Security reports directory
139,950 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,199001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
126,851–126,900 of 139,950
Cube Relocations Ltdcuberelocations.com
Transportation · Malta
28High
NIS2 5 · GDPR 10
NIS2 5 · GDPR 10
Cube Relocations Ltd is a Malta-based international moving and logistics company established in 2007. The company offers a range of services including packing, door-to-door service, shipping by air and sea, insurance, storage, and supply of packing materials. It targets both corporate and private clients and holds memberships in several international moving associations, positioning itself as a reliable and experienced player in the transportation sector. The website reflects a professional business with good content quality and consistent branding. Technically, the site uses modern frameworks like Bootstrap and integrates Google Analytics and Facebook SDK for tracking and customer engagement. However, there is no visible cookie consent mechanism or explicit privacy compliance features, which is a compliance gap. Security posture is moderate with no visible security headers or published security policies, though HTTPS usage is implied by site links. Overall, the site is functional and professional but could improve in privacy compliance and security best practices.
- LLedgerProjects
ledgerprojects.com
Technology · Malta
45High
NIS2 0 · GDPR 10
NIS2 0 · GDPR 10
LedgerProjects is a Malta-based technology company specializing in distributed ledger technology (DLT) and blockchain solutions. The company is driven by a collective of technologists, industry experts, and academics focused on transitioning DLT from theory to practical applications, targeting state and private enterprises. They maintain an exclusive partnership with The Bitfury Group to deliver blockchain solutions in Malta. The website reflects a professional and consistent brand image with clear messaging about their business focus and services. Technically, the website is built on WordPress using common plugins such as Visual Composer and Contact Form 7, with integration of Google Analytics and Tag Manager for user tracking. The site shows moderate performance and good mobile optimization but lacks visible advanced security headers and explicit HTTPS confirmation in the HTML content. Privacy and cookie policies are absent, indicating gaps in compliance. From a security perspective, the site does not expose sensitive data but lacks important security headers and documented security policies or incident response contacts. The absence of privacy and cookie policies also suggests potential compliance risks with GDPR and related regulations. No vulnerability disclosure or security.txt files were found. Overall, the website presents a moderate risk profile with good business credibility but requires improvements in security posture and privacy compliance to enhance trust and regulatory adherence.
- M. Meilak & Associates - Malta Tax & Business Advisors
mmtaxadvisors.com
Finance · Malta
38High
NIS2 5 · GDPR 63
NIS2 5 · GDPR 63
M. Meilak & Associates is a Malta-based professional advisory firm specializing in tax, business advisory, company formation, and relocation services primarily targeting digital nomads and expatriates. With over 25 years of experience, the company positions itself as a trusted local expert helping clients navigate Malta's tax and immigration landscape. The website reflects a mature business with clear service offerings and a focus on client lifestyle enhancement. Technically, the site is built on WordPress with Elementor and integrates modern SEO and consent management tools, indicating a good level of digital maturity. Security posture is strong with HTTPS, cookie consent via Cookiebot, and no visible vulnerabilities or exposed sensitive data. Overall, the business demonstrates high credibility and compliance with privacy regulations, supported by clear contact channels and social media presence.
Dtrdtr.co.nz
Financial services · New zealand
61Medium
NIS2 5 · GDPR 33
NIS2 5 · GDPR 33
Natural Remedies Private Limitednaturalremedy.com
Healthcare · India
43High
NIS2 5 · GDPR 33
NIS2 5 · GDPR 33
Natural Remedies Private Limited is a well-established global animal health company specializing in herbal veterinary healthcare and animal nutrition products. With over three decades of experience and presence in more than 30 countries, the company positions itself as India's leading veterinary herbal healthcare brand. Their product portfolio is complemented by a focus on research and development, sustainability initiatives, and human healthcare solutions through affiliated sites. The website is professionally designed, mobile-optimized, and integrates modern technologies including WordPress, WooCommerce, and multiple analytics and marketing tools. Security measures such as HTTPS, reCAPTCHA, and cookie consent are implemented, though some security headers could be enhanced. Overall, the company demonstrates strong business credibility, trust indicators, and compliance with privacy regulations.
Defence Unlimited Internationaldefenceunlimited.com
Government
36High
NIS2 0 · GDPR 28
NIS2 0 · GDPR 28
Defence Unlimited International is a specialized consulting and brokerage firm operating in the defense, military, and security sectors. Established in 2015 and operating as a subsidiary of Cornerstone Holdings, the company offers a broad range of services including defense and military contracting, intelligence and security consulting, government relations, and turnkey training solutions. Their market position is that of an established leader with multiple certifications and memberships that reinforce their credibility and expertise. The website targets government agencies, defense contractors, and security industry stakeholders, providing strategic advisory and procurement services globally. Technically, the website is built on WordPress with a modern tech stack including jQuery, Visual Composer, and Revolution Slider. It employs Google Analytics for user tracking and uses Google Fonts for typography. The site demonstrates good mobile optimization and SEO practices, though accessibility features are basic. Performance is moderate, with room for improvement in loading speed and technical modernization. From a security perspective, the site enforces HTTPS and employs some security best practices such as IP anonymization in analytics and no visible exposure of sensitive data. However, it lacks explicit security headers like Content-Security-Policy and Strict-Transport-Security. There is no visible incident response or vulnerability disclosure information, and no cookie consent mechanism is present, which could impact GDPR compliance. Overall, the security posture is solid but could be enhanced with additional controls and transparency. The overall risk assessment is low, with no critical vulnerabilities detected. Strategic recommendations include implementing a cookie consent banner, enhancing security headers, publishing a security policy and incident response contacts, and regularly auditing third-party plugins. These steps will improve compliance, user trust, and security resilience.
Masterplast YU doomasterplast.rs
Manufacturing · Serbia
44High
NIS2 5 · GDPR 10
NIS2 5 · GDPR 10
Masterplast YU doo is a Serbian-based manufacturing company specializing in thermal insulation, roofing membranes, and dry construction systems. Established in 1997, it has grown into a leading regional producer and distributor of building insulation materials, serving primarily B2B customers such as construction firms and distributors. The company holds ISO and TUV certifications, reinforcing its commitment to quality. The website reflects a professional digital presence with clear navigation, localized content, and integration of modern web technologies including WordPress, Vue.js, and Google services. The site is well-optimized for SEO and mobile devices, providing comprehensive product and contact information. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though explicit security policies and incident response information are absent. Privacy compliance is addressed with a cookie consent banner and a privacy policy page, indicating awareness of GDPR requirements. Overall, the website supports the company's market position as a reputable and established player in the manufacturing sector.
MBC GROUPmbc.net
Media · Saudi Arabia
52Medium
NIS2 0 · GDPR 33
NIS2 0 · GDPR 33
MBC GROUP is a leading media company in the Middle East and North Africa, operating a broad portfolio of free-to-air satellite TV channels, radio stations, and digital platforms. The company targets diverse audiences across the MENA region with content ranging from family entertainment to youth-focused music channels. The website reflects a mature digital presence with modern technologies such as Next.js and Google Tag Manager, delivering fast and mobile-optimized user experiences. Security posture is strong with HTTPS and standard security practices, though explicit security policies and cookie consent mechanisms are absent. Overall, the site demonstrates high professionalism and trustworthiness, supporting MBC GROUP's market leadership.
- 44sightconsultants.com | 523: Origin is unreachable
4sightconsultants.com
Other
51Medium
NIS2 0 · GDPR 10
NIS2 0 · GDPR 10
The website 4sightconsultants.com is currently inaccessible due to a Cloudflare error 523 indicating that the origin server is unreachable. This prevents any meaningful content from being loaded or analyzed. The site appears to be protected by Cloudflare's CDN and security services, but the backend server is offline or misconfigured, resulting in a complete block of content. Consequently, no business, contact, or policy information is available for review. The technical infrastructure relies on Cloudflare, but the origin hosting provider and CMS cannot be determined. Security posture is weak due to the unavailability of the origin server and lack of visible security headers or SSL configuration. Overall, the site is not operational and cannot be properly assessed for compliance, security, or business credibility.
Star 3 Mediastar3media.com.au
Technology · Australia
43High
NIS2 0 · GDPR 10
NIS2 0 · GDPR 10
Star 3 Media is a Perth-based web design and marketing agency with over 20 years of experience, operating as part of the Toby Creative group. The company offers a comprehensive range of services including web design, graphic design, branding, hosting, and online marketing, targeting local, national, and international businesses. Their market position is that of an established small business with a strong local presence and a professional digital footprint. Technically, the website is built on WordPress using modern tools such as Gravity Forms and hCaptcha for form security, and Google Analytics for tracking. The site is mobile optimized and demonstrates good SEO practices, although privacy and cookie policies are absent. Security posture is adequate with HTTPS and CAPTCHA protections but lacks security headers and formal policies. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security best practices.
SmartPAsmart-pa.com
Other · United Kingdom
61Medium
NIS2 5 · GDPR 58
NIS2 5 · GDPR 58
SmartPA is a UK-based virtual assistant service provider offering a wide range of administrative and corporate support services. With over 13 years in business and a team of more than 180 virtual assistants, SmartPA targets SMEs and corporate clients seeking flexible, scalable virtual PA solutions. The website is professionally designed, leveraging HubSpot CMS and multiple marketing and analytics tools to support a mature digital presence. Security posture is solid with HTTPS and no critical vulnerabilities detected, though some security headers could be improved. Privacy and cookie policies are present and GDPR compliant, enhancing trust. Contact information and trust signals such as CPD accreditation and testimonials from reputable clients further support business credibility.
- AApex Group Ltd
apexfundservices.com
Finance · United Kingdom
53Medium
NIS2 5 · GDPR 63
NIS2 5 · GDPR 63
Apex Group Ltd is a leading global financial services provider specializing in fund and asset servicing, corporate services, ESG, and digital banking solutions. The company positions itself as a single-source provider with a broad range of services tailored to allocators, asset managers, capital markets, family offices, and financial institutions. Their business model integrates advanced technology platforms to deliver scalable and innovative solutions, supported by a global team across 50 countries and over 100 offices. Technically, the website leverages modern web technologies including Bootstrap, jQuery, Three.js for interactive globe visualization, and integrates multiple third-party platforms such as Vimeo for media, Google Analytics and Microsoft Clarity for analytics, and Pardot for marketing automation. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS with good SSL configuration and uses secure script loading practices. While some security headers like Content-Security-Policy are not explicitly detected, the overall posture is strong with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR indicators. Overall, Apex Group's website reflects a professional, trustworthy, and technologically advanced financial services enterprise. The risk profile is low with recommendations to enhance security headers and maintain regular audits of third-party integrations.
- MMassada
massada.es
E-commerce · Spain
66Medium
NIS2 5 · GDPR 75
NIS2 5 · GDPR 75
Massada is a Spanish-based e-commerce company specializing in natural and biotechnological cosmetic products. The company formulates and manufactures its own extracts using flowers, plants, and minerals combined with organic biotechnological active ingredients to provide effective and respectful formulas. Their market position is that of a niche natural cosmetics brand with a strong emphasis on innovation and natural ingredients. The website is built on the Shopify platform, leveraging modern technologies and integrations such as Google Analytics, Facebook Pixel, and various marketing tools. The site is well-optimized for performance, mobile responsiveness, and accessibility, providing a professional and trustworthy user experience. Security practices are solid with HTTPS enforced and no exposed sensitive data, although explicit security policies and incident response contacts are not present. Overall, the website demonstrates good compliance with GDPR and cookie regulations, with clear contact information and multiple communication channels.
- Des Moines Public Schools
dmschools.org
Education · United States
52Medium
NIS2 5 · GDPR 28
NIS2 5 · GDPR 28
Des Moines Public Schools is a large, well-established public education provider serving the Des Moines, Iowa community for over 100 years. The district offers a comprehensive range of educational services from preschool through high school, including virtual campus options and advanced learning programs. The website reflects a strong market position as Iowa's largest public school district and a leader in urban education innovation. Technically, the site is built on WordPress with a modern tech stack including jQuery, Google Analytics, Facebook Pixel, and various marketing and survey tools. It is hosted on a CDN for performance and demonstrates excellent mobile optimization, accessibility, and SEO practices. Security posture is good with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved and explicit security policies are not published. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism detected. Overall, the site is professional, trustworthy, and well-maintained, serving its community effectively.
- CCCF
ccfltd.co.uk
Other · United Kingdom
44High
NIS2 0 · GDPR 10
NIS2 0 · GDPR 10
CCF is a UK-registered company with a website currently under maintenance, providing minimal content and no direct service descriptions. The site includes company registration and address information but lacks privacy, cookie, or terms of service policies. The technical infrastructure includes common web fonts, icon libraries, and multiple third-party tracking and chat scripts, hosted via AWS Cloudfront CDN. The site is mobile responsive but lacks HTTPS enforcement and security headers, which impacts its security posture negatively. No contact emails or phone numbers are provided, limiting user engagement and trust. Overall, the website's current state reflects a basic digital presence with significant room for improvement in content, security, and compliance.
Other
49High
NIS2 0 · GDPR 10
NIS2 0 · GDPR 10
The website elite-consults.com is currently inaccessible due to a Cloudflare security challenge page employing Turnstile captcha verification. This prevents access to any actual business content, metadata, or contact information. The site appears to be protected by Cloudflare's WAF, which blocks automated or suspicious traffic, resulting in minimal HTML content that only displays a human verification prompt. Consequently, no business details, policies, or security posture information can be extracted or analyzed. The technical infrastructure includes Cloudflare services and standard web technologies such as HTML5, CSS3, and JavaScript, but no CMS or frameworks are identifiable. The security posture cannot be assessed beyond the presence of Cloudflare protection. Overall, the site is currently not analyzable, and the risk assessment is limited by the lack of accessible data.
Quandoo GmbHquandoo.com
Hospitality · Germany
58Medium
NIS2 5 · GDPR 63
NIS2 5 · GDPR 63
Quandoo GmbH operates a global online restaurant reservation platform connecting diners with over 17,000 restaurants across 11 countries. The company provides seamless table booking services via web and mobile applications, positioning itself as a leading player in the hospitality technology sector. The platform offers localized experiences with country-specific privacy policies and multi-language support, reflecting a mature international business model. Technical infrastructure leverages modern web technologies including React, integrated with third-party services such as Google Analytics, Adyen for payments, and OneTrust for cookie consent management. The website demonstrates good digital maturity with responsive design, structured data for SEO, and comprehensive privacy compliance mechanisms. Security posture is strong with HTTPS enforced, no exposed sensitive data, and use of monitoring tools like Sentry and Datadog. However, explicit security headers and incident response policies are not publicly disclosed. Overall, the site is professional, trustworthy, and compliant with GDPR, supporting a positive user experience and business credibility.
- KKane Solutions
kane-group.com
Finance · Bermuda
66Medium
NIS2 5 · GDPR 43
NIS2 5 · GDPR 43
Kane Solutions is a regulated administration and technology company offering end-to-end administration services and platforms primarily for investment companies, insurers, and fund management firms. The company operates globally with licenses and regulatory oversight in Bermuda, Malta, and Dubai, positioning itself as a trusted service provider in the finance sector. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to its B2B audience. Technically, the site uses modern frameworks such as Bootstrap and Font Awesome, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS and cookie consent implemented, though there is room for improvement in security headers and explicit security policies. Overall, the site is trustworthy and credible, supported by transparent regulatory disclosures and a LinkedIn presence.
Lawn Co.lawnco.net
Other · United States
39High
NIS2 5 · GDPR 43
NIS2 5 · GDPR 43
Lawn Co. is a well-established, locally owned full-service lawn care and landscaping company based in Boise, Idaho, with over 35 years of experience. The company offers a comprehensive range of services including residential and commercial lawn maintenance, tree care, irrigation management, snow removal, and holiday lighting. Their market position is strong within the Treasure Valley area, supported by positive customer reviews and a professional online presence. Technically, the website is built on WordPress using the OceanWP theme and Elementor page builder, incorporating modern web technologies such as jQuery and Font Awesome. The site is mobile-optimized, accessible, and employs SEO best practices, ensuring good user experience and discoverability. From a security perspective, the site uses HTTPS with good SSL configuration and implements standard security headers. There are no visible vulnerabilities or exposed sensitive data. Privacy compliance is basic with a privacy policy and cookie consent mechanism in place, though GDPR-specific compliance details are not evident. Overall, Lawn Co. demonstrates a mature digital infrastructure and a solid security posture appropriate for its business size and sector. Strategic improvements in security policy transparency and incident response readiness could further enhance trust and compliance.
Acumumacumum.com
Finance · Malta
51Medium
NIS2 0 · GDPR 48
NIS2 0 · GDPR 48
Acumum is a Malta-based boutique legal and advisory firm specializing in corporate, fiduciary, and legal services for individuals and businesses. The company positions itself as an expert, trusted, and independent provider with a strong focus on corporate structuring, tax optimisation, and asset protection. Their market position is reinforced by multiple awards and recognitions, targeting clients seeking bespoke legal solutions within Malta and internationally. Technically, the website is built on WordPress using the Avada theme and LayerSlider plugin, with a modern tech stack including jQuery and Google Fonts. The site is well-optimized for SEO and mobile devices, offering a good user experience with clear navigation and professional design. Security-wise, the site uses HTTPS with good SSL configuration but lacks advanced security headers and dedicated security or incident response policies. No vulnerability disclosure or security.txt files are present, indicating room for improvement in transparency and security posture. Overall, the website is credible and trustworthy, with clear contact information and social media presence, but could enhance its security and compliance documentation to further strengthen user trust and regulatory adherence.
- AAX Hotels Malta
thepalacemalta.com
Hospitality · Malta
47High
NIS2 0 · GDPR 58
NIS2 0 · GDPR 58
AX The Palace is a premium 5-star luxury hotel located in Sliema, Malta, operating under the AX Hotels Malta brand. The website showcases a sophisticated hospitality offering with panoramic Mediterranean views, targeting luxury travelers and event planners. The business model focuses on direct bookings, special promotions, and a portfolio of sister properties enhancing market reach. Technically, the website is built on WordPress with the Enfold theme, integrating modern analytics and consent management tools, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforcement and cookie consent compliance, though explicit security headers and incident response details could be improved. Overall, the site presents a professional, trustworthy, and user-friendly experience aligned with its luxury hospitality positioning.
Systems & Technology Internationalstifrance.com
Technology · France
28High
NIS2 0 · GDPR 10
NIS2 0 · GDPR 10
Systems & Technology International (STI) is a France-based company established in 1992, specializing in supplying equipment to the Semiconductor Manufacturing Industry. The company positions itself as a leading supplier in Southern Europe and North Africa, offering equipment sourcing, technical service support, and spare parts centralization. The website reflects a basic digital presence built on WordPress with common plugins and a Visual Composer page builder. While contact information is clearly provided, the site lacks comprehensive content, privacy policies, and advanced security features. The technical infrastructure is moderate with room for modernization and security improvements. Security posture is basic, with no visible security headers and outdated software versions, posing potential risks. Overall, the website is functional but requires enhancements in privacy compliance, security, and content richness to improve trust and professionalism.
- wagamama
wagamama.com
Hospitality · United Kingdom
63Medium
NIS2 0 · GDPR 40
NIS2 0 · GDPR 40
Wagamama is a well-established international restaurant brand specializing in Asian-inspired Japanese cuisine. The website showcases a comprehensive menu, including detailed allergen and nutritional information, and offers multiple service options such as dine-in, click & collect, and delivery. The presence of a loyalty program (Soul Club) and retail products further enhances its business model. Technically, the site is built on modern frameworks like Nuxt.js and Vue.js, hosted on a reliable CDN, and incorporates advanced tools such as Google reCAPTCHA Enterprise and OneTrust for security and privacy compliance. Security posture is strong with HTTPS enforcement, security headers, and no visible vulnerabilities. Privacy policies and cookie consent mechanisms are present and comprehensive, indicating good GDPR compliance. Overall, the website is professional, user-friendly, and trustworthy, reflecting a mature digital presence for a large hospitality business.
Maintenance Center Malta Ltd.mcm.aero
Transportation · Malta
57Medium
NIS2 0 · GDPR 43
NIS2 0 · GDPR 43
Maintenance Center Malta Ltd. (M.C.M. Malta) is a Malta-based EASA Part 145 Approved Maintenance Organisation specializing in aircraft maintenance, structural repairs, interior refurbishments, and aircraft management services. The company also benefits from a sister company, AP Malta Ltd., which provides EASA Part 147 approved aviation training courses. Positioned as a regional MRO provider, M.C.M. Malta supports a wide range of aircraft makes and models, targeting business aviation clients and aircraft operators. The website reflects a professional and consistent brand image with clear service offerings and contact information.
- Bell Media
bellmedia.ca
Media · Canada
52Medium
NIS2 5 · GDPR 28
NIS2 5 · GDPR 28
Bell Media is a leading Canadian media conglomerate and a subsidiary of BCE Inc., offering a comprehensive portfolio of advertising media solutions across television, radio, digital, and out-of-home platforms. The company targets advertisers seeking to leverage Canada's largest media brands to reach diverse audiences effectively. The website reflects Bell Media's enterprise-level market position with professional design, rich content, and multi-platform marketing tools such as the Bell Marketing Platform. Technically, the website is built on WordPress with a modern tech stack including Google Tag Manager, New Relic, and various analytics and marketing scripts. It demonstrates good performance and mobile optimization, with accessibility and SEO best practices largely in place. However, there is room for improvement in cookie consent mechanisms and explicit privacy compliance features. From a security perspective, the site enforces HTTPS, uses security headers, and secures forms appropriately. No critical vulnerabilities or exposed sensitive data were detected. The absence of a dedicated security policy or incident response contact is noted as an area for enhancement. Overall, the security posture is strong but could benefit from formalized disclosure and response processes. The domain registration details align well with the business claims, supporting the legitimacy and trustworthiness of the site. The presence of extensive tracking and advertising technologies indicates a mature digital marketing infrastructure, though privacy compliance could be strengthened to meet evolving regulatory standards.
- AAnchovy Luxury
anchovyluxury.com
Other
33High
NIS2 0 · GDPR 25
NIS2 0 · GDPR 25
Anchovy Luxury's website currently serves as a minimal placeholder 'coming soon' page with very limited content and no visible business or security information. The site uses WordPress with a coming soon plugin and includes jQuery and Bootstrap libraries. There is no metadata, no contact information, no privacy or cookie policies, and no security headers detected. The absence of HTTPS and other security best practices indicates a low security posture. Overall, the site lacks sufficient content and business details to assess its market position or services. The digital maturity is low, with basic technical implementation but poor content and security compliance.
Clam Technologies Ltdclamtech.com
Technology · Malta
43High
NIS2 0 · GDPR 10
NIS2 0 · GDPR 10
Clam Technologies Ltd, operating as Clamtech, is a Malta-based IT support and consultancy firm established in 2009. The company positions itself as an essential IT department for businesses, offering a range of services including managed services, cloud solutions, server management, help desk support, hosting, and communication services. Their target audience includes businesses of various sizes and sectors seeking practical and cost-effective IT solutions. The website reflects a professional and consistent brand image with clear contact information and social media presence, supporting their market positioning as a reliable IT partner. Technically, the website is built on WordPress using the Enfold theme and several plugins such as Contact Form 7, Simple Job Board, and Cookie Law Info. It employs modern technologies including Google Analytics and Google reCAPTCHA v3 for security and analytics. The site is mobile-optimized with good SEO practices but could improve accessibility features. Performance is moderate with room for optimization. From a security perspective, the site uses HTTPS and implements a cookie consent mechanism, but lacks explicit security headers and a published security policy or incident response information. No vulnerabilities or exposed sensitive data were detected in the provided content. The domain registration is privacy-protected but consistent with the business founding date, indicating legitimacy. Overall, Clamtech's website demonstrates a solid business and technical foundation with moderate security maturity. Strategic improvements in security headers, privacy policy publication, and incident response transparency would enhance trust and compliance. The company appears credible and well-positioned within its niche, with a clear focus on delivering IT support and consultancy services.
INGingdirect.it
Finance · Italy
61Medium
NIS2 5 · GDPR 58
NIS2 5 · GDPR 58
ING Italia is a leading online bank in Italy, part of the global ING Group, offering a wide range of financial products including current accounts, deposits, mortgages, loans, investments, and insurance. The website is professionally designed with a strong focus on user experience, mobile optimization, and clear navigation. It employs modern web technologies and integrates advanced analytics and advertising tools with a robust cookie consent mechanism ensuring GDPR compliance. Security practices are good, with HTTPS usage and no exposed sensitive data, although some security headers and explicit incident response policies are not publicly visible. Overall, the website reflects a mature digital presence aligned with a large financial institution's standards.
- AAX Hotels
seashellsresortmalta.com
Hospitality · Malta
37High
NIS2 0 · GDPR 58
NIS2 0 · GDPR 58
AX ODYCY Hotel is a 4-star hospitality business located in Qawra, Malta, operating on the site of the former Seashells Resort at Suncrest. The hotel offers accommodation, dining, leisure facilities, and event hosting services, targeting tourists and travelers seeking premium lodging experiences in Malta. The website is professionally designed using WordPress with the Enfold theme, featuring multilingual support and integrated booking capabilities. The digital infrastructure includes modern marketing and analytics tools such as Google Tag Manager, Facebook Pixel, Hotjar, and Triptease, indicating a mature digital marketing strategy. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though some security headers are not explicitly detected and should be implemented for enhanced protection. The website provides clear contact information and complies with GDPR through privacy and cookie policies. Overall, the site reflects a trustworthy and professional hospitality brand with a solid online presence.
ISPY Projectsispyprojects.com
Technology · Malta
56Medium
NIS2 5 · GDPR 75
NIS2 5 · GDPR 75
ISPY Projects is a Malta-based security company specializing in providing tailored security solutions and wholesale distribution of professional-grade security and fire safety devices. The company positions itself as a trusted home security partner with extensive industry expertise, offering customized services to meet diverse client needs. Their market presence is supported by partnerships with recognized security product manufacturers and a commitment to client satisfaction through quality products and professional after-sales support. Technically, the website is built on a modern WordPress platform with WooCommerce integration, utilizing popular plugins for analytics, forms, and cookie compliance. The site demonstrates good mobile optimization, SEO practices, and a professional design. Security-wise, the site enforces HTTPS, uses reCAPTCHA for forms, and provides a comprehensive cookie consent mechanism, although it lacks explicit security policies and incident response contacts. Overall, the domain registration details align well with the business claims, indicating legitimacy and trustworthiness.
Scotchstone Capitalscotchstone-capital.com
Finance · Malta
34High
NIS2 0 · GDPR 43
NIS2 0 · GDPR 43
Scotchstone Capital operates as two distinct entities: a Malta-regulated investment fund focused on long-term value investing in liquid equities, and a UK-based consulting firm specializing in complex financial and investment-related advisory services. The website reflects a niche financial services provider with a research-driven approach and regulatory oversight. Technically, the site is built on legacy ASP.NET Web Forms with jQuery and includes a cookie consent mechanism, but lacks modern security features such as HTTPS enforcement and security headers. The security posture is moderate with room for improvement, especially in securing user login and publishing incident response policies. Overall, the website presents a professional business presence but requires enhancements in security and privacy compliance to meet modern standards.
Carabao Limitedcarabaosolutions.com
Technology · United Kingdom
48High
NIS2 5 · GDPR 25
NIS2 5 · GDPR 25
Carabao Limited is a UK-based specialist ERP implementation partner focused on Microsoft Dynamics 365 solutions. The company offers a range of services including ERP advisory, implementation, project turnaround, support, and partner assistance. Their target audience includes businesses seeking to implement or optimize Microsoft Dynamics 365 ERP systems. The website presents a professional and consistent brand image with clear navigation and relevant content highlighting their expertise and client testimonials. Technically, the site is built on WordPress using Elementor and integrates modern tools such as Google Tag Manager, Hotjar, and Cookiebot for analytics and privacy compliance. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers and explicit policies are missing. Overall, the website reflects a credible and trustworthy business with good digital maturity.
Other
42High
NIS2 0 · GDPR 15
NIS2 0 · GDPR 15
The website mikrocc.com is currently inactive and displays only a domain expiration or renewal notice. The domain is parked via SedoParking, indicating that the original business website is no longer operational or has not been renewed. There is no business information, contact details, privacy or cookie policies, or any other content that would indicate an active online presence. Technically, the site uses minimal JavaScript for parking scripts and lacks HTTPS, security headers, or modern web technologies. The security posture is weak due to the absence of HTTPS and security best practices. Overall, the site presents a high risk for visitors due to lack of trust indicators and active content.
- DDairy Farmers of America, Inc.
deanfoods.com
Manufacturing · United States
69Medium
NIS2 5 · GDPR 63
NIS2 5 · GDPR 63
Dairy Farmers of America (DFA) operates as a large agricultural cooperative representing nearly 10,000 family dairy farmers across the United States. The organization focuses on sustainable dairy farming and delivering quality dairy products through its cooperative model. The website reflects a strong commitment to community support, sustainability, and farmer empowerment, positioning DFA as a significant player in the US dairy industry with a broad product portfolio and community initiatives such as the DFA Cares Foundation. Technically, the website employs modern JavaScript frameworks like Vue.js, integrates advanced tracking and marketing tools, and uses a reputable CMS platform (Kentico). Privacy and cookie compliance are robust, with OneTrust cookie consent and a comprehensive privacy policy. Security practices include CSRF protection and HTTPS usage, though explicit security headers and incident response information are absent. Overall, the site demonstrates good digital maturity and business credibility, with room for enhanced security transparency and accessibility improvements.
Other
48High
NIS2 5 · GDPR 28
NIS2 5 · GDPR 28
The website glmalta.com is a parked domain landing page primarily designed to advertise the domain for sale. It lacks substantive business content, contact information, or service descriptions, indicating it is not an active commercial site. The technical infrastructure relies on basic HTML, CSS, and JavaScript with third-party ad networks such as Google Adsense Domains CAF and tracking scripts from youseasky.com. The site is served over HTTP without HTTPS, which is a significant security shortfall. No privacy or cookie consent mechanisms are implemented, and no security policies or certifications are presented. Overall, the site demonstrates low digital maturity and minimal security posture, with extensive user tracking but poor privacy compliance.
Alfakraft Fonder ABalfakraft.se
Finance · Sweden
24Critical
NIS2 5 · GDPR 0
NIS2 5 · GDPR 0
Alfakraft Fonder AB is a Swedish financial services company specializing in capital and fund management, targeting institutions, companies, and private individuals. Their business model centers on offering high-quality portfolio management and trading strategies across multiple asset classes, aiming for good risk-adjusted returns. The website presents a professional image with clear descriptions of their funds and services, supported by links to fund fact sheets and prospectuses, indicating transparency and regulatory compliance. Technically, the site is built on WordPress using the Uncode theme and several plugins, including privacy management and analytics tools. The infrastructure supports HTTPS with good SSL configuration and moderate performance. Security posture is solid with no visible vulnerabilities or exposed sensitive data, though security headers and explicit security policies are absent. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy policy or terms of service pages. Contact information is clearly provided, enhancing business credibility. Overall, Alfakraft demonstrates a mature digital presence suitable for its niche in financial services, though improvements in privacy and security disclosures are recommended.
J. Portelli Projectsjportelliprojects.com
Real Estate · Malta
48High
NIS2 0 · GDPR 28
NIS2 0 · GDPR 28
J. Portelli Projects is a Malta-based real estate investment and development company with a history dating back to 1996. The company specializes in residential and commercial property development across Malta and Gozo, including luxury villas and hospitality projects. Their website reflects a professional and consistent brand image, targeting property investors and buyers interested in high-end real estate. Technically, the site is built on WordPress with modern libraries and frameworks, offering a good user experience and mobile optimization. Security measures include HTTPS and Google reCAPTCHA on forms, but the site lacks several important security headers and explicit privacy compliance mechanisms. Overall, the website is trustworthy and functional but could improve its security posture and privacy transparency.
Technology
61Medium
NIS2 5 · GDPR 55
NIS2 5 · GDPR 55
EBO is a technology company specializing in AI-powered virtual assistants and automation solutions designed to enhance customer engagement across multiple industries including healthcare, finance, and government. The company positions itself as an enterprise-grade solution provider with a strong emphasis on compliance and security. Their platform offers omnichannel communication, pre-built integrations with major enterprise software, and supports over 100 languages, targeting medium to large enterprises seeking to optimize customer service and operational efficiency. Technically, the website is built on WordPress with modern frameworks and integrates various analytics and marketing tools, demonstrating a mature digital infrastructure. Security practices include HTTPS, privacy by default, and cookie consent mechanisms, though some standard security headers could be improved. Overall, the site reflects a professional, trustworthy, and well-maintained digital presence with extensive user tracking balanced by good privacy compliance.
- SSecurity Verification
dohle-yachts.com
Other
51Medium
NIS2 0 · GDPR 25
NIS2 0 · GDPR 25
The website dohle-yachts.com is currently inaccessible beyond a security verification page that employs Google reCAPTCHA v3 to prevent automated access. This indicates the presence of a Web Application Firewall (WAF) or bot mitigation service protecting the site. Due to this, no substantive business content, contact information, or policies are accessible for analysis. The visible page is minimal and focused solely on bot verification, lacking any marketing or informational content. The technical infrastructure includes Bootstrap 5.3.3 for styling and Google reCAPTCHA for security, but no other technologies or CMS platforms are detectable. Security posture is limited to the presence of reCAPTCHA; however, no HTTPS enforcement or security headers are visible in the provided content. Overall, the site’s security posture cannot be fully assessed due to content blocking, and critical compliance elements such as privacy and cookie policies are absent from the accessible content.
- GGozo Channel Ltd
gozochannel.com
Transportation · Malta
54Medium
NIS2 0 · GDPR 28
NIS2 0 · GDPR 28
Gozo Channel Ltd operates as a vital ferry transportation service connecting the islands of Malta and Gozo. The company maintains a modern fleet of ferries and offers services including ticket sales, travel card schemes, and customer support. The website is designed to serve residents and visitors, providing essential travel information, live traffic cameras, and a mobile app for convenience. The business holds a strong market position as the primary ferry operator in the region. Technically, the website is built on WordPress with modern frameworks such as Bootstrap 5 and uses multiple plugins for multilingual support, accessibility, and form management. Hosting is provided by Cloudways, and the site employs HTTPS with strong security headers, ensuring a secure browsing experience. Accessibility features and SEO optimizations are well implemented, contributing to a positive user experience. From a security perspective, the site demonstrates good practices including HTTPS enforcement and security headers. However, it lacks a visible cookie consent mechanism and dedicated security or incident response policies, which are areas for improvement. No vulnerabilities or exposed sensitive data were detected. Overall, the website is professional, trustworthy, and functional with minor gaps in privacy compliance and security policy transparency. Strategic recommendations include implementing cookie consent, publishing security policies, and enhancing incident response readiness to further strengthen trust and compliance.
- Capital Workplace Indigenous Corporation
capitalinvestigations.com.au
Government · Australia
48High
NIS2 0 · GDPR 10
NIS2 0 · GDPR 10
Capital Workplace Indigenous Corporation is a specialized Indigenous-owned HR and workplace investigations company based in Canberra, Australia. They provide culturally appropriate workplace relations services including investigations, governance, policies, mediation, and training. The company holds certifications such as Supply Nation certification and is registered with ORIC, reflecting their commitment to Indigenous business standards. Their combined team experience spans over 60 years across various sectors including government and private sectors. The website is professionally designed using the Wix platform, featuring modern technologies like React and Wix Thunderbolt, and includes clear contact information and social media presence. However, the site lacks explicit privacy and cookie policies, which may impact compliance with data protection regulations.
iGaming Content Servicesigc.vu
Other
63Medium
NIS2 5 · GDPR 55
NIS2 5 · GDPR 55
iGaming Content Services is a specialized B2B agency providing content creation, translations, SEO outreach, and localisation services exclusively for the iGaming industry. Established in 2016, the company positions itself as a niche expert with native writers and a strong focus on quality and timely delivery. The website reflects a professional and consistent brand image with comprehensive service descriptions and a clear target audience of iGaming operators, affiliates, and suppliers. Technically, the site is built on WordPress using Oxygen Builder, integrates Google Analytics and Tag Manager, and employs modern web technologies including Lottie animations and CAPTCHA for form security. Security posture is good with HTTPS enforced and consent management implemented, though some security headers and explicit policies are missing. Privacy compliance is strong, with GDPR-aligned cookie consent and privacy policy. Overall, the website is trustworthy, well-optimized for SEO, and provides a good user experience.
- Paradise Bay Resort
paradise-bay.com
Hospitality · Malta
48High
NIS2 0 · GDPR 55
NIS2 0 · GDPR 55
Paradise Bay Resort is a well-established hospitality business located in Malta, offering a wide range of accommodation and leisure services including dining, private beach access, diving center, and event facilities. The website is professionally designed with good content quality targeting families, solo travelers, and leisure tourists. The technical infrastructure leverages modern web technologies and third-party integrations for booking and analytics, hosted on a reliable CDN. Security posture is adequate with HTTPS and anonymized analytics, though it lacks explicit security policies and incident response information. Privacy compliance is basic but present, with GDPR considerations and cookie consent mechanisms. Overall, the website presents a trustworthy and professional online presence with room for security and compliance enhancements.
- Drydocks World
drydocks.gov.ae
Energy · United Arab Emirates
53Medium
NIS2 0 · GDPR 43
NIS2 0 · GDPR 43
Drydocks World, a subsidiary of DP World, is a leading provider of marine and offshore services based in Dubai, UAE. The company specializes in ship repair, maintenance, rig refurbishment, offshore fabrication, and renewable energy solutions, serving the shipping, oil & gas, and energy sectors globally. Their market position is strong, supported by extensive facilities and a broad service portfolio. Technically, the website is built on a modern stack with JavaScript frameworks and is hosted on Azure CDN, showing good digital maturity and mobile optimization. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though there is room for improvement in security policy transparency and incident response contact availability. Overall, the website is professional, trustworthy, and compliant with privacy regulations, reflecting a mature and credible business entity.
Powerhouse Audiovisual & Eventspowerhousemalta.com
Media · Malta
32High
NIS2 0 · GDPR 10
NIS2 0 · GDPR 10
Powerhouse Audiovisual & Events is a Malta-based company specializing in audiovisual and event production services. The company positions itself as a passionate and dedicated provider of high-quality AV solutions aimed at creating memorable experiences. Their key services include event management, equipment rental, decor, custom building, and digital signage, targeting event organizers and corporate clients within Malta. The website is built on WordPress using the Elementor page builder, indicating a moderate level of digital maturity with a focus on user experience and responsive design. However, the site lacks critical privacy and security disclosures such as a privacy policy, cookie consent, and terms of service, which are essential for compliance and trust. Security posture is basic with HTTPS enabled but missing advanced security headers and incident response contacts. Overall, the website is functional and professional but requires improvements in privacy compliance and security best practices to enhance trust and regulatory adherence.
Other
46High
NIS2 5 · GDPR 15
NIS2 5 · GDPR 15
The website waterworks.com currently returns a 404 Not Found error page served by nginx, indicating that the website content is inaccessible or missing. There is no visible metadata, structured data, forms, contact information, or business-related content available for analysis. The lack of HTTPS information and security headers suggests a poor security posture. Due to the absence of any privacy or cookie policies, the site is not compliant with GDPR or similar regulations. Overall, the website appears to be either down, misconfigured, or under construction, resulting in a very low digital maturity and business credibility score.
White Canvaswhitecanvas.in
E-commerce · India
63Medium
NIS2 5 · GDPR 60
NIS2 5 · GDPR 60
White Canvas is a small e-commerce business specializing in ethical luxury fashion, focusing on handwoven and organic fabric clothing for women. The company emphasizes sustainability and cultural authenticity by sourcing textiles from India and Turkey. Their market position is niche, targeting eco-conscious consumers who value craftsmanship and slow fashion. The website is professionally designed with good content quality, clear navigation, and mobile optimization, supporting a positive user experience. The business leverages Shopify's platform and integrates multiple marketing and analytics tools to enhance customer engagement and operational efficiency. Technically, the website is built on Shopify using the Broadcast theme and incorporates modern web technologies such as lazy loading, Flickity for carousels, and third-party integrations like Judge.me for reviews and Lucky Orange for analytics. Hosting is managed by Shopify's CDN, ensuring reliable performance and security. The site implements HTTPS with good SSL configuration and basic security best practices, although explicit security headers and policies are not fully implemented. From a security perspective, the site shows a mature posture with no exposed sensitive data or visible vulnerabilities. Privacy compliance is addressed with a privacy policy, cookie consent banner, and GDPR indicators, though more comprehensive policies and incident response information are absent. The domain uses privacy protection in WHOIS, which is typical for small businesses and does not raise immediate concerns. Overall, the website demonstrates a solid foundation with room for improvement in security policies and accessibility. Strategically, White Canvas should focus on enhancing security headers, publishing incident response and vulnerability disclosure policies, and improving accessibility compliance to strengthen trust and compliance. These steps will support sustainable growth and customer confidence in their ethical fashion brand.
Audio Visual Centreavc.co.za
Technology · South Africa
43High
NIS2 5 · GDPR 10
NIS2 5 · GDPR 10
Audio Visual Centre (AVC) is a South African-based company specializing in comprehensive audio visual integration services. Their offerings include AV design, installation, and support tailored for corporate, educational, and event environments. The company positions itself as a turnkey solution provider, handling everything from design to ongoing support, with a strong focus on video conferencing and Microsoft Teams solutions. AVC maintains a solid market presence with a medium-sized operation and a professional online presence supported by testimonials and recognized brand partnerships. Technically, the website is built on WordPress with the Divi theme and integrates modern SEO and analytics tools, reflecting a mature digital infrastructure. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers and incident response policies could be improved. Privacy compliance is basic, lacking explicit cookie consent mechanisms. Overall, AVC presents a trustworthy and professional business with room for enhanced privacy and security practices.
Heritage Hotels LTD.hoteljuliani.com
Hospitality · Malta
40High
NIS2 5 · GDPR 55
NIS2 5 · GDPR 55
Hotel Juliani is a well-established boutique hotel located in St. Julian's, Malta, offering luxury accommodation and personalized services. The website reflects a strong market position with key services including rooms, dining, spa, and fitness facilities. The business targets tourists seeking a premium hospitality experience in Malta. Technically, the site is built on WordPress with a modern tech stack, optimized for performance and mobile devices. Security posture is strong with HTTPS, reCAPTCHA, and cookie consent mechanisms, though some security headers could be improved. The domain registration aligns well with the business claims, enhancing trustworthiness. Overall, the website is professional, secure, and compliant with privacy regulations.
Tecnovision Ledwall srl (Gruppo PAN3G)tecnovision.it
Retail · Italy
48High
NIS2 5 · GDPR 0
NIS2 5 · GDPR 0
Tecnovision Ledwall srl is a leading Italian company specializing in digital signage, LED walls, and totem solutions, serving sectors such as retail, digital out of home (DOOH), and sports. Founded in 1987 and part of Gruppo PAN3G, the company offers integrated digital display solutions with proprietary technology and remote management platforms. The website reflects a professional and consistent brand image, targeting business clients in the digital signage market. Technically, the website is built on the Bubble.io platform, utilizing modern JavaScript libraries and Google Fonts, with Google Tag Manager for analytics. The site performs moderately well with basic mobile optimization and SEO practices. Security posture is good with HTTPS enabled and no exposed sensitive data, but lacks advanced security headers and explicit security policies. Privacy compliance is weak due to the absence of privacy and cookie policies or consent mechanisms. Contact information is clearly provided, including email, phone, and physical addresses, enhancing business credibility. No WAF or blocking mechanisms were detected, allowing full content access. Overall, the site is trustworthy and professional but would benefit from improved privacy compliance and enhanced security policies to align with best practices and regulatory requirements.