Low-risk security reports

Cult Pens is a well-established UK-based e-commerce retailer specializing in pens and pencils, boasting a wide product range of over 24,000 items. The website positions itself as a trusted online pen shop offering secure ordering, expert knowledge, and excellent customer service with free UK delivery and worldwide shipping. Technically, the site is built on the Shopify platform, leveraging modern JavaScript libraries such as jQuery and Owl Carousel, and integrates third-party services including Klevu for search, Trustpilot for reviews, and OneTrust for cookie consent management. The site demonstrates good digital maturity with mobile optimization and SEO best practices. Security-wise, the site uses HTTPS with a domain status of clientTransferProhibited, indicating domain transfer protection. However, explicit security headers are not fully implemented, and no public security or incident response policies are found. Privacy compliance is partially addressed through cookie consent mechanisms, but no explicit privacy or terms of service pages were detected in the provided content. Overall, the website is professional and trustworthy but could improve transparency around privacy and security policies.

Funky Pigeon is a UK-based e-commerce retailer specializing in personalized greeting cards, gifts, and flowers. The company operates under the parent company WH Smith PLC, positioning itself as a significant player in the UK retail market for personalized gifting solutions. The website offers a broad range of products tailored for various occasions, targeting consumers seeking unique and personal gift options. Technically, the site is built using modern web technologies including React and Next.js, with integrations for customer data platforms and marketing analytics, reflecting a mature digital infrastructure. Security-wise, the website enforces HTTPS, employs standard security headers, and provides comprehensive privacy and cookie policies with consent mechanisms, indicating a strong commitment to user data protection. However, the absence of WHOIS registration data is a notable anomaly, though the overall site professionalism and parent company association mitigate concerns. Strategic recommendations include publishing explicit security policies and incident response contacts, enhancing accessibility, and maintaining vigilance on third-party scripts to sustain security posture.

POMPdeLUX FI Oy operates a professional e-commerce platform specializing in Scandinavian children's clothing, targeting parents and caregivers seeking quality kidswear. The company has established a solid market presence since its domain registration in 2011, offering seasonal collections through a well-branded and user-friendly Shopify-based website. The site demonstrates a mature digital infrastructure with integration of modern marketing and analytics tools such as Klaviyo and Facebook Pixel, ensuring effective customer engagement and data-driven marketing strategies. Security posture is strong with HTTPS enforcement, security headers, and no visible vulnerabilities, although formal security policies and incident response contacts are not publicly disclosed. Privacy compliance is well addressed with comprehensive privacy and cookie policies and consent mechanisms. Overall, the website reflects a trustworthy and professional retail business with room for improvement in explicit security transparency and incident readiness.

Hutten is a well-established Dutch catering and hospitality company with a history dating back to 1929. The company provides culinary services including business catering, event catering, and healthcare catering across the Netherlands. Their business model focuses on delivering high-quality, sustainable food and hospitality experiences with a strong emphasis on guest satisfaction and social impact. The website reflects a professional and consistent brand image targeting corporate clients, event organizers, and healthcare institutions. Technically, the website employs modern web technologies such as jQuery, Magnific Popup, Google Tag Manager, and Cookiebot for cookie consent management. Hosting assets on DigitalOcean CDN suggests a reliable infrastructure. The site is mobile-optimized and SEO-friendly, though some accessibility features could be improved. Security posture is good with HTTPS enforced and cookie consent implemented. However, the absence of security headers and visible privacy policy or terms of service pages indicates room for improvement in compliance and security best practices. No WHOIS registrant data is publicly available due to EURid privacy policies, but the domain and website content appear legitimate and consistent with the company's Dutch origin. Overall, Hutten's digital presence is professional and trustworthy, but enhancing transparency around privacy, security policies, and incident response would strengthen their compliance and security posture.

Tyk.io is a mature technology company specializing in API management platforms and API gateway solutions. Founded in 2012 and operated by Digital Privacy Corporation in the US, the company targets developers and enterprises seeking scalable and secure API management. The website reflects a professional and consistent brand presence with a focus on technical excellence and user experience. The technical infrastructure leverages modern web technologies including WordPress CMS, Cloudflare DNS, Google Tag Manager, and advanced lazy loading scripts, indicating a high level of digital maturity. Security posture is solid with HTTPS and domain transfer protections, though there is room for improvement in DNSSEC adoption and explicit security policy disclosures. Privacy compliance is currently basic, lacking visible privacy and cookie policies or consent mechanisms. Overall, the website is trustworthy and well-positioned in the API management market, but could enhance transparency and compliance to further strengthen user trust and regulatory adherence.

Rentokil is a professional pest control service provider targeting residential and business customers in Estonia. The website presents localized content in Estonian, emphasizing expertise and comprehensive pest control solutions. The technical infrastructure includes modern web technologies and tracking tools such as Google Analytics and Google Tag Manager, hosted primarily on Rentokil's CDN. While the website design and content quality are good, there is a lack of visible privacy, cookie, and security policies, which impacts compliance and trust. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, warranting further verification. Overall, the security posture is moderate but could be improved by implementing security headers and explicit compliance documentation.

PropellerAds operates as a technology-driven multisource online advertising platform focused on delivering user acquisition and ad optimization solutions primarily for performance marketers. The company positions itself as an industry leader in the advertising technology space, offering a platform that integrates multiple advertising sources to optimize campaign performance. The website reflects a mature digital presence built on WordPress with modern tools such as Elementor and Yoast SEO, indicating a good level of digital maturity and SEO awareness. The technical infrastructure is supported by Amazon AWS DNS services and includes Google Tag Manager for analytics and tracking. Security posture is generally good with HTTPS enabled and domain status protections in place; however, the absence of DNSSEC and security headers suggests room for improvement. Privacy compliance is weak due to missing privacy and cookie policies and lack of consent mechanisms, which could expose the company to regulatory risks. Overall, the website is professional and trustworthy but would benefit from enhanced transparency in privacy and security policies to strengthen user trust and compliance.

MRPeasy is a cloud-based SaaS provider specializing in Manufacturing ERP and MRP software tailored for small manufacturers. The company offers a comprehensive suite of services including production planning, stock management, CRM, purchases, finances, and team collaboration tools. Positioned as a leading solution for small manufacturers, MRPeasy emphasizes simplicity and power in its offerings. The website reflects a professional and consistent brand image with good content quality and SEO optimization. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and integrates advanced analytics and optimization tools like Google Analytics and Visual Website Optimizer. The site is mobile-optimized and performs moderately well, with good accessibility and SEO features. Security best practices are observed, including HTTPS enforcement and security headers, though explicit security policies and incident response information are not publicly available. The security posture is strong with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms in place. However, the absence of WHOIS registration data reduces the overall trust score, as domain legitimacy cannot be fully verified. Contact information is available, including verified company emails and social media presence, enhancing business credibility. Overall, MRPeasy presents a trustworthy and professional online presence suitable for its target market, but improvements in transparency regarding security policies and domain registration details would further strengthen trust and compliance.

Mandatum is a prominent Finnish financial services group specializing in investment management, insurance, pension solutions, and employee reward services. The company positions itself as a unique combination of financial expertise and human-centric service, targeting individual customers, businesses, and entrepreneurs. Their market position is strong within Finland, supported by a comprehensive portfolio of services and a large professional workforce. The website reflects a mature digital presence with multilingual support and rich content tailored to diverse customer segments. Technically, the website employs modern frameworks such as Vue.js and Tailwind CSS, integrated with advanced analytics and marketing tools including Adobe Analytics, Microsoft Application Insights, and OneTrust for cookie consent management. The platform appears to be built on Episerver CMS, ensuring robust content management and search capabilities. Mobile optimization and accessibility are well addressed, providing a seamless user experience across devices. From a security perspective, the site enforces HTTPS and incorporates cookie consent mechanisms aligned with GDPR requirements. While explicit security headers are not visible in the provided data, the presence of security policy pages and incident reporting channels indicates a proactive security posture. No critical vulnerabilities or suspicious activities were detected. However, improvements such as publishing a security.txt file and providing direct incident response contact emails could enhance transparency and readiness. Overall, Mandatum's website demonstrates high professionalism, trustworthiness, and compliance with privacy regulations. The digital infrastructure supports business goals effectively, though minor enhancements in security transparency and incident response communication are recommended to further strengthen their security posture.

Proact IT Group AB is a leading European specialist in data management and IT services, focusing on cloud transformation, data center modernization, cybersecurity, and managed services. The company operates across 12 countries in Europe and North America, targeting medium to large enterprises seeking advanced IT infrastructure solutions. Their website reflects a mature digital presence with comprehensive service offerings and investor relations transparency. Technically, the site is built on WordPress with Elementor and Yoast SEO, employing modern web standards and good performance practices. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms in place, though there is room to improve transparency around vulnerability disclosure and incident response. Overall, Proact demonstrates a high level of professionalism and trustworthiness, consistent with its market position as a major IT services provider.

YIT Eesti is a prominent real estate and infrastructure development company operating in Estonia, specializing in residential apartments, commercial properties, and complex infrastructure projects. The website reflects a mature digital presence with a professional design, clear business focus, and comprehensive cookie consent management aligned with GDPR requirements. The technical infrastructure leverages modern JavaScript libraries, Google Tag Manager, Cookiebot for consent management, and Azure Application Insights for monitoring, indicating a well-maintained and performance-conscious platform. Security posture is strong with HTTPS enforcement and standard security headers, though explicit security policies and incident response contacts are absent. Overall, the site demonstrates a high level of professionalism and compliance, with room for improvement in transparency around terms of service and direct contact information.

Wunder is a Finnish digital solutions company specializing in digital transformation, software development, data analytics, and cloud hosting services. Established in 2012, the company serves a diverse client base including public sector organizations and enterprises, positioning itself as a trusted partner in delivering user-centered digital services. The website reflects a mature digital presence with comprehensive content, client success stories, and clear service offerings. Technically, the site leverages modern frameworks such as Next.js and Drupal CMS, hosted on reliable platforms with Cloudflare DNS, ensuring fast performance and mobile optimization. Security posture is strong with HTTPS enforced and clientTransferProhibited domain status, though DNSSEC is not enabled and some security headers could be explicitly added. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. Overall, the website demonstrates professionalism, trustworthiness, and a solid digital maturity level.

North Star is a UK-based marine infrastructure support company specializing in offshore energy sectors including renewables and conventional energy. The company offers a range of services such as offshore wind support vessels, emergency response, platform supply, patrol and research, and rescue and maintenance. Their market position is that of an established medium-sized player with decades of marine experience and a modern fleet. The website is professionally designed, mobile-optimized, and provides comprehensive compliance and contact information, indicating a mature digital presence. Technically, the website is built on Webflow CMS, leveraging modern web fonts, analytics, and consent management tools. Performance and accessibility are rated highly, with fast loading times and good SEO practices. Security posture is strong with HTTPS enforced and cookie consent implemented, though some security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data reveals a domain registration anomaly: the domain www.northstarshipping.co.uk is reported as unregistered due to naming rules violation by Nominet UK. Despite this, the website content is accessible and professional, suggesting the domain may be a subdomain or alias. This discrepancy lowers the domain legitimacy score and warrants caution. Overall, North Star's website demonstrates a solid business and technical foundation with good security and privacy compliance. Strategic recommendations include enhancing security headers, clarifying domain registration status, and adding incident response information to further strengthen trust and compliance.

VAREGER presents itself as a specialized blockchain product lab offering software development services with expertise in blockchain, machine learning, and cryptography. The website content is professionally designed and targets clients seeking advanced technical solutions in these domains. However, the absence of WHOIS registration data raises concerns about domain legitimacy and ownership transparency. The technical infrastructure appears modern with CDN usage for media assets, but lacks visible advanced frameworks or analytics integrations. Security posture is moderate with no evident security headers or policies, and privacy compliance is minimal due to missing privacy and cookie policies. Overall, the site is functional and professional but requires improvements in transparency, security, and compliance to enhance trust and credibility.

Enefit Green is a leading renewable energy producer in the Baltic Sea region, specializing in wind and solar energy production across Estonia, Latvia, Lithuania, Poland, and Finland. The company operates a substantial portfolio of wind parks, solar power plants, and other renewable energy assets, positioning itself as the largest wind energy producer in the Baltics. Their business model focuses on sustainable energy production and regional energy independence, supported by significant recent investments and growth. Technically, the website is built on modern frameworks like React and Next.js, hosted with Cloudflare DNS and CDN services, ensuring fast performance and mobile optimization. The site implements strong privacy and cookie consent mechanisms, reflecting good GDPR compliance. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Overall, the domain registration data aligns well with the business profile, indicating legitimacy and trustworthiness. Strategic recommendations include enhancing security headers, publishing a dedicated security policy, and providing incident response contacts to further strengthen trust and compliance.

Zaproo is a specialized eCommerce and custom web application development company focusing on Magento2 and Vue Storefront technologies. Positioned as a Magento Solution Partner and Vue Storefront Partner, Zaproo offers a range of services including UI/UX design, eCommerce development, digital marketing, custom development, DevOps support, and training. Their target audience primarily consists of businesses seeking tailored eCommerce solutions and digital marketing support. The website demonstrates a professional design with clear navigation and mobile responsiveness, reflecting a moderate level of digital maturity. Technically, the site leverages modern frameworks such as Vue.js and Nuxt.js for the frontend, integrated with Magento backend systems. It employs common analytics and marketing tools including Google Analytics, Google Tag Manager, and Facebook Pixel, alongside reCAPTCHA for form security. Performance is moderate with good mobile optimization, though accessibility features are basic. From a security perspective, the site uses HTTPS and includes reCAPTCHA to protect forms, but lacks explicit security headers and documented security policies. No vulnerabilities or exposed sensitive data were detected in the analyzed content. However, the absence of WHOIS registration data raises concerns about domain legitimacy and trustworthiness. Overall, while the website is professionally presented and technologically sound, the lack of WHOIS data and explicit privacy policy reduces its trust and compliance posture. Strategic improvements in security headers, privacy documentation, and domain registration transparency are recommended to enhance credibility and security.

Bolt Technology OÜ operates a leading European mobility superservice platform offering ride-hailing, food and grocery delivery, car and scooter rentals, and business travel solutions. The company is well-positioned in the transportation and technology sectors with a large global footprint across 600+ cities and 50+ countries. Their digital presence is robust, leveraging modern web technologies such as Next.js and React, with strong SEO, mobile optimization, and accessibility features. The website demonstrates a high level of professionalism and branding consistency, supported by comprehensive privacy and cookie policies aligned with GDPR requirements. Security posture is strong with HTTPS enforcement, security headers, and no visible vulnerabilities or exposed sensitive data. However, explicit security policies and incident response contacts are not publicly detailed, representing an area for improvement. Overall, Bolt's website and digital infrastructure reflect a mature and trustworthy business with a strong market presence and good compliance practices.

Merative is an enterprise healthcare technology company specializing in medical imaging solutions, including radiology and cardiology software. The company holds a strong market position with top KLAS rankings and usage by leading US health systems. Their website demonstrates a mature digital presence built on HubSpot CMS, integrating advanced marketing and analytics tools. Security posture is solid with HTTPS and secure form handling, though explicit security policies and incident response contacts are absent. The missing WHOIS data is a concern but does not detract significantly from the overall trustworthiness given the professional branding and content quality. Strategic recommendations include enhancing transparency around security policies and monitoring domain registration details.

Scania is a globally recognized enterprise specializing in the manufacturing and sales of trucks, buses, and related services, with a strong presence in Estonia. The website reflects a mature digital infrastructure built on Adobe Experience Manager, featuring professional design, clear navigation, and mobile optimization. Privacy compliance is well addressed through OneTrust cookie consent mechanisms and comprehensive privacy policies. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response information are not published. The absence of WHOIS data is likely due to privacy protection and does not detract from the site's legitimacy given the brand consistency and professional presentation. Overall, the site demonstrates a robust business and technical foundation with room for enhanced transparency in security disclosures.

Linde in India operates as a subsidiary of Linde plc, a global leader in industrial gases and engineering solutions. The website serves as a corporate portal targeting industrial clients in India, showcasing Linde's presence and offerings in the energy sector. The business model focuses on B2B services supplying industrial gases and engineering expertise. The site reflects a strong market position with consistent branding and enterprise-level scale. Technically, the website employs modern analytics and monitoring tools such as Google Analytics, Google Tag Manager, and Microsoft Application Insights, indicating a mature digital infrastructure. The use of HTTPS and security headers demonstrates a good security baseline, although some areas like accessibility and privacy compliance could be improved. The site is mobile-optimized and SEO-friendly, supporting good user experience. From a security perspective, the site enforces HTTPS and includes key security headers, reducing common web vulnerabilities. However, the absence of explicit privacy and cookie policies, as well as lack of visible contact information for security incidents, represents compliance and transparency gaps. No critical vulnerabilities or suspicious patterns were detected. Overall, the website is professional and trustworthy but would benefit from enhanced privacy disclosures and clearer contact channels to improve compliance and user trust. Strategic improvements in these areas will strengthen the security posture and regulatory alignment.

ChangeGroup is a well-established global leader in currency exchange and related financial services, operating over 100 bureaus across multiple continents. Owned by Prosegur, a publicly listed company, ChangeGroup offers a broad portfolio including currency exchange, money transfers, tax free refunds, and ATM networks, targeting international travelers and business clients. The website reflects a mature digital presence with a focus on user experience and accessibility. Technically, the site uses modern web technologies and appears to be built on a robust CMS platform, likely Adobe Experience Manager. Security posture is strong with HTTPS enforced and cookie consent implemented, though explicit security headers and policies could be improved. WHOIS data for the subdomain is unavailable, which is expected and not suspicious. Overall, the site demonstrates professionalism, trustworthiness, and compliance with privacy regulations.

Bilendo is a German-based SaaS company specializing in Accounts Receivable (AR) Automation and Credit Management software. Their platform integrates cloud-based tools to automate debtor management and order-to-cash processes, targeting finance executives, credit managers, accountants, sales, and IT professionals. The company positions itself as a modern, efficient solution provider with a strong client base including notable enterprises and industry references from BCG, PWC, and EOS. Their business model revolves around subscription-based cloud software with modular products such as Cloud Platform, Receivables, Risk, and Add-Ons. Technically, Bilendo leverages a modern tech stack including Ruby on Rails, Bootstrap 5, Font Awesome, and is hosted on AWS with Cloudflare providing firewall and CDN services. The website is well-optimized for performance, mobile responsiveness, and accessibility, reflecting a high level of digital maturity.

Change Invest operates as a fintech investment platform offering a unified app for investing in cryptocurrencies, trading stocks, indices, commodities, and CFDs with leverage. The company targets retail investors primarily within the European Economic Area, emphasizing low fees, fast deposits, and regulatory compliance under Estonian and Dutch authorities. The platform boasts over 125,000 verified users and a broad asset offering, positioning itself as a competitive player in the EU fintech market. Technically, the website is built on Webflow CMS and integrates modern analytics and marketing tools such as Google Tag Manager, Facebook Pixel, Segment Analytics, and Adjust SDK. The site is mobile-optimized, fast-loading, and well-structured, providing an excellent user experience. However, some security best practices like explicit security headers are missing, and no incident response or vulnerability disclosure information is publicly available. From a security perspective, the platform enforces HTTPS, uses cold wallets for crypto custody, and provides public proof of reserves, indicating a mature security posture. Cookie consent mechanisms are implemented with opt-in features, supporting GDPR compliance. The absence of WHOIS registration data is a notable concern, potentially indicating privacy protection or data unavailability, which slightly reduces trustworthiness. Overall, Change Invest presents a professional, secure, and compliant fintech service with strong market positioning in the EU. Strategic improvements in transparency around security policies and WHOIS data would enhance trust and compliance further.

Rephop is a specialized SaaS provider offering web-based group consolidation, reporting, and planning software tailored for CFOs and finance professionals. Established in 2013, it has positioned itself as a trusted solution for simplifying complex financial consolidation processes across multiple subsidiaries and currencies. The platform emphasizes ease of use, powerful features such as intergroup transaction reconciliation, non-controlling interest calculations, and compliance with IFRS and US GAAP standards. Its market presence is supported by customer testimonials and a clear pricing model targeting small to medium-sized businesses and enterprises. Technically, Rephop leverages modern web technologies including Next.js and React, hosted on Vercel with Cloudflare DNS services. The website is well-optimized for performance, mobile responsiveness, and accessibility, reflecting a mature digital infrastructure. Analytics tools such as Vercel Analytics and Google Tag Manager are used for user behavior tracking, though privacy compliance could be enhanced with explicit cookie consent mechanisms. From a security perspective, the site enforces HTTPS and uses domain transfer protection, but lacks DNSSEC and explicit security or incident response policies. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms a consistent and legitimate domain registration history aligned with the company's operational timeline. Overall, Rephop demonstrates a strong business and technical foundation with room for improvement in privacy compliance and security transparency. Strategic recommendations include implementing cookie consent, publishing security policies, and enabling DNSSEC to bolster trust and regulatory adherence.

Mipro Oy is a Finnish specialist company focused on railway and industrial systems, with a history dating back to 1980. The company provides advanced safety and operational solutions for railway traffic, metro systems, water and energy supply, and industrial sectors. With headquarters in Mikkeli and offices in Espoo, Oulu, and Tallinn, Mipro serves a broad international client base including government agencies and utility companies. The website reflects a mature business with clear market positioning and a strong emphasis on safety and technology expertise. Technically, the site is built on WordPress with modern plugins and includes security measures such as HTTPS and hCaptcha for form protection. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. Security posture is good but could be enhanced by adding security headers and publishing explicit security policies. Overall, the website and domain registration data indicate a legitimate, professional, and trustworthy business presence.