Security reports directory
139,950 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,199001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
125,001–125,050 of 139,950
Lucentia Research Grouplucentia.es
Education · Spain
63Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Lucentia Research Group is an academic research entity affiliated with the University of Alicante, specializing in business intelligence, big data, artificial intelligence, and e-learning solutions. Established in 2008, the group has a strong national and international presence demonstrated by numerous high-impact publications and competitive project participation. Their services target both academic and business audiences, focusing on innovative data analytics and AI applications across multiple sectors including education, healthcare, and industry. Technically, the website is built on WordPress using modern plugins such as WPBakery Page Builder, Contact Form 7, and integrates Google services for fonts, analytics, and reCAPTCHA. The site is mobile-optimized with good SEO practices but lacks some advanced accessibility features and security headers. Security posture is solid with HTTPS enforced and spam protection via reCAPTCHA, but the absence of security headers and cookie consent mechanisms indicates room for improvement in compliance and defense-in-depth. The lack of WHOIS data due to query restrictions limits domain trust assessment but the website content and structure suggest legitimacy. Overall, the site is professional and trustworthy, serving as a credible platform for the research group. Strategic recommendations include implementing cookie consent, enhancing security headers, publishing security policies, and improving accessibility to strengthen compliance and user trust.
Arctic Sixarcticsix.org
Education
74Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Arctic Six is a consortium of Nordic universities dedicated to advancing knowledge, education, and innovation for sustainable development in the Arctic region. The alliance represents a significant research and educational infrastructure in the European Arctic, targeting researchers, students, and stakeholders interested in Arctic issues. The website reflects a professional and consistent brand identity with clear navigation and relevant content focused on research, education, and events. Technically, the site is built on the SiteVision CMS platform using React 17 and integrates Piwik PRO for analytics. It is mobile-optimized, accessible, and uses HTTPS with no visible security vulnerabilities. However, the absence of explicit privacy, cookie, and terms of service policies, as well as missing contact information, limits its privacy compliance and user trust. Security posture is generally strong with HTTPS and no exposed sensitive data, but the lack of security headers and incident response contacts suggests room for improvement. The missing WHOIS data reduces domain trustworthiness, though the website content and social media presence support legitimacy. Overall, Arctic Six presents a credible educational alliance website with good technical implementation but requires enhancements in privacy compliance, security transparency, and domain registration transparency to improve trust and compliance.
Nederlandse politiepolitie.nl
Government · Netherlands
84Low
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
The website politie.nl is the official online presence of the Dutch national police, providing authoritative information on law enforcement, public safety, and community engagement. It serves a broad audience including Dutch citizens and international visitors, offering services such as crime reporting, news updates, and recruitment information. The site is positioned as a trusted government resource with a comprehensive content offering and consistent branding. Technically, the site is built on modern web technologies including Nuxt.js and Vue.js frameworks, supported by a Hippo CMS backend. It employs privacy-respecting analytics (Matomo) and includes accessibility and mobile optimization features, ensuring a high-quality user experience. The site is performant and well-structured with clear navigation. From a security perspective, the site enforces HTTPS, uses secure forms, and implements cookie consent mechanisms. While explicit security policies and incident response details are not published, the site shows no signs of vulnerabilities or exposed sensitive data. The domain registration aligns with the official police organization, reinforcing legitimacy. Overall, politie.nl demonstrates a strong security posture, excellent content quality, and good privacy compliance. Strategic improvements could include publishing detailed security policies and vulnerability disclosure information to enhance transparency and trust.
- GGD Beroepsvaccinaties
ggdberoepsvaccinaties.nl
Healthcare · Netherlands
73Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
GGD Beroepsvaccinaties is an official Dutch public health website providing occupational vaccination advice and services. It serves employers and workers across the Netherlands, leveraging a network of 23 GGD organizations. The site offers personalized vaccination guidance and appointment scheduling, positioning itself as a trusted healthcare provider with professional staff including BIG-registered nurses and infectious disease doctors. Technically, the website is built on Drupal 10, integrates Google Tag Manager and Cookiebot for analytics and consent management, and includes accessibility features such as ReadSpeaker. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though explicit security and incident response policies are absent. Privacy compliance is well addressed with comprehensive cookie consent and a detailed privacy policy. Overall, the website demonstrates a mature digital presence aligned with its public health mission.
- GGemeente Wijdemeren
wijdemeren.nl
Government · Netherlands
84Low
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Gemeente Wijdemeren is the official municipal government website serving the Wijdemeren region in the Netherlands. It provides residents and visitors with essential public services information such as appointment scheduling, passport and ID services, driver's license processing, moving notifications, roadwork updates, and public announcements. The website targets local citizens and stakeholders, positioning itself as a trusted government authority with a clear focus on accessibility and user engagement. Technically, the site employs a modern tech stack including Bootstrap for responsive design, FontAwesome for icons, jQuery for scripting, Matomo for privacy-conscious analytics, and ReadSpeaker for accessibility enhancements. The site is mobile-optimized, well-structured, and SEO-friendly, though it appears to use a custom or proprietary CMS. Performance is moderate with good accessibility features. From a security perspective, the website enforces HTTPS and implements cookie consent mechanisms, reflecting good privacy compliance. However, it lacks visible security headers and does not publish explicit security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms the domain's legitimacy and consistency with the municipality's identity. Overall, the website demonstrates a solid balance of usability, privacy, and trustworthiness appropriate for a government entity. Strategic improvements in security headers, incident response transparency, and terms of service publication would further enhance its security posture and compliance standing.
- GGemeente Laren
laren.nl
Government · Netherlands
81Low
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Gemeente Laren operates as the official municipal government website for the town of Laren in the Netherlands, providing residents and businesses with access to a broad range of public services and information. The website serves as a central hub for municipal announcements, permits, social services, and citizen engagement, positioning itself as a trusted local government authority. The content is primarily in Dutch and targets local citizens, emphasizing accessibility and transparency. From a technical perspective, the website employs a mix of modern JavaScript libraries including jQuery and Prototype.js, alongside Google Analytics and Tag Manager for tracking. Accessibility features and responsive design are well implemented, ensuring usability across devices. The site uses HTTPS and demonstrates good security hygiene, although some security headers could be improved. The CMS appears to be custom or proprietary, with no explicit third-party CMS detected. Security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. Cookie consent mechanisms are in place and privacy policies are comprehensive and GDPR compliant. However, the site lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms, which could enhance trust and preparedness. Overall, the website is professional, trustworthy, and well-suited for its government function. Strategic improvements in security headers, transparency around incident response, and vulnerability disclosures would further strengthen its security and compliance stance.
Other
66Medium
NIS2 17 · GDPR 15
NIS2 17 · GDPR 15
The website www.huizen.nl is currently inaccessible, returning a 403 Forbidden error page with minimal HTML content. Due to this access restriction, no meaningful business, technical, or security information could be extracted or analyzed. The lack of accessible content prevents evaluation of the company's market position, services, or compliance posture. Technically, the site shows no metadata, scripts, or forms, indicating either a misconfiguration or intentional blocking of public access. Security posture cannot be assessed, and no privacy or contact information is available. Overall, the site is currently non-functional from an external analysis perspective, representing a critical issue for trust and user engagement.
- Gemeente Hilversum
hilversum.nl
Government · Netherlands
78Low
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Gemeente Hilversum operates as the official municipal government website for the city of Hilversum in the Netherlands, providing a broad range of citizen services including passport applications, social benefits, parking permits, and governance information. The website targets residents and visitors, offering multilingual support and clear navigation to facilitate access to municipal resources. The business model is that of a government service provider, with a medium-sized organizational footprint and a well-established domain since 1997. Technically, the site is built on Drupal 10 CMS, leveraging modern JavaScript libraries such as jQuery and jQuery UI, and integrates third-party services like Siteimprove Analytics and GTranslate for analytics and multilingual support. The site demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate and could be improved. From a security perspective, the website enforces HTTPS with DNSSEC enabled, uses asynchronous script loading to minimize performance impact, and avoids exposing sensitive data. However, it lacks some advanced HTTP security headers and does not provide explicit security or incident response policies publicly. Privacy compliance is strong with a clear privacy policy and cookie policy, though no explicit cookie consent mechanism is present. Overall, the website presents a high level of trustworthiness and professionalism consistent with a government entity. Recommendations include enhancing security headers, implementing a cookie consent mechanism, and publishing security and incident response information to further improve transparency and compliance.
Gemeente Gooise Merengooisemeren.nl
Government · Netherlands
84Low
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Gemeente Gooise Meren is the official municipal government website serving the residents and visitors of Gooise Meren in the Netherlands. The site provides comprehensive information and services related to passports, driving licenses, waste management, parking, moving notifications, and other local government functions. It positions itself as a trusted public service portal with clear contact channels and a focus on accessibility and user experience. Technically, the website is built on the TYPO3 CMS platform, leveraging modern web standards and accessibility features, with moderate performance and good SEO optimization. Security posture is solid with HTTPS and DNSSEC enabled, though there is room for improvement in explicit security headers and incident response transparency. Privacy compliance is addressed with clear privacy and cookie policies, but lacks an explicit cookie consent mechanism. Overall, the website demonstrates a high level of professionalism and trustworthiness appropriate for a government entity.
- GGemeente Blaricum
blaricum.nl
Government · Netherlands
81Low
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Gemeente Blaricum operates as the official municipal government website for the Blaricum region in the Netherlands, providing residents and stakeholders with comprehensive information about local government services, news, permits, and contact details. The website targets local citizens and businesses, offering clear navigation and accessibility features to ensure inclusivity. The business model is public service oriented, focusing on transparency and community engagement. Technically, the website employs a mix of legacy and modern JavaScript libraries including Prototype.js and jQuery, alongside Google Tag Manager and Google Analytics for tracking. The site is built on a custom or proprietary CMS platform, with good mobile optimization and accessibility compliance. Performance is moderate, with room for improvement in modernizing the tech stack. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms aligned with GDPR requirements. However, it lacks explicit security headers and published security policies or incident response contacts, which are recommended for enhancing trust and compliance. No vulnerabilities or exposed sensitive data were detected. Overall, the website is trustworthy and professionally maintained, serving its governmental purpose effectively. Strategic improvements in security policy transparency and technical modernization could further strengthen its posture and user trust.
Ávorisavoristravel.pt
Transportation · Portugal
75Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Ávoris is a large, established tourism ecosystem headquartered in Portugal, operating multiple specialized brands that cater to a wide range of travelers including corporate clients. The company offers a comprehensive suite of services including travel agency networks, hotel distribution platforms, corporate travel and event management, tour operation, and passenger transportation. Their global presence spans 23 countries with over 6,300 employees and a significant annual turnover, positioning them as a major player in the travel and transportation industry. Technically, the website is built using modern technologies such as Astro and leverages Amazon Cloudfront for content delivery, ensuring moderate performance and good mobile optimization. The site includes standard tracking and consent mechanisms, notably Google Tag Manager and a cookie consent script, indicating a baseline level of digital maturity. From a security perspective, the site enforces HTTPS and implements cookie consent, but lacks advanced security headers and publicly available security policies or incident response contacts. No critical vulnerabilities or suspicious patterns were detected, and WHOIS data confirms the legitimacy and consistency of the domain registration with the business profile. Overall, the website demonstrates a solid business credibility and technical foundation, though improvements in privacy policy transparency, security headers, and accessibility would enhance compliance and user trust. The risk profile is moderate with no immediate critical issues, but strategic enhancements are recommended to maintain and improve security and compliance posture.
Ávoris Corporación Empresarialavoristravel.uk
Transportation · United Kingdom
71Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Ávoris Corporación Empresarial is a well-established tourism corporation with over 90 years of experience in the national and international travel sector. The company operates a consolidated tourism ecosystem comprising multiple specialized brands that cater to various traveler segments and services including travel agencies, tour operators, airline services, and corporate travel management. Their market position is strong with a global presence across 23 countries and over 160 destinations. The website content reflects a professional and consistent brand image, targeting travelers and tourism industry clients. Technically, the website uses modern technologies such as the Astro framework and is hosted on Amazon Cloudfront CDN, ensuring moderate performance and good mobile optimization. However, the site lacks visible privacy and cookie policies, and no explicit contact information is found in the provided content. Security posture is moderate with no detected advanced security headers or policies, and WHOIS data for the .uk domain is unavailable due to domain registration issues, which impacts trustworthiness.
- WWeb Base
compararcoche.com
Transportation · Spain
63Medium
NIS2 2 · GDPR 65
NIS2 2 · GDPR 65
Compararcoche.com is a Spanish online platform specializing in new car price comparison and personalized offers from official dealerships. Founded in 2022, it targets consumers in Spain seeking to purchase or rent new vehicles efficiently. The website provides detailed guides, comparisons, and facilitates lead generation for car dealerships. Technically, the site is built on WordPress using Elementor and Jet Engine plugins, hosted via GoDaddy, and employs Google Tag Manager for analytics. The site is well-structured with good SEO practices and mobile optimization. Security posture is adequate with HTTPS and domain locks, but lacks DNSSEC and advanced security headers. Privacy compliance is basic with a cookie consent mechanism but no visible privacy or terms policies. Overall, the site is professional and trustworthy but could improve transparency and security measures.
Allurityallurity.com
Technology · Sweden
58Medium
NIS2 57 · GDPR 83
NIS2 57 · GDPR 83
Allurity is a European cybersecurity services group founded in 2014, specializing in tech-enabled cybersecurity solutions and growth partnerships for entrepreneurs and talent. The company positions itself as a leader in the cybersecurity industry with recent acquisitions to strengthen its market presence. Their website reflects a professional and consistent brand with clear messaging focused on enabling a safe digital world. Technically, the site is built on WordPress with modern frontend libraries and SEO optimizations, delivering a good user experience with mobile responsiveness and performance. Security-wise, the website enforces HTTPS, uses Google reCAPTCHA for forms, and provides cookie consent mechanisms, though it lacks some advanced security headers and explicit security policies. Overall, the domain registration and website content align well, indicating a trustworthy and legitimate business.
- 인사이드아웃 사회적협동조합
sniperfactory.com
Education · South Korea
65Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Sniper Factory is a South Korean IT specialized education institution offering government-supported training programs in development, design, and marketing. The platform provides comprehensive services including job preparation, internship opportunities, mentoring by industry professionals, and financial support for job seekers. The website is professionally designed with rich content, including detailed course descriptions, student portfolios, and testimonials, targeting primarily young adults preparing for IT careers. Technically, the site leverages modern frameworks such as Next.js and React, hosted likely on Vercel, with integrated analytics and marketing tools like Google Tag Manager and Facebook Pixel. Security posture is solid with HTTPS enforced and domain transfer protections, though improvements are recommended in DNSSEC and security headers. Privacy compliance is partial, lacking explicit cookie consent mechanisms. Overall, the site demonstrates a mature digital presence with strong business credibility and user trust.
- ㈜㈜카카오엔터프라이즈
kakaocloud-kr-gov.com
Technology · South Korea
69Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
KakaoCloud for Government is a specialized cloud service platform operated by Kakao Enterprise, targeting public sector clients and enterprises in South Korea. The website presents a comprehensive portfolio of cloud services including compute, networking, container orchestration, AI, and security solutions. The platform emphasizes high performance, security, and ease of cloud adoption for government institutions. Technically, the site is built on Angular 10, integrates Google Analytics and Tag Manager for tracking, and is hosted with Megazone Corp., a reputable Korean hosting provider. The domain is relatively new but consistent with a recent service launch. Security posture is solid with HTTPS and domain transfer protection, though improvements are recommended in security headers and cookie consent mechanisms. Privacy and terms policies are present but basic, with no explicit GDPR compliance or incident response disclosures. Overall, the site is professional, trustworthy, and well-positioned in the Korean cloud market.
- CCaptain Metrics
captainmetrics.com
Technology
69Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
Captain Metrics' website currently serves as a placeholder page indicating that the company has transferred its activities to Rimdian.com, a digital marketing operating system. The site content is minimal, with no detailed business information, contact details, or privacy policies. The domain WHOIS data is missing, suggesting the domain may be unregistered or expired, which undermines the legitimacy and trustworthiness of the site. Technically, the site is basic with no detected security headers or HTTPS information, and no analytics or tracking scripts are present. Overall, the site appears to be deprecated in favor of Rimdian.com. From a technical infrastructure perspective, the website is minimal and lacks modern web technologies or CMS indicators. The page is mobile responsive with basic styling but lacks SEO optimization and accessibility features. No forms or data collection mechanisms are present, reducing privacy compliance concerns but also limiting user engagement. Security posture is weak due to the absence of HTTPS confirmation, security headers, and any visible security best practices. The lack of WHOIS data and domain registration information further reduces trust. There are no signs of malware or phishing, but the domain status is suspicious. The overall risk is moderate to high due to the domain's unclear registration status and minimal content. Strategic recommendations include securing the domain registration, implementing HTTPS and security headers, publishing privacy and cookie policies, and providing clear business and contact information. Transitioning fully to Rimdian.com with proper branding and security measures is advisable.
- Lemon Interactive
lemon-interactive.fr
Technology · France
68Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Lemon Interactive is a French digital agency founded in 2009 specializing in sustainable digital performance and eco-conception. The company offers a broad range of services including web creation, SEO, SEA, UX/UI design, social media marketing, and digital strategy. Positioned as a medium-sized agency with over 16 years of experience, it targets businesses seeking to optimize their digital presence with an emphasis on environmental impact reduction. The website reflects a professional and consistent brand image with strong trust indicators such as client testimonials and a solid aggregate rating. Technically, the website leverages modern technologies including the Astro framework and Matomo analytics for privacy-conscious tracking. It is well optimized for performance and mobile devices, though accessibility compliance is currently partial. Security posture is strong with HTTPS enforced and no visible vulnerabilities, but could be improved by adding security headers and explicit security policies. The absence of WHOIS data limits domain trust verification, but the website content and structure strongly support legitimacy. Privacy compliance is good with a comprehensive privacy policy, though a cookie consent mechanism is missing. Overall, the site demonstrates a mature digital infrastructure with room for enhancements in privacy and security transparency. Strategic recommendations include implementing cookie consent, publishing security policies and incident response contacts, improving accessibility, and monitoring domain registration status to ensure ongoing trustworthiness.
Advensadvens.com
Technology · France
83Low
NIS2 22 · GDPR 65
NIS2 22 · GDPR 65
Advens is a well-established French cybersecurity company founded in 2000, with a strong presence across France and Europe, employing around 600 experts. The company offers a comprehensive suite of cybersecurity services including risk management, compliance, operational security, offensive security, and CISO office services. Their business model focuses on protecting organizations from cyber threats while emphasizing social impact and sustainability. Technically, the website is built on WordPress with modern frameworks like Bootstrap and integrates HubSpot for marketing and analytics. The site is well-optimized for SEO, mobile-friendly, and provides a professional user experience. Security-wise, the site enforces HTTPS, uses secure forms with consent mechanisms, and holds ISO 27001 certification, though it could improve by enabling DNSSEC and publishing a vulnerability disclosure policy. Overall, the domain registration data aligns well with the business claims, indicating high legitimacy and trustworthiness.
Other
65Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website aenor.com is currently inaccessible due to a Cloudflare Web Application Firewall (WAF) block, which prevents retrieval of any meaningful content or business information. The domain is well-established, registered since 2001 with a reputable registrar, but the lack of DNSSEC and visible security headers indicates room for improvement in DNS and web security configurations. Due to the block, no privacy, cookie, or terms of service policies are detectable, nor any contact or business details. The technical infrastructure includes Cloudflare protection and custom name servers, but no CMS or frameworks are identifiable from the blocked content. Overall, the security posture is difficult to assess fully, but the presence of a WAF block suggests active security measures. The website's digital maturity and compliance status cannot be evaluated accurately without access to the actual content.
MAPFREmapfre.es
Finance · Spain
84Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
MAPFRE is a well-established Spanish insurance company offering a broad range of insurance products including home, life, health, car, motorcycle insurance, and pension plans. The website targets individual consumers in Spain, providing an easy-to-use online platform for insurance quotes and purchases. The company holds a strong market position as a large enterprise with consistent branding and a professional online presence. Technically, the website is built on WordPress with the Divi theme and integrates modern analytics and cookie consent tools, ensuring compliance with GDPR and good SEO practices. Security posture is strong with HTTPS enforced and appropriate security headers, though explicit security policies and incident response contacts are not publicly detailed. Overall, the site is trustworthy, well-designed, and compliant with privacy regulations, supporting MAPFRE's reputation as a leading insurer in Spain.
—
65Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
IndesIAindesia.org
Manufacturing · Spain
49High
NIS2 17 · GDPR 65
NIS2 17 · GDPR 65
IndesIA is a Spanish industry association focused on promoting the use of data and artificial intelligence among companies and SMEs in the Spanish manufacturing sector. The website positions the organization as a key enabler for the digital transformation of industry, targeting primarily Spanish industrial SMEs. The business model is that of an association providing advocacy, support, and promotion of AI technologies within the industrial ecosystem. The website content is professionally presented, with consistent branding and a clear focus on its mission. Technically, the website is built on WordPress using a modern stack including Elementor, Yoast SEO, Google Analytics, and Cookiebot for cookie consent management. The site is mobile optimized and uses structured data (JSON-LD) for SEO enhancement. Performance is moderate, with good SEO and accessibility basics in place. From a security perspective, the site enforces HTTPS, uses security headers, and integrates reCAPTCHA to protect forms. Cookie consent is implemented, supporting privacy compliance. However, the absence of explicit privacy and terms of service pages, as well as the lack of publicly available WHOIS data, reduces transparency and trust. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website presents a moderate risk profile with good technical and security foundations but could improve transparency and compliance by publishing privacy and terms policies and providing clearer contact information. The domain's WHOIS privacy protection is common but limits trust verification. Strategic recommendations include enhancing privacy compliance, publishing security policies, and improving contact transparency.
Ecoembesecoembes.com
Non-profit · Spain
80Low
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Ecoembes is a well-established non-profit environmental organization based in Spain, dedicated to promoting sustainability and recycling. The website reflects a professional and consistent brand presence, targeting environmentally conscious individuals and communities. Their key services revolve around environmental awareness and recycling initiatives, positioning them as a leading entity in their sector within Spain. Technically, the website is built on Drupal 10 with modern frontend frameworks such as Bootstrap and Font Awesome, ensuring good mobile optimization and accessibility. The integration of Google Tag Manager, Cookiebot, and YouTube APIs indicates a mature digital infrastructure with comprehensive analytics and marketing capabilities. Security-wise, the site enforces HTTPS and employs a robust cookie consent mechanism, although explicit security headers and vulnerability disclosures are not evident. The absence of WHOIS registration data introduces a minor transparency concern but is likely due to privacy protection common among non-profits. Overall, the site demonstrates a strong security posture and compliance with GDPR, with room for improvement in explicit security policy disclosures and WHOIS transparency.
- BBME
bmegrowth.es
Finance · Spain
72Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
BME Growth is a specialized segment of Bolsas y Mercados Españoles (BME) focused on providing small and medium enterprises (SMEs) with access to capital markets. The platform facilitates financing, liquidity, and investor engagement for growth-oriented companies in Spain. The website demonstrates a professional and consistent branding aligned with BME's corporate identity, targeting investors and companies interested in growth market opportunities. Technically, the website employs modern web technologies including JavaScript, jQuery, Bootstrap, and integrates Google Tag Manager and Google Analytics for tracking and analytics. It also uses OneTrust for cookie consent management, indicating a mature approach to privacy compliance. The site is mobile responsive and offers a good user experience with clear navigation and relevant content. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms. However, no explicit security headers were detected in the provided data, suggesting room for improvement in security hardening. No vulnerabilities or exposed sensitive data were found in the HTML content. WHOIS data could not be retrieved due to query restrictions, limiting domain legitimacy assessment, but the website's content and affiliation with BME strongly indicate a legitimate and trustworthy entity. Overall, BME Growth's website is a well-structured, professional platform serving its niche market effectively, with good privacy compliance and a solid technical foundation. Enhancements in security headers and accessibility could further strengthen its posture.
Finance · Spain
70Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Instituto de Crédito Oficial (ICO) is a Spanish public financial institution dedicated to providing financing solutions to support investment projects and liquidity needs of self-employed individuals and SMEs. With a history spanning over 50 years, ICO plays a pivotal role in Spain's economic development by offering a comprehensive catalog of credit lines, direct financing, guarantees, and financial instruments managed on behalf of the State. The institution also engages with investors through green and social bond frameworks, emphasizing sustainability and responsible financing. Technically, the ICO website is built on the Liferay Portal CMS platform, leveraging modern web technologies including React, Google Tag Manager, Google Analytics, and Google reCAPTCHA for security and analytics. The site demonstrates good mobile optimization, accessibility, and SEO practices, providing a professional and user-friendly experience. The use of asynchronous script loading and content delivery optimizations contribute to moderate performance. From a security perspective, the website enforces HTTPS with strong SSL configurations and employs security best practices such as bot protection via reCAPTCHA and no visible exposure of sensitive data. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not publicly available, representing areas for improvement. The WHOIS data for the domain is not accessible due to registry restrictions by Red.es, but the website's government affiliation and content strongly support its legitimacy. Overall, ICO's digital presence is robust and trustworthy, reflecting its status as a key government financial institution. Strategic recommendations include publishing clear security and incident response policies, enhancing transparency around data protection officers, and implementing a security.txt file to facilitate vulnerability reporting.
INFORMA D&Binforma.es
Other · Spain
74Medium
NIS2 47 · GDPR 80
NIS2 47 · GDPR 80
INFORMA D&B is a leading European business information provider specializing in commercial reports, market studies, and risk management solutions. The company targets businesses seeking reliable and comprehensive data to support decision-making and compliance. Their market position is strong, supported by a large user base and daily updated databases. Technically, the website employs modern JavaScript libraries, consent management tools, and analytics integrations, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforcement and privacy compliance, though some security headers and incident response details could be improved. Overall, the website presents a professional and trustworthy front with clear business focus and GDPR adherence.
- PParticulares - Banco Santander
bancosantander.es
—
66Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Cepymecepyme.es
Other · Spain
55Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
Cepyme is the Confederación Española de la Pequeña y Mediana Empresa, a national organization representing small and medium enterprises in Spain. The website serves as a platform for news, analysis, events, and advocacy related to SMEs. The organization targets Spanish SMEs and provides services such as policy advocacy, information dissemination, and event organization. The website is built on Drupal 8, utilizing modern web technologies and plugins for event management and content presentation. The technical infrastructure is moderately optimized with good mobile responsiveness and SEO practices. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and explicit security policies. The absence of WHOIS data limits domain trust verification, but the website content and branding indicate a legitimate and professional entity. Overall, the site demonstrates a solid business presence with room for improvement in security and compliance transparency.
Digitaal bureau Elephantelephantcs.nl
Technology · Netherlands
71Medium
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
Digitaal bureau Elephant is a Dutch digital agency established in 2009, specializing in merging technology and brand experience to create engaging digital experiences. The company targets businesses seeking comprehensive digital branding and technology integration services. Their market position is supported by a long-standing domain and consistent branding. Technically, the website is built on WordPress, leveraging modern web fonts, Google Tag Manager, and Cookiebot for cookie consent management, indicating a mature digital infrastructure. Security posture is solid with HTTPS and DNSSEC enabled, though additional security headers and explicit security policies could enhance their stance. Privacy compliance is well addressed through Cookiebot, ensuring GDPR adherence. Overall, the website reflects a professional and trustworthy digital presence with room for improvement in contact transparency and security documentation.
Forum Groningenforum.nl
Media · Netherlands
72Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
Forum Groningen is a well-established cultural and educational institution based in the Netherlands, offering a wide range of services including film screenings, exhibitions, library access, workshops, and events. The website reflects a professional and consistent brand presence targeting a broad audience interested in culture and education. Technically, the site uses a modern tech stack with popular JavaScript libraries and APIs, and it is optimized for mobile and accessibility. Security posture is strong with HTTPS and DNSSEC enabled, though improvements could be made by adding security headers and publishing explicit security and privacy policies. The domain is longstanding and registered with a reputable Dutch registrar, supporting the legitimacy of the organization. Overall, the website is trustworthy and functional but would benefit from enhanced privacy compliance documentation and security transparency.
Zomerfolk | Rapalje Zomerfolk Festival Groningenzomerfolk.nl
Hospitality · Netherlands
63Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Zomerfolk.nl is the official website for the Rapalje Zomerfolk Festival held in Groningen, Netherlands. The site primarily serves as an informational and ticketing platform for the folk music festival, targeting folk music enthusiasts and local attendees. The business model revolves around event promotion and ticket sales, with a niche market position in the regional festival space. The website is built on WordPress using the Divi theme and WooCommerce for e-commerce functionality, supplemented by Google Adsense for advertising and Mailchimp for marketing communications. Technical infrastructure is modern and includes HTTPS and DNSSEC for security, but lacks some advanced security headers and formal privacy and cookie policies. The site demonstrates good mobile optimization and user experience but has room for improvement in privacy compliance and security best practices. The domain registration is consistent and transparent, supporting the legitimacy of the business.
Visit Groningenvisitgroningen.nl
Hospitality · Netherlands
73Medium
NIS2 2 · GDPR 43
NIS2 2 · GDPR 43
Visit Groningen is a regional tourism organization promoting travel, events, and cultural experiences in the Groningen area of the Netherlands. The website serves as a comprehensive portal for visitors seeking information about local attractions, events, accommodations, and activities. It targets tourists and visitors interested in exploring Groningen's natural and cultural offerings. Technically, the website employs modern JavaScript libraries, Google Tag Manager, Google Analytics, and reCAPTCHA for bot protection, indicating a mature digital infrastructure. The site is mobile-optimized, accessible, and SEO-friendly with structured data and meta tags. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers and explicit policies are missing. No signs of WAF or content blocking were detected, allowing full content accessibility. Overall, the site demonstrates good professionalism and trustworthiness but could improve privacy compliance and security transparency.
Provincie Groningenprovinciegroningen.nl
Government · Netherlands
86Low
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Provincie Groningen operates as the official governmental body for the Groningen province in the Netherlands, providing a comprehensive digital platform for residents and stakeholders to access information on subsidies, permits, projects, policies, and news. The website serves as an authoritative source for regional governance and public services, targeting local citizens, businesses, and governmental partners. The business model is public service-oriented, focusing on transparency and accessibility of governmental functions. Technically, the website is built on the TYPO3 CMS platform, leveraging modern web technologies including jQuery UI, Google reCAPTCHA for form security, and Matomo for privacy-conscious analytics. The site demonstrates good mobile optimization, accessibility, and SEO practices, with a moderate performance profile. Integration of a custom site search and social media links enhances user engagement and content discoverability. From a security perspective, the site enforces HTTPS and employs reCAPTCHA to protect forms from abuse. Cookie consent mechanisms and a comprehensive privacy policy indicate strong GDPR compliance. However, the absence of explicit security policies, incident response information, and security headers suggests room for improvement in formal security posture documentation and technical hardening. Overall, Provincie Groningen's website is a well-maintained, trustworthy digital presence for a governmental entity, with solid content quality and compliance. Strategic enhancements in security transparency and header implementation would further strengthen its security posture and user trust.
Other
69Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
The website www.garmin.com is currently inaccessible due to a Cloudflare Web Application Firewall (WAF) security challenge page employing Turnstile captcha verification. This prevents access to any substantive website content, including business information, contact details, or policies. The WHOIS query for the domain returned no data, indicating registry-level privacy or query restrictions. Garmin is a globally recognized brand, but the lack of accessible WHOIS data and website content limits the ability to perform a full security, compliance, and business analysis. The site uses Cloudflare services for security and analytics, indicating a modern infrastructure but currently blocks automated or high-volume queries. Overall, the site’s security posture cannot be fully assessed due to the blocking mechanism, and no privacy or compliance policies are visible.
- Sports Tracker
sports-tracker.com
Technology
83Low
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
Sports Tracker is a well-established fitness and sports tracking application focused on running, cycling, and general fitness training. The website presents a professional and consistent brand image with a clear focus on sports enthusiasts. The technical infrastructure leverages AngularJS, Google Fonts, and Adobe Launch for analytics and tag management, hosted on AWS infrastructure, indicating a mature digital presence. Security posture is solid with HTTPS enforced and domain transfer protections in place, though some security headers and explicit policies are missing. Privacy compliance is partially addressed through a cookie consent mechanism but lacks visible privacy and terms of service documentation. Overall, the site is functional and trustworthy but would benefit from enhanced transparency and security best practices.
Mapillarymapillary.com
Transportation
87Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Mapillary is a collaborative platform specializing in street-level imagery and mapping data, leveraging computer vision to enhance map accuracy and detail. Owned by Meta, it serves a diverse audience including GIS professionals, developers, and autonomous driving sectors. The platform offers tools for imagery hosting, traffic sign recognition, and integration with major GIS systems like ArcGIS. Technically, the website is built on modern web technologies including React and is hosted on Meta's infrastructure, ensuring fast performance and mobile optimization. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response contacts are not published. Privacy compliance is well addressed with clear cookie and privacy policies and consent mechanisms. The absence of WHOIS data is a notable anomaly but likely due to privacy or registry issues rather than malicious intent. Overall, Mapillary presents a professional, trustworthy, and technically mature web presence aligned with its business objectives.
—
69Medium
NIS2 2 · GDPR 95
NIS2 2 · GDPR 95
Atlazulatlazul.eu
Government · Spain
69Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
Atlazul is a regional cooperation initiative focused on promoting blue growth among the regions of Andalucía, Alentejo, Algarve, and Galicia. The website serves as an informational and event dissemination platform for this governmental and non-profit project. The site is built on WordPress using Elementor and integrates event management and social media feeds to engage its target audience of regional stakeholders and maritime economy participants. Technically, the site is modern and well-structured, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and security headers in place, though there is room for improvement in privacy compliance and explicit contact information. Overall, the site reflects a professional and trustworthy presence for a small governmental initiative.
Sveučilište u Splituunist.hr
Education · Croatia
68Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Sveučilište u Splitu is a well-established public university in Croatia, founded in 1974, serving over 20,000 students across multiple faculties and departments. The website reflects a mature digital presence with comprehensive information about academic programs, research, community engagement, and international cooperation. The institution holds the HR Excellence in Research certification, indicating a commitment to research quality and human resources standards. Technically, the website employs modern web technologies such as Bootstrap, jQuery, and Google reCAPTCHA, ensuring a responsive and secure user experience. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, although some security headers could be improved. Privacy compliance is robust with clear policies and GDPR adherence. Overall, the site projects high professionalism and trustworthiness, supporting the university's reputation and operational needs.
- Université de Bretagne Occidentale
univ-brest.fr
Education · France
57Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Université de Bretagne Occidentale (UBO) is a prominent public university in Brittany, France, offering a wide range of academic programs, research activities, and international partnerships. The website reflects a mature digital presence with structured navigation, multilingual support, and integration of privacy-respecting analytics (Matomo). The university positions itself as a regional leader with international collaborations and a focus on innovation and sustainability. Technically, the site is built on Drupal 10, ensuring modern CMS capabilities, though some improvements in security headers and privacy compliance are recommended. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, but the absence of explicit privacy and cookie policies and lack of incident response information are gaps. WHOIS data is unavailable due to registry restrictions, which is typical for French domains but reduces transparency. Overall, the site is professional, trustworthy, and serves its educational mission effectively.
Universidade do Algarveualg.pt
Education · Portugal
43High
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
The Universidade do Algarve operates a comprehensive and professionally designed website that serves as the official portal for academic programs, research activities, international collaborations, and student services. The site targets students, researchers, and academic staff, providing detailed information about courses, research units, and institutional services. The university holds a solid market position as a regional public higher education institution in Portugal, founded in 1979. Technically, the website is built on Drupal 10, incorporating modern analytics and marketing tools such as Google Analytics, Google Tag Manager, Facebook Pixel, and TikTok Pixel. The site demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate. The absence of explicit security headers and privacy/cookie policies indicates areas for improvement in security and compliance. From a security perspective, the site uses HTTPS and avoids exposing sensitive data, but lacks visible security policies, incident response contacts, and vulnerability disclosure mechanisms. The WHOIS data confirms the domain's legitimacy and consistency with the university's identity, supporting a high trustworthiness rating. Overall, the website is professional and credible but would benefit from enhanced privacy compliance, security header implementation, and clearer contact information to strengthen user trust and regulatory adherence.
Nord universitetnord.no
Education · Norway
65Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Nord universitet is a Norwegian higher education institution offering a broad range of study programs, research activities, and student services. The website reflects a well-established university with a clear focus on education, innovation, and societal development across regions. The digital presence is built on Drupal 10, incorporating modern web technologies and a cookie consent mechanism compliant with GDPR. The site is well-structured, mobile-optimized, and provides comprehensive contact information and privacy policies in Norwegian. Security posture is generally good with HTTPS enforced and no visible sensitive data exposure, though security headers are not explicitly detected and no incident response or vulnerability disclosure information is published. WHOIS data is unavailable, which slightly impacts trust but the website content and official contact details support legitimacy. Overall, the site demonstrates a mature digital infrastructure suitable for an educational institution with room for improvement in security transparency and WHOIS data availability.
Mockabmockab.com
Technology
35High
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Mockab is a small digital agency specializing in providing premium WordPress Elementor templates and an online academy to help clients create and launch websites efficiently. The website is built on WordPress using Elementor and WooCommerce, indicating a moderate level of technical maturity suitable for e-commerce and digital content delivery. The site is accessible and uses HTTPS, but lacks comprehensive privacy, cookie, and security policies, which limits its compliance posture. No contact information or incident response channels are published, which may affect user trust and regulatory compliance. Overall, the site appears to be a basic or test deployment with limited content and business information.
(주)카카오엔터프라이즈kakaoilaas.com
Transportation · South Korea
68Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Kakao i LaaS is a logistics ecosystem platform operated by Kakao Enterprise, focused on connecting shippers and member companies through AI-driven warehouse matching and logistics management systems. The platform offers key services including warehouse sharing, AI-based order and logistics management (OM), and warehouse management (WM) systems, targeting sellers and logistics service providers in South Korea. The website demonstrates a modern technical infrastructure using Nuxt.js and AWS hosting, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS and domain transfer protections, though improvements such as DNSSEC and security headers are recommended. Privacy compliance is partial, with a clear privacy policy but lacking cookie consent mechanisms. Overall, the site reflects a professional and trustworthy enterprise-grade platform with room for enhanced security and privacy practices.
Megazone Corp., dba HOSTING.KRkakaocloud.com
Technology · South Korea
71Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
KakaoCloud is a Korean cloud service provider affiliated with the Kakao group, offering a broad range of cloud computing services including GPU instances, networking, storage, AI, and security solutions. The website demonstrates a mature digital presence with modern web technologies such as Next.js and React, hosted on AWS infrastructure with Megazone Corp. as the registrar and hosting partner. The site is well-designed, mobile-optimized, and provides clear navigation and business information targeting enterprises, startups, and public sector clients. However, explicit privacy and cookie policies are not found, and contact information is not clearly presented, which may impact user trust and compliance. Security posture is generally good with HTTPS and no exposed sensitive data, but lacks explicit security headers and published security policies. Overall, the domain registration data supports the legitimacy and consistency of the business claims.
Ponte.hu Kft.ponte.hu
Technology · Hungary
70Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Ponte.hu Kft. is a Hungarian technology company with over 20 years of experience specializing in artificial intelligence, web, and mobile application development. Their core offerings include AI-based frameworks, the DOKK Platform for web content management, and the ATAK automation framework. The company serves a diverse clientele including government agencies, financial institutions, and healthcare organizations, positioning itself as a trusted technology partner in Hungary. Technically, the website employs modern JavaScript frameworks such as Aurelia and React, integrates Google Maps API, and uses advanced UI components and animations, reflecting a mature digital infrastructure. Security-wise, the site enforces HTTPS, uses CSRF tokens, and implements cookie consent mechanisms, though it lacks some advanced security headers and formal security policies. Overall, the website is professional, content-rich, and trustworthy, with clear contact information and strong partner references.
- Aiuken Cybersecurity
aiuken.com
Technology · Spain
65Medium
NIS2 47 · GDPR 65
NIS2 47 · GDPR 65
Aiuken Cybersecurity is a European leader in managed cybersecurity services, specializing in MDR, SOC, and cloud security solutions. Operating in multiple countries and part of the Allurity Group, Aiuken offers expert security infrastructure management and advanced detection and response capabilities. The website demonstrates a professional digital presence with multilingual support and compliance with privacy regulations through cookie consent mechanisms. Technically, the site is built on WordPress with modern plugins and frameworks, providing a good user experience and mobile optimization. Security posture is adequate with no visible vulnerabilities or exposed sensitive data, though improvements in security headers and incident response disclosures are recommended. The absence of WHOIS data is a notable concern for domain transparency but does not detract from the overall business credibility. Strategic recommendations include enhancing security headers, publishing incident response policies, and verifying domain registration details for trust assurance.
Advensadvens.fr
Technology · France
83Low
NIS2 22 · GDPR 65
NIS2 22 · GDPR 65
Advens is a leading independent cybersecurity company based in France with a strong European presence. The company employs around 600 experts and offers a comprehensive range of cybersecurity services including risk management, compliance, operational security, offensive security, and security technology solutions. Their mission emphasizes protecting organizations from cyber threats while contributing positively to society and the environment. The website is professionally designed, mobile-optimized, and rich in relevant content, targeting organizations in sectors such as healthcare, public services, and industry. Technically, the site is built on WordPress with modern frameworks and integrates HubSpot for marketing and analytics. Security posture is strong with HTTPS enforced and secure forms, though some security headers could be improved and a vulnerability disclosure mechanism is absent. WHOIS data is missing, which slightly reduces trust but the overall digital presence and certifications support legitimacy.
Tedibertediber.com
Retail · France
72Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
Tediber is a French e-commerce retailer specializing in high-quality bedding products including mattresses, bed frames, bedding packs, and related sleep accessories. The brand emphasizes local manufacturing, quality, and customer-friendly policies such as free express delivery, 100 nights trial, and free returns. The website is professionally designed with a consistent brand image and targets consumers in France seeking premium sleep products. Technically, the site uses modern frameworks like Nuxt.js and Vue.js, integrates multiple marketing and analytics tools, and implements cookie consent mechanisms. Security posture is good with HTTPS enabled, but lacks visible security headers and explicit security policies. The absence of WHOIS data raises concerns about domain legitimacy, though the website content appears professional and trustworthy. Overall, the site scores well on content and technical implementation but should improve privacy disclosures and domain registration transparency.