Security reports directory
139,950 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,199001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
126,101–126,150 of 139,950
GRC World Forums Ltdgrcworldforums.com
Technology · United Kingdom
80Low
NIS2 75 · GDPR 85
NIS2 75 · GDPR 85
GRC World Forums Ltd operates a comprehensive digital platform focused on governance, risk, and compliance (GRC) professionals worldwide. The website offers a rich array of business insights, educational resources, podcasts, webinars, and global events, positioning itself as a leading information and networking hub in the GRC industry. The company maintains strategic partnerships with recognized organizations such as the Institute of Risk Management and hosts multiple high-profile events across various regions. Technically, the website employs modern web technologies including jQuery, Google Tag Manager, Usercentrics for cookie consent, and Tidio for live chat support, hosted via Amazon Cloudfront CDN. The site demonstrates good mobile optimization, accessibility, and SEO practices, though some security headers could be enhanced. Security posture is solid with HTTPS enforced and no critical vulnerabilities detected. Privacy compliance is well addressed with clear privacy and cookie policies and active consent mechanisms. Overall, the website reflects a professional, trustworthy, and mature digital presence suitable for its target audience.
CE Marketing Group Ltdcemg.media
Media · United Kingdom
58Medium
NIS2 25 · GDPR 65
NIS2 25 · GDPR 65
CE Marketing Group Ltd operates the CEMG Media website, a UK-based media company passionate about British enterprise. The company provides content, innovative design, and marketing solutions to startups, SMEs, franchisors, and entrepreneurs. Their portfolio includes multiple media brands and event platforms, positioning them as a niche leader in British business media. The website is professionally designed using WordPress and Elementor, with good mobile optimization and SEO practices. It features a cookie consent mechanism and a contact form protected by Google reCAPTCHA, reflecting a moderate level of digital maturity. Security posture is solid with HTTPS and spam protection, but lacks explicit security policies or incident response information. Overall, the site is trustworthy and functional, supporting the company’s business goals effectively.
Elite Franchise Magazineelitefranchisemagazine.co.uk
—
59Medium
NIS2 25 · GDPR 88
NIS2 25 · GDPR 88
Education · Canada
66Medium
NIS2 25 · GDPR 35
NIS2 25 · GDPR 35
The Brock University's Graduate Students' Association (GSA) website serves as the main digital presence for the graduate student community at Brock University. It provides comprehensive information about the association's executive team, board of directors, services such as health and dental plans, mental health resources, and various events and opportunities for student involvement. The site is well-structured with clear navigation and integrates social media channels to engage its audience effectively. Technically, the site is built on WordPress using the Astra theme and Smart Slider 3 plugin, hosted likely on Automattic's infrastructure, ensuring reliable performance and modern web standards. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though explicit security headers and privacy policies are lacking, which are areas for improvement. Overall, the site reflects a trustworthy and professional student organization digital footprint, though enhancements in privacy compliance and security best practices would strengthen its posture further.
- BBrock University Students' Union
brockbusu.ca
Education · Canada
73Medium
NIS2 25 · GDPR 65
NIS2 25 · GDPR 65
Brock University Students' Union (BUSU) is a non-profit organization dedicated to enhancing the undergraduate student experience at Brock University in Canada. The website serves as a portal for student services, events, advocacy, and engagement opportunities. It targets the university's undergraduate population, providing information on health coverage, transit passes, clubs, and student leadership. The site is well-branded and consistent with the organization's mission. Technically, the website is built on ASP.NET WebForms with a modern front-end stack including jQuery, Bootstrap, and Font Awesome. It integrates monitoring and analytics tools such as New Relic and Google Analytics, indicating a moderate level of digital maturity. The site is mobile-optimized and includes basic accessibility features. From a security perspective, the website uses HTTPS and implements cookie consent mechanisms, but lacks explicit security headers and dedicated security or incident response policies. No critical vulnerabilities or exposed sensitive data were detected. The domain registration details align with the organization's identity, supporting its legitimacy. Overall, the website presents a professional and trustworthy front for the student union, with room for improvement in security policy transparency and accessibility compliance.
Technology · United States
75Medium
NIS2 25 · GDPR —
NIS2 25 · GDPR —
saas.group is a technology-focused company specializing in the acquisition and scaling of bootstrapped SaaS businesses. The company positions itself as a founder-friendly acquirer, offering flexible exit options while preserving the identity and culture of acquired companies. Their market position is niche but growing, with a focus on small to medium-sized SaaS companies. The website reflects a professional and modern digital presence, leveraging WordPress and Elementor for content management and design. Security measures such as HTTPS, reCAPTCHA, and CSP monitoring are in place, indicating a mature security posture. Privacy and cookie policies are implemented with consent mechanisms, supporting GDPR compliance. Overall, the site demonstrates a high level of professionalism, trustworthiness, and technical sophistication.
Rethink Ireland Limitedrethinkireland.ie
Non-profit · Ireland
82Low
NIS2 25 · GDPR 95
NIS2 25 · GDPR 95
Rethink Ireland Limited is a medium-sized Irish non-profit organization dedicated to supporting innovative social enterprises and non-profit organizations across Ireland. Their venture philanthropy model combines cash grants and business support to address pressing social and environmental challenges. The website reflects a strong market position as a leading social innovation fund with government and private partnerships. Technically, the website is built on WordPress with modern technologies such as Yoast SEO, jQuery, and Swiper.js, hosted behind Cloudflare, and implements a comprehensive cookie consent mechanism. Security posture is solid with HTTPS, cookie consent, and no exposed sensitive data, though additional security headers and explicit incident response policies could enhance security further. Overall, the website is professional, trustworthy, and compliant with GDPR and cookie regulations, making it a reliable digital presence for the organization.
Higher Education Outreach Networkheon.org.uk
Education · United Kingdom
60Medium
NIS2 25 · GDPR 80
NIS2 25 · GDPR 80
The Higher Education Outreach Network (HEON) is a well-established educational partnership focused on increasing higher education progression rates among under-represented students in Surrey and North East Hampshire. Funded by the Office for Students, HEON collaborates with multiple regional educational institutions to deliver outreach activities, resources, and training sessions targeted at students, teachers, and parents. The website reflects a professional and accessible digital presence, supporting its mission with comprehensive content and clear navigation tailored to its audience. Technically, the site is built on WordPress with the Sensei LMS plugin, integrating modern web technologies such as Google Analytics, Google Tag Manager, and reCAPTCHA for security and analytics. The site is mobile-optimized and demonstrates good SEO and accessibility practices, although there is room for improvement in security headers and explicit security policy disclosures. From a security perspective, the website enforces HTTPS and uses CAPTCHA to protect forms, with a clear cookie consent mechanism supporting GDPR compliance. However, it lacks published security policies and incident response information, which are recommended for enhanced trust and transparency. Overall, HEON's website is a credible, secure, and user-friendly platform that effectively supports its educational outreach objectives. Strategic enhancements in security policy transparency and technical security headers would further strengthen its posture and stakeholder confidence.
The Royal College of Ophthalmologistsrcophth.ac.uk
Healthcare · United Kingdom
56Medium
NIS2 10 · GDPR 68
NIS2 10 · GDPR 68
The Royal College of Ophthalmologists is a UK-based professional membership organisation and charity dedicated to promoting and supporting the ophthalmic profession nationally and internationally. The website serves as a comprehensive resource for members, trainees, researchers, and patients, offering information on training, examinations, research, policy, and events. The organisation holds a strong market position as the authoritative body for ophthalmology in the UK, with a clear focus on education, professional development, and advocacy. Technically, the website is built on WordPress with a modern tech stack including jQuery, Google Tag Manager, and cookie consent tools. It demonstrates good digital maturity with responsive design, accessibility considerations, and SEO optimization. Performance is moderate, with room for improvement in hosting and caching strategies. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks visible advanced security headers and a public security policy or incident response information. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with clear privacy and cookie policies and GDPR adherence. Overall, the website is professional, trustworthy, and well-maintained, with minor recommendations to enhance security headers and publish security policies. The domain registration data aligns well with the organisation's claims, supporting legitimacy and trustworthiness.
Lancaster Universitylancs.ac.uk
Education · United Kingdom
73Medium
NIS2 25 · GDPR 83
NIS2 25 · GDPR 83
Lancaster University is a well-established higher education institution in the United Kingdom, recognized as a top 10 UK university with a strong international reputation. The website clearly targets prospective and current students, staff, and research partners, offering comprehensive information on undergraduate, postgraduate, and research programs, as well as online learning options. The university maintains a strong market position with notable rankings and sustainability achievements. Technically, the website employs modern JavaScript libraries and frameworks such as jQuery, Foundation, and Google Tag Manager, ensuring a responsive and accessible user experience. The site includes a robust cookie consent mechanism aligned with GDPR requirements and demonstrates good SEO and accessibility practices. Security-wise, the site enforces HTTPS, uses secure cookie attributes, and avoids exposing sensitive data, although it lacks explicit security policy and incident response contact pages. Overall, the website is professional, trustworthy, and well-maintained, reflecting the university's reputable status.
Fry-IT trading as risr/risr.global
Education · United Kingdom
51Medium
NIS2 55 · GDPR 85
NIS2 55 · GDPR 85
Risr/ is a UK-based company operating under Fry-IT, specializing in eAssessment and education software solutions. The company offers a modular and unified platform enhanced with AI capabilities to support training, exams, and lifelong learning. Their market position is strong, with trust from leading universities and professional bodies worldwide. The platform includes modules for application management, assessment delivery, and training progress tracking, supported by AI tools such as item set generation and clinical coaching. Technically, the website is built on WordPress with modern plugins and frameworks, providing good performance, mobile optimization, and accessibility. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. The domain registration details align well with the business claims, indicating legitimacy and trustworthiness. Overall, the website presents a professional, secure, and privacy-compliant digital presence.
—
75Partial
DNS & email only
DNS & email only
iSON Technologiesisontechnologies.com
Technology
79Low
NIS2 10 · GDPR 53
NIS2 10 · GDPR 53
iSON Technologies is an established IT services and solutions provider specializing in systems integration, managed services, and strategic outsourcing across Africa, Middle East, and ASEAN regions. The company targets enterprises seeking digital transformation and operational acceleration in emerging markets. Their business model leverages regional hubs and partnerships to deliver flexible and secure IT services. The website reflects a medium-sized company with a professional online presence and ISO certifications indicating a commitment to quality and security. Technically, the website is built on WordPress using common frameworks such as Bootstrap and jQuery, with additional tools like fullpage.js and Elementor for enhanced user experience. While the site is moderately optimized for performance and mobile use, some outdated libraries and lack of advanced security headers suggest room for technical improvements. From a security perspective, the site benefits from HTTPS and ISO 27001 certification, but lacks visible security headers and uses an outdated jQuery version, which could expose it to vulnerabilities. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism or GDPR indicators. Contact information is minimal on the site, which may affect user trust. Overall, the website is functional and professional but would benefit from technical and security enhancements to improve compliance, user trust, and resilience against threats.
Home - iSON Xperiencesisonxperiences.com
—
75Partial
DNS & email only
DNS & email only
iSON Groupisongrp.com
Technology
74Medium
NIS2 10 · GDPR 35
NIS2 10 · GDPR 35
iSON Group is a large ICT conglomerate specializing in customer experience services, IT systems integration, digital business incubation, infrastructure services, healthcare, and CSR initiatives. The company operates primarily in Africa, UAE, and India, serving major global corporations with a workforce of approximately 18,000 employees across 22 countries. Their diversified business units include iSON Xperiences, iSON Technologies, iSON Innovation, iSON Tower, iSON Health, and iSON Foundation. Technically, the website employs modern frontend technologies such as Bootstrap, jQuery, and Google Fonts, hosted on a GoDaddy-secured server with HTTPS enabled. The site is mobile responsive and well-structured, though accessibility features are basic. Google Analytics is used for user tracking, but privacy and cookie policies are absent, indicating compliance gaps. From a security perspective, the site benefits from HTTPS and uses validated external libraries, but lacks security headers and published security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the HTML content. The domain uses privacy protection for WHOIS data, which is common and justified for this sector. Overall, the website is professional and credible but requires improvements in privacy compliance and security transparency to enhance trust and regulatory adherence.
NMH Foundationnmhfoundation.ie
Non-profit · Ireland
66Medium
NIS2 10 · GDPR 68
NIS2 10 · GDPR 68
The NMH Foundation is a charitable organization dedicated to raising funds for The National Maternity Hospital in Holles Street, Dublin, Ireland. Their mission centers on advancing women's and neonatal health through funding research, innovation, and excellence in care. The foundation operates primarily through donations, fundraising events, and legacy giving, targeting donors and community supporters interested in maternity and neonatal health. The website reflects a professional and consistent brand presence with clear navigation and relevant content tailored to its audience. Technically, the site uses a mix of legacy and modern web technologies including jQuery, Bootstrap, and Typekit fonts, managed via the Webtrade Siternity CMS. While performance and mobile optimization are adequate, there is room for improvement in accessibility and SEO.
Irish College of GPsicgpeducation.ie
Education · Ireland
55Medium
NIS2 18 · GDPR 10
NIS2 18 · GDPR 10
The Irish College of GPs Education Platform serves as an online portal for general practitioners in Ireland to access educational resources and training courses. The platform is built on the Moodle CMS, leveraging standard Moodle modules and libraries such as YUI and jQuery. The website primarily functions as a login gateway, with minimal public-facing content beyond authentication and support contact information. The business is positioned as a specialized education provider within the healthcare sector, targeting medical professionals in Ireland. Technical infrastructure is moderate, with HTTPS enforced and standard web technologies used, but lacks advanced security headers and comprehensive privacy policies. Security posture is adequate but could be improved by implementing additional headers and formal privacy and cookie policies. Overall, the website is functional and trustworthy but limited in content and transparency regarding privacy and security policies.
- Rrisr/advance
kaizenep.com
Education
72Medium
NIS2 10 · GDPR 35
NIS2 10 · GDPR 35
The website kaizenep.com serves as the login portal for risr/advance, a specialized e-Portfolio solution tailored for medical and healthcare education institutions. It supports multiple organizations, each with customized branding and Single Sign-On (SSO) capabilities, indicating a mature SaaS platform focused on professional development and assessment management. The platform targets medical schools, colleges, and healthcare professionals, providing tools for workplace assessments, annual reviews, and multi-source feedback. Technically, the site employs modern web technologies including Vue.js, JavaScript, and CSS, delivering a responsive and functional user interface. The infrastructure appears to be hosted on KaizenEP's own clusters, with secure HTTPS endpoints and integration with various identity providers for authentication. However, the site lacks visible SEO optimization and accessibility features beyond basic levels. From a security perspective, the site enforces HTTPS and uses SSO with trusted identity providers, which is a strong security posture. Nonetheless, the absence of explicit security headers, privacy policies, cookie consent mechanisms, and incident response contacts represents gaps in compliance and transparency. No vulnerabilities or exposed sensitive data were detected in the analyzed content. Overall, the website demonstrates a solid technical foundation and business focus but requires improvements in privacy compliance, security transparency, and user trust elements to enhance its risk profile and regulatory adherence.
Rhino New York LLCsayrhino.com
Real Estate · United States
70Medium
NIS2 30 · GDPR 73
NIS2 30 · GDPR 73
Rhino New York LLC operates a digital platform that simplifies the rental process by offering innovative insurance products such as security deposit insurance, renters insurance, and lease guarantees. The company targets renters seeking affordable move-in options and property managers aiming to streamline their operations. Rhino positions itself as a market innovator by integrating insurance and digital deposit management services, supported by partnerships with recognized insurance providers and marketing partners like Lemonade and Jetty. Technically, the website employs a modern tech stack including React and Ruby on Rails, with extensive use of analytics and marketing tools such as Google Analytics, Facebook Pixel, PostHog, and Drift Chat. The site demonstrates good performance, mobile optimization, and accessibility, reflecting a mature digital infrastructure. From a security perspective, Rhino maintains a strong posture with HTTPS enforcement, CSRF protection, and security headers. No critical vulnerabilities were detected, though continuous monitoring of third-party scripts is advisable. Privacy compliance is well addressed with clear privacy and cookie policies, GDPR considerations, and explicit contact channels for incident response. Overall, Rhino presents a trustworthy and professional online presence with comprehensive business and security practices. Strategic recommendations include enhancing security header policies and maintaining vigilance over third-party integrations to sustain security and compliance.
National Maternity Hospitalnmhnicu.ie
Healthcare · Ireland
58Medium
NIS2 10 · GDPR 25
NIS2 10 · GDPR 25
The National Maternity Hospital's website nmhnicu.ie serves as a comprehensive educational and support resource for parents with babies in neonatal intensive care. It provides detailed information on neonatal care, medical procedures, developmental progress, and guidance for preparing for discharge. The site is well-structured, professionally designed, and targets parents and families, positioning itself as a trusted non-profit healthcare support platform. Technically, the site is built on WordPress using Elementor and related plugins, with moderate performance and good mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is strong with clear cookie and privacy policies. Overall, the site demonstrates high professionalism and trustworthiness, supported by transparent WHOIS data consistent with the National Maternity Hospital's identity.
Exness (UK) Ltdexness.uk
Finance · United Kingdom
75Medium
NIS2 25 · GDPR 88
NIS2 25 · GDPR 88
Exness (UK) Ltd operates a professional B2B liquidity platform targeting institutional clients, providing multi-asset trading solutions with a strong emphasis on transparency, technological innovation, and deep liquidity. The company is well-positioned in the financial services sector as a regulated entity under the FCA, with additional regulatory presence in Cyprus and BVI. The website demonstrates a mature digital infrastructure leveraging modern web technologies such as React and Next.js, ensuring fast performance and excellent mobile optimization. Security posture is robust with HTTPS enforcement and no visible vulnerabilities, although explicit security policies and incident response contacts are not published. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site reflects a professional and trustworthy financial services provider with a clear focus on B2B clients.
Baraka Financial Limitedgetbaraka.com
Finance · United Arab Emirates
79Low
NIS2 25 · GDPR 68
NIS2 25 · GDPR 68
Baraka Financial Limited operates a fintech investment platform focused on empowering GCC investors to access US stocks and ETFs with ease. The company is regulated by the Dubai Financial Services Authority (DFSA) and partners with DriveWealth, a US SEC registered broker dealer, ensuring regulatory compliance and investor protection. The platform offers a range of services including auto-invest, stock analysis, Shariah screening, and dividend reinvestment plans, targeting retail investors in the Middle East. The website is professionally designed, mobile-optimized, and provides comprehensive business and legal information, enhancing user trust and engagement. Technically, the site leverages modern frameworks like Next.js and integrates analytics and marketing tools such as Google Tag Manager, Microsoft Clarity, and Facebook Pixel. Security posture is strong with HTTPS, security headers, and multi-factor authentication, though a dedicated security policy and incident response contacts are not published. Overall, Baraka presents a credible, compliant, and user-friendly investment platform with a solid digital presence and regulatory backing.
- The Know Group Limited
theknowmedia.co
Media · United Kingdom
75Partial
DNS & email only
DNS & email only
The Know Group Limited operates a niche media platform delivering a free, 5-minute weekday newsletter focused on positive and unbiased news coverage for UK and US audiences. The website positions itself as a trusted source for uplifting news and curated recommendations, supported by a small but engaged subscriber base. The business model includes newsletter subscriptions, merchandising, and partnership opportunities, targeting general consumers seeking a more hopeful news experience. Technically, the website is built on the Squarespace CMS platform, leveraging modern web technologies and integrations such as Google Analytics, Google Tag Manager, Facebook Pixel, and Beehiiv for newsletter management. The site demonstrates good performance, mobile optimization, and SEO practices, with a professional and consistent design that enhances user experience. From a security perspective, the site enforces HTTPS with HSTS enabled, uses standard security headers, and avoids exposing sensitive data. However, it lacks explicit cookie policies, terms of service, security policies, and incident response contacts, which are important for compliance and user trust. Tracking technologies are present but managed with basic privacy compliance. Overall, the website is legitimate, professionally maintained, and trustworthy, with room for improvement in privacy compliance and security transparency. Strategic recommendations include implementing a cookie consent mechanism, publishing terms of service and security policies, and enhancing incident response readiness to strengthen compliance and user confidence.
How To Build Harry's Pre-launch Referral Program In 4 Simple Stepsharrysprelaunchreferral.com
Technology
60Medium
NIS2 10 · GDPR 50
NIS2 10 · GDPR 50
The website harrysprelaunchreferral.com is a marketing landing page designed to educate users on how to build a pre-launch referral program similar to Harry's men's grooming brand. It provides a step-by-step guide and promotes the Viral Loops referral marketing platform. The site targets marketers and businesses interested in referral marketing strategies. Technically, the site uses modern web technologies including HTML5, CSS, JavaScript, and integrates Segment Analytics for user tracking. The site is mobile optimized and has good SEO practices but lacks advanced accessibility features. Security-wise, the site uses HTTPS but lacks important security headers and does not disclose privacy or cookie policies, which impacts its privacy compliance and trustworthiness. No contact or incident response information is provided, limiting transparency. Overall, the site is functional and professional but could improve in privacy and security disclosures to enhance user trust and compliance.
—
75Partial
DNS & email only
DNS & email only
de Novo Solutionsde-novo-solutions.com
Technology · United Kingdom
49High
NIS2 25 · GDPR 95
NIS2 25 · GDPR 95
de Novo Solutions is a UK-based digital transformation consultancy specializing in Oracle Cloud ERP, HCM, EPM, and ServiceNow technologies. The company positions itself as an innovator in the experience economy, offering a range of services including cloud implementation, managed services, software testing, and training. Their market presence is supported by strong partnerships with Oracle and ServiceNow, multiple certifications such as ISO 27001 and Cyber Essentials, and a consistent stream of press releases and news updates. Technically, the website is built on WordPress with Elementor and employs modern web technologies, ensuring good performance, mobile optimization, and SEO. Security posture is strong with HTTPS enforced and GDPR compliance implemented through cookie consent mechanisms. However, explicit security headers like Content-Security-Policy could be improved, and no public incident response or vulnerability disclosure policies were found. Overall, the website reflects a professional, trustworthy, and mature business with a solid digital presence.
- našķoties
naskoties.com
Other · Latvia
62Medium
NIS2 25 · GDPR 50
NIS2 25 · GDPR 50
The website 'našķoties' is a personal recipe blog primarily focused on cakes and cooking, targeting home cooks and food enthusiasts in Latvia. It operates on the Squarespace platform, integrating standard web technologies such as Google Analytics, Google Adsense, and Facebook Pixel for analytics and monetization. The site features a newsletter subscription and links to active social media profiles, enhancing user engagement. Technically, the site is well-configured with HTTPS and HSTS, ensuring secure communication. However, it lacks explicit privacy and terms of service policies, which are important for compliance and user trust. Contact information is minimal, limiting direct communication channels. Overall, the site presents a good user experience with clear navigation and quality content but could improve in privacy compliance and business transparency.
ScoreAppscoreapp.com
Technology · United Kingdom
70Medium
NIS2 25 · GDPR 58
NIS2 25 · GDPR 58
ScoreApp is a UK-based technology company specializing in advanced quiz funnel marketing software designed to help businesses attract, engage, and convert leads through personalized quizzes, scorecards, and surveys. The platform offers a SaaS model with a strong emphasis on customization, integrations with popular CRM and marketing tools, and data-driven analytics to optimize marketing funnels. The website demonstrates a high level of professionalism with excellent content quality, clear navigation, and mobile optimization, targeting marketers and businesses seeking effective lead generation solutions. Technically, the website is built on WordPress with modern JavaScript frameworks like Alpine.js and integrates multiple analytics and tracking services including Google Tag Manager, Hotjar, Segment Analytics, and various social media pixels. The site is well-optimized for SEO and performance, with asynchronous loading of scripts and responsive design. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security headers and policies could be improved. From a security and compliance perspective, the site includes comprehensive privacy and cookie policies that indicate GDPR compliance. However, it lacks visible security policies, incident response contacts, and vulnerability disclosure mechanisms. No direct company contact emails or phone numbers are found on the main page, which may impact direct communication channels. Overall, ScoreApp presents a trustworthy and mature digital presence with a solid technical foundation and good privacy practices. Strategic recommendations include enhancing security transparency, publishing incident response and vulnerability disclosure information, and providing clearer contact channels to further strengthen trust and compliance.
Viral Loops Technologies Inc.viral-loops.com
Technology · Canada
79Low
NIS2 10 · GDPR 68
NIS2 10 · GDPR 68
Viral Loops Technologies Inc. operates a mature SaaS platform specializing in referral marketing solutions. The company provides template-based referral programs inspired by successful brands, targeting businesses across SaaS, eCommerce, newsletters, fintech, and startups. Their market position is strong, supported by a large number of campaigns and leads generated, and trusted by notable clients. Technically, the website is built on Webflow with a modern tech stack including Google Analytics, Facebook Pixel, Mixpanel, and other marketing and analytics tools, all integrated with consent management to comply with privacy regulations. Security posture is solid with HTTPS, security headers, and no visible vulnerabilities, though dedicated security policies and incident response contacts are absent. Overall, the website is professional, well-branded, and trustworthy, with excellent content quality and user experience.
Small Business Britainthesmallawards.uk
Other · United Kingdom
70Medium
NIS2 10 · GDPR 35
NIS2 10 · GDPR 35
The Small Awards website represents a UK-based awards program focused on recognizing and celebrating small businesses across various categories. Operated by Small Business Britain, the platform targets a broad audience of small business owners, startups, sole traders, and social enterprises. The business model revolves around organizing an annual awards event, providing media exposure, and offering sponsorship opportunities. The website content is well-structured, professionally designed, and provides clear information about the awards, categories, timeline, and sponsors. Technically, the website employs modern web technologies including Bootstrap for responsive design, jQuery for scripting, and integrates analytics tools such as Google Analytics and Facebook Pixel for user tracking and marketing insights. The site loads scripts asynchronously and uses HTTPS, indicating a reasonable level of digital maturity. However, there is no explicit CMS detected, and some SEO and accessibility features are basic. From a security perspective, the website uses HTTPS and includes nonce attributes in inline scripts, which is positive. However, it lacks important security headers such as Content-Security-Policy and X-Frame-Options, and there is no published security or incident response policy. The absence of privacy and cookie policies is a notable compliance gap, especially given the use of tracking technologies. No vulnerabilities or exposed sensitive data were detected in the provided content. Overall, the website presents a moderate risk profile with good business credibility but requires improvements in privacy compliance and security hardening to enhance trust and regulatory adherence.
International Elite 100internationalelite100.com
Other
57Medium
NIS2 55 · GDPR 50
NIS2 55 · GDPR 50
International Elite 100 is an awards organization recognizing global business excellence across multiple sectors. The website showcases award winners, nomination processes, and award packages, targeting international business professionals seeking recognition. The technical infrastructure is based on GoDaddy Website Builder with embedded Vimeo video content and modern web fonts, providing a moderate performance and good mobile optimization. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks advanced security headers and explicit incident response policies. Privacy compliance is limited due to absence of privacy policy and terms of service pages. Overall, the website is professional and functional but could improve transparency and compliance to enhance trust.
Elite Business Magazineelitebusinessmagazine.co.uk
Media · United Kingdom
63Medium
NIS2 10 · GDPR 88
NIS2 10 · GDPR 88
Elite Business Magazine is a UK-based media publication dedicated to championing startups and SMEs, providing business news, interviews, analysis, and event coverage. The website is positioned as a trusted source for business insights in the UK SME sector, supported by a parent company CE Marketing Group. The technical infrastructure is built on WordPress with Elementor and JetEngine plugins, integrating modern advertising and analytics tools such as AdButler, Google Analytics, and Facebook Pixel. The site implements GDPR-compliant cookie consent mechanisms and structured data for SEO. Security posture is good with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Overall, the website presents a professional, trustworthy, and user-friendly experience with clear business focus and compliance adherence.
GRC World Forums Ltdgreatbritishworkplacewellbeingseries.com
Media · United Kingdom
60Medium
NIS2 33 · GDPR 50
NIS2 33 · GDPR 50
The Great British WorkPlace Wellbeing Series is a professionally managed media and events platform operated by GRC World Forums Ltd, focusing on workplace wellbeing, governance, risk, and compliance. It offers a range of services including awards, conferences, webinars, and digital content aimed at promoting employee wellbeing across the UK and internationally. The website is built on the Strikingly platform, leveraging modern web technologies and video hosting services to deliver rich content and user engagement. Security posture is strong with HTTPS enabled and cookie consent mechanisms in place, though some security headers could be improved. Privacy policies are comprehensive and GDPR compliant, reflecting a mature approach to data protection. Overall, the site presents a credible and trustworthy business presence with clear contact channels and active content updates.
Great British Entrepreneur Awardsgreatbritishentrepreneurawards.com
Media · United Kingdom
58Medium
NIS2 10 · GDPR 73
NIS2 10 · GDPR 73
The Great British Entrepreneur Awards is a well-established UK-based event organization that celebrates entrepreneurship across the United Kingdom. Known as 'The Grammys of Entrepreneurship', it has been active since 2012 and offers awards, community engagement, sponsorship opportunities, and event ticket sales. The website targets entrepreneurs and the business community, positioning itself as a key player in the UK entrepreneurial ecosystem. Technically, the site is built on WordPress using the Plot Bella theme and integrates multiple marketing and analytics tools such as HubSpot, Facebook Pixel, and Google Analytics. The site is mobile-optimized and provides a good user experience with professional branding and consistent content quality. Security-wise, the site uses HTTPS and some best practices but lacks explicit security headers and a formal security policy or incident response information. Privacy compliance is basic with presence of privacy and cookie policies but no detailed GDPR compliance indicators or data protection officer information. Overall, the website is credible and trustworthy but could improve its security posture and compliance transparency.
British Small Business Awardsbritishsmallbusinessawards.co.uk
Media · United Kingdom
50Medium
NIS2 25 · GDPR 65
NIS2 25 · GDPR 65
The British Small Business Awards website serves as a platform to celebrate and recognize the achievements of small and medium-sized enterprises (SMEs) in the UK. It is an established event with a history dating back to 2016, supported by notable media partners such as Smallbusiness.co.uk and Growthbusiness.co.uk. The site provides information on award winners, categories, sponsors, and historical data, targeting UK SMEs and stakeholders interested in business recognition and networking. The business model revolves around event organization, sponsorship, and community engagement. Technically, the website is built on WordPress using the Divi theme and integrates Gravity Forms for data collection. Media assets are hosted on Amazon AWS S3, and tracking is implemented via Google Tag Manager and Quantcast Consent Manager. The site demonstrates moderate performance and good mobile optimization, though accessibility features are basic. SEO practices are adequately implemented with proper meta tags and structured navigation. From a security perspective, the website enforces HTTPS and uses standard tracking and form plugins without exposing sensitive data. However, it lacks advanced security headers and a formal security policy or incident response contact. Privacy compliance is partial, with a privacy policy and terms of service present but no explicit cookie policy or consent mechanism visible. Contact information is available primarily via email and a newsletter sign-up form. Overall, the website is professional and trustworthy with a solid business presence. To enhance security and compliance, it is recommended to implement cookie consent mechanisms, add security headers, publish a security policy, and improve accessibility. These steps will strengthen user trust and regulatory adherence.
—
34Partial
DNS & email only
DNS & email only
- SSecurity Verification
bizbubble.co.uk
—
33High
NIS2 10 · GDPR 50
NIS2 10 · GDPR 50
The Growth Machine Powered by Marketopiathegrowthmachine.com
—
48High
NIS2 0 · GDPR 80
NIS2 0 · GDPR 80
Marketopiamarketopia.com
Technology · United States
65Medium
NIS2 25 · GDPR 80
NIS2 25 · GDPR 80
Marketopia is a specialized B2B marketing and lead generation firm focused on technology companies, including MSPs and technology vendors. With a global presence and over 175 channel experts, they provide comprehensive services such as appointment setting, sales enablement, marketing services, and partner programs. Their website reflects a mature digital infrastructure leveraging WordPress with Divi theme, enhanced by performance and marketing tools like NitroPack, Google Tag Manager, and LeadConnector live chat. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, Marketopia presents as a professional, credible, and technically sound organization with a strong market position in the technology lead generation space.
The DM Labthedmlab.com
Other · United Kingdom
65Medium
NIS2 10 · GDPR 100
NIS2 10 · GDPR 100
The DM Lab is a well-established UK-based digital marketing agency specializing in SEO, PPC, social media, web design, and related digital services. With over 15 years of experience and multiple industry awards, the company positions itself as a trusted partner for businesses seeking to enhance their digital presence. The website reflects a professional and modern digital infrastructure built on WordPress and Elementor, integrating advanced analytics and marketing tools such as Google Analytics, Matomo, HubSpot, and Google Tag Manager. Privacy compliance is robust, featuring a comprehensive cookie consent mechanism and clear privacy and cookie policies. Security posture is solid with HTTPS enforced and anti-spam protections, though explicit security headers and incident response policies are absent. Overall, the site demonstrates high professionalism, trustworthiness, and technical maturity suitable for its market segment.
- Bevy Commerce
aivalabs.com
E-commerce
63Medium
NIS2 10 · GDPR 35
NIS2 10 · GDPR 35
The website aivalabs.com currently serves as a transitional landing page announcing the rebranding of Aiva Labs to Bevy Commerce. The business focuses on providing eCommerce applications and enterprise solutions aimed at helping online businesses grow. The site is minimalistic, primarily designed to redirect visitors to the new Bevy Commerce website, indicating a strategic shift in branding and market positioning. Technically, the site uses Bootstrap 4 and Google Fonts, with Cloudflare Insights for performance monitoring, reflecting a moderate level of digital maturity. However, the site lacks comprehensive SEO, accessibility, and privacy compliance features. Security posture is basic with HTTPS implied but no explicit security headers or policies visible. Overall, the site is functional but limited in content and compliance, suggesting a need for further development to support trust and regulatory adherence.
Hospitality · Latvia
53Medium
NIS2 25 · GDPR 10
NIS2 25 · GDPR 10
Latvijas viesnīcu un restorānu asociācija (LVRA) is a professional association uniting accommodation and public catering enterprises in Latvia. The organization focuses on improving customer service quality, organizing the Latvian hotel and restaurant market, and representing the hospitality business internationally. The website reflects a medium-sized association with over 330 members, offering services such as member representation, training projects, and certification. The target audience is hospitality businesses and professionals within Latvia. Technically, the website is built on WordPress using modern frameworks like Bootstrap 5 and includes SEO and accessibility considerations. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Privacy compliance is strong with clear GDPR-aligned policies and consent management. Overall, the website is professional, trustworthy, and well-maintained, supporting the association's credibility and market position.
- VVisitor anti-robot validation
autofotoorientesanas.lv
Other
60Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
The website autofotoorientesanas.lv currently serves a security CAPTCHA challenge page powered by BitNinja, designed to block automated or malicious traffic. It does not present any business-related content, contact information, or policies. The page uses Google reCAPTCHA v2 and Google Analytics scripts, indicating some level of traffic monitoring and bot mitigation. Legacy CMS meta tags referencing Joomla 1.5 and WordPress 2.5 suggest either outdated software or placeholder content, but no active CMS functionality is evident on this page. From a technical perspective, the page uses standard HTML5, CSS resets, and JavaScript for language detection and translation. However, no modern security headers or SSL configuration details are visible, and no privacy or cookie policies are provided. The user experience is minimal and focused solely on passing the CAPTCHA challenge. Security posture is moderate due to the presence of reCAPTCHA and IP greylisting, but the lack of security headers and outdated CMS references are concerns. Privacy compliance is poor, with no GDPR or cookie consent mechanisms detected. Business credibility cannot be assessed due to absence of business information. Overall, the site is effectively blocked by security mechanisms, limiting content access and analysis. Strategic recommendations include implementing security headers, updating or removing legacy CMS references, adding privacy and cookie policies, and providing clear contact information for security and business inquiries.
- Portal
myportallogin.co.uk
Other
70Medium
NIS2 10 · GDPR 35
NIS2 10 · GDPR 35
The website myportallogin.co.uk serves as a portal login interface, likely for a business or service related to ConnectWise, as indicated by the favicon and asset domains. The site is minimalistic with no visible business descriptions, contact information, or user-facing content beyond a loading indicator and embedded OAuth iframe for authentication. The technical infrastructure includes modern JavaScript frameworks and third-party tools such as WalkMe for user guidance and Google Tag Manager for analytics. Security implementations include OAuth with PKCE, indicating a focus on secure authentication flows. However, the absence of visible privacy, cookie, or terms of service policies, as well as lack of contact or incident response information, limits the site's compliance and trustworthiness from a user perspective. Overall, the site appears functional for its intended portal purpose but lacks transparency and user engagement features.
Plastic Card Servicescertuscardgroup.com
Manufacturing · United Kingdom
52Medium
NIS2 25 · GDPR 95
NIS2 25 · GDPR 95
Certus Card Group, operating under Plastic Card Services, is a leading UK-based manufacturer and supplier of recyclable and eco-degradable plastic cards. The company offers comprehensive end-to-end services including card production, personalisation, and mailing fulfilment, serving a diverse clientele across retail, finance, hospitality, and public sectors. Their market position is reinforced by numerous industry certifications and awards, reflecting a commitment to quality and sustainability. Technically, the website is built on WordPress with modern tools and integrations such as HubSpot and Google Analytics, demonstrating a mature digital infrastructure. Security-wise, the company maintains strong practices including HTTPS, ISO 27001 certification, and Cyber Essentials Plus, though incident response contact details and a vulnerability disclosure policy are absent. Overall, the website is professional, secure, and compliant with privacy regulations, supporting a high trust level for business partners and customers.
Denco Fluid Systemsdencofluidsystems.com
Energy · United Kingdom
60Medium
NIS2 10 · GDPR 95
NIS2 10 · GDPR 95
Denco Fluid Systems is a UK-based leader specializing in the design and manufacture of bespoke lubrication, cooling, and filtration systems tailored for industrial applications. The company positions itself as a trusted partner for end-users and international manufacturers demanding high-quality, specification-compliant fluid systems supported by professional installation and commissioning services. Their website reflects a mature digital presence with comprehensive content, clear navigation, and strong branding consistency. Technically, the website is built on WordPress using Elementor, enhanced with modern JavaScript libraries such as Swiper.js for interactive elements, and integrates analytics and marketing tools including HubSpot and Microsoft Clarity. The site demonstrates good performance, mobile optimization, and SEO practices, contributing to a positive user experience. From a security perspective, the site enforces HTTPS and employs anti-spam and cookie consent mechanisms, though it lacks some advanced security headers. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is well addressed with clear privacy and cookie policies and user consent controls. Overall, the website and business exhibit a strong security posture and digital maturity, with a trustworthy domain registration profile. Strategic recommendations include enhancing HTTP security headers and publishing a formal security policy to further strengthen trust and compliance.
- EEnershield Air Barriers
enershield.eu
Energy
50Medium
NIS2 10 · GDPR 80
NIS2 10 · GDPR 80
Enershield Air Barriers is a specialized company focused on providing air barrier solutions that improve energy efficiency and comfort in retail, commercial, and industrial facilities. The company operates primarily through a B2B model, offering design, manufacturing, and installation services. Their website reflects a professional and consistent brand image, supported by case studies and clear product segmentation. Technically, the site is built on WordPress using Elementor and Astra theme, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS and cookie consent mechanisms, though it lacks some advanced security headers and explicit incident response information. Overall, the domain registration and website content align well, indicating a legitimate and trustworthy business presence.
The Reviewthereviewmagazines.co.uk
Media · United Kingdom
65Medium
NIS2 25 · GDPR 53
NIS2 25 · GDPR 53
The Review is a local business directory and magazine serving the Stewarton, Kilmarnock, and Irvine areas in the UK. It provides a platform for local businesses to advertise and connect with the community, supporting local economic growth. The website offers comprehensive listings, reviews, and advertising opportunities, targeting local residents and businesses. Technically, the site is built on WordPress using Elementor and related plugins, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced but lacks some advanced security headers and formal vulnerability disclosure mechanisms. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is professional and trustworthy with clear contact information and certifications displayed.
SOD Groupsolutionsondemand.co.uk
Technology · United Kingdom
55Medium
NIS2 10 · GDPR 35
NIS2 10 · GDPR 35
SOD Group is a small UK-based multi-brand business solutions provider operating primarily in Glasgow and Ayrshire. The group offers a comprehensive range of services including IT support and supply, creative design and video production, business magazine publishing, professional printing, and telecommunications solutions. Their market position is that of a regional integrated service provider with distinct brands catering to specialized business needs. Technically, the website is built on WordPress using Elementor and Yoast SEO, indicating a modern CMS infrastructure with good SEO practices. Performance and mobile optimization are adequate, though accessibility features are basic. Security posture is moderate with HTTPS enabled and no visible vulnerabilities, but lacks security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies and no consent mechanisms. Contact information is limited to phone numbers without emails or physical addresses. Overall, the website is professional and functional but would benefit from enhanced privacy and security disclosures to improve trust and compliance.
Creo Designcreodesign.co.uk
Media · United Kingdom
60Medium
NIS2 25 · GDPR 35
NIS2 25 · GDPR 35
Creo Design is a creative agency based in Scotland with offices in Glasgow and Ayrshire, specializing in branding, web design, social media, media production, and advertising services. The company positions itself as a full-service design partner targeting SMEs and international brands, emphasizing quality and client relationships. The website reflects a professional and modern digital presence with a strong portfolio and clear contact channels. Technically, the site is built on WordPress with modern libraries and frameworks, offering good performance and mobile optimization. Security posture is solid with HTTPS and no exposed sensitive data, but lacks some security headers and formal policies. Privacy compliance is weak due to missing explicit privacy and cookie policies and absence of consent mechanisms. Business credibility is high, supported by ISO 9001 certification and consistent branding. Overall, the website is trustworthy and professional but could improve privacy and security transparency.