Security reports directory
139,950 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,199001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
125,451–125,500 of 139,950
- W
Other
58Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
The website www.ciba.lv is currently inaccessible beyond a security challenge page that performs browser integrity checks and automatic redirects, indicating the presence of a Web Application Firewall or similar security mechanism. The visible content is minimal and does not provide any direct business information, contact details, or policies. The site appears to be running outdated CMS platforms (Joomla 1.5 and WordPress 2.5), which are known to have multiple security vulnerabilities and are no longer supported. This raises concerns about the overall security posture and maintenance of the website. No privacy, cookie, or terms of service policies are present, and no contact information or social media links are available on the landing page. The only external link is to bitninja.io, suggesting the use of BitNinja security services.
Retail · Latvia
65Medium
NIS2 17 · GDPR 60
NIS2 17 · GDPR 60
Bikšu Bāze is a Latvian retail company specializing in the sale of pants, jeans, and other apparel for men and women, including plus sizes. The business operates both online via a Shopify-powered e-commerce platform and through a physical store located in Riga. The company targets customers seeking a wide range of sizes and convenient shopping options, positioning itself as a niche apparel retailer in Latvia. The website is professionally designed with clear navigation and supports multiple languages, enhancing accessibility for a diverse audience. Technically, the website leverages a modern technology stack centered on Shopify, integrating various marketing and analytics tools such as Google Analytics, TikTok Pixel, Hotjar, and Judge.me for customer reviews. The site is mobile-optimized, fast-loading, and employs secure HTTPS protocols. Cookie consent mechanisms are implemented, reflecting a basic level of privacy compliance. From a security perspective, the site benefits from Shopify's hosting security features, including HTTPS and secure form handling. However, it lacks explicit published security policies, incident response contacts, and vulnerability disclosure information, which are areas for improvement. No critical vulnerabilities or exposed sensitive data were detected. Overall, Bikšu Bāze presents a credible and professionally managed online retail presence with good technical and security foundations. Enhancing transparency through published privacy, terms, and security policies would strengthen trust and compliance posture further.
Promise Partnershippromisepartnership.org
Education · United States
71Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Promise Partnership is a Utah-based non-profit organization dedicated to transforming education from cradle to career by uniting public and private sectors. The organization acts as a backbone entity facilitating partnerships and community engagement to improve educational outcomes and support student success across Utah. It holds a strong market position as a leading collective impact organization with national recognition from StriveTogether. The website reflects a professional and consistent brand with clear messaging and a focus on community impact. Technically, the site is built on WordPress using modern tools and integrates multiple analytics and marketing platforms, indicating a mature digital infrastructure. Security posture is solid with HTTPS and domain protections, though improvements are needed in security headers and formal security policies. Privacy compliance is lacking as no privacy or cookie policies are found, representing a compliance risk. Overall, the site is trustworthy and professional but should enhance privacy and security transparency to improve compliance and user trust.
Healthcare · United States
72Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
The Homecare & Hospice Association of Utah (HHAU) is a small non-profit organization focused on supporting Utah's home-based health, hospice, and personal care industries. The association provides education, advocacy, networking, and public outreach services to its members and the broader community. Their market position is that of a leading state-level association with active engagement in healthcare policy and community partnerships. Technically, the website is built on the Wild Apricot membership platform, utilizing JavaScript, React components, and Google reCAPTCHA for security. The site is moderately optimized for performance and mobile use, with basic accessibility and SEO features. Security posture is adequate with HTTPS and bot protection, but lacks advanced security headers and DNSSEC. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism or terms of service. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the organization.
Healthcare · United States
73Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
The Institute for Healthcare Improvement (IHI) is a globally recognized non-profit organization dedicated to advancing healthcare quality and patient safety through improvement science. Their website demonstrates a mature digital presence with comprehensive educational resources, consulting services, and collaborative networks aimed at healthcare professionals and organizations worldwide. The site is built on Drupal 10 and integrates multiple modern marketing and analytics technologies, including HubSpot, Google Analytics, Microsoft Clarity, and various social media tracking pixels. Privacy and cookie policies are clearly presented with user consent mechanisms, reflecting good compliance practices. Security posture is strong with HTTPS enforced and use of reCAPTCHA Enterprise, though explicit security headers should be confirmed. The absence of WHOIS data limits domain registration verification, but the website's professional content and branding strongly indicate legitimacy. Overall, the site offers excellent user experience, content quality, and technical implementation, positioning IHI as a trusted leader in healthcare improvement.
The University of Utahutah.edu
Education · United States
69Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
The University of Utah website represents a large, established educational institution with a comprehensive offering of undergraduate and graduate programs, research, healthcare, and athletics. The site targets students, faculty, staff, alumni, and visitors, positioning itself as the flagship university in Utah. The technical infrastructure leverages modern web technologies including Google Analytics, Facebook Pixel, Hotjar, and YouTube APIs, indicating a mature digital presence with extensive user engagement and tracking capabilities. Security posture is moderate with HTTPS likely enabled but lacking visible advanced security headers or explicit security policies in the provided data. Privacy compliance is limited due to absence of explicit privacy and cookie policies in the analyzed content. Overall, the website is professional, content-rich, and trustworthy from a business perspective, though domain registration data is incomplete, which slightly impacts trust from a technical domain perspective.
- Mitsubishi Motors France
mitsubishi-motors.fr
Transportation · France
62Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Mitsubishi Motors France operates a comprehensive automotive website targeting French consumers and professionals interested in Mitsubishi vehicles. The site offers detailed vehicle information, configurators, financing options, and after-sales services, positioning itself as a key player in the French automotive market. The digital infrastructure leverages modern JavaScript libraries, Google Tag Manager, and Iubenda for cookie compliance, reflecting a mature technical setup with good mobile optimization and user experience. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. The absence of WHOIS data from AFNIC limits domain trust analysis but the website content and branding strongly indicate legitimacy. Overall, the site is professional, user-friendly, and compliant with GDPR requirements.
Nissan Motor Corporationdatsun.com
Transportation · Japan
63Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Nissan Motor Corporation operates a comprehensive global website providing detailed information about its automotive business, sustainability initiatives, innovation efforts, and investor relations. The site targets a broad audience including investors, customers, partners, and job seekers, reflecting Nissan's position as a leading global automotive manufacturer focused on sustainable and innovative mobility solutions. The business model centers on vehicle manufacturing, technology development, and corporate communications. Technically, the website employs a modern tech stack including jQuery, Swiper.js, Google Tag Manager, and Hotjar, with good mobile optimization and SEO practices. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though security headers and explicit incident response contacts are absent. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. The WHOIS data is missing or unavailable, which is unusual but does not detract significantly from the site's legitimacy given the strong corporate branding and verified external links. Overall, the website is professional, trustworthy, and well-maintained.
INFINITIinfiniti.com
Transportation
81Low
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
INFINITI is a global luxury automotive brand specializing in high-performance cars, SUVs, crossovers, and concept vehicles. The website presents a professional and consistent brand image targeting luxury car buyers and automotive enthusiasts worldwide. The digital infrastructure includes modern web technologies and Adobe Analytics for user tracking, indicating a mature digital presence. However, the absence of visible privacy and cookie policies, lack of contact information, and missing WHOIS data reduce transparency and trust. Security posture appears basic with no detected security headers or explicit security policies, suggesting room for improvement in protecting user data and enhancing compliance. Overall, the website is functional and professional but would benefit from enhanced security and privacy measures to align with best practices and regulatory requirements.
Official Home of Alpine Cars & Racingalpinecars.com
Transportation
80Low
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
Alpine Cars presents itself as a specialized automotive brand focused on high-performance sports cars with a strong racing heritage. The website highlights the launch of the new A290 electric sports car, emphasizing performance, agility, and French craftsmanship. The business model revolves around localized country-specific websites providing brochures, configurators, and contact points for potential customers. Technically, the website uses modern web standards with lazy loading images and Google Tag Manager for analytics and event tracking, ensuring a good user experience and moderate performance. Security posture is adequate with HTTPS implied and no visible vulnerabilities, but lacks explicit security headers and published security policies. Privacy compliance is partial with a cookie policy present but no clear privacy policy found on the main domain. The WHOIS data is missing, which raises concerns about domain registration legitimacy, although the professional presentation and multiple country domains suggest a legitimate business presence. Overall, the website is professional and functional but would benefit from improved transparency in privacy and security disclosures.
Vetsurevetsure.com
Other
65Medium
NIS2 2 · GDPR 80
NIS2 2 · GDPR 80
Vetsure operates as a pet insurance provider offering lifetime insurance policies tailored to pet owners. The company positions itself strongly in the market with high Trustpilot ratings and a clear focus on lifetime coverage for pets. The website is professionally designed using WordPress CMS and incorporates modern web technologies such as lazy loading scripts and Google Fonts, indicating a moderate level of digital maturity. However, the absence of WHOIS registration data raises concerns about domain legitimacy, which impacts overall trust. Security posture is adequate with HTTPS enabled but lacks visible security headers and formal security policies. Privacy compliance is weak due to missing privacy and cookie policies and lack of contact information. Overall, the website is functional and professional but requires improvements in transparency and security to enhance trust and compliance.
Malta Meat Free Week | Promoting a meat free lifestyle in Malta and Gozomaltameatfreeweek.com
Other · Malta
48High
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Malta Meat Free Week is a campaign-focused website promoting a meat free lifestyle in Malta and Gozo. The site encourages community participation through events and contests, supported by partners such as VeggyMalta. The business operates primarily as a local awareness initiative with a small organizational footprint, founded in 2018. Technically, the website is built on WordPress using the Divi theme, with MailerLite integrated for email marketing and form management. The site is hosted by NameCheap and uses HTTPS, but lacks advanced DNS security features like DNSSEC and security headers. Privacy compliance is weak, with no visible privacy or cookie policies, which poses a compliance risk. Security posture is moderate with no critical vulnerabilities detected, but improvements are recommended in security headers and incident response contact information. Overall, the website is functional and professional but would benefit from enhanced privacy and security practices to improve trust and compliance.
- PProvince of British Columbia
workbc.ca
Government · Canada
69Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
WorkBC is a government-operated employment and career resource platform serving residents of British Columbia, Canada. The website is currently offline for maintenance or access restricted, displaying a service unavailable message with a contact email for inquiries. The domain is registered to the Province of British Columbia, confirming its legitimacy as an official government service. The site lacks visible content, metadata, or structured data, limiting the ability to assess its full digital maturity. Technical infrastructure details are minimal, with no detected CMS or advanced frameworks. Security posture is basic, with no DNSSEC enabled and no security headers observed. Privacy and cookie policies are absent, indicating compliance gaps. Overall, the site demonstrates a strong business credibility due to government ownership but suffers from poor content availability and technical implementation at this time.
Manchester Metropolitan Universitymmu.ac.uk
Education · United Kingdom
73Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
Manchester Metropolitan University is a large, well-established higher education institution in the United Kingdom, offering a wide range of undergraduate and postgraduate courses, international partnerships, and active research missions. The university holds a strong market position, evidenced by its Gold award in the Teaching Excellence Framework and high rankings in national surveys. The website reflects a professional and modern digital presence, built on Drupal 10, with good mobile optimization and accessibility features. It integrates multiple marketing and analytics tools, including Google Tag Manager and Visual Website Optimizer, alongside a cookie consent mechanism to support privacy compliance. Security posture is solid with HTTPS enforced and some security best practices observed, though explicit security headers and incident response policies are not clearly published. The absence of WHOIS data limits domain registration trust verification, but the overall branding and content strongly support legitimacy. Strategic recommendations include enhancing security header implementation, publishing security and incident response policies, and maintaining regular audits of third-party scripts to mitigate vulnerabilities.
Generalmarine srlpradatarghe.com
Transportation · Italy
44High
NIS2 17 · GDPR 65
NIS2 17 · GDPR 65
Prada Targhe, operating under Generalmarine srl and part of the Caim Group, is a specialized manufacturer of customizable marine signage with a history dating back to 1884. The company offers a broad range of services including printing, engraving, cutting, and material protection, primarily serving the marine industry with certified IMO signage and other safety and directional products. Their global reach is enhanced by the parent group's international hubs. Technically, the website is built on WordPress with common plugins and demonstrates good SEO and mobile optimization, though performance is moderate. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks published security policies and incident response information. The absence of WHOIS registration data for the domain raises concerns about domain legitimacy and trustworthiness. Overall, the website presents a professional business front but would benefit from improved transparency in domain registration and enhanced security disclosures.
Group Caimgroupcaim.com
Transportation · Italy
49High
NIS2 25 · GDPR 80
NIS2 25 · GDPR 80
Caim Group is a medium-sized Italian maritime industry consortium operating since 2019, providing a wide range of products and services including navigation charts, software, safety equipment, firefighting services, marine signage, and electronics. The company maintains a strong market position with multiple subsidiaries and international offices, targeting maritime commercial and leisure sectors globally. Technically, the website is built on WordPress with modern plugins for SEO, multilingual support, and cookie compliance, hosted on a reputable registrar with DNS hosted on vhosting-it.com. Security posture is good with HTTPS enforced and domain transfer protections, though DNSSEC is not enabled and some security headers are missing. Privacy compliance is strong with clear policies and consent mechanisms. Contact information and social media presence enhance business credibility. Overall, the website is professional, trustworthy, and well-structured, supporting the company's business goals effectively.
Corporate Identitiesthedispatch.mt
Media · Malta
64Medium
NIS2 17 · GDPR 65
NIS2 17 · GDPR 65
The Dispatch, operated by Corporate Identities, is a Malta-based news media website providing curated international and local news with a global outlook and local perspective. Founded in 2020, it targets a general audience interested in news relevant to Malta and beyond. The website is built on WordPress and hosted by Automattic Inc., leveraging modern web technologies including Google Analytics, Tag Manager, and OneSignal for notifications. The site demonstrates good SEO practices and mobile optimization, with consistent branding and a professional design. Security posture is solid with HTTPS enforced and domain transfer protection enabled, though DNSSEC is not enabled and some security headers could be improved. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy policy or terms of service. Contact information includes a Maltese phone number and active social media channels. Overall, the site is credible and functional but could enhance privacy and security transparency.
Corporate Identitiescde.news
Media · Malta
59Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
The Dispatch, operated by Corporate Identities, is a Malta-based online news portal established in 2020, delivering curated international and regional news with a focus on Malta and global perspectives. The website is positioned as a niche media outlet targeting audiences interested in Maltese and international affairs. The business model centers on digital news publishing with monetization through advertising networks such as Google AdSense. Technically, the site is built on WordPress, hosted by Automattic Inc., and employs modern web technologies including jQuery, Google Tag Manager, and OneSignal for push notifications. The site demonstrates good SEO practices with comprehensive metadata and structured data, and it is mobile optimized with a responsive design. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks advanced security headers and explicit security policies. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy or terms of service policies. Overall, the site is professional and trustworthy but could improve transparency and security practices.
Stichting Nationale Onderwijsweeknationaleonderwijsweek.nl
Education · Netherlands
55Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
The Nationale Onderwijsweek website serves as a central platform for promoting and organizing education-related events and initiatives in the Netherlands. It targets education professionals, schools, and the general public interested in education. The site highlights key programs such as the Nationale Onderwijsweek, Onderwijsstad, Onderwijstalenten, and the Nationale Onderwijsprijs, positioning itself as a recognized non-profit entity in the Dutch education sector. Technically, the website employs a modern tech stack including Bootstrap, jQuery, Google Analytics, and Font Awesome, ensuring a responsive and user-friendly experience with moderate performance. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms but lacks advanced security headers and explicit security policies. Privacy compliance is basic with a clear privacy and cookie policy but no terms of service or vulnerability disclosure. Overall, the site is professional, trustworthy, and well-branded, though it could improve in security transparency and accessibility.
RLDatixrldatix.de
Healthcare · Germany
73Medium
NIS2 10 · GDPR 55
NIS2 10 · GDPR 55
RLDatix is a specialized provider of workforce management and scheduling software tailored for the healthcare sector in Germany. The company offers a suite of products including Allocate Optima11, Allocate Loop, and Allocate SafeCare, addressing complex needs such as personnel deployment, time tracking, and absence management. The website reflects a professional and consistent brand presence with a clear focus on healthcare providers and clinic management. Technically, the site is built on WordPress with modern marketing and analytics integrations such as HubSpot, Marketo, and Osano for cookie consent, hosted behind Cloudflare DNS services. Security posture is good with HTTPS enforced and no visible vulnerabilities, although explicit security policies and incident response contacts are not published. Privacy compliance is partially addressed via cookie consent but lacks a visible privacy policy and terms of service. Overall, the site is well-structured, user-friendly, and trustworthy, serving a medium-sized enterprise audience in the healthcare technology sector.
Allocate Softwareallocatesoftware.co.uk
Healthcare · United Kingdom
76Low
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Allocate Software, operating under the RLDatix brand, is a leading provider of healthcare workforce management software focused on delivering safe staffing and productivity savings to healthcare organizations. The company targets healthcare workforce managers and organizations, offering a comprehensive suite of solutions including intelligent scheduling, rostering, staff retention, temporary staffing, and communication tools. The website reflects a mature digital presence with professional design, structured data for SEO, and integration of marketing and analytics tools such as HubSpot, Drift, and Hotjar. Technically, the site is built on WordPress with modern plugins and demonstrates good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers are not detected, and no published security or incident response policies are found. The WHOIS data for the domain is unavailable due to an invalid domain name format, which slightly impacts trustworthiness of domain registration information. Overall, the site is professional and trustworthy from a business and user perspective but could improve in security transparency and direct contact information availability.
- RLDatix
rldatix.com
Healthcare · United States
83Low
NIS2 25 · GDPR 83
NIS2 25 · GDPR 83
RLDatix is an enterprise-level healthcare technology company specializing in integrated governance, risk, and compliance (GRC) software solutions. The company targets healthcare providers, payers, insurers, and government bodies, offering services that enhance patient safety, operational efficiency, and regulatory compliance. With a strong market position supported by over 6000 organizations worldwide and recent acquisitions such as IPeople Healthcare and SocialClimb, RLDatix demonstrates growth and industry leadership. The website content is professionally presented with clear navigation and relevant business information.
Buena Vista Holidaysbuenavistaholidays.com
Hospitality · Malta
61Medium
NIS2 10 · GDPR 83
NIS2 10 · GDPR 83
Buena Vista Holidays is a Malta-based holiday rental platform specializing in stylish apartments and homes across key locations on the island. Founded in 2015, the company targets travelers seeking holiday accommodation in Malta, offering an online booking experience with property listings and hosting services. The website is built on WordPress with modern SEO and analytics integrations, including Google Analytics and Hotjar, and uses Cloudflare for DNS and bot management, ensuring a secure and performant infrastructure. Cookie consent is implemented with a granular user preference mechanism, reflecting good privacy compliance practices. However, explicit privacy policies and terms of service are not found, which could be improved for better compliance and user trust. The security posture is solid with HTTPS enforced and Cloudflare protections, though additional security headers and a vulnerability disclosure policy would enhance the security maturity. Overall, the site presents a professional and trustworthy front for a small hospitality business focused on Malta's holiday rental market.
- Assignment Help Company
assignmenthelpcompany.com
Education · Australia
63Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Assignment Help Company is an online academic assistance provider specializing in assignment help, essay writing, dissertation support, and related educational services targeting university students globally, with a focus on Australia and other English-speaking countries. The website demonstrates a professional and user-friendly design with clear navigation and multiple service offerings. Technically, the site uses modern web technologies including Bootstrap, jQuery, and integrates analytics and tracking tools such as Google Analytics, Microsoft Clarity, and Facebook Pixel. Security posture is moderate with HTTPS enforced and captcha protection on forms, but lacks advanced security headers and vulnerability disclosure mechanisms. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, which impacts overall trust. Privacy and cookie policies are not explicitly found, indicating potential compliance gaps. Overall, the site is functional and credible in content but requires improvements in security and compliance transparency.
My Assignment Servicesmyassignmentservices.com
Education · Australia
67Medium
NIS2 47 · GDPR 53
NIS2 47 · GDPR 53
My Assignment Services is an Australian-based academic assistance provider specializing in assignment help, dissertation writing, thesis support, and various academic writing services. The company targets students primarily in Australia but also serves other English-speaking countries. Their market position is strong with claims of over 1 million assignments delivered and a large pool of subject experts. The website is professionally designed, mobile-optimized, and content-rich, reflecting a mature digital presence. Technically, the site uses modern frameworks like Bootstrap and jQuery, integrates analytics and live chat tools, and enforces HTTPS with captcha-protected forms, indicating a good level of digital maturity. Security posture is solid but could be improved by adding explicit security headers and a dedicated security policy. The absence of WHOIS data for the domain raises concerns about domain legitimacy, which impacts overall trustworthiness despite the professional appearance and comprehensive service offerings. Overall, the site is functional, user-friendly, and trustworthy from a content and technical perspective but requires domain registration transparency improvements.
UKGkronos.com
Technology · United States
83Low
NIS2 17 · GDPR 95
NIS2 17 · GDPR 95
UKG is a leading enterprise technology company specializing in human capital management, payroll, and workforce management solutions. The company targets businesses of all sizes globally, offering cloud-based SaaS products designed to improve workplace experiences and operational efficiency. UKG holds a strong market position as a recognized leader in Gartner's Magic Quadrant for Cloud HCM Suites for enterprises with over 1,000 employees. The website reflects a mature digital presence with comprehensive content, multi-regional support, and strong branding consistency. Technically, the website is built on Drupal 10 CMS and integrates modern technologies such as Google Tag Manager and Didomi Consent Manager for privacy compliance. The site is mobile-optimized, accessible, and SEO-friendly, indicating a high level of digital maturity. Security posture is robust with HTTPS enforced and consent mechanisms in place, although explicit security headers could be further confirmed. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is unavailable, which is a limitation for full domain trust verification. However, the professional website, privacy compliance, and trust indicators mitigate concerns. Overall, UKG demonstrates a strong security and compliance posture suitable for an enterprise SaaS provider. Strategic recommendations include enhancing transparency by publishing explicit security policies and incident response contacts, confirming security headers, and maintaining regular audits of third-party scripts to mitigate supply chain risks.
Other
65Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website timeco.com is currently inaccessible due to a Cloudflare Web Application Firewall (WAF) block page preventing access to any substantive content. As a result, no business information, contact details, or policy documents are available for analysis. The domain is long-established, registered since 1997 with Amazon Registrar, Inc., and shows no signs of privacy protection or suspicious registration patterns. The technical infrastructure relies on Cloudflare services for security and performance, but the blocking prevents evaluation of the site's digital maturity or content quality. Security posture cannot be fully assessed beyond the presence of Cloudflare protection, and no compliance or incident response information is visible. Overall, the site presents a high risk for users due to inaccessibility and lack of transparency.
- Tangiers Group
tangiersgroup.com
Non-profit · Malta
62Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Tangiers Group is a Malta-based organization specializing in connecting insurance products, emergency medical assistance, maritime, travel, and claims management services globally. Established in 2006, it operates through a network of subsidiaries and partners, including battleface, Tangiers International, and MOAS, focusing on challenging environments and humanitarian aid. The company maintains a professional web presence with clear branding and comprehensive service descriptions. Technically, the website is built on WordPress with modern plugins and implements HTTPS and Google reCAPTCHA for security. However, it lacks some security headers and explicit privacy and security policies. The absence of WHOIS data for the domain raises some concerns about registration transparency, though the website content and external links support legitimacy. Overall, the site demonstrates a good security posture and compliance with cookie consent regulations but could improve in formalizing privacy and security documentation.
Veiligheidsregio Utrechtvru.nl
Government · Netherlands
70Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Veiligheidsregio Utrecht (VRU) is a regional government entity focused on public safety, emergency response, and crisis management in the Utrecht region of the Netherlands. The website serves as an information hub for residents and stakeholders, providing news, incident updates, safety advice, and career opportunities. The organization positions itself as a trusted authority in safety and emergency services, with a clear mission to contribute daily to the safety of its community. Technically, the website employs modern web technologies including JavaScript, CSS, SVG graphics, and integrates analytics tools such as Piwik PRO, Facebook Pixel, and LinkedIn Insight Tag. The site is well-structured, mobile-optimized, and accessible, with good SEO practices and a cookie consent mechanism ensuring GDPR compliance. Hosting and domain registration are consistent with a reputable government entity, with DNSSEC enabled and HTTPS enforced. From a security perspective, the site demonstrates strong fundamentals including HTTPS, DNSSEC, and no visible vulnerabilities or exposed sensitive data. However, it lacks publicly available dedicated security or incident response policies and does not provide a vulnerability disclosure or security.txt file. Analytics and tracking are implemented with consent, reflecting a moderate user tracking level aligned with privacy regulations. Overall, VRU's website is professional, trustworthy, and compliant with privacy standards, supporting its role as a regional safety authority. Strategic improvements could include publishing explicit security policies and incident response contacts to enhance transparency and trust further.
a.s.r. Nederlandasr.nl
Finance · Netherlands
73Medium
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
a.s.r. Nederland is a well-established Dutch insurance company with a history dating back to 1720. The company provides a broad range of financial services including insurance, savings and investments, mortgages, and pensions, targeting both individuals and businesses within the Netherlands. Their commitment to sustainable investments, such as green energy, highlights a modern and responsible business approach. The website reflects a mature market position with consistent branding and comprehensive service offerings. Technically, the website employs modern web technologies including Vue.js, Google Tag Manager, Microsoft Clarity, and Tealium for analytics and marketing. The site is well-optimized for mobile devices and accessibility, with good SEO practices and performance. The presence of cookie consent mechanisms and GDPR compliance indicates a strong focus on privacy and regulatory adherence. From a security perspective, the website enforces HTTPS, implements key security headers, and avoids exposing sensitive data. However, there is no explicit security policy or incident response information publicly available, which could be improved to enhance transparency and trust. No critical vulnerabilities or suspicious patterns were detected in the content or WHOIS data. Overall, the website demonstrates a high level of professionalism, security, and compliance, supporting the company's credibility and trustworthiness in the financial services sector.
Deli XLbidfood.nl
Retail · Netherlands
66Medium
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
Bidfood Netherlands operates a large-scale B2B online marketplace specializing in food wholesale for professional customers such as restaurants, hotels, and institutional care providers. The website presents a professional and consistent brand image with a focus on serving the professional foodservice sector. The platform offers online ordering and delivery services, positioning itself as a market leader in the Dutch food wholesale industry. Technically, the site employs modern JavaScript frameworks, consent management, and analytics tools, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and explicit security policies are absent. Privacy compliance is partially addressed through cookie consent mechanisms but lacks visible privacy and terms of service documentation. Overall, the site is trustworthy and professionally maintained, with room for improvement in transparency and security best practices.
Hoogheemraadschap van Delflandhhdelfland.nl
Government · Netherlands
79Low
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Hoogheemraadschap van Delfland is a Dutch governmental water authority responsible for water management, including water purification, dike maintenance, and water level regulation within its jurisdiction. The organization serves residents and stakeholders in the Delfland region, focusing on ensuring safe, clean, and sustainable water environments. The website reflects a mature public service entity with a clear mission and comprehensive service offerings related to water management and environmental stewardship. Technically, the website is built on the iprox CMS platform, utilizing modern JavaScript libraries such as jQuery UI and Slick Carousel for UI components and Piwik PRO for privacy-conscious analytics. The site is mobile-optimized, accessible, and SEO-friendly, with a professional design and clear navigation structure. Security practices include HTTPS enforcement and CSRF protection on forms, although some security headers could be enhanced for better protection. From a security perspective, the site demonstrates a solid posture with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies and a consent mechanism. However, explicit security policies and incident response contacts are not found, which could be improved to enhance transparency and readiness. Overall, the website is trustworthy, professionally maintained, and aligned with the organization's public service role. Strategic recommendations include improving security headers, publishing a security policy, and adding a vulnerability disclosure mechanism to further strengthen security and compliance posture.
SilverDome Investment Partnerssilverdomeip.com
Finance · Sweden
63Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
SilverDome Investment Partners is a Swedish-based investment fund company specializing in alternative absolute return strategies, offering a daily traded UCITS fund named SilverDome One. The company targets investors seeking stable, diversified, and capital-preserving investment options. The website is built on WordPress with Elementor, featuring professional design and clear navigation. It uses Google Tag Manager for analytics and implements a GDPR-compliant cookie consent mechanism. Security posture is adequate with HTTPS enabled but lacks published security policies and security headers. The domain registration is consistent with the business founding date and shows no suspicious patterns. Overall, the website presents a credible and professional investment service with room for improvement in privacy and security transparency.
Ridge Capitalridgecapital.se
Finance · Sweden
71Medium
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Ridge Capital is a Swedish investment firm specializing in Nordic high yield corporate bonds, aiming to deliver equity-like returns with lower risk by investing alongside its clients. The company is relatively new, founded in 2022, and targets investors interested in the Nordic corporate bond market. The website reflects a professional and consistent brand image, with good content quality and clear business focus. Technically, the site is built on WordPress using the GeneratePress theme, enhanced with Yoast SEO and integrated HubSpot forms, indicating a moderate level of digital maturity. The presence of Cookiebot and Google Tag Manager shows attention to privacy and marketing analytics. Security posture is adequate with HTTPS enabled and no obvious vulnerabilities, though improvements such as enabling DNSSEC and adding security headers are recommended. Overall, the site is functional, compliant with GDPR, and presents a trustworthy business front, though it lacks explicit contact emails, phone numbers, and formal policies like terms of service or security policy pages.
- Lursoft IT
zo.lv
Retail · Latvia
58Medium
NIS2 10 · GDPR 40
NIS2 10 · GDPR 40
The website zo.lv is a Latvian business directory operated by Lursoft IT, providing comprehensive listings of Latvian companies, their sectors, products, and services. It serves as a platform for businesses to register and promote themselves free of charge, targeting Latvian business users and consumers seeking company information. The site is well-established, with a domain age consistent with the business history dating back to 1993, and is supported by Lursoft's parent infrastructure. Technically, the site uses a custom CMS with standard web technologies including jQuery and Revive Adserver for advertising. While the site is functional and professionally designed with good navigation and content relevance, some technical aspects such as the use of an older jQuery version and lack of modern security headers could be improved. Security posture is adequate with HTTPS and cookie consent mechanisms in place, but lacks explicit security policies or incident response contacts. Privacy compliance is strong, with clear privacy and cookie policies linked and implemented. Overall, the site is trustworthy and credible, though there is room for modernization and enhanced security practices.
Other
62Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
The website news.lv is currently inaccessible due to a Cloudflare Turnstile CAPTCHA challenge page that blocks direct access to its content. This challenge page prevents extraction of meaningful business, contact, or policy information. The site appears to be protected by Cloudflare's security services, indicating an intent to mitigate automated access or attacks. However, the lack of accessible content, privacy policies, or contact details severely limits the ability to assess the business or security posture comprehensively. The technical infrastructure relies on Cloudflare's platform, but no CMS or additional frameworks are detectable. Security best practices such as visible security headers and privacy compliance mechanisms are absent from the accessible content. Overall, the site currently presents a low trust profile due to the lack of accessible information and transparency.
- Modular Finance
modularfinance.se
Finance
68Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Modular Finance is a mature company founded in 2003, providing specialized platforms and tools for Investor Relations and Finance professionals. Their offerings include IR-CRM, news distribution, insider management, shareholder data, and IR websites, positioning them as a top-tier provider in the finance software sector. The website is professionally designed using modern tools such as Framer, and integrates customer engagement and analytics technologies like Intercom and Google Analytics. The technical infrastructure is hosted via Cloudflare, ensuring reliable performance and security. However, the website lacks explicit privacy, cookie, and terms of service policies, which are critical for compliance and user trust. Security posture is adequate with HTTPS and domain transfer protection, but could be improved by enabling DNSSEC and implementing security headers. Overall, the site is functional and professional but would benefit from enhanced privacy and security disclosures to improve compliance and trust.
- Modular Finance
modularfinance.com
Finance
68Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Modular Finance is a mature company founded in 2003, providing specialized platforms and tools for Investor Relations and Finance professionals. Their offerings include IR-CRM, news distribution, insider management, shareholder data, and IR websites, positioning them as a top-tier provider in the finance sector. The website is built using modern technologies such as Framer, Google Analytics, and Intercom, hosted via Cloudflare, indicating a solid technical infrastructure with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers, and no explicit security or privacy policies are present on the site. The absence of privacy and cookie policies, as well as contact information, reduces privacy compliance and user trust. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the business.
- EERROR: The request could not be satisfied
tmgrupoinmobiliario.com
Real Estate
64Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website tmgrupoinmobiliario.com is currently inaccessible due to a CloudFront 403 error indicating that requests are blocked, likely due to traffic or configuration issues. This prevents any meaningful extraction of business, security, or compliance information from the site content. The domain is registered since 2005 with a reputable registrar and shows no suspicious WHOIS patterns, suggesting a legitimate business presence. However, the lack of accessible content and security disclosures limits the ability to assess the company's digital maturity or security posture. The technical infrastructure includes AWS CloudFront CDN, but no further technology stack details are available. Security posture cannot be evaluated due to missing headers and SSL details. Overall, the site is at high risk of poor user trust and compliance gaps due to inaccessibility and lack of visible policies.
- Sevilla FC Academy
sevillafcacademy.com
Education · Spain
58Medium
NIS2 17 · GDPR 65
NIS2 17 · GDPR 65
Sevilla FC Academy is a newly established sports education organization launched in 2024, focused on football talent development under the prestigious Sevilla Fútbol Club brand. The academy offers a range of football training programs including summer camps, high-performance training, goalkeeper academy, and football schools, targeting aspiring football players and youth athletes. The website is professionally designed using WordPress and Bootstrap, with a moderate performance profile and good mobile optimization. It leverages Cloudflare DNS and integrates Google Tag Manager for analytics and OneTrust for cookie consent, demonstrating a basic level of digital maturity and privacy compliance. Security posture is adequate with HTTPS enabled and no exposed sensitive data, though improvements such as enabling DNSSEC and adding security headers are recommended. The domain registration is consistent with the business profile, registered through a Spanish registrar, and aligns with the academy's launch timeline. However, the website lacks explicit privacy policies, terms of service, and incident response information, which are important for compliance and trust. Overall, the site presents a credible and professional front for the academy but would benefit from enhanced security and compliance documentation.
FanTokens: Crypto & Sports Hubfantoken.com
Technology
75Medium
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
FanTokens.com is a digital platform focused on providing comprehensive market data, live price tracking, and analysis for fan tokens associated with major sports teams. The site targets sports fans and cryptocurrency investors interested in this niche digital asset class. It positions itself as a premier hub for fan token information, offering real-time market caps, trading volumes, and detailed token reviews. Technically, the website is built using modern frameworks such as Next.js and Chakra UI, ensuring a responsive and user-friendly experience. The site employs HTTPS and standard security headers, reflecting a good security posture. However, the absence of privacy and cookie policies, lack of contact information, and missing WHOIS registration data raise concerns about compliance and business transparency. Overall, while the platform offers valuable market insights and a professional interface, it should improve its privacy compliance and business credibility to enhance trust.
AI Alliancethealliance.ai
Technology · United States
62Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
AI Alliance is an international community focused on advancing open source AI technologies, safety, and advocacy. Founded in 2023, it brings together technology creators, researchers, and advocates to build open AI agents, datasets, models, and tools to maximize AI's societal benefits. The organization maintains a professional web presence with modern technologies such as Next.js and Prismic CMS, supported by Google Analytics and Tag Manager for insights. However, the website currently suffers from a client-side application error that blocks content access, limiting user experience and analysis. Security posture is moderate with HTTPS enabled but lacks DNSSEC and explicit security headers. Privacy compliance is weak due to missing explicit privacy and cookie policies, though consent is obtained on newsletter forms. The domain registration uses privacy protection, which is justified and consistent with the organization's recent founding. Overall, AI Alliance is a credible and professional entity with room for improvement in website stability, security hardening, and privacy transparency.
Mideamidea.es
Manufacturing · Spain
55Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Midea Spain operates a professional and comprehensive website focused on the manufacturing and distribution of household appliances and climate control products. The company positions itself as a market leader in these sectors, targeting both consumers and professional clients. The website demonstrates a mature digital presence with modern technologies such as WordPress CMS, SEO optimization via Yoast, and integration of analytics and marketing tools like Google Tag Manager and Facebook Pixel. Privacy and cookie policies are well implemented with clear consent mechanisms, reflecting GDPR compliance. Security posture is strong with HTTPS enforced, security headers present, and use of reCAPTCHA on forms. However, the site lacks explicit security policies and incident response information, which could be improved to enhance trust and compliance. Overall, the site is well designed, mobile optimized, and provides clear navigation and contact options, supporting a high level of business credibility and user trust.
Education · Spain
65Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
UCAM Universidad Católica San Antonio de Murcia is a large higher education institution based in Spain offering a wide range of academic programs including undergraduate, official master's, doctoral, and online studies. The university is well-positioned in the Spanish and international education market, supported by multiple prestigious rankings and accreditations. The website is professionally designed, mobile-optimized, and provides comprehensive information about academic offerings, services, and university life. Technically, the site uses Drupal 10 CMS with modern integrations such as Google Tag Manager and CookiePro for analytics and privacy compliance. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. The WHOIS data for the domain is missing or unavailable, which slightly reduces trust but the website content and branding strongly indicate legitimacy. Overall, the site demonstrates a mature digital presence with good privacy compliance and user experience.
- U
Education · Spain
58Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Universidad Pablo de Olavide is a well-established public university based in Sevilla, Spain, offering a wide range of undergraduate and postgraduate programs, research facilities, and internationalization services. The website serves as a comprehensive portal for students, faculty, and institutional partners, providing access to academic information, administrative services, and virtual campus resources. The university maintains a strong market position within the Spanish higher education sector, supported by official certifications such as HRS4R and partnerships with regional and international organizations. Technically, the website employs a modern technology stack including Bootstrap, jQuery, and various multimedia plugins, hosted likely on an OpenCms platform. The site is mobile-optimized and features good SEO practices, although performance is moderate. Security posture is solid with HTTPS enforced and secure login mechanisms supporting digital certificates; however, the absence of security headers and visible cookie consent mechanisms indicates room for improvement in compliance and defense-in-depth. Overall, the security posture is good but could be enhanced by publishing explicit security policies, incident response contacts, and vulnerability disclosure information. The lack of WHOIS data due to registrar restrictions does not detract from the legitimacy of the site, which is corroborated by consistent branding, official domain usage, and external references. Strategic recommendations include implementing security headers, adding cookie consent banners, and improving transparency around security and privacy policies to strengthen trust and compliance.
Transportation · Latvia
15Partial
DNS & email only
DNS & email only
Riepas1.lv is a Latvian-based online retailer specializing in tires and alloy wheels, complemented by physical service centers in Riga, Ventspils, and Daugavpils. The company offers a broad product range with a focus on quality and customer convenience, including free delivery across Latvia and a 14-day return policy. Their digital presence is supported by modern tracking and analytics tools, enabling effective customer engagement and marketing. Technically, the website employs a variety of contemporary technologies such as Google Tag Manager, Hotjar, and LiveChat, ensuring a responsive and user-friendly experience. The site is well-structured with clear navigation and mobile optimization, although some improvements in accessibility and security headers could enhance the overall robustness. From a security perspective, the site uses HTTPS and secure forms, with no evident vulnerabilities or exposed sensitive data. However, the absence of explicit security policies and vulnerability disclosure mechanisms suggests room for maturity in security governance. The WHOIS data confirms the domain's legitimacy with transparent registrant information aligned with the business's Latvian operations. Overall, Riepas1.lv presents a credible and professionally managed e-commerce platform with a solid market position in Latvia's automotive retail sector. Strategic enhancements in security policies and accessibility would further strengthen their digital trustworthiness and compliance posture.
Sports Data Campussportsdatacampus.com
Education · Spain
72Medium
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
Sports Data Campus is a specialized educational organization focused on advanced analytics, Big Data, and technology applied to football and sports. Founded in 2020 and based in Valladolid, Spain, it positions itself as a leading international campus for specialized training in sports data analytics. The website is built on WordPress using the Divi theme and integrates WooCommerce for e-commerce capabilities. It employs modern web technologies including Google Tag Manager and LinkedIn Insight for marketing and analytics. The site is well-designed, mobile-optimized, and provides clear contact information via structured data. Security posture is generally good with HTTPS enabled and domain transfer protections in place, though DNSSEC is not enabled and security headers are not evident. Privacy compliance is lacking as no privacy or cookie policies are found, and no consent mechanisms are implemented. Overall, the site is professional and credible but would benefit from enhanced privacy and security practices.
- Soluciones Corporativas IP, SL
sevillafcinnovationcenter.com
Technology · Spain
65Medium
NIS2 17 · GDPR 65
NIS2 17 · GDPR 65
Sevilla FC Innovation Center is a specialized innovation hub linked to the Sevilla FC football club, focusing on technology and education services including training, events, and corporate engagement. The website is built on a modern WordPress platform with WooCommerce integration, utilizing Bootstrap and jQuery for responsive design and interactivity. The technical infrastructure is solid with HTTPS enabled and Cloudflare DNS, although DNSSEC is not enabled. Security practices include cookie consent via OneTrust, but lack explicit security headers and vulnerability disclosure mechanisms. The domain registration is transparent and consistent with the business profile, enhancing trustworthiness. Overall, the website presents a professional and trustworthy digital presence with room for improvement in privacy policy transparency and security hardening.
ViVa! Zorggroepwerkenbijvivazorggroep.nl
Healthcare · Netherlands
73Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
ViVa! Zorggroep is a well-established Dutch healthcare organization specializing in elderly and specialist care, serving over 11,000 clients across multiple locations. The website serves as a recruitment portal targeting healthcare professionals seeking roles in various care settings. The organization emphasizes quality of life, collaboration, and innovation in care delivery. Technically, the site is built on Drupal 10, integrates modern analytics and recruitment platforms, and is optimized for mobile devices with good SEO practices. Security posture is strong with HTTPS, security headers, and a cookie consent mechanism, though explicit security and incident response policies are not publicly detailed. Overall, the domain registration and website content align well, indicating a legitimate and trustworthy entity.
- Medipoint
medipoint.nl
Healthcare · Netherlands
87Low
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Medipoint is a leading Dutch homecare retailer specializing in the sale, rental, and loan of medical and mobility aids through a network of 50 physical stores and an online webshop. The company targets individuals requiring homecare products, healthcare professionals, and customers seeking mobility solutions. Their business model combines physical retail with e-commerce, supported by personalized advice services including at-home consultations. The website demonstrates a mature digital infrastructure built on modern technologies such as React and Next.js, hosted on Google Cloud, with good mobile optimization and accessibility features. Security posture is strong with HTTPS enforcement and cookie consent mechanisms, though explicit security policies and incident response contacts are not publicly detailed. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, reflecting a well-established business with a solid market position in the healthcare retail sector.