspective, the site employs a moderate technology stack with CDN hosting via Amazon CloudFront, ensuring reasonable performance and availability. While the site is functional and professionally designed, mobile optimization and accessibility are basic, and SEO practices are modest. The site uses HTTPS with good SSL configuration but lacks several recommended security headers, which could enhance its security posture. Security-wise, the website enforces HTTPS and uses Google Tag Manager for analytics and tracking but does not provide explicit security policies, incident response contacts, or vulnerability disclosure mechanisms. Privacy compliance is partial, with a privacy policy present but no visible cookie consent mechanism or GDPR compliance indicators. The absence of direct contact emails or phone numbers on the homepage limits immediate user engagement but aligns with the community-focused nature of the chapter. Overall, the website is trustworthy and legitimate, consistent with the Cloud Security Alliance brand and its Norway chapter mission. Strategic improvements in security headers, privacy compliance, and mobile accessibility would enhance the site's security posture and user experience.
Education · Norway
75Medium
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
The Norwegian University of Science and Technology (NTNU) operates a comprehensive and professionally designed website serving students, researchers, and the academic community. The site offers detailed information on study programs, research initiatives, student life, and institutional resources, positioning NTNU as a leading educational institution in Norway. The digital infrastructure leverages modern technologies including Liferay CMS, Bootstrap, and various analytics tools, reflecting a mature and well-maintained technical environment. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security headers could be enhanced. Privacy compliance is strong with clear policies and consent mechanisms. Overall, the website demonstrates high professionalism, trustworthiness, and user-centric design.
Helsedirektoratethelsedirektoratet.no
Healthcare · Norway
75Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Helsedirektoratet is the Norwegian Directorate of Health, a government agency providing guidance, regulations, and support to health and care services across Norway. The organization focuses on public health, prevention, and ensuring equitable health services for all citizens. Their website serves as a comprehensive portal for national health recommendations, digital health initiatives, legal frameworks, health preparedness, and statistical reporting. The site targets health professionals, municipalities, government bodies, and the general public. Technically, the website is built on modern web technologies including React 18 and Enonic XP CMS, with integration of Google Fonts and Google Analytics for tracking. The site is mobile-optimized, accessible, and well-structured with clear navigation and professional design. Privacy compliance is strong, featuring a cookie consent mechanism and a comprehensive privacy policy aligned with GDPR requirements. From a security perspective, the site uses HTTPS with good SSL configuration and employs best practices such as cookie consent and no visible sensitive data exposure. However, it lacks explicit security headers and published incident response or vulnerability disclosure policies, which could be improved to enhance security posture. The WHOIS data is not publicly available, likely due to privacy protection typical for government domains, but the domain and content strongly indicate legitimacy and trustworthiness. Overall, Helsedirektoratet's website is a high-quality, secure, and trustworthy digital platform supporting Norway's health sector. Strategic improvements in security policy transparency and header implementation would further strengthen its security and compliance standing.
Innovasjon Norgenceclusters.no
Government · Norway
75Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Norwegian Innovation Clusters (NIC) is a government-backed collaborative program managed by Innovasjon Norge in partnership with Siva and Forskningsrådet. The program aims to enhance cooperation and innovation among Norwegian companies to address challenges and build competitive advantages collectively. The website serves as an informational and engagement platform for Norwegian businesses involved in innovation clusters, offering program modules such as NIC Connect, NIC Explore, and NIC Impact. The site is well-branded, consistent, and professionally designed, targeting a Norwegian audience with clear contact information and partner links. Technically, the website is built using modern web technologies including React, Next.js, and Sanity CMS, ensuring good performance, mobile optimization, and accessibility. Google Tag Manager is used for analytics and tracking, with a cookie consent mechanism implemented to comply with privacy regulations. However, explicit privacy policy and terms of service pages are not found, representing a compliance gap. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and published incident response or vulnerability disclosure policies. WHOIS data is unavailable due to .no domain privacy norms, but the association with official government agencies and consistent branding supports legitimacy. Overall, the site demonstrates a solid security posture with room for improvement in privacy compliance and security transparency. Strategically, the site should prioritize publishing comprehensive privacy and terms policies, implement security headers, and establish clear vulnerability disclosure channels to enhance trust and compliance. The technical infrastructure is modern and scalable, supporting the program's mission effectively.
Grunnstoffenegrunnstoffene.no
Education · Norway
59Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
Grunnstoffene.no is a Norwegian educational website and podcast focused on the periodic table of elements. It offers a unique content model with one podcast episode per chemical element, targeting Norwegian-speaking students, educators, and chemistry enthusiasts. The site is built on WordPress using the Twenty Twenty-One theme and optimized with the Yoast SEO plugin, indicating a moderate level of digital maturity. The technical infrastructure supports good mobile responsiveness and accessibility, with a clean and interactive design. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and formal security policies. Privacy compliance is partial, with cookie and privacy policies present but no explicit consent mechanism. Business credibility is moderate due to the absence of direct contact information and formal trust signals. Overall, the site is a well-maintained educational resource with room for improvement in security and compliance.
Shareboxsharebox.no
Transportation
59Medium
NIS2 2 · GDPR 95
NIS2 2 · GDPR 95
Sharebox is a technology company specializing in automotive and mobility digital transformation solutions. Their offerings include ISO-certified self-service kiosks, API integrations, and intelligent software workflows designed to streamline vehicle dealerships, rental agencies, and workshops. The company positions itself as a trusted partner for major automotive brands and rental companies, emphasizing 24/7 convenience and seamless customer experiences. Technically, the website is built on WordPress with modern integrations such as HubSpot and Google Analytics, demonstrating a mature digital infrastructure. Security posture is strong with HTTPS enforcement and cookie consent mechanisms, though explicit security policies and incident response contacts are not publicly detailed. Overall, the website reflects a professional, trustworthy business with good compliance and technical standards.
ADS Maritime Holding Plcadsmh.com
Transportation
55Medium
NIS2 2 · GDPR 95
NIS2 2 · GDPR 95
ADS Maritime Holding Plc operates as a preferred provider of tanker vessel services, focusing on maritime transportation within the energy sector. The company targets businesses and stakeholders requiring specialized tanker vessel logistics. The website presents a professional and consistent brand image, leveraging WordPress CMS with the Divi theme, and includes standard web technologies such as JavaScript and Google Tag Manager for analytics and cookie consent management. However, the absence of WHOIS registration data raises concerns about domain legitimacy and trustworthiness. Security posture is moderate with cookie consent implemented but lacks visible security headers and explicit privacy or security policies. Overall, the website is functional and business-oriented but would benefit from enhanced transparency and security measures.
Accreditation Council for Pharmacy Educationacpe-accredit.org
Education · United States
65Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
The Accreditation Council for Pharmacy Education (ACPE) is a recognized authority in pharmacy education accreditation, providing standards and accreditation services for PharmD programs, continuing education providers, and international pharmacy education stakeholders. The organization maintains a strong market position as a trusted accreditor with a clear focus on quality assurance and professional development in pharmacy education. Their website reflects a mature digital presence with comprehensive content tailored to educational institutions and professionals in the pharmacy sector. Technically, the website is built on WordPress using the Avada theme and incorporates modern web technologies such as jQuery and Revolution Slider. Google Analytics is integrated for user tracking, and the site is served over HTTPS with good SSL configuration. The site demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate and could benefit from further optimization. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data or vulnerable libraries. However, it lacks some security headers and does not publish a security policy or incident response information. There is no cookie consent mechanism detected, which may impact privacy compliance. The WHOIS data is unavailable due to a malformed query, but the website's professional presentation and authoritative content suggest legitimacy. Overall, the site is low risk with strong business credibility and technical implementation but could improve privacy compliance and security transparency to enhance trust and regulatory adherence.
American Dental Associationada.org
Healthcare · United States
72Medium
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
The American Dental Association (ADA) website serves as a comprehensive resource for dental professionals, providing clinical guidelines, research, advocacy, education, and industry news. The site targets dentists, dental students, and oral health researchers, positioning itself as a leading national dental association in the United States. The business model is that of a non-profit professional association focused on supporting dental careers and oral health innovation. Technically, the website is built on a modern stack including Bootstrap 4 and Sitecore CMS, with integrated Coveo search and multiple marketing and analytics tools such as HubSpot, Google Tag Manager, and Facebook Pixel. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforced and cookie consent implemented; however, explicit security headers and vulnerability disclosure mechanisms are absent. The lack of WHOIS data limits domain registration verification, but the website's professional branding and content strongly indicate legitimacy. Overall, the ADA website is a high-quality, trustworthy platform with room for improvement in explicit privacy and security disclosures.
Tribune Group GmbHroots-summit.com
Healthcare · Germany
54Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Roots Summit is a well-established professional event focused on endodontics and dental education, organized by Tribune Group GmbH. The website provides access to event recordings, speaker information, and news updates, targeting dental professionals globally. The technical infrastructure is modern, leveraging WordPress CMS, Bootstrap framework, and Amazon CloudFront CDN, with integrated analytics and consent management tools. Security posture is good with HTTPS and reCAPTCHA protections, though additional security headers and incident response information could enhance trust. The absence of WHOIS data for the domain introduces some uncertainty about domain legitimacy, but the professional content and ADA CERP certification support the site's credibility. Overall, the site is functional, professional, and compliant with privacy regulations, serving its audience effectively.
- MAISONNOÉE Berlin
maisonnoee.com
Retail · Germany
63Medium
NIS2 17 · GDPR 58
NIS2 17 · GDPR 58
MAISONNOÉE Berlin is a small luxury fashion and lifestyle brand specializing in women's and kids' apparel, emphasizing European craftsmanship, sustainability, and timeless design. Founded in 2013, the company operates primarily through its e-commerce platform, offering products such as leather goods, ready-to-wear, and made-to-measure clothing. The brand maintains a consistent and professional online presence with active social media channels and multiple payment options, targeting discerning customers seeking elegant and sustainable fashion. Technically, the website is built on WordPress with WooCommerce, leveraging modern frameworks like Bootstrap and JavaScript libraries such as jQuery and OwlCarousel. The site integrates marketing and analytics tools including Google Analytics, Facebook Pixel, Sendinblue, and Brevo Conversations for live chat support. Performance and mobile optimization are good, though accessibility features are basic. SEO is well implemented with proper meta tags and structured data. From a security perspective, the site uses HTTPS with a valid SSL certificate and has domain transfer protections in place. However, it lacks DNSSEC and explicit security headers, and does not provide a public security policy or incident response information. No cookie consent mechanism was detected, which may pose GDPR compliance risks. The WHOIS data is transparent and consistent with the business claims, indicating a legitimate and stable domain registration. Overall, the website demonstrates a solid business and technical foundation with room for improvement in security hardening and privacy compliance. Strategic enhancements in these areas would strengthen trust and regulatory adherence, supporting the brand's premium market positioning.
- Architectural Tribune
architectural-tribune.com
Real Estate
51Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Architectural Tribune is a specialized media platform focused on architecture education, news, events, and profiles. It targets architects, designers, and industry professionals by providing curated content including news articles, webinars, and event listings. The platform operates on WordPress with a modern tech stack including Bootstrap, jQuery, and several plugins for social sharing and forms. The website demonstrates good design quality, clear navigation, and mobile optimization, supporting a positive user experience. Security posture is moderate with HTTPS usage implied but lacking explicit security headers and cookie consent mechanisms. Privacy policies and terms are present and comprehensive, indicating awareness of compliance requirements. However, the absence of WHOIS data and direct company contact emails reduces business credibility and trustworthiness. Overall, the site is functional and professional but would benefit from enhanced security practices and transparency.
- mama & family
mamaundfamily.de
Media · Germany
54Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
mama & family operates a German-language online magazine specializing in family-related topics such as pregnancy, parenting, baby care, and toddler development. The website targets parents and prospective parents, providing informational content, newsletters, and advertising opportunities. The business model is content publishing with monetization primarily through advertising and newsletter subscriptions. The site maintains a consistent brand presence and offers good quality content relevant to its niche audience. Technically, the site is built on WordPress with a modern tech stack including jQuery, Bootstrap, and various plugins for social sharing, forms, and ads. Hosting and DNS are managed via Cloudflare, ensuring reliable delivery and security. The website is mobile-optimized and SEO-friendly with structured data and meta tags implemented. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though security headers are lacking and no explicit security or incident response policies are published. Privacy compliance is good, with a comprehensive privacy policy and cookie consent aligned with GDPR. No suspicious or malicious content or domains were detected. Overall, the site is trustworthy, professional, and well-positioned in its market niche.
Tribune Group GmbHdds.world
Healthcare · Germany
60Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
DDS World Academy is a professional event organizer specializing in digital dentistry education and exhibitions. The company hosts global events featuring lectures, workshops, and exhibitions that highlight innovations such as AI-assisted treatment planning, 3D printing, and intraoral scanning. The organization is recognized by ADA CERP, enhancing its credibility in the dental education sector. Technically, the website is built on WordPress with modern libraries and CDN hosting, ensuring good performance and mobile responsiveness. Security posture is solid with HTTPS, reCAPTCHA protection, and cookie consent mechanisms, though explicit security headers could be improved. Privacy compliance is strong with clear policies and GDPR adherence. Overall, the site presents a trustworthy and professional digital presence for the dental education market.
Colgate Oral Health Networkcolgatedentaleducatorsnetwork.com
Healthcare
67Medium
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
The Colgate Oral Health Network website serves as a professional platform focused on dental education and oral health resources. It targets dental educators and oral health professionals, providing educational content and networking opportunities. The site appears to be a niche healthcare-related resource, likely affiliated with Colgate-Palmolive, although explicit corporate details are not provided. Technically, the website is built on WordPress and employs modern web technologies such as Bootstrap, FontAwesome, and analytics tools like Matomo and Google Tag Manager. The site demonstrates moderate performance and basic mobile optimization but lacks advanced SEO and accessibility features. Security posture is moderate with HTTPS presumably enabled, but no explicit security headers or policies are visible. Privacy and cookie policies are absent, and no contact information is provided, which impacts trust and compliance. The WHOIS data is missing, raising concerns about domain registration legitimacy. Overall, the website is functional but requires improvements in transparency, security, and compliance to enhance trustworthiness and user confidence.
Colgate Oral Health Networkcolgateoralhealthnetwork.com
Healthcare
65Medium
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
The Colgate Oral Health Network website serves as a professional platform providing educational content and resources focused on oral health, targeting dental professionals and practitioners. The site is branded consistently with the Colgate-Palmolive Company, indicating a strong market position in healthcare education. Technically, the website is built on WordPress with modern libraries such as Bootstrap and uses Google Tag Manager and Matomo for analytics, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS enforced, but lacks advanced security headers and formal vulnerability disclosure mechanisms. Privacy compliance is weak, with no visible privacy or cookie policies, which could expose the organization to regulatory risks. Overall, the website is professional and trustworthy in content but requires improvements in privacy and security transparency to enhance compliance and user trust.
Tribune Group GmbH Inc.fgmdentalgroupcampus.com
Healthcare · Germany
59Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
FGM Dental Group campus operates as a specialized online education platform focused on dental professionals and students, offering live and on-demand webinars, case studies, and expert sessions. The platform is professionally branded under Tribune Group GmbH Inc., with a clear focus on continuing education and dental expertise. The website is technically mature, leveraging WordPress CMS, modern JavaScript libraries, and CDN hosting for performance and scalability. Security posture is generally strong with HTTPS and reCAPTCHA integration, though some security headers are missing and WHOIS data is unavailable, which slightly impacts trust. Privacy and terms policies are comprehensive and GDPR compliant, supporting user trust and regulatory adherence. Overall, the platform presents a credible and professional digital presence in the healthcare education sector.
Tribune Group GmbHbiolaseacademy.com
Healthcare
62Medium
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Biolase Academy is an educational platform focused on providing continuing education for dental professionals, particularly in the use of dental laser technology. The platform offers live and on-demand webinars featuring expert speakers and provides CE credits to its members. The website is professionally designed, mobile-optimized, and uses modern web technologies including WordPress, Bootstrap, and Amazon Cloudfront CDN. It integrates security features such as HTTPS and Google reCAPTCHA for form protection. However, explicit security headers are not detected, and no direct company contact emails or phone numbers are provided, which could impact user trust. The domain WHOIS data is missing, raising concerns about domain legitimacy and age, though the association with Tribune Group GmbH and ADA CERP recognition supports credibility. Privacy and cookie policies are comprehensive and GDPR compliant, with consent mechanisms in place.
Dental Tribune Internationaltokuyamadentalacademy.com
Healthcare
59Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Tokuyama Dental Academy operates as a professional online education platform specializing in restorative and prosthetic dentistry webinars. The platform offers live and on-demand sessions featuring international dental experts, targeting dental professionals seeking continuing education. The website is affiliated with Dental Tribune International, a recognized entity in dental media and education, enhancing its market credibility. Technically, the site leverages modern web technologies including jQuery, Bootstrap, and a CDN for fast content delivery, with good mobile optimization and user experience. Security measures include HTTPS enforcement and Google reCAPTCHA integration, alongside a cookie consent mechanism, reflecting a solid privacy posture. However, the absence of WHOIS data for the domain raises concerns about registration transparency, although the professional content and affiliations mitigate some trust issues. Overall, the site presents a secure, professional, and user-friendly platform for dental education.
HillTiphilltip.com
Transportation · Finland
55Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
HillTip is a Finnish company specializing in manufacturing and supplying snow and ice removal machinery and equipment targeted at professional road maintenance users. The website presents a professional image with clear branding and content focused on their core products such as snowplows, spreaders, and de-icing equipment. The company positions itself as a leading provider in this niche market, leveraging expertise from snow removal professionals. Technically, the website is built on WordPress using modern plugins like Yoast SEO and integrates Google Analytics and Tag Manager for tracking. The site is mobile optimized and SEO friendly, though accessibility features are basic. Security posture is moderate with HTTPS usage but lacks visible security headers and explicit privacy or cookie policies. No WHOIS data is publicly available for the domain, which raises some concerns about domain registration transparency. Overall, the site is functional and professional but would benefit from enhanced privacy compliance and security practices.
- LION Group, Inc.
lionprotects.com
Manufacturing · United States
70Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
LION Group, Inc. operates the website lionprotects.com, providing specialized products and services designed to ensure the health, safety, and performance of first responders, including firefighters and safety professionals. The company offers a broad range of training tools, protective apparel, PPE, and maintenance services, positioning itself as a leader in the manufacturing and supply of first responder equipment. The website is professionally designed with comprehensive content targeting first responders and related organizations. Technically, the site is built on the HubSpot CMS platform, utilizing modern marketing and analytics tools such as Google Analytics, Google Tag Manager, and Facebook Pixel. The security posture is solid with HTTPS enforced and privacy consent mechanisms in place, though some security headers could be improved and the jQuery library is outdated. The absence of WHOIS registration data is a notable anomaly, potentially indicating recent domain registration or privacy protection, which slightly reduces trustworthiness. Overall, the site demonstrates a mature digital presence with good privacy compliance and business credibility.
J.A. Larue Inc.jalarue.com
Manufacturing · Canada
60Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
J.A. Larue Inc. is a well-established Canadian manufacturer specializing in industrial snow removal equipment, including loader-mounted and self-propelled snow blowers, airport brooms, and plows. Founded in 1973, the company serves a diverse clientele including airports, municipalities, departments of transportation, contractors, and governmental institutions. Their market position is strong with a reputation for quality, precision engineering, and reliability. The website reflects a professional and consistent brand image with comprehensive product and company information, targeting commercial and institutional buyers. Technically, the website is built on WordPress with modern SEO and marketing integrations such as Yoast SEO, Pardot, and Google Tag Manager. It is mobile-optimized and uses Cloudflare Turnstile captcha for form security. The site demonstrates good performance and accessibility standards, though some security headers are missing. The absence of WHOIS data for the domain is a notable anomaly, potentially impacting trustworthiness from a domain registration perspective. Security posture is solid with HTTPS enforced and anti-bot measures on forms, but lacks published security policies or incident response information. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanism. Overall, the site is professional and trustworthy, but domain registration transparency and enhanced security policies would improve confidence further. Strategic recommendations include implementing security headers, publishing incident response and vulnerability disclosure policies, and verifying domain registration details to enhance legitimacy and trust.
HURST Jaws of Lifejawsoflife.com
Manufacturing · United States
66Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
HURST Jaws of Life is a well-established manufacturer specializing in hydraulic rescue tools designed to save lives in emergency situations. The company is positioned as a market leader with over 40 years of industry experience and is part of the larger IDEX Fire & Safety group. Their product offerings include advanced rescue tools such as the smart eDRAULIC 3.0 series, targeting emergency responders and fire departments globally. The website reflects a professional and modern digital presence with comprehensive product information, dealer support, and customer engagement features. Technically, the website leverages a modern technology stack including Craft CMS, Google Analytics, Microsoft Clarity, Facebook Pixel, and CookieYes for consent management. The site is mobile-optimized, fast-loading, and includes accessibility considerations. Security practices such as HTTPS enforcement, CSRF tokens, and bot protection via Google reCAPTCHA are implemented, though additional security headers could enhance the posture further. From a security and compliance perspective, the site includes a detailed privacy policy, cookie consent mechanisms, and terms of service, indicating good GDPR compliance. However, the absence of WHOIS registration data raises concerns about domain legitimacy and transparency. No explicit vulnerabilities or security incidents are evident from the analysis. Overall, the website presents a trustworthy and professional front for HURST Jaws of Life, but the missing WHOIS data warrants further investigation to confirm domain registration legitimacy. Strategic improvements in security headers and incident response disclosures would strengthen the security posture and trustworthiness further.
Envirosightenvirosight.com
Transportation · United States
69Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Envirosight is a well-established company specializing in sewer inspection cameras and related technology, serving municipalities, contractors, and transportation departments. With over 20 years in the industry, they offer a comprehensive product lineup including inspection crawlers, vehicles, software, and specialized cameras. Their market position is strong, supported by an extensive network of service centers and equipment specialists. Technically, the website is built on WordPress with Elementor and integrates multiple analytics and marketing tools, reflecting a mature digital infrastructure. Security posture is solid with HTTPS and cookie consent mechanisms, though there is room for improvement in security headers and incident response transparency. Overall, the website is professional, trustworthy, and compliant with privacy regulations, making it a reliable digital presence for the company.
Demers Ambulancesdemers-ambulances.com
Transportation · Canada
62Medium
NIS2 2 · GDPR 65
NIS2 2 · GDPR 65
Demers Ambulances is a well-established manufacturer specializing in innovative and ergonomic ambulances designed for EMS and fire services. With a history dating back to 1960 and backed by parent company JB Poindexter & Co., Demers positions itself as a trusted partner delivering high-quality, safety-focused ambulance solutions. The website reflects a professional digital presence with detailed product information, customer testimonials, and active social media engagement. Technically, the site is built on WordPress with modern plugins and tracking tools, offering good mobile optimization and SEO practices. Security posture is solid with HTTPS and reCAPTCHA usage, though improvements in security headers and cookie consent mechanisms are recommended. The absence of WHOIS data is a notable anomaly but does not detract significantly from the overall trustworthiness. Strategic recommendations include enhancing privacy compliance, publishing security policies, and improving security headers to strengthen trust and compliance.
Crestline Ambulances - Canadacrestlineambulances.com
Transportation · Canada
73Medium
NIS2 17 · GDPR 65
NIS2 17 · GDPR 65
Crestline Ambulances - Canada operates a professional website focused on manufacturing and selling ambulances, including new and used vehicles, remount services, and parts. The company targets emergency services and healthcare providers within Canada, positioning itself as a key player in the Canadian ambulance manufacturing market. The website is well-structured, with consistent branding and a clear business focus. Technical infrastructure is based on WordPress with modern plugins and frameworks, supporting good SEO and mobile responsiveness. Security posture is adequate with HTTPS enabled and domain transfer protections, though improvements such as DNSSEC and security headers are recommended. Privacy compliance is partially addressed with a cookie consent mechanism, but lacks explicit privacy and terms of service pages. Overall, the site is trustworthy and professional, with room for enhanced security and compliance documentation.
BME Fire Trucksbmefire.com
Transportation
64Medium
NIS2 2 · GDPR 58
NIS2 2 · GDPR 58
BME Fire Trucks is a specialized manufacturer focused on wildland firefighting apparatus, targeting fire departments and emergency services. The website presents a professional and consistent brand image with clear business focus on transportation and fire truck manufacturing. Technically, the site is built on WordPress with WooCommerce and Elementor, leveraging modern web technologies and performance optimizations such as NitroPack. The security posture is adequate with HTTPS enforced, but lacks advanced security headers and explicit privacy or cookie policies. The absence of WHOIS registration data raises concerns about domain legitimacy, though the website content and structure suggest a legitimate business. Overall, the site is functional and professional but would benefit from enhanced transparency and security practices.
Arctic Compressorarcticcompressor.com
Government · United States
65Medium
NIS2 29 · GDPR 53
NIS2 29 · GDPR 53
Arctic Compressor is a specialized American manufacturer based in Superior, Wisconsin, providing high-pressure air compressors and SCBA fill stations primarily for firefighting, industrial, and government sectors. The company positions itself as a leading provider with nationwide and global reach, offering a range of products including stationary and mobile air solutions, parts, and accessories. Their business model focuses on manufacturing and direct sales supported by dealer partnerships and a career portal. Technically, the website is built on WordPress with Elementor and optimized for SEO and mobile responsiveness, employing modern web technologies and analytics tools such as Google Tag Manager and Microsoft UET. Security posture is solid with HTTPS and no visible vulnerabilities, though some security headers and cookie consent mechanisms could be improved. The WHOIS data is unavailable, which slightly impacts trust but the professional site and clear contact information support legitimacy. Overall, the site demonstrates a mature digital presence with strong business credibility and good technical implementation.
Havis Inc.havis.com
Technology · United States
75Medium
NIS2 29 · GDPR 53
NIS2 29 · GDPR 53
Havis Inc. is a well-established manufacturer specializing in rugged vehicle mounts, consoles, docking solutions, and transport solutions tailored for industries such as public safety, energy, healthcare, transportation, and retail. The company targets business clients requiring durable and secure technology mounting solutions for mobile and fixed environments. Their website reflects a mature digital presence with comprehensive product information and industry-specific solutions. Technically, the site is built on WordPress with WooCommerce and Elementor, integrating modern analytics and marketing tools such as Google Analytics, Google Tag Manager, and Lead Forensics. The site is secured with HTTPS and employs standard security headers, indicating a good security posture. However, no explicit security policy or incident response contact information is found, which could be improved. Overall, the website is professional, well-structured, and trustworthy, though the absence of WHOIS data is a minor concern that should be monitored.
McNeilus Truck and Manufacturingmcneilusgarbagetrucks.com
Transportation · United States
68Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
McNeilus Truck and Manufacturing operates a professional website focused on refuse and recycling collection vehicles, parts, and innovative waste management technologies. The company is positioned as an industry leader with a strong backing from its parent company, Oshkosh Corporation. The website targets municipalities, waste management companies, and fleet operators, offering a comprehensive range of garbage trucks including electric models, parts, and services. The content is well-structured and professionally presented, reflecting a mature business with a large operational scale. Technically, the website is built on the HubSpot CMS platform, leveraging modern web technologies such as Google Tag Manager, jQuery, and various marketing and analytics tools. Hosting is supported by AWS infrastructure, ensuring reliable performance. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Privacy and cookie policies are implemented with consent mechanisms, indicating good compliance with GDPR and related regulations. From a security perspective, the site enforces HTTPS and uses domain transfer protection. However, DNSSEC is not enabled, and some security headers are not explicitly present, suggesting room for improvement. No vulnerabilities or exposed sensitive data were detected. The absence of a published security policy or incident response contact is noted. Overall, the security posture is solid but could be enhanced with additional best practices. The domain registration data aligns well with the business claims, showing a consistent and legitimate ownership history. The website links to multiple corporate subsidiaries and social media channels, reinforcing trustworthiness. There are no indications of malicious content or blocking mechanisms. Strategic recommendations include enabling DNSSEC, publishing security policies, and enhancing security headers to further strengthen the security and compliance posture.
- Trackless Vehicles
tracklessvehicles.com
Transportation · United States
67Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Trackless Vehicles is a well-established manufacturer specializing in municipal sidewalk tractors and related equipment, serving public works, parks, airports, universities, and military facilities globally. The company positions itself as an industry leader with over 55 years of experience, offering a broad range of attachments and equipment for various maintenance and snow removal needs. Their business model includes a dealer network and cooperative purchasing contracts, enhancing market reach and credibility. The website reflects a professional and consistent brand image with good content quality and clear navigation, targeting government and institutional customers.
Titan Leaf Solutiontitanleafsolutions.com
Manufacturing · United States
61Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Titan Leaf Solution is a small manufacturing business specializing in the production and nationwide distribution of leaf vacuums through a dealer network. The company targets dealers and customers across the United States, focusing on leaf containment and vacuum solutions. The website is built on the Wix platform, leveraging Wix's Thunderbolt framework and standard web technologies such as JavaScript, HTML5, and CSS3. The site is moderately optimized for mobile devices and provides basic SEO and accessibility features. Security posture is adequate with HTTPS enforced, but lacks advanced security headers and privacy compliance mechanisms. The absence of WHOIS registration data raises concerns about domain legitimacy, although the website content is professional and business-focused. Overall, the site presents a moderate risk profile with recommendations to improve security headers, privacy policies, and domain registration transparency.
- SSkeeter Emergency Vehicles
skeeteremergencyvehicles.com
Manufacturing · United States
60Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Skeeter Emergency Vehicles is a specialized manufacturer of custom wildland firefighting and emergency response vehicles, positioning itself as an industry leader with a focus on quality craftsmanship, customization, and certified safety standards. The company targets fire departments and emergency services, offering a range of custom apparatus and cooperative purchasing options to facilitate procurement. The website reflects a medium-sized enterprise with a professional digital presence and active social media engagement. Technically, the site is built on WordPress with modern plugins and tools, providing a good user experience and mobile optimization. Security posture is solid with HTTPS and domain locking, though it lacks some advanced security headers and formal security policies. Privacy compliance is limited due to missing privacy and cookie policies. WHOIS data confirms domain legitimacy and consistency with the business profile. Overall, the website is trustworthy and professional but would benefit from enhanced privacy and security disclosures.
Pierce Manufacturing, Inc.piercemfg.com
Manufacturing · United States
73Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Pierce Manufacturing, Inc. is a leading manufacturer specializing in custom fire apparatus including pumpers, aerials, rescues, tankers, and electric fire trucks. As a subsidiary of Oshkosh Corporation, Pierce holds a strong market position in the emergency vehicle manufacturing sector, serving fire departments and emergency services with innovative and custom solutions. The website reflects a professional and well-branded digital presence, leveraging HubSpot CMS and modern marketing technologies to engage its target audience effectively. The technical infrastructure is robust, utilizing a combination of HubSpot CMS, Google Analytics, Hotjar, and other modern tools to ensure good performance, mobile optimization, and user experience. The site employs HTTPS with good SSL configuration, though some security headers could be improved for enhanced protection. Privacy and cookie policies are present and linked through the parent company, indicating a commitment to compliance and user privacy. Security posture is solid with no critical vulnerabilities detected; however, the absence of explicit security policies or incident response information is a gap. The missing WHOIS data for the domain is a notable concern, reducing transparency and trust slightly, but the overall legitimacy is supported by strong corporate branding and external trust signals. Overall, Pierce Manufacturing's website is a secure, professional, and credible platform that effectively supports its business objectives. Strategic recommendations include enhancing security headers, publishing clear security policies, and addressing WHOIS transparency to further strengthen trust and compliance.
Machineseeker Group GmbHmaschinensucher.de
Manufacturing · Germany
68Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
Maschinensucher.de, operated by Machineseeker Group GmbH, is a leading German online marketplace specializing in used machinery. The platform offers a comprehensive search engine, auction services, and advertising options for sellers, targeting businesses and individuals in the manufacturing and transportation sectors. With over 200,000 listings and a strong dealer network, it holds a prominent market position in Germany. The website is professionally designed, mobile-optimized, and provides rich content and clear navigation, enhancing user experience and trust. Technically, the site leverages modern web technologies including jQuery, Bootstrap, Keen Slider, and the Yii2 PHP framework. It integrates Google Tag Manager and reCAPTCHA for analytics and security. The site is well-optimized for SEO and accessibility, with fast performance and responsive design. Hosting details are not explicit, but the infrastructure appears robust and professionally managed. From a security perspective, the website uses HTTPS with strong SSL configuration and implements security best practices such as CSRF tokens and reCAPTCHA. However, explicit security headers like X-Frame-Options and a published security policy or incident response page are not detected, representing areas for improvement. Privacy and cookie policies are comprehensive and GDPR compliant, with a clear consent mechanism. Overall, the website demonstrates a high level of professionalism, security, and compliance, with no signs of blocking or malicious content. The domain registration data aligns with the business history, supporting legitimacy. Strategic recommendations include enhancing security header implementation, publishing a security policy, and establishing a vulnerability disclosure process to further strengthen trust and security posture.