Low-risk security reports
14,261 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,165001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
1,151–1,200 of 14,261
—
78Low
NIS2 10 · GDPR 85
NIS2 10 · GDPR 85
- SSLV GmbH
slv.com
Retail · Germany
76Low
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
SLV GmbH operates a professional e-commerce platform specializing in high-quality lighting products for both residential and commercial customers, emphasizing German engineering and product reliability. The website is well-structured, multilingual, and targets a broad European market with a focus on Germany. The technical infrastructure leverages modern technologies including Spryker Commerce OS, Google Tag Manager, and Usercentrics for consent management, indicating a mature digital presence. Security posture is strong with HTTPS enforced and consent mechanisms in place, though explicit security policies and incident response details are absent. The lack of WHOIS data for the domain introduces some uncertainty regarding domain registration legitimacy, but the overall professional presentation and trust signals mitigate this concern. Strategic recommendations include publishing detailed security and incident response policies, providing direct contact information, and verifying domain registration details to enhance trust.
- Rrostecky
mladypodnikatel.cz
Media · Czech Republic
76Low
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
Jiří Rostecký operates a well-established Czech business media platform focused on podcasts, mentoring, and consulting services for entrepreneurs, freelancers, and small business owners. The website serves as a content hub and service portal, featuring extensive business-related content and live event promotions. The platform holds a strong market position in the Czech Republic's business media niche, supported by a decade-long domain history and consistent branding. Technically, the website is built on WordPress with modern SEO and performance optimizations including WP Rocket and All in One SEO Pro. It integrates multiple third-party services such as Vimeo, YouTube, Mailjet, and Spotify for media and marketing functionalities. The site is mobile-optimized, fast-loading, and accessible, reflecting a mature digital infrastructure. Security posture is robust with HTTPS enforced, comprehensive cookie consent mechanisms, and use of Google reCAPTCHA for bot protection. Security headers are present, and no vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with GDPR-aligned cookie policies and consent banners. Overall, the site presents low risk with high trustworthiness and professionalism. Strategic recommendations include publishing explicit security and incident response policies, adding contact emails or phone numbers for business inquiries, and maintaining regular security audits to ensure ongoing compliance and protection.
Technology · Austria
78Low
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
The Chaos Computer Club Wien (C3W) is a non-profit community organization based in Austria focused on promoting information freedom, critical engagement with electronic media, and the dissemination of free technologies and standards. The website serves as an informational hub for the community, providing contact details, event information, and advocacy resources. The organization targets technology enthusiasts, civil society members, and activists interested in digital rights and open technologies. Technically, the website is built using the Hugo static site generator with modern JavaScript libraries enhancing user experience. It is well-optimized for mobile devices and accessibility, with good SEO practices and a clean, professional design. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and incident response policies could be improved. Privacy compliance is adequate with a privacy policy present, but no explicit cookie consent mechanism. Overall, the site is trustworthy, professional, and aligned with the organization's mission.
Alf & Betalfabet.coffee
E-commerce · Czech Republic
76Low
NIS2 2 · GDPR 85
NIS2 2 · GDPR 85
Alf & Bet is a small specialty coffee roaster and artisan bakery based in Prague, Czechia, operating an e-commerce platform primarily targeting European customers. The company offers a curated selection of coffee, tea, bread, wine, books, and related accessories, supported by physical espresso bar locations under the EMA brand. The website is built on Shopify, leveraging modern e-commerce technologies and third-party integrations for marketing, analytics, and customer reviews. Privacy and cookie consent mechanisms are implemented, reflecting GDPR compliance. Security posture is strong with HTTPS and standard security headers, though explicit security policies and incident response contacts are not publicly disclosed. Overall, the site presents a professional and trustworthy online presence with no signs of malicious activity or content blocking.
Alf & Betcoffee.toys
E-commerce · Czech Republic
76Low
NIS2 2 · GDPR 85
NIS2 2 · GDPR 85
Alf & Bet is a small specialty coffee roaster and artisan bakery based in Prague, Czechia, operating an e-commerce platform primarily targeting European customers. The company offers a curated selection of coffee, tea, bread, wine, books, and related accessories, supported by physical espresso bar locations under the EMA brand. Their market position is niche, focusing on quality and artisanal products with a loyal customer base. The website is built on the Shopify platform using a modern theme and integrates multiple analytics and marketing tools, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers and explicit policies could be improved. The domain WHOIS data is privacy protected, which is typical for small businesses, and no suspicious patterns were detected. Overall, the website is professional, trustworthy, and compliant with GDPR, making it a reliable online presence for the business.
Alteryxalteryx.com
Technology · United States
84Low
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Alteryx is a leading enterprise technology company specializing in AI-ready data analytics and automation platforms. Their flagship product, Alteryx One, offers a no-code AI analytics platform designed to unify data and automate analytics workflows, targeting data analysts and business intelligence professionals. The company maintains a strong market position with a professional and well-branded online presence, supported by verified social media channels and comprehensive digital content. Technically, the website is built on WordPress and leverages modern technologies such as jQuery, Google Tag Manager, Hotjar, and NitroPack for performance optimization. The site is mobile-optimized, fast-loading, and SEO-friendly, reflecting a mature digital infrastructure. Security-wise, the site enforces HTTPS, implements standard security headers, and uses cookie consent mechanisms, though explicit security policies and incident response contacts are not publicly detailed. The WHOIS data is unavailable or obscured, which slightly reduces trust but is offset by the professional site and brand presence. Overall, the website demonstrates a high level of professionalism, security, and compliance suitable for an enterprise technology provider.
Trustwavetrustwave.com
Technology
80Low
NIS2 59 · GDPR 80
NIS2 59 · GDPR 80
Trustwave is a globally recognized cybersecurity and managed security services provider specializing in managed detection and response. Following its acquisition by LevelBlue, it has become the world's largest pure-play MSSP, offering a broad portfolio of services including advisory, penetration testing, email and database security, and incident response. The company targets enterprises and organizations across multiple sectors such as technology, government, healthcare, and retail. The website reflects a mature digital presence with professional branding and comprehensive service descriptions. Technically, the site is built on HubSpot CMS, leveraging modern web technologies and analytics tools, with good mobile optimization and SEO practices. Security posture is strong with HTTPS enforcement, security headers, and secure forms, though explicit security policy and vulnerability disclosure pages could be enhanced. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. WHOIS data is unavailable, likely due to privacy or registry policies, but the overall trustworthiness is supported by the company's market position and content quality.
- Universität Graz
uni-graz.at
Education · Austria
79Low
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Universität Graz is a prominent Austrian university dedicated to education and research, serving students, researchers, and the academic community. The website reflects its mission to develop solutions for the future and showcases its research profile, study programs, and community engagement. It holds a strong market position as a reputable institution with international connections. Technically, the site is built on TYPO3 CMS with Angular components, leveraging modern web technologies and analytics tools like Google Analytics and Matomo. The site is well-optimized for mobile and accessibility, with good SEO practices. Security-wise, the website enforces HTTPS, employs security headers, and anonymizes IPs in analytics, but lacks explicit public security policies or incident response contacts. Overall, the site is professional, trustworthy, and compliant with GDPR, though it could improve transparency on security and vulnerability disclosures.
- Studo GmbH
studo.co
Education · Austria
79Low
NIS2 35 · GDPR 65
NIS2 35 · GDPR 65
Studo GmbH is a medium-sized technology company specializing in digital solutions for students and higher education institutions, primarily in Austria and neighboring countries. Their flagship product, the Studo Campus App, supports over 500,000 daily users and offers a suite of services including digital campus cards, workload measurement, and administrative tools. The company positions itself as a trusted partner for universities, emphasizing quality, sustainability, and personal collaboration since its founding in 2016. Technically, the website demonstrates a mature and modern infrastructure leveraging Cloudflare DNS and CDN services, Piwik PRO for analytics, and optimized assets such as WebP images. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a high level of digital maturity. Security practices include HTTPS enforcement, TÜV SÜD certification covering data protection and software quality, and annual accessibility audits, though some improvements like DNSSEC and security.txt publication are recommended. The security posture is strong with no evident vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with a comprehensive privacy policy and GDPR consent on forms, although a visible cookie consent banner is missing. Business credibility is reinforced by multiple trust indicators including certifications, testimonials from university officials, and awards. Overall, the website and business present a low-risk profile with strong professionalism and trustworthiness. Strategic recommendations include enhancing DNS security, publishing vulnerability disclosure information, and implementing explicit cookie consent mechanisms to further improve compliance and security posture.
- SolarEdge
solaredge.com
Energy · Germany
78Low
NIS2 25 · GDPR 83
NIS2 25 · GDPR 83
SolarEdge is a globally leading provider of smart energy technology solutions, specializing in photovoltaic systems, energy storage, electric vehicle charging, and energy optimization. The company targets residential, commercial, and utility sectors with advanced energy solutions. The website reflects a mature digital presence built on Drupal 10, integrating modern analytics and marketing tools such as Google Tag Manager and Microsoft Clarity, indicating a well-maintained technical infrastructure. Security posture is strong with HTTPS enforcement, cookie consent mechanisms, and no visible vulnerabilities, although explicit security policies and incident response contacts are not publicly available. Overall, the website presents a professional and trustworthy image, though the absence of WHOIS registrant data slightly reduces domain trustworthiness.
SMV:Digitalsmvdigital.dk
Government · Denmark
79Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
SMV:Digital is a Danish government-affiliated digital platform dedicated to supporting small and medium-sized enterprises (SMEs) with business guidance, funding opportunities, and digital tools. The platform offers a variety of services including advisory searches, project tools, and inspiration content tailored to the needs of Danish SMEs. The website is well-positioned as an official government resource, leveraging trusted authentication via MitID and providing clear, GDPR-compliant privacy and cookie policies. Technically, the site employs modern frontend technologies such as Vue.js and integrates Piwik PRO for analytics, ensuring a contemporary and responsive user experience. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although some security headers and explicit security policies could be improved or published. Overall, the domain registration data aligns well with the website's government affiliation, enhancing trust and legitimacy.
- Erhvervsstyrelsen
brugdata.dk
Government · Denmark
77Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Virksomhedsguiden.dk is an official Danish government website operated by Erhvervsstyrelsen (the Danish Business Authority). It provides business guidance, particularly focusing on data usage and sharing agreements, supported by comprehensive privacy and cookie policies. The site targets businesses and public sector entities in Denmark, offering templates and regulatory information to facilitate compliant data sharing. The platform is well-positioned as a trusted government resource with a clear focus on compliance and user consent management. Technically, the website employs modern frontend technologies such as Vue.js and integrates privacy-focused analytics via Piwik PRO. It features a detailed cookie consent mechanism that categorizes cookies by purpose and allows granular user control, reflecting a mature digital infrastructure. The site is mobile-optimized, accessible, and demonstrates good SEO practices, contributing to a positive user experience. From a security perspective, the site enforces HTTPS, uses security headers, and avoids exposing sensitive data. However, DNSSEC is not enabled, and there is no visible security.txt or explicit incident response contact information, which could be improved. The privacy compliance is strong, with GDPR-aligned policies and transparent cookie management. No critical vulnerabilities or suspicious activities were detected. Overall, Virksomhedsguiden.dk presents a secure, professional, and trustworthy government service platform. Strategic recommendations include enabling DNSSEC, publishing a security.txt file, and providing clearer security and incident response policies to enhance transparency and trust further.
Digitaliseringsstyrelsenborger.dk
Government · Denmark
80Low
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
Borger.dk is the official Danish government portal providing digital access to public services, including digital post, personal overviews, and guides for citizens on various life situations. It serves as a centralized platform for Danish residents to interact with government services efficiently. The website demonstrates a high level of content quality, professional design, and clear navigation tailored to its target audience of Danish citizens. Technically, the site uses modern web technologies with good mobile optimization and accessibility features, although some security headers and explicit security policies are not evident in the provided data. The security posture is solid with HTTPS enforced and cookie consent mechanisms in place, but could be improved by publishing incident response and vulnerability disclosure information. Overall, the site is trustworthy and well-maintained, reflecting its role as a key government digital service portal.
- Handwerkskammer für München und Oberbayern
hwk-muenchen-bildung.de
Education · Germany
76Low
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
The Handwerkskammer für München und Oberbayern operates a comprehensive educational portal focused on handcraft training and continuing education in the Munich and Upper Bavaria region. The website offers a broad range of courses including Meisterkurse, Lehrlingskurse, and specialized training, targeting apprentices, skilled workers, and business leaders in the handcraft sector. The institution holds a strong regional market position as a trusted educational provider with clear branding and professional content. Technically, the website is built on the ODAV Content Management System and employs modern web technologies such as jQuery, Bootstrap, and accessibility tools like eyeAble. It integrates analytics via Google Analytics and Matomo, with a cookie consent mechanism ensuring GDPR compliance. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS and uses best practices such as asynchronous script loading and cookie consent. However, explicit security headers like X-Frame-Options are not visibly set, and no public security policy or incident response contacts are provided. No vulnerabilities or suspicious content were detected, and the domain registration aligns well with the business identity, indicating high legitimacy. Overall, the website presents a low-risk profile with strong business credibility and good privacy compliance. Strategic improvements could include publishing a formal security policy, enhancing security headers, and providing incident response contact information to further strengthen trust and security posture.
- Vectron Systems AG
bonvito.net
Retail · Germany
78Low
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
bonVito is a German-based multichannel marketing platform operated by Vectron Systems AG, specializing in customer loyalty, e-payment, online table reservations, and live reporting solutions primarily for retail and hospitality sectors. The platform integrates with Vectron's POS systems, offering a comprehensive suite of marketing tools such as coupons, digital stamp cards, and direct discounts. The website is professionally designed, mobile-optimized, and provides a clear navigation structure, reflecting a mature digital presence. Technically, the site is built on TYPO3 CMS and leverages modern marketing and analytics technologies including Google Tag Manager, Facebook Pixel, and Cookiebot for GDPR-compliant cookie consent management. Security posture is generally good with HTTPS enforced and no exposed sensitive data, though the absence of explicit security headers and vulnerability disclosure mechanisms suggests room for improvement. The WHOIS data is notably absent, raising concerns about domain registration transparency, but the overall business credibility is supported by the professional website and parent company association. Strategic recommendations include enhancing security headers, publishing a security.txt file, and providing clearer contact and legal information to strengthen trust and compliance.
Innovasjon Norgeinnovationnorway.com
Government · Norway
83Low
NIS2 10 · GDPR 88
NIS2 10 · GDPR 88
Innovasjon Norge is a Norwegian government agency dedicated to fostering sustainable growth and export opportunities for Norwegian businesses. The agency provides a range of services including startup support, scaling assistance, internationalization programs, and sustainability initiatives. Their market position is that of a national innovation and business development authority, targeting Norwegian enterprises seeking to innovate and expand globally. Technically, the website is built on modern frameworks such as Next.js and React, with content managed via Sanity CMS. It employs Google Tag Manager for analytics and OneTrust for cookie consent management, indicating a mature digital infrastructure. The site is mobile-optimized, accessible, and SEO-friendly, reflecting good digital maturity. From a security perspective, the site enforces HTTPS, uses standard security headers, and implements cookie consent mechanisms. However, it lacks explicit security policy pages, vulnerability disclosure, and direct contact information for incident response, which are areas for improvement. The absence of WHOIS data is due to Norid's privacy policies for .no domains, but the site branding and content strongly support legitimacy. Overall, Innovasjon Norge's website presents a professional, secure, and privacy-conscious platform suitable for its government agency role. Strategic recommendations include publishing clear security and privacy policies, enhancing transparency with vulnerability disclosures, and providing explicit contact channels for security incidents to further strengthen trust and compliance.
- HHanseWerk AG
hansewerk.com
Energy · Germany
78Low
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
HanseWerk AG is a large regional energy service provider based in Germany, offering a broad portfolio of energy and telecommunications services to households, businesses, and municipalities. The company operates multiple subsidiaries and focuses on electricity, gas, heating solutions, and emerging technologies such as electric vehicle charging. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive service information. Technically, the site uses modern frameworks like React and integrates consent management and analytics tools, indicating a good level of digital maturity. Security posture is solid with HTTPS enforced and consent mechanisms in place, though explicit security policies and incident response information are not publicly available. The absence of WHOIS data reduces trust signals but does not negate the legitimacy indicated by the website content. Overall, the site is professional, compliant with GDPR, and suitable for its target audience.
Státní úřad inspekce prácesuip.cz
Government · Czech Republic
80Low
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
The website www.suip.cz is the official portal of the Státní úřad inspekce práce, the Czech Republic's State Labor Inspection Office. It serves as a comprehensive resource for labor inspection, occupational safety, employment relations, and labor law compliance. The site targets employers, employees, and businesses within the Czech Republic, offering services such as online certificate requests, advisory services, and complaint submissions. The portal is well-structured, multilingual, and professionally designed, reflecting its government affiliation and public service mandate. Technically, the site is built on the Liferay CMS platform, utilizing modern JavaScript libraries including React and jQuery, and integrates Google Analytics for traffic monitoring. The infrastructure supports HTTPS with strong security headers, indicating a good security posture. Accessibility and mobile optimization are well addressed, ensuring a broad user reach. Security-wise, the site demonstrates adherence to best practices with no visible vulnerabilities or exposed sensitive data. However, it lacks a publicly stated vulnerability disclosure policy and incident response contact details, which are recommended for enhanced transparency and security readiness. Overall, the site is trustworthy, professionally maintained, and compliant with GDPR regulations. The absence of WHOIS data is consistent with CZ NIC's privacy policies and does not detract from the site's legitimacy. Strategic recommendations include publishing a vulnerability disclosure policy, incident response contacts, and continuous monitoring of third-party libraries to maintain security integrity.
Erhvervsstyrelsenvirksomhedsguiden.dk
Government · Denmark
77Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Virksomhedsguiden.dk is an official Danish government platform operated by Erhvervsstyrelsen, providing comprehensive business support, guidance, and tools for entrepreneurs and companies. The website serves as a centralized resource for knowledge on starting, operating, and developing businesses in Denmark, targeting startups and established enterprises alike. It holds a strong market position as a trusted government service with a clear focus on business development and support. Technically, the site employs modern frontend technologies such as Vue.js, integrates analytics via Piwik PRO, and uses Tableau and Vimeo for data visualization and video content respectively. The site is well-optimized for mobile and accessibility, with good SEO practices and a professional design. Security-wise, the site enforces HTTPS, implements a robust cookie consent mechanism, and avoids exposing sensitive data, although it could improve by enabling DNSSEC and adding explicit security headers. Overall, the domain registration data aligns with the website's government affiliation, confirming its legitimacy and trustworthiness. The site does not exhibit any blocking or WAF challenges, allowing full content accessibility.
- MMüller Handels GmbH & Co. KG
mueller.de
Retail · Germany
82Low
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
Müller Handels GmbH & Co. KG operates a large retail and e-commerce platform primarily serving the German market and neighboring German-speaking countries. The company offers a wide range of products including perfumes, cosmetics, toys, multimedia, and household goods, positioning itself as a comprehensive drugstore and lifestyle retailer. The website is professionally designed with excellent content quality, clear navigation, and strong branding consistency, targeting general consumers with a focus on convenience and variety. Technically, the website leverages modern web technologies such as Next.js and React, combined with Usercentrics for cookie consent management and Google Tag Manager and Facebook Pixel for analytics and marketing. The platform is mobile-optimized and performs moderately well, with good SEO and accessibility features. Hosting details are not explicitly disclosed, but the infrastructure supports a robust e-commerce experience. From a security perspective, the site enforces HTTPS and integrates consent mechanisms for privacy compliance. While explicit security headers and policies are not fully visible, no critical vulnerabilities or exposed sensitive data were detected. The absence of a published security policy or vulnerability disclosure page suggests room for improvement in transparency and incident response readiness. Overall, the website presents a low-risk profile with strong business credibility and compliance posture. Strategic recommendations include publishing comprehensive privacy and security policies, enhancing security header implementation, and providing clear incident response contacts to further strengthen trust and compliance.
- Falck
falck.fi
Transportation · Finland
83Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Falck is a well-established company providing travel assistance services primarily targeting travelers seeking safety and emergency support during their journeys. The website is professionally designed with good localization in Finnish and includes comprehensive cookie consent mechanisms compliant with GDPR. The technical infrastructure leverages modern analytics tools such as Microsoft Application Insights and Google Tag Manager, indicating a mature digital presence. Security posture is strong with HTTPS enforced and telemetry monitoring in place, though some security headers and explicit security policies are not visible in the analyzed content. Overall, the website is trustworthy and professionally maintained, serving a large audience in the transportation and healthcare sectors in Finland.
- Falck Italia
falckitalia.it
Transportation · Italy
77Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Falck Italia operates as a medium-sized company in the emergency medical and healthcare services sector in Italy, providing ambulance and safety services. The website presents a professional and consistent brand image with good content quality and clear navigation. Technically, the site uses modern technologies including Microsoft Application Insights and Google Tag Manager for analytics and tracking, with a compliant cookie consent mechanism ensuring GDPR adherence. Security posture is strong with HTTPS and security headers implemented, though explicit security policies and incident response information are not publicly available. Overall, the site is trustworthy and well-maintained, supporting the company's market position as a reputable service provider in transportation and healthcare. Strategic improvements could focus on enhancing contact transparency and publishing security-related policies.
- Falck España
falck.es
Healthcare · Spain
83Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Falck España operates as a regional branch of the Falck Group, specializing in healthcare, emergency, and safety services. The website reflects a professional presence with a focus on user experience and compliance with cookie consent regulations. The technical infrastructure leverages modern technologies such as Microsoft ASP.NET, Citrix, Azure Application Insights, and Google Tag Manager, indicating a mature digital environment. Security posture is adequate with HTTPS and monitoring tools in place, though improvements in security headers and explicit privacy policies are recommended. The absence of accessible WHOIS data limits full domain legitimacy assessment, but the website content and linked domains support a trustworthy business identity.
- Falck Romania
falck.ro
Healthcare · Romania
83Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Falck Romania operates as a regional branch of the Falck group, providing healthcare and emergency services within Romania. The website reflects a professional presence with consistent branding aligned with the Falck group. The business targets general public and corporate clients requiring emergency medical and safety services. The digital infrastructure leverages modern technologies including Microsoft ASP.NET, Citrix for security, Azure Application Insights for monitoring, and Google Tag Manager for analytics. The website is mobile optimized and implements a comprehensive cookie consent mechanism, indicating good privacy compliance. Security posture is solid with HTTPS enforced and use of secure third-party services, though security headers are not explicitly detected. No critical vulnerabilities or suspicious patterns were found. WHOIS data is privacy protected by ROTLD, which is standard for Romanian domains, and does not raise legitimacy concerns. Overall, the website is a credible and professional digital asset for Falck Romania.
- Falck
falck.no
Healthcare · Norway
84Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Falck is a well-established healthcare service provider focused on occupational health and career services in Norway, aiming to improve health, work ability, and quality of life for the Norwegian workforce. The website reflects a professional and consistent brand presence with a clear focus on healthcare services. Technically, the site uses modern technologies including Microsoft Application Insights and Google Tag Manager for monitoring and analytics, hosted likely on Microsoft Azure. The site is mobile optimized and accessible with good SEO practices. Security posture is strong with HTTPS and cookie consent mechanisms in place, though explicit security headers and incident response information are absent. The lack of WHOIS data suggests privacy protection, which is common for large enterprises. Overall, the site is trustworthy and compliant with GDPR, but could improve transparency around security policies and contact information.
- Falck
falcksverige.se
Healthcare · Sweden
78Low
NIS2 29 · GDPR 88
NIS2 29 · GDPR 88
Falck Sverige is a regional branch of the Falck group, providing services in healthcare, rehabilitation, rescue, and preparedness. The website presents a professional image with clear branding and a focus on helping people through various service areas. The technical infrastructure leverages modern telemetry and analytics tools such as Microsoft Application Insights and Google Tag Manager, indicating a mature digital presence. The website is well-optimized for mobile and includes a comprehensive cookie consent mechanism compliant with GDPR standards. However, the absence of WHOIS data for the domain www.falcksverige.se raises questions about domain registration legitimacy, although the presence of multiple related Falck domains suggests a broader corporate infrastructure. Security posture is strong with HTTPS and telemetry but lacks explicit security headers and published security policies. Contact information is not directly available on the site, which could impact user trust and compliance transparency.
Liftagoliftago.sk
Transportation · Czech Republic
76Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Liftago is a Czech Republic-based transportation company specializing in taxi rides and courier deliveries, operating across 15 cities. The company offers services via a mobile app and website, targeting both consumers and businesses seeking reliable on-demand transportation solutions. The website is professionally designed, mobile-optimized, and provides clear information about services, privacy, and terms. Technically, the site leverages modern web technologies including Webflow CMS, Google Tag Manager, and Cookiebot for consent management, hosted likely on Cloudflare infrastructure ensuring good performance and security. Security posture is strong with HTTPS enforcement, comprehensive cookie consent, and security headers, though no explicit security policy or incident response contacts are published. Overall, Liftago presents a trustworthy and professional digital presence with moderate to high maturity in technical and privacy compliance aspects.
- AAbly
ably-realtime.com
Technology
77Low
NIS2 47 · GDPR 88
NIS2 47 · GDPR 88
Ably is a mature and established realtime platform company founded in 2002, specializing in scalable, reliable, and low-latency realtime data streaming and messaging services. Their platform supports a broad range of realtime applications including live messaging, chat, dashboards, notifications, and collaborative apps. The company positions itself as a leader in the realtime pub/sub market, serving over 2 billion connected devices monthly with a strong uptime record. Their business model is SaaS-based with usage-based pricing tiers including Free, Standard, Pro, and Enterprise plans, targeting developers and businesses requiring realtime infrastructure. Technically, the website is built on modern frameworks such as Gatsby and React, hosted with Cloudflare DNS and Amazon Registrar, and integrates marketing and analytics tools like HubSpot, Intercom, and Google Tag Manager. The site is fast, mobile-optimized, and accessible with good SEO practices. Security posture is strong with HTTPS, security headers, and enterprise-grade compliance such as SOC 2 and HIPAA BAA, although DNSSEC is not enabled and explicit security policies or incident response contacts are not published. Privacy compliance is partially addressed with a cookie consent mechanism but lacks a clearly linked privacy policy or terms of service on the homepage. Overall, Ably demonstrates a high level of professionalism, technical maturity, and business credibility with minor gaps in explicit privacy and security disclosures.
- AAbly
ably.net
Technology
77Low
NIS2 47 · GDPR 88
NIS2 47 · GDPR 88
Ably is a well-established realtime platform specializing in streaming data instantly between services and end-user devices. It offers a suite of products including Pub/Sub messaging, chat APIs, live synchronization, and asset tracking, targeting developers and businesses requiring scalable, reliable realtime infrastructure. The company positions itself as a market leader with over 2 billion connected devices monthly and a strong uptime record. Technically, the website leverages modern frameworks like Gatsby and React, with robust hosting and DNS via Amazon and Cloudflare. The site is fast, mobile-optimized, and accessible, reflecting a mature digital presence. Security posture is strong with HTTPS, security headers, and compliance certifications such as SOC 2, though DNSSEC is not enabled and incident response contacts are not explicitly published. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site demonstrates high professionalism, trustworthiness, and technical maturity, supporting Ably's credibility as a leading realtime platform.
HeroShiftheroshift.app
Healthcare · Germany
81Low
NIS2 2 · GDPR 65
NIS2 2 · GDPR 65
HeroShift is a specialized software solution focused on automated shift planning, absence management, and time tracking for emergency services, nursing, and healthcare sectors in Germany. The platform offers cloud-based, GDPR-compliant tools designed to reduce administrative overhead and improve operational efficiency. The website is professionally designed using WordPress and Elementor, providing a clear and user-friendly experience with good mobile optimization. Security posture is solid with HTTPS and no visible vulnerabilities, though some security best practices like explicit security headers and incident response information are missing. Overall, the site reflects a trustworthy and professional business with room for improvement in privacy compliance and security transparency.
- Voith
voith.com
Energy · Germany
83Low
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
Voith is a family-owned enterprise specializing in industrial technology sectors such as drive technology, hydropower, and papermaking automation. The company positions itself as a responsible and sustainable technology provider with a global reach. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content tailored to industrial clients and partners. Technically, the site employs modern JavaScript libraries, Cookiebot for consent management, and Google Tag Manager for analytics, indicating a well-maintained infrastructure. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though the absence of HTTP security headers and a public security policy suggests room for improvement. Privacy compliance is strong, with GDPR-aligned cookie consent and a detailed privacy policy. The lack of WHOIS data reduces transparency but does not significantly detract from the site's credibility given its professional presentation and business focus.
easybell GmbHeasybell.de
Telecommunications · Germany
81Low
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
easybell GmbH is a German telecommunications provider specializing in internet and telephony services for private and business customers. The company offers a range of products including SIP Trunks, Cloud Telefonanlage, Microsoft Teams integration, and Home Office Connect solutions. With over 50,000 business customers and a parent company Dstny, easybell holds a solid market position in the telecommunications sector in Germany. The website reflects a professional and customer-focused business model emphasizing flexible contracts without minimum terms. Technically, the website is built on TYPO3 CMS and leverages modern web technologies such as jQuery and Bootstrap. It integrates multiple analytics and marketing tools including Matomo, Google Analytics, Microsoft Clarity, and Trustami for reputation management. The site is mobile-optimized, accessible, and SEO-friendly, providing a good user experience. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms aligned with GDPR requirements. However, explicit security headers are not detected, and there is no published security.txt or clear incident response contact, which are areas for improvement. The WHOIS data is limited due to DENIC privacy policies but consistent with the domain's German origin and business claims. Overall, easybell.de is a trustworthy and professionally managed website with strong business credibility and compliance posture. Strategic recommendations include enhancing security headers, publishing vulnerability disclosure information, and improving transparency on incident response contacts to further strengthen security and trust.
- WhistleOut
whistleout.com
Telecommunications · Unitedstates
78Low
NIS2 7 · GDPR 88
NIS2 7 · GDPR 88
WhistleOut is a well-established online platform specializing in the comparison of phone and internet plans, providing consumers in the United States with expert guides, reviews, and news to help them make informed decisions. The website is professionally designed, mobile-optimized, and rich in relevant content, positioning it as a trusted resource in the telecommunications comparison market. Technically, the site employs a modern technology stack including Google Analytics, Google Tag Manager, Crazy Egg, Mouseflow, and Microsoft Application Insights, indicating a mature digital infrastructure focused on user analytics and experience optimization. Security-wise, the site enforces HTTPS, implements multiple security headers, and uses a consent management platform for privacy compliance, though it lacks explicit public security policies or incident response information. The absence of WHOIS registration data reduces transparency but does not detract significantly from the site's legitimacy given its professional presentation and clear affiliate disclosures. Overall, WhistleOut demonstrates a strong digital presence with good security posture and privacy compliance, suitable for its consumer audience.
Deutscher Ärzteverlag GmbHaerzteblatt.de
Healthcare · Germany
76Low
NIS2 17 · GDPR 60
NIS2 17 · GDPR 60
Deutscher Ärzteverlag GmbH operates the website Deutsches Ärzteblatt, a leading German medical news and professional journal platform. The site provides current health policy news, medical research updates, and professional information targeting medical professionals and healthcare stakeholders. The business model is primarily media publishing with revenue from subscriptions and advertising. The website is well-positioned in the German healthcare media market with a strong reputation and comprehensive content offerings including ePaper and CME materials. Technically, the website uses modern web technologies including Next.js and React, hosted likely via GoDaddy's domain control services. It integrates advanced consent management tools such as Contentpass and Sourcepoint to ensure GDPR compliance. The site is optimized for performance, mobile responsiveness, and accessibility, providing a high-quality user experience. From a security perspective, the site enforces HTTPS with strong SSL configuration and implements multiple security headers. It uses consent-based tracking and advertising scripts, minimizing privacy risks. No critical vulnerabilities or exposed sensitive data were detected. However, explicit security policy and incident response information are not publicly available, representing an area for improvement. Overall, the website demonstrates a mature digital presence with strong compliance and security posture, serving a professional audience with trustworthy content. Strategic recommendations include publishing detailed security policies, establishing incident response contacts, and enhancing transparency around vulnerability disclosures to further strengthen trust and security culture.
ClickUpclickup.com
Technology · United States
86Low
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
ClickUp is a well-established SaaS company founded in 2001, offering an integrated productivity platform that consolidates tasks, documents, goals, and chat into a single application. Positioned as a leading solution in the productivity and project management market, ClickUp targets businesses and teams seeking to streamline workflows and maximize productivity. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive content tailored to its audience. Technically, the site leverages modern frameworks such as Next.js and React, hosted on AWS infrastructure, and integrates advanced analytics and marketing tools with robust consent management via OneTrust. Security posture is strong with HTTPS enforcement, domain protection statuses, and cookie consent mechanisms, though DNSSEC is not enabled and no explicit security policy or vulnerability disclosure program is publicly available. Overall, ClickUp demonstrates a high level of digital maturity and business credibility, with room for improvement in transparency around security policies and incident response.
Stadt Karlsruhekarlsruhe.de
Government · Germany
76Low
NIS2 17 · GDPR 43
NIS2 17 · GDPR 43
The website www.karlsruhe.de serves as the official digital portal for the city of Karlsruhe, Germany, providing residents and visitors with access to a wide range of municipal services, information on city administration, social programs, environmental initiatives, cultural events, and mobility options. The site is well-positioned as a comprehensive government resource, targeting local citizens, businesses, and stakeholders. Technically, the site is built on the TYPO3 CMS platform, leveraging modern web technologies including SVG graphics and Matomo analytics configured with privacy in mind. The site demonstrates good mobile optimization, accessibility, and SEO practices. Security-wise, the website enforces HTTPS and employs a cookie consent mechanism aligned with GDPR requirements, though it lacks explicit security policy and incident response disclosures. Overall, the site is trustworthy, professionally maintained, and compliant with relevant privacy regulations, with no detected blocking or WAF interference.
Dynamicdynamic.xyz
Technology
78Low
NIS2 35 · GDPR 88
NIS2 35 · GDPR 88
Dynamic is a fintech and crypto technology company specializing in wallet infrastructure, authentication, and secure key management through a flexible SDK. Positioned as a leading provider in the multi-chain wallet ecosystem, Dynamic serves fintech firms, crypto businesses, and stablecoin platforms with enterprise-grade solutions. The company recently became part of Fireblocks, enhancing its market position and resource base. The website reflects a mature digital presence with comprehensive product offerings, customer case studies, and a demo environment to engage developers and clients. Technically, the site is built on Webflow with modern JavaScript libraries and integrates analytics and marketing tools such as HubSpot and Google Tag Manager. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms in place. No critical vulnerabilities or compliance gaps were detected, though incident response and vulnerability disclosure policies could be more explicit. Overall, Dynamic presents a professional, trustworthy, and technically sound platform with a clear focus on fintech wallet infrastructure.
- CCARNET
croatia.hr
Government · Croatia
76Low
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
The website croatia.hr serves as the official Croatian tourism portal, managed by CARNET, a reputable Croatian academic and research network. It provides extensive information about Croatia's travel destinations, cultural attractions, and events, targeting tourists and travelers globally. The site is well-branded and professionally designed, reflecting its government affiliation and authoritative market position in tourism promotion. Technically, the site employs modern web technologies including Vue.js, integrates third-party services such as Mailchimp for marketing and Dynatrace for performance monitoring, and is hosted with Microsoft Azure DNS infrastructure. The website demonstrates good mobile optimization, accessibility, and SEO practices, contributing to a positive user experience. From a security perspective, the site enforces HTTPS with strong security headers and uses monitoring tools to maintain performance and security. However, it lacks visible privacy and cookie policies, as well as explicit contact information and incident response details, which are important for compliance and user trust. No vulnerabilities or suspicious indicators were detected in the analyzed content. Overall, croatia.hr is a trustworthy and professionally maintained government tourism website with strong technical and security foundations. To enhance compliance and user trust, it is recommended to publish clear privacy and cookie policies, provide contact details, and include vulnerability disclosure and incident response information.
JAKO AGjako.de
Retail · Germany
76Low
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
JAKO AG operates a professional e-commerce platform specializing in sportswear and equipment for men, women, and children. The company targets sports teams, clubs, and individual consumers, offering a wide range of customizable sports apparel and accessories. The website demonstrates a mature digital presence with modern search capabilities, multi-language support, and integration of trusted third-party services such as Trusted Shops for customer assurance. Technically, the site employs contemporary JavaScript libraries and analytics tools, ensuring a responsive and user-friendly experience across devices. Security measures include HTTPS enforcement and standard security headers, although explicit security policies and incident response contacts are not publicly disclosed. The absence of WHOIS data for the domain introduces some uncertainty regarding domain registration legitimacy, but the overall site professionalism and trust signals mitigate this concern. Strategic recommendations include enhancing transparency around security policies and providing clear contact information to improve user trust and compliance posture.
Thomastik-Infeld GmbHthomastik-infeld.com
Other · Austria
79Low
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
Thomastik-Infeld GmbH is a well-established Austrian company specializing in the development and production of high-quality music strings since 1919. The company targets musicians and music professionals worldwide, offering a broad portfolio including orchestral, guitar, and folk strings. Their website reflects a mature digital presence with professional design, multilingual support, and integrated e-commerce and consulting tools. Technically, the site employs modern frameworks such as Bootstrap and jQuery, enhanced with Google Tag Manager and reCAPTCHA for security. The security posture is solid with HTTPS and consent management, though explicit security headers and incident response policies are absent. The lack of WHOIS data for the domain raises concerns about domain registration legitimacy, warranting further investigation. Overall, the website is trustworthy, professional, and compliant with GDPR, serving as a strong digital asset for the company.
SeenThisseenthis.co
Technology
82Low
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
SeenThis is a technology-driven digital advertising company specializing in adaptive streaming technology to enhance creative activation and engagement. Positioned as an innovative ad tech provider, it targets advertisers and marketing agencies seeking to boost digital campaign performance. The website is built on modern frameworks such as React and Gatsby, indicating a mature technical infrastructure with good performance and mobile optimization. Security posture is strong with HTTPS, security headers, and bot protection via Google reCAPTCHA, although explicit security policies and incident response details are absent. Privacy compliance is well addressed with comprehensive privacy and cookie policies and a consent mechanism. Overall, the website presents a professional and trustworthy digital presence with moderate tracking and analytics integration.
Sinchsinch.com
Technology
80Low
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Sinch is a well-established enterprise technology company specializing in programmable communication APIs including SMS, voice, email, video, and verification services. Recognized as a leader in the CPaaS market by Gartner, Sinch targets developers, enterprises, telcos, and marketing teams with a comprehensive suite of communication solutions. The website reflects a mature digital presence with excellent content quality, clear navigation, and strong branding consistency. Technically, the site is built on WordPress with modern SEO and performance optimizations, hosted on AWS infrastructure. Security posture is robust with HTTPS enforcement, ISO 27001 certification, and domain security best practices, though DNSSEC is not enabled and incident response contacts are not explicitly published. Overall, Sinch demonstrates a high level of business credibility and digital maturity.
Dynamicdynamicauth.com
Finance
78Low
NIS2 35 · GDPR 88
NIS2 35 · GDPR 88
Dynamic is a fintech and crypto-focused company providing wallet infrastructure solutions including authentication, smart wallets, and secure key management via a flexible SDK. Positioned as an enterprise-grade provider, Dynamic supports multi-chain coverage and third-party wallets, targeting fintech companies, crypto businesses, and stablecoin platforms. The company recently became part of Fireblocks, enhancing its market position. The website demonstrates a mature technical infrastructure with modern web technologies, strong design quality, and good mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and contact information are lacking. Overall, the site is professional and trustworthy with room for improvement in privacy and security transparency.
GoDaddy Operating Company, LLCklemmsecurity.com
Technology · United States
78Low
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
The website is a domain sales landing page operated by GoDaddy Operating Company, LLC, offering the domain klemmsecurity.com for sale. It targets individuals and businesses interested in acquiring premium domains, providing options to buy outright or lease to own. The platform leverages GoDaddy's established domain aftermarket infrastructure and integrates partner services such as Afternic and Trustpilot for trust and transaction facilitation. The site is professionally designed with a focus on secure and straightforward domain transactions. Technically, it uses modern web frameworks including Next.js and JavaScript, hosted on GoDaddy's infrastructure, with basic SEO and accessibility features. Security posture is moderate with HTTPS implied and reCAPTCHA implemented, but lacks explicit security headers and detailed policies. Overall, the domain sales platform is credible and trustworthy, though WHOIS data for the parking subdomain is unavailable, which is typical for such sales platforms.
NielsenIQetilize.com
Technology
81Low
NIS2 35 · GDPR 100
NIS2 35 · GDPR 100
NielsenIQ is a global enterprise specializing in technology product content solutions, leveraging Brandbank's extensive product data to enhance product discoverability and sales for business clients. The website demonstrates a mature digital presence built on WordPress with modern SEO and analytics integrations, reflecting a strong technical infrastructure. Security posture is robust with HTTPS and CSP headers, though DNSSEC is not enabled and explicit security policies are absent. Privacy compliance is partially addressed via cookie consent but lacks visible privacy and terms policies on the landing page. Overall, the site is professional, trustworthy, and well-positioned in the technology sector.
- VDI Wissensforum GmbH
vdiconference.com
Education · Germany
77Low
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
VDI Wissensforum GmbH operates a professional website offering international conferences, congresses, and courses targeted at engineers and technical specialists. The company positions itself as a leading provider in continuing education within the engineering sector, primarily serving the German market. The website content is well-structured, professionally designed, and optimized for both desktop and mobile users, reflecting a mature digital presence. Technically, the site is built on TYPO3 CMS and integrates modern marketing and analytics tools such as Google Tag Manager, Cookiebot for consent management, and reCAPTCHA for form security. The security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although explicit security headers could be improved. The absence of publicly available WHOIS data for the domain raises concerns about domain registration legitimacy, which should be further investigated. Overall, the website demonstrates strong privacy compliance and business credibility, with clear contact information and social media engagement.
- Salesforce
salesforce-scrt.com
Technology · United States
79Low
NIS2 2 · GDPR 58
NIS2 2 · GDPR 58
Salesforce is a leading global provider of CRM software and AI-powered customer engagement solutions, operating at enterprise scale. The company offers a unified platform integrating CRM, AI, data, and trust capabilities via its Einstein 1 Platform, targeting businesses seeking advanced customer relationship management and analytics. The website is professionally designed, localized for German users, and reflects Salesforce's market leadership and technological maturity. The technical infrastructure leverages modern JavaScript frameworks, cloud hosting, and advanced analytics tools, ensuring fast performance and excellent mobile optimization. Security posture is strong, with HTTPS enforced, comprehensive security headers, and published certifications including ISO 27001 and FedRAMP. Privacy compliance is robust, featuring GDPR-aligned policies and consent management via OneTrust. WHOIS data is unavailable due to privacy protection but the domain and website content strongly align with Salesforce's brand and legitimacy. Overall, the site demonstrates high professionalism, security, and compliance suitable for an enterprise SaaS leader.
Żywiec Zdrójwolewode.pl
Education · Poland
78Low
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
The website 'Mamo, tato, wolę wodę!' is an established educational program initiated by Żywiec Zdrój, targeting preschools in Poland to promote healthy hydration habits among children. The program offers educational materials, contests, and certification, positioning itself as a trusted and recognized initiative in the Polish education sector. Technically, the site is built on WordPress with modern frameworks like Bootstrap and integrates Google services for analytics and spam protection. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, the site enforces HTTPS, uses Google reCAPTCHA, and implements cookie consent mechanisms, though it lacks advanced security headers and a published security policy. The domain is stable and consistent with the business claims, enhancing trust. Overall, the site is secure, compliant with GDPR, and professionally maintained, suitable for its educational mission.
DANONEjogurtdanone.pl
Retail · Poland
79Low
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
Danone Poland operates a comprehensive website focused on its yogurt and dairy product lines, reflecting the brand's global presence and commitment to nutrition and health. The site showcases a broad portfolio of products and related brands, targeting general consumers interested in dairy and plant-based nutrition. Technically, the website employs modern JavaScript libraries including jQuery and Bootstrap, integrates Google Tag Manager and New Relic for analytics and performance monitoring, and uses HTTPS to secure communications. However, explicit privacy and cookie policies are not found on the analyzed page, which is a compliance gap. Security posture is generally good with no visible vulnerabilities or exposed sensitive data, but the absence of security headers and incident response contact details suggests room for improvement. Overall, the website is professional, well-branded, and trustworthy, supporting Danone's market position as a leading food manufacturer.