Low-risk security reports
14,261 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,165001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
12,201–12,250 of 14,261
myWorldmyworld.com
E-commerce · Finland
82Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
myWorld is an international e-commerce cashback and rewards platform that enables consumers to earn cashback and shopping points from purchases made through partner companies. The platform offers deals, benefits, discount codes, and premium membership options to enhance user savings. The website is localized for Finland, targeting Finnish-speaking consumers interested in cashback shopping. Technically, the site employs modern web technologies including jQuery, Bootstrap 5, and integrates analytics and marketing tools such as Microsoft Application Insights, Google Tag Manager, and Interaction Studio. The presence of a OneTrust cookie consent banner indicates attention to privacy compliance, although no explicit privacy policy or terms of service were detected in the provided content. Security posture is good with HTTPS enforced and no visible vulnerabilities, but lacks explicit security headers and incident response information. WHOIS data for the domain is missing, which raises some concerns about domain registration transparency. Overall, the website is professional, user-friendly, and trustworthy, but would benefit from improved transparency in privacy and security policies.
Energy · Netherlands
81Low
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Nederlandse Aardolie Maatschappij (NAM) is a well-established Dutch energy company specializing in the exploration, development, and production of oil and gas from the Dutch subsurface. Founded in 1947 by Shell and Esso, NAM plays a significant role in supplying energy to Dutch society and industry, with a strong focus on safety, environmental responsibility, and contributing to the energy transition. The website reflects a mature digital presence with comprehensive content, clear navigation, and consistent branding, targeting stakeholders interested in energy production and sustainability in the Netherlands. Technically, the website is built on Adobe Experience Manager, leveraging modern web technologies such as ES modules and CSS variables. It demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate. Security posture is solid with HTTPS enforced and no visible vulnerabilities, but could be improved by adding explicit security headers and publishing formal security policies. Privacy compliance is well addressed with clear privacy and cookie policies, including consent mechanisms aligned with GDPR. Contact information is available primarily via a contact form, and social media channels are actively linked. WHOIS data confirms the domain's legitimacy and consistency with the company's identity. Overall, the website presents a professional, trustworthy, and secure digital front for NAM, with recommendations to enhance security transparency and incident response readiness to further strengthen trust and compliance.
Resource Innovationsnexant.com
Energy · United States
83Low
NIS2 10 · GDPR 83
NIS2 10 · GDPR 83
Resource Innovations is a women-led energy transformation firm specializing in clean energy services and software solutions for utilities and government agencies. The company positions itself as a leader in the energy transition space, offering advisory services, demand-side management solutions, energy transition consulting, and software analytics. Their market presence is supported by a medium-sized, professional website with strong branding and a portfolio of notable clients across North America, Europe, and the Pacific. Technically, the website employs modern frameworks such as Alpine.js and uses Google Tag Manager and CookieYes for analytics and cookie consent management. The site is mobile-optimized, accessible, and SEO-friendly. Security-wise, the site uses HTTPS and cookie consent mechanisms but lacks explicit security headers and published security policies. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.
Unlimitcardpay.com
Finance
83Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Unlimit is a fintech company providing global payment solutions including payment processing, payouts, business accounts, banking as a service (BaaS), and crypto-related services such as NFTs and GameFi. The company targets businesses seeking borderless payment methods and operates across multiple regions including LATAM, APAC, Africa, Europe/UK, and India. Their digital presence is supported by a WordPress-based website with modern technologies such as Google Tag Manager and CookieYes for cookie consent management. The website is well-structured, multilingual, and integrates various analytics and advertising tracking services, indicating a mature digital marketing strategy. From a security perspective, the website enforces HTTPS and uses Cloudflare Bot Management, but lacks explicit security headers and published security policies. The cookie consent mechanism is comprehensive, supporting GDPR compliance, but no privacy policy or terms of service were detected in the provided content. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, although the website content and branding appear professional and consistent with a legitimate fintech business. Overall, the website demonstrates good technical implementation and business credibility but would benefit from enhanced transparency in privacy and security policies, as well as verified domain registration information. Strategic improvements in security headers, incident response disclosures, and contact information would strengthen trust and compliance.
- GC Europe N.V.
gceurope.com
Healthcare
89Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
GC Europe N.V. is a prominent oral health company specializing in supplying high-quality dental products and materials to professionals across Europe. Their product portfolio includes glass ionomer cements, impression and filling materials, modelling gypsum, investments, and advanced light-curing composite and ceramic materials. The company targets dental professionals and operates primarily in the healthcare sector with a B2B business model. The website reflects a professional and consistent brand image, supporting their market position as a leading supplier in the European dental industry. Technically, the website is built on Drupal CMS, leveraging modern tools such as Google Tag Manager and CookiePro for analytics and consent management. The site is mobile-optimized and accessible, with good SEO practices in place. Security-wise, the site uses HTTPS and implements cookie consent mechanisms, though explicit privacy policies and terms of service are not found in the analyzed content, indicating room for improvement in compliance transparency. No blocking or WAF challenges were detected, and the WHOIS data is privacy-protected, which is typical for corporate domains. Overall, the website demonstrates a solid digital presence with moderate to good security and privacy posture but would benefit from enhanced policy disclosures and contact transparency.
Goldman Sachs Asset Managementnnip.com
Finance
78Low
NIS2 25 · GDPR 73
NIS2 25 · GDPR 73
Goldman Sachs Asset Management operates a professional website targeting financial intermediaries and advisors, offering asset and investment management services. The site is branded consistently with Goldman Sachs and positions itself as a leading global asset manager. The technical infrastructure leverages modern web technologies including React and Next.js, hosted likely via Akamai, with performance monitoring implemented through Akamai mPulse. The website is well-optimized for mobile and accessibility, with good SEO practices evident. Security posture is strong with HTTPS enforced and modern TLS usage, though explicit security headers and vulnerability disclosure mechanisms are absent. The WHOIS data is unavailable for the subdomain, consistent with it being a subdomain under the main gs.com domain, which is owned by Goldman Sachs. Overall, the site is legitimate, professional, and secure, but could improve privacy compliance disclosures and incident response transparency.
Topcon Healthcaretopcon-medical.co.uk
Healthcare
76Low
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Topcon Healthcare operates as a healthcare technology provider, focusing on medical and optical healthcare solutions primarily targeting European markets. The website presents a professional design with consistent branding and integrates modern analytics and marketing tools such as Google Analytics, Facebook Pixel, and Pardot. The technical infrastructure includes Angular-based frontend assets and uses Cookiebot for GDPR-compliant cookie consent management. Security posture is solid with HTTPS enforced and no visible critical vulnerabilities, though security headers could be improved and explicit security policies are absent. Privacy compliance is partially met with cookie consent but lacks a clearly accessible privacy policy or terms of service. Overall, the website is functional and professional but could enhance transparency and compliance disclosures.
- CCemex
cemex.com
Manufacturing
83Low
NIS2 2 · GDPR 73
NIS2 2 · GDPR 73
Cemex is a leading global company specializing in sustainable construction materials, focusing on innovation and environmental responsibility. Their website reflects a mature digital presence built on the Liferay platform, incorporating modern web technologies such as React and advanced JavaScript modules. The site offers comprehensive navigation and content relevant to industry professionals, investors, and partners. Security posture is generally good with HTTPS and OAuth2 endpoints, but lacks explicit security headers and published security policies. Privacy compliance is moderate with consent mechanisms but no visible privacy or cookie policies. The WHOIS data is notably missing, which raises concerns about domain registration transparency. Overall, the site is professional and trustworthy but would benefit from enhanced transparency and security documentation.
Remo Inc.remo.com
Retail · United States
80Low
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
Remo Inc. is a well-established global leader in the percussion industry, specializing in the innovation, design, production, and distribution of drum heads, drums, and accessories. With over 65 years of history, Remo serves a diverse audience including musicians, educators, and wellness practitioners. The company maintains a strong market position through its commitment to quality and innovation, supported by a comprehensive online presence featuring detailed product information, educational resources, and community engagement. Technically, the website is built on the Webflow platform, leveraging modern JavaScript libraries, analytics tools such as Google Analytics and Facebook Pixel, and cookie consent mechanisms that comply with GDPR. The site demonstrates excellent performance, mobile optimization, and accessibility features, providing a professional and user-friendly experience. From a security perspective, the site uses HTTPS with strong SSL configuration and employs privacy-conscious analytics settings. However, it lacks certain security headers and does not publish a dedicated security policy or vulnerability disclosure, which are areas for improvement. The WHOIS data confirms the domain's legitimacy and long-term registration, reinforcing trustworthiness. Overall, Remo.com presents a secure, compliant, and professionally managed digital presence that aligns well with its business goals and audience needs. Strategic enhancements in security transparency and DNS security could further strengthen its posture.
SOS Kinderdorpensoskinderdorpen.nl
Non-profit · Netherlands
87Low
NIS2 2 · GDPR 95
NIS2 2 · GDPR 95
SOS Kinderdorpen is a well-established non-profit organization based in the Netherlands focused on strengthening families to ensure children grow up in loving and safe environments. The website reflects a professional and consistent brand presence with clear messaging aimed at donors, supporters, and stakeholders interested in child welfare. The organization leverages multiple digital marketing and analytics tools to engage its audience effectively while maintaining GDPR compliance through a comprehensive privacy policy and cookie consent mechanism. Technically, the website is built on WordPress and integrates modern technologies such as Google Tag Manager, Facebook Pixel, and Cookiebot, ensuring a good level of digital maturity and performance. Security posture is strong with HTTPS enforced and no visible vulnerabilities, although additional security headers could enhance protection. Overall, the site demonstrates a high level of professionalism and trustworthiness appropriate for a large non-profit entity.
- NCH Corporation
nch.com
Energy · United States
79Low
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
NCH Corporation is a well-established global company specializing in industrial water treatment, energy conservation, and maintenance solutions. Founded in 1919, it has a strong family leadership legacy and distributes products to over 50 countries. The website reflects a mature business with a broad product portfolio targeting industrial and institutional customers. Technically, the site is built on ASP.NET WebForms with DNN CMS, using legacy JavaScript libraries and standard SEO and accessibility features. Security posture is good with HTTPS and cookie consent implemented, though security headers and incident response policies are not publicly visible. The absence of WHOIS data for the queried domain limits domain registration trust analysis but does not detract from the overall legitimacy indicated by the website content and social media presence. Strategic recommendations include updating technical components, enhancing security headers, and publishing explicit security policies to improve trust and compliance.
- Epson Europe
epson.eu
Technology · Europe
79Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Epson Europe operates a comprehensive website serving as a regional hub for Epson's technology products and business solutions across Europe. The site provides detailed navigation for various product verticals including business printers, projectors, scanners, and professional graphics printers, targeting both consumer and enterprise customers. The presence of multiple language and country selectors indicates a focus on localized user experience. Technically, the site employs modern web technologies including Adobe Dynamic Tag Management, Google reCAPTCHA, and OneTrust for cookie consent, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforced and bot protection mechanisms in place, though explicit security headers and incident response information are not evident on this page. Privacy compliance is supported by a cookie consent banner, but no direct privacy policy or terms of service links were found on this page. WHOIS data is unavailable due to EURid privacy restrictions, a common practice for European domains, but the domain and content strongly align with a legitimate enterprise brand. Overall, the website demonstrates good content quality, technical implementation, and business credibility with minor areas for improvement in security transparency and privacy disclosures.
- Maximus
maximus.com
Government · United States
80Low
NIS2 47 · GDPR 88
NIS2 47 · GDPR 88
Maximus is a well-established enterprise specializing in providing technology and operational support services primarily to government agencies across federal, state, and local levels. Their offerings include customer experience solutions, technology services such as AI and cybersecurity, health services modernization, and program services that help transform policy into outcomes. The company operates globally with regional subsidiaries and maintains a strong market position as a trusted partner to public sector organizations. Technically, the website is built on Adobe Experience Manager, hosted on AWS infrastructure, and integrates modern analytics and consent management tools such as Google Tag Manager, Crazy Egg, and OneTrust. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital presence. Performance is moderate, with room for optimization. From a security perspective, Maximus employs HTTPS with strong domain registration protections and cookie consent mechanisms, though DNSSEC is not enabled. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of a public security policy or incident response contact is noted. Overall, the website demonstrates high professionalism, strong business credibility, and good privacy compliance. The risk profile is low, with recommendations to enhance DNS security and publish explicit security policies to further strengthen trust and compliance.
Vassecenta.com
Technology · Spain
79Low
NIS2 47 · GDPR 88
NIS2 47 · GDPR 88
Vass is a Spain-based technology consulting firm specializing in digital transformation services across a wide range of industries including banking, energy, insurance, retail, telecommunications, education, automotive, life sciences, logistics, travel, manufacturing, and public administration. The company offers a comprehensive portfolio of solutions such as customer experience, marketing, cloud services, business automation, cybersecurity, software engineering, AI and data analytics, and SAP business suite implementations. Their market position is that of a large, established player with a broad industry focus and multiple global technology partnerships. Technically, the website is built on Adobe Experience Manager, leveraging modern web technologies including Google reCAPTCHA, Google Tag Manager, LinkedIn Insight Tag, Facebook Pixel, and OneTrust for cookie consent management. The site demonstrates good mobile optimization, SEO practices, and moderate performance. The hosting is provided by Hosting Concepts B.V., with a domain registered since 2018, consistent with the company's founding year. From a security perspective, the website enforces HTTPS and uses reCAPTCHA to protect forms. Cookie consent mechanisms are in place, indicating GDPR compliance. However, some security headers like Content-Security-Policy and X-Frame-Options are not explicitly detected, and no public security policy or incident response contacts are published. There is no vulnerability disclosure or security.txt file found, which could be improved to enhance transparency. Overall, the website is professional, trustworthy, and compliant with privacy regulations, with a strong business credibility and technical foundation. Strategic recommendations include enabling DNSSEC, implementing additional security headers, publishing a security policy and incident response contacts, and adding a vulnerability disclosure program to further strengthen security posture and trust.
NESSsales.lv
Telecommunications · Latvia
76Low
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
NESS is a Latvian communications agency specializing in providing multichannel communication solutions and marketing automation services to businesses of various sizes. With over 16 years of experience and a client base exceeding 500 companies, NESS offers services including SMS, email, WhatsApp, and other messaging platform integrations, alongside GDPR compliance and customer engagement tools. The website is professionally designed, multilingual, and optimized for mobile devices, reflecting a mature digital presence. Technically, the website is built on WordPress with modern frameworks such as Bootstrap and integrates multiple marketing and analytics tools including Google Tag Manager, Facebook Pixel, and Sendinblue. Hosting and DNS are managed via Cloudflare, ensuring good performance and security. The site implements HTTPS with a valid SSL certificate and includes cookie consent mechanisms, indicating compliance with privacy regulations. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and domain transfer protection. However, it lacks publicly available security policies and incident response contacts, which could be improved to enhance trust and readiness. No critical vulnerabilities or exposed sensitive data were detected in the content. Overall, NESS presents a credible and professional business with a solid technical foundation and good privacy compliance. Strategic improvements in security transparency and DNSSEC implementation would further strengthen its security posture.
DECTAdecta.com
Finance
80Low
NIS2 47 · GDPR 68
NIS2 47 · GDPR 68
DECTA operates as a full-stack payment platform specializing in B2B payment solutions tailored for merchants, fintechs, and banks. The company offers a broad range of services including payment acquiring, issuer and acquirer processing, digital banking platforms, and BIN sponsorship. Their market position is strengthened by multiple certifications such as EMI licenses in the UK, Cyprus, and Ireland, PCI DSS Level 1 compliance, and membership with Mastercard and Visa. The website reflects a professional and modern fintech company with a clear focus on innovation and global scalability. Technically, the website employs a modern technology stack with integrations of Google Tag Manager, Google Analytics, Microsoft Clarity, Facebook Pixel, LinkedIn Insight Tag, Hotjar, and Osano for consent management. The site is well-optimized for mobile devices, has good accessibility features, and demonstrates solid SEO practices. Performance is moderate, with no critical technical issues detected. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks explicit security headers and published security or incident response policies. No vulnerabilities or exposed sensitive data were identified in the HTML content. The absence of WHOIS registration data is a notable concern, potentially indicating privacy protection or data source limitations, which slightly reduces trustworthiness. Overall, DECTA presents as a credible fintech business with strong compliance and certification signals, a professional web presence, and moderate security posture. The main risk lies in the lack of publicly available domain registration data, which should be further investigated. Strategic recommendations include enhancing transparency around security policies, incident response, and domain registration details to improve trust and compliance.
UAB Sellfysellfy.com
E-commerce · Lithuania
77Low
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Sellfy is a Lithuania-based e-commerce SaaS platform founded in 2010, specializing in providing creators and small businesses with an easy-to-use online store solution. The platform supports selling digital downloads, physical products, print-on-demand merchandise, and subscriptions, positioning itself as an all-in-one creator platform with integrated marketing and growth tools. The website demonstrates a professional and consistent brand presence, with clear messaging targeting creators who want a simple yet powerful e-commerce solution. Technically, the site is built on Webflow with modern technologies such as Google Tag Manager and Cookiebot for analytics and privacy compliance, hosted with Cloudflare DNS and Webflow hosting, ensuring fast performance and mobile optimization. Security posture is strong with HTTPS enforced and standard security headers present, though explicit security policies and incident response contacts are not publicly disclosed. Privacy and cookie policies are comprehensive and GDPR compliant, with consent mechanisms implemented. Overall, the website is trustworthy, well-designed, and functionally rich, supporting Sellfy's market position as a competitive e-commerce platform for creators.
Vesetveset.tv
Media
77Low
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Veset is a technology company specializing in cloud-native SaaS solutions for linear television channel management and playout. Their flagship platform, Veset Nimbus, enables media organizations, broadcasters, and content owners to manage and distribute premium linear channels efficiently across OTT and traditional broadcast platforms. The company positions itself as a pioneer in cloud playout technology, offering flexible, scalable, and integrated solutions tailored to various industry needs. Their client base includes notable media and technology partners, underscoring their market presence and credibility. Technically, Veset employs a modern web infrastructure built on Webflow CMS, leveraging cloud services such as AWS and security tools like Google reCAPTCHA and Cloudflare Turnstile. Their platform architecture is based on microservices and Kubernetes clusters, ensuring high availability and scalability. The website demonstrates excellent design quality, mobile optimization, and SEO practices, reflecting a mature digital presence. From a security perspective, Veset maintains a strong posture with HTTPS enforcement, ISO 27001 certification, secure forms with CAPTCHA, and no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with comprehensive privacy and cookie policies, including consent mechanisms aligned with GDPR requirements. However, explicit incident response and vulnerability disclosure policies are not publicly available. Overall, Veset presents a low-risk profile with strong business credibility and technical maturity. Strategic recommendations include enhancing transparency around incident response, publishing a security.txt file, and providing direct contact emails or phone numbers for security and support inquiries to further strengthen trust and compliance.
- 777Agency
77agency.com
Media · Italy
76Low
NIS2 2 · GDPR 73
NIS2 2 · GDPR 73
77Agency is a professional digital marketing agency operating internationally with offices in Milan, London, Rome, and Riga. The company offers a comprehensive suite of services including digital marketing, social media management, SEO, design, and development. It positions itself as an innovative and creative agency focused on delivering growth and measurable results for its clients. The agency is part of the Jakala group, enhancing its market credibility and resource base. Technically, the website is built on WordPress using the Enfold theme and leverages modern web technologies including Google Analytics, Google Tag Manager, and Akamai CDN for performance and analytics. The site is mobile-optimized and includes cookie consent mechanisms aligned with GDPR requirements. However, the WordPress version is outdated, which could pose security risks if not regularly updated. From a security perspective, the site enforces HTTPS and uses anonymized Google Analytics tracking. There are no visible security headers detected, and no exposed sensitive data was found in the HTML content. The absence of a security.txt file or explicit incident response information suggests room for improvement in transparency and security communication. Overall, the website presents a trustworthy and professional front with strong business credibility and compliance posture. The lack of WHOIS data is a notable anomaly but does not directly undermine the site's legitimacy given the strong branding and certifications. Strategic recommendations include updating the CMS, implementing security headers, and publishing a vulnerability disclosure policy to enhance security posture and trust.
- SPH Engineering
ugcs.com
Technology
77Low
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
SPH Engineering operates a professional drone flight planning software platform named UgCS, targeting UAV operators, surveyors, and inspection teams globally. The company offers advanced mission planning and flight control solutions compatible with a wide range of drones including DJI, FreeFly, and others compliant with the Blue UAS list. Their software supports complex missions such as LiDAR, photogrammetry, and corridor mapping, emphasizing precision and automation. The website reflects a mature digital presence with comprehensive content, multimedia tutorials, and integration with popular drone hardware and software ecosystems. Technically, the site is built on modern web technologies with strong performance, mobile optimization, and SEO practices. Security posture is robust with HTTPS, security headers, and no visible vulnerabilities, though explicit security policies and incident response information are absent. Privacy compliance is well addressed with clear privacy and cookie policies. However, the lack of WHOIS registrant data reduces transparency and slightly impacts trustworthiness. Overall, SPH Engineering presents a credible and professional business with a strong market position in drone software solutions.
MetArtmet-art.com
Media · Finland
78Low
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
MetArt is a leading adult content platform specializing in artistic nude photography and erotic films, boasting over 25 years of history and a vast collection of high-quality content. The website is professionally designed with excellent user experience, mobile optimization, and clear navigation. Technically, it employs modern web technologies including React, Google Tag Manager, and OneTrust for privacy compliance, ensuring a robust digital infrastructure. Security posture is strong with HTTPS enforcement, security headers, and anti-bot measures, although explicit security policies and incident response contacts are not publicly available. The absence of WHOIS domain registration data introduces some uncertainty regarding domain legitimacy, but the overall brand and content quality indicate a reputable business. Strategic recommendations include enhancing transparency around security policies and business contact information to further build trust.
- AAF Europe - American Air Filters
aafeurope.com
Energy
78Low
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
AAF Europe, operating under the American Air Filters brand, provides specialized air filtration solutions, including analysis, optimization, and monitoring services aimed at helping organizations improve efficiency and reduce costs. The company appears to be an established player in the energy sector with a business model focused on B2B solutions. The website is built on TYPO3 CMS with Bootstrap 4.4.1, indicating a moderate level of technical maturity and a responsive design. However, the absence of privacy and cookie policies, as well as incident response information, suggests gaps in compliance and security transparency. The domain is long-standing and registered with Network Solutions, supporting business credibility. Overall, the website is professional and functional but would benefit from enhanced security and privacy features.
- BBaltic Container Terminal
bct.gdynia.pl
Transportation · Poland
76Low
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
Baltic Container Terminal (BCT) is a major container terminal operator based in Gdynia, Poland, serving the Baltic Sea region with comprehensive container handling and logistics services. The company targets shipping lines, freight forwarders, and logistics providers, offering services such as shipping connections, gate operations, rail transport, warehousing, refrigerated container handling, inspections, and customs clearance. The website reflects a professional and consistent brand presence with good content quality and navigation. Technically, the website is built on Drupal 9 with modern frontend technologies including Bootstrap, jQuery, and FontAwesome. It employs Google Analytics and Google Tag Manager for analytics and tracking, and includes a GDPR-compliant cookie consent banner. The site is mobile-optimized and accessible, with moderate performance. From a security perspective, the site uses HTTPS with good SSL configuration but lacks visible security headers and explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data for the domain reduces trust in domain registration legitimacy, though the website content and professional presentation suggest a legitimate business. Overall, the site scores well in content, technical implementation, and privacy compliance, but business credibility is slightly impacted by missing WHOIS data and limited security policy transparency. Strategic improvements in security headers, incident response disclosure, and domain registration transparency are recommended.
The Economist Newspaper Limitedeurofinance.com
Finance
78Low
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
EuroFinance is a well-established global treasury community platform operated under The Economist Newspaper Limited brand. It specializes in organizing influential corporate treasury events, training programs, research, and awards, targeting senior treasury professionals worldwide. The website demonstrates a mature digital presence with a professional design, clear navigation, and comprehensive content relevant to its audience. Technically, the site is built on WordPress with modern JavaScript libraries and integrates multiple analytics and marketing tools, reflecting a sophisticated digital marketing strategy. Security posture is strong with HTTPS enforced and consent management implemented, though explicit security headers could be improved. The absence of WHOIS data is notable but likely due to querying issues rather than malicious intent. Overall, the site presents a trustworthy and authoritative resource in the finance and treasury sector.
DPA Professionalsdpa.nl
Finance · Netherlands
76Low
NIS2 2 · GDPR 48
NIS2 2 · GDPR 48
DPA Professionals is a well-established Dutch staffing and consultancy firm specializing in connecting professionals with top-500 companies through secondment. With over 30 years of experience and a strong parent company relationship with Team Eiffel, DPA offers career development, training, and flexible staffing solutions. The website reflects a professional and consistent brand image targeting both professionals seeking career growth and companies needing temporary expert staff. Technically, the site employs modern tracking and consent technologies such as Google Tag Manager and Cookiebot, ensuring GDPR compliance and user privacy. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities. Overall, the site demonstrates a mature digital presence with good performance and accessibility.
- TTV raidījums Zebra
zebra.lv
Media · Latvia
85Low
NIS2 25 · GDPR 88
NIS2 25 · GDPR 88
TV raidījums Zebra is a media entity operating primarily through a Facebook page, focusing on transportation safety and speed-related content targeted at a Latvian-speaking audience. The page has a substantial follower base of approximately 84,000, indicating a strong niche presence. The business model revolves around content creation and distribution on the Facebook platform, leveraging video, photos, reels, and posts to engage its audience. The company appears to be a small-sized media outlet without publicly disclosed parent or subsidiary companies. Technically, the page is hosted and managed entirely on Facebook's infrastructure, utilizing React and Facebook's internal CMS. The site benefits from Facebook's robust hosting, CDN, and security infrastructure, including HTTPS enforcement and security headers. The page is well-optimized for mobile devices and offers a good user experience with clear navigation and relevant content. From a security perspective, the page inherits Facebook's enterprise-grade security measures, including secure login forms and encrypted connections. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic, as the page relies on Facebook's overarching policies rather than hosting its own. Contact information is limited but includes a verified company email address. Overall, the risk profile of the page is low given the reliance on Facebook's platform and security. Strategic recommendations include maintaining strong account security, monitoring for phishing attempts, and potentially enhancing direct privacy disclosures if the business expands its own web presence.
Avengaseavus.com
Technology
86Low
NIS2 47 · GDPR 68
NIS2 47 · GDPR 68
Avenga is a global technology partner specializing in IT services including custom software development, AdTech and MarTech, data and AI, and managed services. With over 20 years of experience, Avenga serves a diverse range of industries such as automotive, manufacturing, retail, banking, media, telecommunications, life sciences, mobility, and logistics. The company positions itself as a trusted B2B partner offering comprehensive technology solutions to enterprises worldwide. The website reflects a mature digital presence with professional design, clear navigation, and extensive content tailored to business clients. Technically, the site is built on WordPress and integrates modern marketing and analytics tools such as Google Tag Manager, Facebook Pixel, LinkedIn Insight Tag, Microsoft Clarity, and Piwik PRO, indicating a high level of digital maturity. Security posture is strong with HTTPS enforced, security headers present, and bot protection via Google reCAPTCHA. Privacy compliance is well addressed through a comprehensive privacy and cookie policy with a user-friendly consent mechanism. However, the absence of explicit terms of service, security policy, incident response information, and direct contact details for security or data protection officers suggests areas for improvement. The WHOIS data is unavailable, which slightly reduces trust but is mitigated by the professional website and privacy compliance. Overall, Avenga demonstrates a robust business and technical foundation with good security and privacy practices, suitable for enterprise clients.
KP Corporationkpcorp.com
Government
81Low
NIS2 59 · GDPR 83
NIS2 59 · GDPR 83
KP Corporation is a medium-sized enterprise specializing in large-scale print and digital communication strategies, primarily serving regulated industries such as healthcare, life sciences, government, legal, retail, financial, insurance, and elections. The company offers critical communication, data-driven communication, and commercial print communication services, emphasizing compliance, security, and optimized postal strategies. The website reflects a professional and consistent brand image with good content quality and SEO optimization. Technically, the site is built on WordPress with modern JavaScript libraries and integrates Google Tag Manager and CookieYes for analytics and cookie consent management. Security posture is generally good with HTTPS enforced and cookie consent implemented, but lacks some security headers and explicit privacy and terms of service pages. The absence of WHOIS registration data is a notable concern, reducing trustworthiness and requiring further verification. Overall, the site is functional, professional, and moderately secure but would benefit from enhanced transparency and security best practices.
- RM plc
rmplc.com
Education · United Kingdom
79Low
NIS2 2 · GDPR 100
NIS2 2 · GDPR 100
RM plc operates as a publicly listed group specializing in technology, assessment, and educational resources primarily targeting the education sector. The website serves as an investor relations portal providing financial statements, corporate governance information, and news updates. The company maintains a professional digital presence with consistent branding and clear navigation aimed at investors and education stakeholders. Technically, the site is built on ASP.NET Web Forms with jQuery and integrates third-party tools such as OneTrust for cookie consent and Google Tag Manager for analytics. Security posture is moderate with HTTPS usage implied but lacks visible advanced security headers or explicit security policies. Privacy compliance is partially addressed through cookie consent but lacks a clearly accessible privacy policy or terms of service. WHOIS data is missing or unavailable, which raises concerns about domain registration transparency but does not detract from the professional appearance and content quality of the site. Overall, RM plc's website reflects a mature business with room for improvement in security and privacy transparency.
AS PNB Bankapnbbanka.eu
Finance · Latvia
82Low
NIS2 2 · GDPR 80
NIS2 2 · GDPR 80
AS PNB Banka operates as a financial institution serving private customers primarily in Latvia. The website provides announcements, news, and essential banking service information such as loan liabilities and commission fee payments. The bank appears to be undergoing insolvency proceedings as indicated by creditor meeting announcements. The digital presence is professional with clear navigation and relevant content targeting private customers and residents. The business model focuses on traditional banking services including asset sales and customer support.
- Modern Times Group
mtg.se
Technology · Sweden
76Low
NIS2 2 · GDPR 100
NIS2 2 · GDPR 100
Modern Times Group (MTG) is a well-established international gaming group headquartered in Sweden, focused on owning and operating multiple gaming studios with popular global intellectual properties across casual and mid-core gaming genres. The company actively drives industry consolidation and strategic acquisitions, positioning itself as a significant player in the gaming sector. The website reflects a mature corporate presence with detailed investor relations, governance, and sustainability information, supporting its Nasdaq Stockholm listing under MTGA and MTGB symbols. Technically, the site is built on WordPress with modern SEO and analytics tools, including Yoast SEO and Matomo, and incorporates a robust cookie consent mechanism via OneTrust, indicating good privacy compliance. Security posture is strong with HTTPS enforced and security headers present, though explicit security policies and incident response contacts are not published, representing an area for improvement. The absence of WHOIS data reduces transparency but does not detract significantly from the overall legitimacy given the company's public market presence and comprehensive website content.
Apifonicadzinga.com
Telecommunications · Poland
88Low
NIS2 35 · GDPR 85
NIS2 35 · GDPR 85
Apifonica is a medium-sized telecommunications and technology company specializing in AI-powered customer communication automation solutions, including voicebots, SMS marketing, phone number masking, and cloud telecom platforms. The company positions itself as an established player with over 10 years in the market, serving a broad client base with scalable and innovative telecom services. Their website demonstrates a mature digital presence with modern technologies and comprehensive content, including client success stories and industry awards. Technically, the site is built on Vue.js and integrates multiple analytics and marketing tools, ensuring good performance and mobile optimization. Security-wise, Apifonica maintains strong practices with HTTPS, ISO 27001 certification, regular penetration testing, and GDPR compliance, though some transparency gaps exist due to missing WHOIS data. Overall, the company presents a professional and trustworthy image with room for improvement in public contact information and domain registration transparency.
- Edco Eindhoven
edco.nl
Retail · Netherlands
77Low
NIS2 17 · GDPR 28
NIS2 17 · GDPR 28
EDCO Eindhoven is a well-established B2B retail partner specializing in non-food products with over 40 years of experience. The company offers a broad range of products and value-added services to enhance retail presentation and sales, supported by a large physical showroom and partnerships with recognized brands. The website reflects a mature digital presence built on modern technologies such as Next.js and Storyblok CMS, with good mobile optimization and SEO practices. Security posture is strong with HTTPS enforcement and appropriate security headers, although explicit security policies and incident response contacts are not publicly available. Privacy compliance is addressed with a comprehensive privacy policy and cookie consent mechanism. Overall, the website demonstrates a professional and trustworthy business presence with moderate user tracking and marketing tools.
Ahlers Logisticsahlers.com
Transportation · Belgium
76Low
NIS2 55 · GDPR 80
NIS2 55 · GDPR 80
Ahlers Logistics is a well-established international logistics company specializing in sustainable supply chain management, secured transportation, warehousing, and project logistics. The company targets businesses requiring complex logistics solutions across Europe, Central Asia, and Southeast Asia. Their website is professionally designed using Drupal 9, featuring comprehensive service descriptions and strong branding consistency. The technical infrastructure includes modern analytics and marketing tools, with good mobile optimization and accessibility. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers are not detected. The absence of WHOIS data limits domain registration insights but does not detract from the website's legitimacy. Overall, the company demonstrates a mature digital presence with good privacy compliance and business credibility.
Sonder Holdings Inc.sonder.com
Hospitality · United States
80Low
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Sonder Holdings Inc. operates a technology-driven hospitality platform offering short-term and extended stay accommodations in over 40 cities worldwide. The company differentiates itself by combining boutique apartments and hotels with a mobile app that empowers guests with digital concierge services, keyless entry, and flexible booking options. Their strategic partnership with Marriott Bonvoy enhances their market position by integrating loyalty rewards, appealing to a broad audience including leisure and business travelers. Technically, the website is built on modern frameworks such as Next.js and React, with strong mobile optimization and fast performance. The use of multiple analytics and marketing tools indicates a mature digital marketing strategy. Security posture is robust with HTTPS enforcement, modern security headers, and secure form handling, though there is room for improvement in public security disclosures. Overall, the website presents a professional, trustworthy, and user-friendly experience aligned with industry best practices.
- BBarentz
barentz.com
Other · Netherlands
80Low
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
Barentz is a global specialty ingredients solution provider focused on delivering ingredient solutions across multiple sectors including human nutrition, pharmaceuticals, personal care, performance materials, and animal nutrition. The company emphasizes partnerships, formulation expertise, and supply chain solutions to support its customers. The website reflects a mature digital presence with clear navigation, professional design, and comprehensive content tailored to business clients in relevant industries. Technically, the site uses modern frameworks such as Bootstrap and jQuery, integrates Google Tag Manager and analytics tools, and is built on the Umbraco CMS platform. Mobile optimization and SEO practices are good, though accessibility is basic. Security posture is moderate with cookie consent mechanisms in place but lacks visible security headers or explicit security policies. WHOIS data is unavailable or inconsistent, which slightly impacts trust but the overall business credibility remains high due to professional presentation and valid contact information.
Löfbergs Balticlofbergs.lv
Retail · Latvia
81Low
NIS2 2 · GDPR 95
NIS2 2 · GDPR 95
Löfbergs Baltic is a family-owned coffee roasting company operating primarily in the Baltic region and Northern Europe. Established in 1906, it holds a strong market position as one of the largest family-owned coffee roasters in the Nordic countries. The website reflects a medium-sized retail business focused on coffee products, targeting consumers interested in quality coffee. Technically, the website is built on WordPress, utilizing modern tools such as Google Tag Manager and Cookiebot for analytics and cookie consent management. The site is mobile-optimized and SEO-friendly, with structured data and Open Graph tags enhancing search engine visibility and social media sharing. Security posture is solid with HTTPS enforced and cookie consent implemented, though security headers could be improved. Privacy compliance is moderate; while cookie consent is comprehensive, no explicit privacy policy or terms of service pages were detected in the provided content. Contact information is not explicitly present, which may affect user trust and compliance. Overall, the website is professional and trustworthy but could benefit from enhanced transparency and security header implementation.
Vide Infravideinfra.com
Technology
82Low
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Vide Infra is a well-established digital product design and development agency founded in 2000, specializing in digital products, eCommerce, corporate websites, and brand communication solutions. The company positions itself as an award-winning agency serving innovative startups and established businesses globally. The website reflects a high level of professionalism with excellent design quality, clear navigation, and mobile optimization. Technically, the site uses modern JavaScript frameworks, integrates multiple analytics and marketing tools, and is hosted behind Cloudflare DNS services. Security posture is good with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. Privacy compliance is weak due to the absence of explicit privacy and cookie policies, although a cookie consent mechanism is present. Contact information is not explicitly provided, which may impact user trust and compliance. Overall, the domain WHOIS data supports the legitimacy of the business with consistent registration details and a long domain age.
RainSistersrainsisters.com
Retail · Latvia
79Low
NIS2 17 · GDPR 85
NIS2 17 · GDPR 85
RainSisters is a niche e-commerce retailer specializing in waterproof design coats for women with a city lifestyle. Founded in 2018 and operating primarily in Latvia, the company offers stylish and practical coats through a professionally designed Shopify platform. The website demonstrates mature digital marketing and analytics integration, including Google Analytics, Microsoft Clarity, TikTok Pixel, and Klaviyo, supporting extensive user tracking and marketing efforts. Privacy and cookie policies are comprehensive and GDPR compliant, with active consent mechanisms implemented. Security posture is strong with HTTPS enforced, domain transfer protections, and no exposed sensitive data, although DNSSEC is not enabled and explicit security policies or incident response information are absent. Overall, the website is trustworthy, professionally maintained, and aligned with the business's market positioning.
- Lido Advisors, LLC
lidoadvisors.com
Finance · United States
77Low
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Lido Advisors, LLC is a well-established private wealth management and advisory firm targeting high net worth individuals, families, charities, and institutions. The company emphasizes a family office style of wealth management, offering services such as financial and estate planning, investment management, tax consulting, and trust services. With over $25 billion in regulatory assets under management and a presence across multiple U.S. offices, Lido positions itself as a sophisticated and trusted advisor in the wealth management sector. The website reflects a professional and polished brand image, with clear messaging and comprehensive service descriptions. Technically, the website is built on Drupal 9 with modern frameworks like Bootstrap 5, and integrates analytics and monitoring tools such as Google Analytics, Google Tag Manager, and New Relic. The site is mobile-optimized, accessible, and performs well, providing a seamless user experience. Security measures include HTTPS enforcement and CAPTCHA on forms, though explicit security headers and policies could be improved. The security posture is solid with no evident vulnerabilities or exposed sensitive data. However, the absence of WHOIS registration data for the domain is a notable anomaly that slightly impacts trustworthiness. The site includes privacy and cookie policies with consent mechanisms, indicating good privacy compliance. Overall, the website and business present a low-risk profile with strong professionalism but would benefit from enhanced transparency in domain registration and security disclosures.
- Paynt
paydoo.com
Finance
77Low
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Paynt is a payment solutions provider offering a fully integrated payment infrastructure with services including POS systems, acquiring, merchant services, and capital funding. The company targets businesses across retail, hospitality, digital commerce, and service sectors, positioning itself as an innovative and award-winning player in the payment processing industry. The website is built on WordPress and uses modern web technologies such as jQuery, Google Tag Manager, and Swiper.js, hosted via Cloudflare, indicating a mature technical infrastructure. Security posture is adequate with HTTPS enforced and domain transfer protections, but lacks DNSSEC and visible security headers. Privacy compliance is weak due to missing privacy and cookie policies. Contact information is limited to a contact form with no direct emails or phone numbers publicly listed. Overall, the site is professional and trustworthy but could improve transparency and security practices.
Stolt-Nielsen Limitedstolt-nielsen.com
Transportation
81Low
NIS2 47 · GDPR 83
NIS2 47 · GDPR 83
Stolt-Nielsen Limited operates as a global leader in bulk-liquid logistics and sustainable land-based aquaculture, providing transportation, storage, and distribution services worldwide. The company holds a strong market position with its subsidiaries specializing in chemical tankers, storage terminals, tank containers, and aquaculture. Their business model focuses on long-term investment and management of these sectors, targeting investors, customers, and job seekers. The website reflects a professional and comprehensive digital presence with rich content, investor relations, and sustainability commitments. Technically, the website employs modern technologies including Google Tag Manager, Vimeo for media, and Cloudflare for performance and security insights. The site is well-optimized for mobile and accessibility, with fast loading times and good SEO practices. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and incident response policies could be improved. Overall, the website demonstrates a mature digital infrastructure and a high level of professionalism. The absence of WHOIS data is a notable gap in transparency but does not detract significantly from the site's credibility given the extensive investor and business information presented. Strategically, the company should enhance its security documentation and consider publishing vulnerability disclosure policies to further strengthen trust and compliance.
Internetstiftelseniis.se
Technology · Sweden
81Low
NIS2 17 · GDPR 55
NIS2 17 · GDPR 55
Internetstiftelsen is an established Swedish non-profit organization responsible for managing the top-level domains .se and .nu. The organization focuses on promoting a positive internet experience for individuals and society, providing domain registration services, knowledge dissemination, and community meeting places. The website reflects a professional and consistent brand image with good content quality and clear navigation tailored for Swedish internet users and domain registrants. Technically, the website is built on WordPress with a modern tech stack including SVG icons, JavaScript, and CSS. It employs Matomo analytics with a consent-based tracking mechanism managed by OneTrust, indicating a mature approach to privacy compliance. The site is mobile-optimized and accessible, with good SEO practices including structured data and meta tags. From a security perspective, the site uses HTTPS and cookie consent blocking before tracking activation, but lacks DNSSEC and explicit security headers, which are recommended for enhanced security. No vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms the domain's legitimacy and consistency with the organization's claims, with a domain age appropriate for the business history. Overall, Internetstiftelsen's website demonstrates a strong security posture, good privacy compliance, and high business credibility. Strategic improvements include enabling DNSSEC, adding security headers, and publishing explicit security and incident response policies to further enhance trust and security maturity.
- Esri Schweiz
esri.ch
Technology · Switzerland
76Low
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
Esri Schweiz operates as a leading provider of geospatial information systems and solutions based on the ArcGIS platform, targeting private sector, government, and academic customers in Switzerland. The website content emphasizes spatial analysis, indoor mapping, and integration of artificial intelligence to enhance geospatial insights. The company is positioned as an enterprise-level entity with a strong brand presence consistent with its parent company Esri Inc. The digital infrastructure leverages Adobe Experience Manager CMS, modern JavaScript frameworks, and multiple analytics and marketing tools, indicating a mature digital presence. Security posture is generally strong with HTTPS and no visible vulnerabilities, but lacks explicit security headers and published privacy or cookie policies, which are areas for improvement. Overall, the website is professional, content-rich, and trustworthy, though privacy compliance and contact transparency could be enhanced.
Information technology and services · Latvia
85Low
NIS2 55 · GDPR 95
NIS2 55 · GDPR 95
- RXO
coyote.com
Transportation · United States
81Low
NIS2 2 · GDPR 80
NIS2 2 · GDPR 80
RXO Inc. is a well-established enterprise in the transportation and logistics sector, providing a broad range of freight and supply chain solutions including truckload, less-than-truckload, managed transportation, last mile, expedited shipping, and freight forwarding. The company leverages advanced technology platforms such as RXO Connect™ and RXO Drive™ to offer real-time visibility and control to shippers and carriers, positioning itself as a leader in the freight movement market. The website reflects a mature digital presence with comprehensive content targeting both shippers and carriers, supported by a large independent carrier network and extensive app downloads. Technically, the site is built on WordPress with modern frameworks and integrates multiple analytics and marketing tools, ensuring good performance and SEO optimization. Security posture is strong with HTTPS enforcement and domain protections, though there is room for improvement in security headers and explicit security policies. Privacy compliance is robust with clear cookie consent mechanisms and GDPR-aligned privacy policies. Overall, RXO demonstrates high business credibility and digital maturity, suitable for an enterprise-level logistics provider.
X (formerly Twitter)kdfashioncompany.com
Technology
78Low
NIS2 2 · GDPR 73
NIS2 2 · GDPR 73
The analyzed website page is part of the X.com domain, formerly known as Twitter, a major global social media platform. The page content is user-generated promotional material targeting fashion brands and style influencers, indicating the platform's use for marketing and advertising. The business operates at an enterprise scale within the technology industry, providing social networking and content sharing services. The domain is well-established, created in 1993, and registered with a reputable registrar, GoDaddy.com, LLC, reflecting high legitimacy and trustworthiness. From a technical perspective, the website employs modern web technologies including JavaScript and web fonts, with moderate performance and good mobile optimization. However, explicit frameworks or CMS platforms are not clearly identified. The website lacks visible security headers and formal privacy or cookie policies on the analyzed page, indicating gaps in privacy compliance and security best practices. No contact information or incident response channels are disclosed, limiting transparency and user trust. Security posture is weak based on the provided HTML content, with no detected security headers or explicit security policies. The domain's WHOIS data is consistent and trustworthy, with no privacy protection or suspicious patterns. No WAF or blocking mechanisms are detected, allowing full content access. Overall, the website demonstrates moderate business credibility but requires improvements in privacy compliance, security policies, and transparency to enhance user trust and regulatory adherence. Strategic recommendations include publishing comprehensive privacy and cookie policies, implementing security headers, enabling DNSSEC, and providing clear contact information for security incidents and data protection officers. These steps will improve the platform's security posture, privacy compliance, and overall trustworthiness.
Tom Sawyer Softwaretomsawyer.com
Technology · United States
81Low
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Tom Sawyer Software is a pioneering company specializing in graph technology and data visualization solutions. Their website presents a professional and comprehensive overview of their products, services, and use cases, targeting software developers, data scientists, and enterprises seeking advanced graph-based solutions. The company positions itself as a veteran in the graph technology space with decades of experience and a strong market presence. Technically, the website is built on modern frameworks such as Bootstrap and HubSpot CMS, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and policies could be improved. The absence of WHOIS data is a notable anomaly but does not detract from the overall legitimacy of the business as evidenced by detailed content and trust indicators. Overall, the website reflects a mature digital presence with room for enhanced security transparency and domain registration clarity.
- Euroaptieka
euroaptieka.lv
Retail · Latvia
77Low
NIS2 17 · GDPR 95
NIS2 17 · GDPR 95
Euroaptieka.lv is a prominent Latvian online pharmacy and health product retailer offering a wide range of cosmetics, body care, dietary supplements, over-the-counter medicines, and hygiene products. The website targets Latvian consumers seeking convenient online access to pharmaceutical and wellness products. The business model focuses on e-commerce retail with a strong emphasis on promotions and brand variety, positioning Euroaptieka as a leading player in the Latvian health retail market. Technically, the website employs modern web technologies including React for frontend rendering, Google Tag Manager for analytics and marketing tag management, Cookiebot for GDPR-compliant cookie consent, and Google reCAPTCHA for bot protection. The site demonstrates good mobile optimization and SEO practices, though accessibility features could be enhanced. Performance is moderate with room for improvement. From a security perspective, the site enforces HTTPS with strong SSL configuration and integrates security best practices such as reCAPTCHA and cookie consent management. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not publicly evident. No critical vulnerabilities or exposed sensitive data were detected. Overall, Euroaptieka.lv presents a trustworthy and professional online retail platform with a solid security posture and compliance awareness. Strategic improvements in privacy policy transparency, accessibility, and security documentation would further enhance trust and compliance.
SkywindGroup Holdings LTDskywindgroup.com
Technology · Gibraltar
78Low
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
SkywindGroup Holdings LTD is a well-established premium content provider in the iGaming industry, founded in 2013 and headquartered in Gibraltar. The company offers a comprehensive portfolio of online gaming products including slot games, live casino studios, engagement tools, and back-office management systems. Their business model focuses on B2B partnerships with online casino operators, delivering innovative and mobile-optimized gaming experiences. The company holds multiple reputable gambling licenses across key jurisdictions, reinforcing its market position and regulatory compliance. Technically, the website is built on a modern stack including Next.js and React, hosted on AWS infrastructure. It demonstrates excellent performance, mobile responsiveness, and SEO optimization. The site employs strong security practices such as HTTPS enforcement and security headers, although DNSSEC is not enabled, which is a minor area for improvement. Privacy compliance is robust with clear privacy and cookie policies and an active cookie consent mechanism. Security posture is strong with no visible vulnerabilities or exposed sensitive data. However, the absence of a public security policy or incident response page and lack of a vulnerability disclosure mechanism are gaps that could be addressed to enhance transparency and trust. Contact information is clearly presented, including a company email, phone number, and physical address, supporting business credibility. Overall, SkywindGroup presents a professional, trustworthy, and technically mature online presence suitable for its industry. Strategic recommendations include enabling DNSSEC, publishing security and incident response policies, and introducing a vulnerability disclosure program to further strengthen security and compliance.