Security reports directory
139,950 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,199001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
127,701–127,750 of 139,950
- IIndex of /
mlrsystems.com
Other
33High
NIS2 5 · GDPR 25
NIS2 5 · GDPR 25
The website mlrsystems.com currently serves only a basic directory listing page with no substantive content, metadata, or business information. This minimal presence suggests the site is either under development or abandoned. There is no indication of the company's services, market position, or target audience from the website content. Technically, the site lacks modern web technologies, security headers, and HTTPS enforcement, exposing it to potential security risks such as information disclosure through directory listing. No privacy or cookie policies are present, indicating non-compliance with GDPR and other privacy regulations. The absence of contact information and business details further reduces trustworthiness and business credibility. Overall, the website's digital maturity is very low, and it does not provide sufficient information to assess the business or security posture comprehensively.
OPEX Corporationopex.com
Manufacturing · United States
59Medium
NIS2 5 · GDPR 58
NIS2 5 · GDPR 58
OPEX Corporation is a well-established manufacturer and provider of advanced automation solutions, specializing in warehouse automation, document, and mail automation systems. With over 50 years of experience and a global presence, OPEX serves a diverse range of industries including finance, healthcare, government, and retail. Their business model focuses on delivering scalable, modular systems complemented by consultation, installation, training, and technical support services. The website reflects a mature digital presence with comprehensive product information, multiple language support, and strong branding consistency. Technically, the website is built on WordPress with Elementor, integrating modern analytics and marketing tools such as New Relic, HubSpot, Google Tag Manager, and Hotjar. The site demonstrates good performance, mobile optimization, and accessibility features. Security posture is solid with HTTPS enforced and monitoring tools in place, though explicit security headers and policies could be improved. Privacy compliance is well addressed with clear cookie and privacy policies and consent mechanisms. Overall, OPEX's website and digital infrastructure indicate a professional, trustworthy, and mature organization with a strong market position. Strategic improvements in security policy transparency and vulnerability disclosure could further enhance trust and compliance.
Momentum Pensionsmomentumpensions.com
Finance · Malta
53Medium
NIS2 5 · GDPR 58
NIS2 5 · GDPR 58
Momentum Pensions is an established international pension specialist focused on providing pension solutions primarily for British expatriates and international clients. The company administers over £1.5 billion in assets and operates regulated pension schemes in Malta, Gibraltar, and the Isle of Man. Their services include QROPS pension schemes, pension administration, trustee services, and Irish pension transfers. The website reflects a professional and consistent brand presence with clear navigation and relevant content tailored to their target audience of expatriates and financial advisers. Technically, the website employs a modern tech stack including Bootstrap, jQuery, and Google Analytics, with good mobile optimization and SEO practices. However, some security best practices such as security headers are not evident in the provided data. The cookie consent mechanism is implemented, supporting GDPR compliance. No forms collecting personal data are present on the homepage, reducing immediate data protection risks. From a security perspective, the site shows strengths in regulatory compliance and transparent business information but lacks visible incident response or security policy disclosures. The domain uses privacy protection for WHOIS data, which is justified given the financial services context. No WAF or blocking mechanisms were detected, and no critical vulnerabilities were found in the HTML content. Overall, the website presents a trustworthy and professional front for Momentum Pensions, with room for improvement in security header implementation and explicit incident response information to enhance trust and compliance.
- SICPA HOLDING SA
sicpa.com
Government · Switzerland
62Medium
NIS2 5 · GDPR 63
NIS2 5 · GDPR 63
SICPA HOLDING SA is a globally recognized leader specializing in security inks and authentication solutions primarily serving governments, central banks, and high-security printers. The company offers a comprehensive platform that integrates material and digital technologies to address challenges in currency protection, revenue mobilisation, brand protection, and identity verification. Their market position is strong, supported by a long history and ISO 27001 certification, reflecting a commitment to security and trust. Technically, the website is built on Drupal CMS with modern JavaScript libraries and includes robust privacy and cookie consent mechanisms, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforcement, CAPTCHA on forms, and cookie consent, though explicit security headers could be enhanced. Overall, the site demonstrates high professionalism, good privacy compliance, and trustworthy business information consistent with WHOIS data.
Other
52Medium
NIS2 0 · GDPR 25
NIS2 0 · GDPR 25
The website fortunemalta.com currently serves as a minimal placeholder or parking page with very limited content. It primarily loads a React-based JavaScript application from a CDN and includes a Google Adsense script, indicating an intent to monetize traffic. There is no visible business information, contact details, or policies, which suggests the site is not actively used for business operations or customer engagement. The lack of HTTPS and security headers further diminishes its security posture. From a technical perspective, the site uses modern JavaScript frameworks but lacks essential SEO, accessibility, and performance optimizations. The hosting appears to be via a CDN service, but no CMS or backend platform is identifiable. The minimal content and absence of metadata or structured data limit the site's digital maturity. Security evaluation reveals critical gaps including absence of HTTPS, missing security headers, and no privacy or cookie policies, which are essential for compliance and user trust. No forms or user data collection mechanisms are present, reducing immediate risk but also indicating no active user engagement. The domain registration is privacy protected, which is common but combined with minimal site content reduces trustworthiness. Overall, the site scores very low on content quality, security, privacy compliance, and business credibility. It is recommended to implement HTTPS, add comprehensive privacy and cookie policies, provide clear contact information, and develop meaningful content to improve trust and compliance.
- Studio Legale Silvestri
silvestrilex.com
Other · Italy
52Medium
NIS2 5 · GDPR 60
NIS2 5 · GDPR 60
Studio Legale Silvestri is a small Italian legal firm providing comprehensive legal consultancy and assistance primarily to private individuals and companies. The firm emphasizes professionalism, availability, and dynamic service delivery across various legal domains including family law, succession, damage compensation, credit recovery, tax law, real estate, consumer guarantees, and arbitration. The website reflects a professional presence with clear service descriptions and multiple contact channels including phone, email, and social media. Technically, the site uses a modern front-end stack with Bootstrap and jQuery but lacks visible HTTPS enforcement and advanced security headers, which are critical for protecting client data and building trust. The cookie consent mechanism is implemented, indicating GDPR awareness, but no explicit privacy or security policies beyond basic privacy and cookie pages are found. Overall, the site is functional and professional but would benefit from enhanced security measures and clearer legal disclaimers.
TBC, Inc.tbc.us
Media · United States
54Medium
NIS2 13 · GDPR 28
NIS2 13 · GDPR 28
TBC, Inc. is a well-established full-service advertising and marketing agency based in Baltimore, Maryland. The company offers a comprehensive suite of services including digital advertising, brand and content strategy, broadcast and multi-media, social media, design, public relations, and data analytics. Their market position is strong, serving a diverse range of industries such as education, financial services, retail, tourism, health & wellness, casinos & gaming, and associations. The agency emphasizes a data-driven and AI-augmented approach to marketing, aiming to deliver targeted strategies and measurable results for their clients. Technically, the website is built using modern frameworks like Vue.js and Nuxt.js, hosted likely on AWS infrastructure, and integrates multiple analytics and tracking tools such as Google Analytics, Hotjar, Microsoft Clarity, and FullStory. The site is well-optimized for mobile devices, accessible, and SEO-friendly, reflecting a mature digital presence. From a security perspective, the website employs HTTPS with strong SSL configuration and includes essential security headers. There are no visible vulnerabilities or exposed sensitive data. However, the site lacks a cookie consent mechanism and explicit security or incident response policies, which are areas for improvement. Overall, the website presents a professional, trustworthy, and comprehensive digital footprint for TBC, Inc., with strong business credibility and technical implementation. The main risks relate to privacy compliance enhancements and formalizing security policies to align with best practices.
Caesars Travel Groupcaesarstravel.com
Transportation · Kuwait
31High
NIS2 0 · GDPR 10
NIS2 0 · GDPR 10
Caesars Travel Group is a medium-sized travel and logistics company based in Kuwait, offering a broad range of services including travel management, airline representation, leisure travel, cargo handling, and shipping logistics. With over 30 years of industry experience and a team of more than 350 experts, the company targets global travelers and corporate clients, positioning itself as a comprehensive service provider in the transportation and hospitality sectors. The website reflects a professional and consistent brand image with clear navigation and detailed service descriptions. Technically, the website is built on WordPress using a variety of plugins such as WPBakery Page Builder, Animate It, and Carousel Slider, supported by jQuery and Google Analytics for tracking. The site is mobile optimized and performs moderately well, though accessibility features are basic. SEO optimization is present but could be improved. From a security perspective, the site uses HTTPS but lacks important security headers like Content-Security-Policy and HSTS, which are recommended to enhance protection. Content copy protection scripts are implemented but may hinder user experience. No explicit security or incident response policies are published, indicating room for improvement in transparency and compliance. Overall, the website is functional and professional but would benefit from enhanced security measures, clearer privacy and terms policies, and improved compliance with data protection regulations to strengthen trust and reduce risk.
Filigreefiligree.com.ph
Real Estate · Philippines
33High
NIS2 0 · GDPR 33
NIS2 0 · GDPR 33
Filigree is a real estate developer specializing in luxury condominiums in the Philippines, particularly in Alabang and surrounding prime locations. The company positions itself as a premium brand offering upscale living spaces with world-class designs and amenities. The website reflects a mature digital presence with professional design, clear navigation, and multiple user engagement points such as brochure downloads, appointment bookings, and newsletter subscriptions. Technically, the site is built on WordPress using Elementor and integrates modern analytics and marketing tools including Google Analytics, Google Tag Manager, Facebook Pixel, and Zoho SalesIQ for customer engagement. Security posture is adequate with HTTPS and cookie consent mechanisms, though it lacks explicit security policies and vulnerability disclosure channels. Overall, the website is trustworthy and well-aligned with the business's market positioning.
Turnkey Services Maltats-malta.com
Real Estate · Malta
29High
NIS2 0 · GDPR 10
NIS2 0 · GDPR 10
Turnkey Services Malta is a small local business specializing in turnkey construction and renovation services for residential and commercial clients in Malta. The company offers a broad range of services including construction, tiling, plastering and painting, gypsum board installation, plumbing and electricity, concrete work, and 3D design. Their market position is that of a trusted local contractor with a professional online presence supported by structured data and social media links. Technically, the website is built on Joomla CMS using the Astroid Framework, incorporating modern frontend libraries such as jQuery and FontAwesome. The site is mobile optimized with good navigation and SEO practices, although accessibility features are basic. Performance is moderate with no evident broken elements. From a security perspective, the site uses HTTPS and includes CSRF tokens, but lacks explicit security headers and published security or privacy policies. No forms were detected, reducing immediate input risks, but the absence of privacy and cookie policies and incident response information indicates gaps in compliance and security posture. Overall, the website is functional and professional but would benefit from enhanced privacy compliance, security headers, and incident response disclosures to improve trust and security posture. The domain uses privacy protection for WHOIS data, which is common and justified for a small business. No blocking or WAF mechanisms were detected, allowing full content access and analysis.
- TTBWA\ANG
tbwa-ang.com
Media · Malta
57Medium
NIS2 0 · GDPR 43
NIS2 0 · GDPR 43
TBWA\ANG is a Malta-based award-winning advertising agency specializing in strategic marketing, branding, digital marketing, and media buying services. The company has a strong market position with international account wins and a focus on innovative and creative campaigns that boost brand visibility. Their website showcases a professional portfolio and clear contact information, targeting businesses seeking comprehensive advertising solutions. The technical infrastructure is built on WordPress with Elementor, leveraging modern web technologies and analytics tools such as Google Analytics and Microsoft Clarity. The website is well-optimized for SEO and mobile devices, providing a good user experience. Security posture is solid with HTTPS enabled and no exposed sensitive data, though improvements can be made by adding security headers and explicit incident response policies. Privacy compliance is adequate with privacy and cookie policies present, but lacks a cookie consent mechanism. Overall, the website reflects a credible and professional business with a medium-sized operational scale.
Technology · Spain
48High
NIS2 5 · GDPR 0
NIS2 5 · GDPR 0
Baratz Servicios de Teledocumentación, S.A.U. is a Spanish technology company specializing in innovative software solutions for libraries and library networks. Their flagship products include AbsysNet, a comprehensive integrated library system, and AbsysCloud, a cloud-based platform. The company serves over 3000 libraries, including prestigious public and private cultural and educational institutions, positioning itself as a market leader in Spain. The website reflects a mature digital presence with professional design, clear navigation, and extensive content about products, services, client success stories, and training offerings. Technically, the site is built on WordPress with Elementor and integrates modern web technologies and SEO best practices. Security posture is strong with HTTPS, reCAPTCHA, and cookie consent mechanisms, though some security headers could be enhanced. Privacy compliance is robust, with clear GDPR-aligned policies and consent management. Overall, Baratz demonstrates a credible, professional, and trustworthy online presence aligned with its business objectives.
Tech.mttech.mt
Technology · Malta
61Medium
NIS2 5 · GDPR 55
NIS2 5 · GDPR 55
Tech.mt is a public-private partnership established in 2019 by the Government of Malta and the Malta Chamber of Commerce, Enterprise and Industry. It aims to promote Malta as a hub for innovative technologies and digital innovation. The organization facilitates connections for tech companies, supports access to financial instruments, and fosters strategic partnerships with industry and academia. Licensed as a Further Education Institution, Tech.mt also provides educational programs to support the technology sector's growth. The website reflects a professional and well-structured digital presence, leveraging modern WordPress technologies and SEO best practices. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Overall, Tech.mt demonstrates a credible and trustworthy online presence aligned with its mission to advance Malta's technology ecosystem.
Other
44High
NIS2 0 · GDPR 0
NIS2 0 · GDPR 0
The website curbsy.com.mt currently serves as a minimal placeholder page with no substantive content or business information. The main visible content is an iframe embedding a third-party domain (yfdpco.com), which raises concerns about the legitimacy and intent of the site. There are no privacy, cookie, or terms of service policies present, and no contact information is provided, limiting user trust and compliance with data protection regulations. Technically, the site lacks HTTPS and security headers, further weakening its security posture. From a technical infrastructure perspective, the site uses basic HTML, CSS, and JavaScript with content delivery via AWS Cloudfront CDN. However, the reliance on an external iframe for primary content and absence of modern web practices such as responsive design, SEO optimization, and accessibility features indicate low digital maturity. Performance is likely slow due to iframe embedding and lack of optimization. Security evaluation reveals critical gaps including missing HTTPS, absence of security headers, no visible forms or secure data collection mechanisms, and no incident response or vulnerability disclosure information. The embedded third-party domain is suspicious and could pose risks to users. Overall, the site presents a high risk profile with poor privacy compliance and minimal business credibility. Strategically, the site requires urgent improvements in security, privacy compliance, and content authenticity to establish trust and legitimacy. Without these, it risks being flagged as suspicious or malicious by users and security tools.
TeKnowledgetek-experts.com
Technology
50Medium
NIS2 35 · GDPR 75
NIS2 35 · GDPR 75
TeKnowledge is a technology consulting and services company specializing in AI-first expert technology services, customer experience, and cybersecurity. The company targets enterprises, governments, and technology vendors, offering a broad portfolio including advisory, skilling, adoption, and managed services. Their market position is strengthened by partnerships with leading technology vendors such as Microsoft and Genesys, and a parent company, YNV Group, which supports their global operations. The website reflects a professional and modern digital presence with comprehensive content and strong branding consistency. Technically, the website is built on WordPress with Elementor, leveraging modern JavaScript libraries for smooth scrolling and interactive carousels. Analytics are implemented via Matomo and Google Tag Manager, with a GDPR-compliant cookie consent mechanism. The site is hosted on a reputable platform with good performance and mobile optimization. Security posture is solid with HTTPS enforced, appropriate security headers, and no visible vulnerabilities or exposed sensitive data. However, explicit security policies and incident response information are not published, representing an area for improvement. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the website and business demonstrate a high level of professionalism and trustworthiness, with minor gaps in explicit security and incident response disclosures. Strategic recommendations include publishing detailed security policies, incident response contacts, and vulnerability disclosure procedures to enhance trust and compliance.
- BBPP Holdings Limited
bpp.com
Education · United Kingdom
52Medium
NIS2 5 · GDPR 48
NIS2 5 · GDPR 48
BPP Holdings Limited is a leading UK-based professional education provider with a strong market position, offering a wide range of qualifications, apprenticeships, degrees, and CPD programs across sectors such as law, accountancy, finance, HR, data analytics, and digital marketing. The company targets career-focused learners and employers, emphasizing employability and practical skills development. With 48 years of experience and a large learner base, BPP is part of the BPP Education Group, supported by a private equity firm, TDR. Technically, the website employs modern frameworks such as React and Next.js, integrates advanced monitoring and analytics tools like New Relic and Google Tag Manager, and uses a reputable CMS (DatoCMS). The site is well-optimized for mobile and accessibility, with good SEO practices and a professional design that supports a positive user experience. From a security perspective, the site uses HTTPS with good SSL configuration and incorporates security monitoring. While explicit security headers are not fully visible, no critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is well addressed with clear privacy and cookie policies, including consent mechanisms. Contact information is readily available, enhancing trust and credibility. Overall, BPP demonstrates a mature digital presence with strong business credibility and a solid security posture. Strategic recommendations include enhancing security headers, maintaining vigilant third-party script management, and improving incident response transparency to further strengthen trust and compliance.
- HHugeDomains
campstonetransfer.com
E-commerce · United States
52Medium
NIS2 0 · GDPR 28
NIS2 0 · GDPR 28
The website CampStoneTransfer.com is a domain sales landing page operated by HugeDomains, a reputable domain reseller established in 2005. The site offers the domain CampStoneTransfer.com for sale with options to buy outright or via a payment plan. The business targets entrepreneurs and startups seeking premium domain names, positioning itself as a trusted marketplace with a 30-day money back guarantee and customer testimonials. Technically, the site uses modern web technologies including jQuery, Google Analytics, Google reCAPTCHA Enterprise, and a cookie consent mechanism, ensuring a secure and compliant user experience. The SSL configuration is excellent, and security best practices such as HTTPS and secure forms are implemented. However, the site lacks a dedicated security policy and vulnerability disclosure information. Overall, the website demonstrates good professionalism, security posture, and privacy compliance, making it a trustworthy platform for domain purchases.
Super Storesuperstore.fr
Retail · France
39High
NIS2 0 · GDPR 0
NIS2 0 · GDPR 0
Super Store is a French-language website specializing in product reviews and buying guides across multiple categories such as mobility, drones, high-tech electronics, bricolage, games, and smartphones. The site targets French-speaking consumers seeking detailed and comparative information to aid purchasing decisions. The business model appears to be content-driven, likely monetized through affiliate marketing and advertising partnerships. The website is built on WordPress, leveraging popular plugins like Yoast SEO for search optimization and WP Rocket for performance enhancements. The technical infrastructure is modern and supports good mobile responsiveness and SEO practices. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and explicit security policies. Privacy compliance is weak due to the absence of privacy and cookie policies or consent mechanisms. Contact information is limited to a contact form with no direct emails or phone numbers visible. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security disclosures.
DLOOK PTY LTDdlook.com.au
Other · Australia
57Medium
NIS2 0 · GDPR 28
NIS2 0 · GDPR 28
dlook.com.au is an established Australian online business directory and job quoting platform, founded in 2005 and operated by DLOOK PTY LTD. The website connects consumers with verified local service providers across Australia, offering a large network of over 2 million businesses. It features customer reviews, business listings, and a quoting system to facilitate service procurement. The platform targets Australian consumers and businesses seeking reliable local providers, positioning itself as the largest independent business network in the country. Technically, the site is built on modern frameworks such as Next.js and React, with performance optimizations including CDN usage and asynchronous script loading. Security measures include HTTPS enforcement and Google reCAPTCHA integration, contributing to a strong security posture. However, the site lacks a cookie consent mechanism and explicit security policy or incident response contacts, which are areas for improvement. Overall, the domain registration details align well with the business claims, supporting the site's legitimacy and trustworthiness.
Armed Forces Insuranceafi.org
Other · United States
57Medium
NIS2 5 · GDPR 33
NIS2 5 · GDPR 33
Armed Forces Insurance (AFI) is a well-established insurance provider specializing in military-focused insurance products such as homeowner, renter, auto, business, flood, and motorcycle insurance. With a history dating back to 1887, AFI serves the military community with tailored insurance solutions and a strong commitment to protecting those who serve the nation. The website reflects a professional and consistent brand presence, offering clear navigation and comprehensive content relevant to its target audience. Technically, the site leverages modern web technologies including Sitecore CMS, Bootstrap 5, and various analytics and marketing tools, ensuring a responsive and engaging user experience. Security posture is strong with HTTPS enforcement, use of reCAPTCHA, and no visible vulnerabilities, although explicit security policies and incident response information are not published. Privacy compliance is addressed with clear privacy and cookie policies and consent mechanisms. Overall, AFI presents a trustworthy and credible online presence aligned with its business mission.
eie European Business Schooleie-group.com
Education · Malta
41High
NIS2 5 · GDPR 43
NIS2 5 · GDPR 43
eie European Business School is a Malta-based higher education institution offering internationally accredited Bachelor, Master, and Diploma programs in business education. Established in 2000, it holds licensing from the Malta Further and Higher Education Authority, ensuring academic recognition across the EU and globally. The school targets students seeking quality EU-recognized degrees and operates international centers in multiple countries, supported by corporate partnerships. The website is professionally designed, mobile responsive, and provides comprehensive contact information including phone, email, and physical addresses. It uses GoDaddy Website Builder technology and integrates Google Analytics and reCAPTCHA for security and analytics. However, explicit privacy and terms of service policies are not found, and security headers are not visibly implemented, indicating areas for improvement in compliance and security posture.
Other
43High
NIS2 5 · GDPR 3
NIS2 5 · GDPR 3
The website uis.ro is currently a parked domain page primarily serving as a domain sale listing. It does not represent an active business or service provider. The site is minimalistic, with no substantive content beyond advertising scripts and a link to purchase the domain. The target audience appears to be domain investors or buyers interested in acquiring the domain name. Technically, the site uses basic HTML, CSS, and JavaScript with advertising integrations from Google Adsense Domains CAF and Youseasky. Hosting is via Amazon Cloudfront CDN. The site lacks HTTPS, security headers, and any advanced technical or SEO optimizations. Privacy compliance is minimal, with only a basic privacy policy accessible via a popup link and no cookie consent mechanism. There is no contact information or business identity disclosed, and the WHOIS data indicates privacy protection typical for domain parking. Overall, the site has a low trust and security posture, with significant room for improvement in technical implementation and compliance.
MW SERVICES LIMITEDrolla.com
Other · Gibraltar
45High
NIS2 0 · GDPR 33
NIS2 0 · GDPR 33
Rolla.com operates as a free-play social casino platform offering a wide variety of slot games and social gaming features targeted primarily at American users. The business is positioned as a leading new entrant in the social casino market, emphasizing daily bonuses, VIP rewards, and a strong community experience. The company behind the site is MW SERVICES LIMITED, registered in Gibraltar, which aligns with the business claims and provides legitimacy to the operation. The website is professionally designed with consistent branding and good content quality, supporting a positive user experience.
Chilizchiliz.com
Technology
69Medium
NIS2 5 · GDPR 60
NIS2 5 · GDPR 60
Chiliz is a leading sports-focused blockchain platform that partners with over 70 elite sports teams to provide innovative Web3 solutions, including Fan Tokens™ and a robust validator network. The company offers comprehensive developer resources, governance portals, and community engagement tools to empower brands, developers, and sports fans worldwide. The website reflects a mature digital presence with strong branding and clear messaging tailored to its target audience. Technically, the site is built on WordPress with Elementor, leveraging modern libraries such as GSAP and Swiper for interactive content, and employs performance optimizations like WP Rocket and lazy loading. Security practices include HTTPS enforcement and a dedicated security issue reporting page, though some security headers could be improved. Privacy compliance is well addressed with detailed policies and a consent management system. Overall, Chiliz presents a professional, trustworthy, and technically sound platform with a strong market position in the sports blockchain sector.
TKW Research Groupafs-smart.com.au
Other · Australia
36High
NIS2 5 · GDPR 43
NIS2 5 · GDPR 43
TKW Research Group is a leading independent market research data collection agency based in Australia, with additional offices in New Zealand and Fiji. Established in 1997, the company specializes in both qualitative and quantitative research methodologies including CATI, polling, face-to-face data collection, healthcare research, qualitative recruitment, bespoke studies, and mystery shopping. Their strong market position is supported by extensive certifications such as ISO 20252 and memberships in industry bodies like ADIA and ESOMAR. The website reflects a mature digital presence with professional design, comprehensive content, and clear navigation targeting market research consultancies, government, commercial organizations, and academic institutions. Technically, the website is built on WordPress with modern JavaScript libraries like Swiper.js and integrates multiple analytics and marketing tools including Google Analytics, Matomo, Hotjar, HubSpot, and Leadinfo, all managed with consent mechanisms to comply with privacy regulations. The site is mobile-optimized, fast-loading, and SEO-friendly, demonstrating a high level of digital maturity. From a security perspective, the site enforces HTTPS and employs consent management for cookies, but could improve by adding explicit security headers such as Content-Security-Policy and publishing an incident response or vulnerability disclosure policy. No critical vulnerabilities or exposed sensitive data were detected, indicating a solid security posture. Overall, TKW Research Group presents a trustworthy and professional online presence aligned with its business claims. The domain registration details are consistent with the company’s geographic and operational profile, reinforcing legitimacy. Strategic recommendations include enhancing security headers, formalizing incident response communications, and continuing to maintain privacy compliance to strengthen trust further.
Diligexdiligex.eu
Finance · Malta
56Medium
NIS2 47 · GDPR 18
NIS2 47 · GDPR 18
Diligex is a specialized AML/CFT compliance solution provider based in Malta, offering a suite of technical and consultancy services aimed at ensuring clients meet their regulatory obligations. The company positions itself as a trusted partner for financial institutions and compliance professionals, providing products such as AML100 and KYCMATIC, alongside risk management and cybersecurity services. The website reflects a professional and consistent brand image with clear messaging and client testimonials, supporting its market position as a niche compliance expert. Technically, the website is built on WordPress using modern plugins and frameworks, including WPBakery Page Builder, jQuery, and Google reCAPTCHA for security. The site is mobile-optimized and incorporates SEO best practices, although some improvements in security headers and explicit security policies could enhance its posture. The presence of cookie consent and privacy policies indicates good privacy compliance. Security-wise, the site uses HTTPS and integrates anti-bot measures on forms, but lacks visible advanced security headers and a vulnerability disclosure policy. Incident response contact is provided via a dedicated phone line, enhancing readiness. No critical vulnerabilities or blocking mechanisms were detected, indicating a stable security posture. Overall, Diligex presents a credible and professional online presence with moderate to good technical and security maturity. Strategic recommendations include enhancing security headers, publishing explicit security policies, and maintaining up-to-date software to mitigate risks.
Member of parliamentmarigoldcollective.com
Public relations and communications
47High
NIS2 0 · GDPR 10
NIS2 0 · GDPR 10
Mjm europemjmeurope.com
Financial services · Malta
32High
NIS2 5 · GDPR 40
NIS2 5 · GDPR 40
Marsovin Ltd.marsovin.com
Retail · Malta
51Medium
NIS2 5 · GDPR 33
NIS2 5 · GDPR 33
Marsovin Ltd. operates a well-established winery business in Malta, recognized for its quality wines and international presence. The company offers an online shop featuring a variety of wines, a wine club for enthusiasts, and event information. The website is professionally designed with a consistent brand image and clear navigation, targeting wine consumers and aficionados both locally and internationally. Technically, the site is built on WordPress with WooCommerce and several modern plugins, including Gravity Forms and Visual Composer, providing a robust e-commerce platform with integrated marketing and analytics tools. Security measures include HTTPS, Google reCAPTCHA on forms, and use of security headers, although explicit security policies and cookie consent mechanisms are lacking. Overall, the site demonstrates a good security posture and business credibility, with room for improvement in privacy compliance and explicit security documentation.
Griffiths + Associatesgriffithsassoc.com
Finance · Malta
41High
NIS2 5 · GDPR 28
NIS2 5 · GDPR 28
Griffiths + Associates is a well-established multidisciplinary audit, advisory, and accounting firm based in Malta, with over 20 years of experience. The firm offers a comprehensive range of services including tax planning, corporate services, audit and assurance, maritime and gaming compliance, and immigration advisory. They hold reputable certifications such as MFSA Approved Auditor status and are the sole Maltese member of PrimeGlobal, enhancing their international reach and credibility. Their target audience includes businesses and high-net-worth individuals seeking expert financial and corporate advisory services in Malta and internationally. The website reflects a professional and consistent brand image with detailed service descriptions and expert publications, positioning the firm as a trusted leader in its sector.
Gamil Designgamil.com
Media
38High
NIS2 5 · GDPR 40
NIS2 5 · GDPR 40
Gamil is a small media website dedicated to sharing positive stories and promoting sustainability. The site operates on a WordPress platform with a modern tech stack including Yoast SEO, Google Analytics, and various advertising networks. It has a good level of mobile optimization and SEO practices, providing a user-friendly experience with clear navigation and relevant content. The security posture is adequate with HTTPS enabled and some security headers present, though improvements like Content-Security-Policy and security.txt are recommended. The site employs a comprehensive GDPR-compliant consent management platform, reflecting a strong commitment to privacy compliance. Overall, the domain age and content are consistent with a legitimate small media business, though direct contact and security policy information are lacking.
Other
51Medium
NIS2 5 · GDPR 15
NIS2 5 · GDPR 15
The website jackpot.com is currently inaccessible, returning a 403 Forbidden error with minimal HTML content. This indicates that access is blocked or restricted by server permissions or security configurations, preventing any meaningful content or metadata from being retrieved. Consequently, no business information, contact details, or security policies are available for analysis. The lack of accessible content severely limits the ability to assess the company's market position, technical infrastructure, or security posture. From a security perspective, the absence of HTTPS confirmation, security headers, or incident response information suggests potential gaps in security best practices, though this cannot be confirmed without further access. Overall, the site presents a high risk due to inaccessibility and lack of transparency, and strategic recommendations focus on restoring proper access, implementing security standards, and publishing compliance documentation.
Other
53Medium
NIS2 0 · GDPR 10
NIS2 0 · GDPR 10
The website ojooo.com is currently inaccessible beyond a Cloudflare security challenge page that requires human verification via Turnstile CAPTCHA. This indicates the site is protected by a Web Application Firewall (WAF) to mitigate automated access and potential attacks. Due to this blocking, no actual business content, contact information, or policies are accessible for analysis. The site appears to be in a protective mode, which limits visibility into its services, business model, or compliance posture. The only visible elements are related to Cloudflare's security mechanisms, with no metadata or structured data describing the business. The lack of accessible content and contact details significantly reduces the ability to assess the website's credibility, privacy compliance, or security maturity beyond the presence of WAF protection.
Keen Ltdkeen.com.mt
Technology · Malta
55Medium
NIS2 5 · GDPR 60
NIS2 5 · GDPR 60
Keen Ltd is a Malta-based digital marketing and web design agency with over 10 years of experience delivering custom digital solutions focused on commercial success. Their services include branding, web design and development, SEO, digital marketing, PR, copywriting, and consultancy. The company serves a diverse client base including government entities, healthcare, retail, and hospitality sectors, positioning itself as a trusted local leader. Technically, the website is built on WordPress with modern technologies such as jQuery, Google Tag Manager, and Facebook Pixel, optimized for performance and SEO. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though formal security policies and incident response information are absent. Overall, the website demonstrates professionalism, trustworthiness, and compliance with GDPR requirements.
- SSt. Michaels Electrical Engineering Services & Distribution L.L.C.
stmichaelselectrical.com
Energy · United States
47High
NIS2 0 · GDPR 25
NIS2 0 · GDPR 25
St. Michaels Electrical Engineering Services & Distribution L.L.C. is a small local energy services company specializing in electrical engineering, distribution products, and energy savings solutions. The company targets commercial, healthcare, industrial, and government sectors, offering products and services aimed at reducing electric bills and improving energy efficiency. They emphasize lamp disposal services compliant with DOE and EPA guidelines and maintain memberships in recognized industry organizations such as the Engineering Society of Detroit and the U.S. Green Building Council. Technically, the website is built using an older site builder platform (Trellix Site Builder) hosted by webhosting.web.com. The site uses basic HTML, CSS, and JavaScript without modern frameworks or CMS. Performance is moderate but mobile optimization and accessibility are poor. The site lacks HTTPS, security headers, and modern security practices, which significantly impacts its security posture. From a security perspective, the absence of HTTPS and security headers, combined with no privacy or cookie policies, represents critical vulnerabilities. No incident response or vulnerability disclosure information is provided. The site does not use analytics or tracking services, indicating minimal user tracking. Overall, the security maturity is low, and the site requires urgent improvements to protect user data and comply with privacy regulations. The overall risk assessment indicates moderate business credibility but poor security and privacy compliance. Strategic recommendations include implementing HTTPS, adding security headers, establishing privacy and cookie policies, improving mobile responsiveness, and enhancing form security to build trust and protect users.
- GSD - THE GENERAL SOFT DRINKS CO. LTD
gsd.com.mt
Manufacturing · Malta
56Medium
NIS2 5 · GDPR 43
NIS2 5 · GDPR 43
GSD - THE GENERAL SOFT DRINKS CO. LTD is a well-established beverage manufacturing and bottling company based in Malta, operating for over 50 years as the sole licensed Coca-Cola bottler in the country. The company offers a broad portfolio of beverage brands including sparkling drinks, juices, water, energy drinks, and beer, targeting both consumers and business partners. Their business model focuses on brand licensing, bottling, and distribution with a strong emphasis on sustainability and community engagement. The website reflects a professional and consistent brand image with comprehensive content about their services, sustainability initiatives, and corporate policies. Technically, the website is built on WordPress using the Avada theme framework and integrates modern plugins such as Yoast SEO, Contact Form 7, and Google reCAPTCHA for security and SEO optimization. The site is mobile-optimized with good performance and basic accessibility features. Security posture is strong with HTTPS enforced, reCAPTCHA on forms, and an age restriction popup to comply with alcohol marketing regulations. However, there is room for improvement by adding a Content-Security-Policy header and explicit incident response contact details. Overall, the website is trustworthy and credible, supported by consistent WHOIS registration data and ISO certification. No blocking or WAF interference was detected, allowing full content accessibility. The company demonstrates good privacy compliance with clear privacy and cookie policies and uses Google Tag Manager for analytics with moderate user tracking. Strategic recommendations include enhancing security headers, publishing vulnerability disclosure information, improving accessibility, and maintaining up-to-date plugin versions to mitigate risks and strengthen trust further.
MMH Malta Ltd.ablecareosg.com
Transportation · Malta
49High
NIS2 0 · GDPR 10
NIS2 0 · GDPR 10
MMH Malta Ltd. is a medium-sized maritime support company based in Malta, specializing in onshore and offshore services including port operations, technical services, crew logistics, and training through its MMH Academy. The company positions itself as a key player in the Mediterranean maritime sector, offering a comprehensive suite of services to maritime clients and partners. The website reflects a professional and consistent brand image with clear navigation and relevant content targeted at industry stakeholders. Technically, the website is built on WordPress with modern technologies such as jQuery, Google reCAPTCHA v3, and Yoast SEO for search optimization. The site is mobile-optimized and performs moderately well, though there is room for improvement in accessibility and security headers. Hosting details are not explicitly disclosed, but the site uses HTTPS with a valid SSL certificate, ensuring secure communications. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and form protection via reCAPTCHA. However, it lacks visible security headers and published security policies, which are recommended for enhanced protection and compliance. Privacy compliance is limited due to the absence of privacy and cookie policies, which could expose the company to regulatory risks, especially under GDPR. Overall, the website is trustworthy and professional, with clear business information and contact details. The domain registration data aligns well with the business claims, supporting legitimacy. Strategic improvements in privacy compliance and security hardening would further strengthen the company's digital posture and trustworthiness.
Gutenberggutenberg.com.mt
Manufacturing · Malta
31High
NIS2 0 · GDPR 0
NIS2 0 · GDPR 0
Gutenberg is a Malta-based manufacturing company specializing in books and commercial printing, packaging, and related solutions. The website serves as a basic landing page introducing their three main divisions but lacks detailed business or contact information. The technical infrastructure is simple, relying on legacy jQuery and standard HTML/CSS with minimal modern web practices. Security posture is weak due to absence of HTTPS, security headers, and privacy policies, exposing the site to potential risks and compliance issues. Overall, the website presents a basic digital presence with significant room for improvement in security, privacy, and user engagement.
Connect Worldwideconnect-community.org
Technology
36High
NIS2 0 · GDPR 48
NIS2 0 · GDPR 48
Connect Worldwide is a membership organization dedicated to building and supporting a global community of Hewlett Packard Enterprise (HPE) technology users, including customers, partners, and employees. The organization offers a variety of services such as technical boot camps, journals, events, and community engagement to help members maximize their HPE technology investments. The website reflects a well-structured and content-rich platform targeting HPE technology stakeholders worldwide. Technically, the site is built on WordPress with Elementor and integrates multiple analytics and marketing tools including Google Analytics, HubSpot, and Matomo. Security posture is strong with HTTPS enforced, use of reCAPTCHA on forms, and monitoring via New Relic, although there is no explicit security policy or incident response information published. Privacy and cookie policies are present and appear comprehensive, indicating good compliance with GDPR. Overall, the website demonstrates a mature digital presence with good design, navigation, and trust indicators, supporting its role as a reputable community platform.
- MManagement Action Programs, Inc. (MAP)
mapconsulting.com
Other · United States
49High
NIS2 0 · GDPR 25
NIS2 0 · GDPR 25
Management Action Programs, Inc. (MAP) is a well-established management consulting firm specializing in executive coaching, leadership training, and business growth solutions. With a history dating back to 1960, MAP offers a proven management system and a variety of workshops and coaching services aimed at accelerating business performance. The company targets business leaders and organizations seeking structured leadership development and scalable growth strategies. Their market position is strong, supported by a broad client base including industry leaders and a consistent brand presence. Technically, the website is built on WordPress with a modern tech stack including WooCommerce, Gravity Forms, and HubSpot integrations for marketing and analytics. The site is mobile-optimized, accessible, and SEO-friendly, providing a good user experience. Hosting appears to be on a reputable managed WordPress platform, likely WP Engine. From a security perspective, the site uses HTTPS and modern libraries, but lacks explicit security headers and formal security or incident response policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is limited due to the absence of privacy and cookie policies, which is a notable gap given the use of tracking and marketing tools. Overall, the website is professional and trustworthy with strong business credibility. However, improvements in privacy compliance and security transparency are recommended to enhance user trust and regulatory adherence.
Other
45High
NIS2 5 · GDPR 15
NIS2 5 · GDPR 15
The website redtigergaming.com is currently inaccessible, returning a 403 Forbidden error page with minimal HTML content and an openresty server signature. Due to this access restriction, no business information, metadata, or content could be analyzed. The lack of accessible content prevents assessment of the company's market position, services, or technical infrastructure. Security posture cannot be evaluated beyond the observation that the site is blocked, which may indicate server-side restrictions or security controls in place. Overall, the site is not currently functional for public users, resulting in a critical risk for business credibility and user trust.
- DDNS resolution error | debenhams.com.mt | Cloudflare
debenhams.com.mt
Other · Malta
48High
NIS2 0 · GDPR 0
NIS2 0 · GDPR 0
The website debenhams.com.mt is currently inaccessible due to a DNS resolution error as indicated by the Cloudflare error page. No actual business content, contact information, or policies are available on the site. The site appears to be either misconfigured or not yet fully deployed. The technical infrastructure relies on Cloudflare for DNS and security services, but the domain is not resolving properly, preventing access to any meaningful content. Security posture is weak due to lack of HTTPS and absence of security headers or policies. Overall, the site cannot be properly evaluated in its current state, and the risk of phishing or impersonation cannot be ruled out without further data.
- EERROR: The request could not be satisfied
debenhams.com
Other
49High
NIS2 0 · GDPR 25
NIS2 0 · GDPR 25
The website at debenhams.com is currently inaccessible due to a 403 error generated by Amazon CloudFront, indicating that the request was blocked possibly due to traffic volume or configuration issues. As a result, no meaningful content, metadata, or business information could be retrieved or analyzed. The lack of accessible content prevents assessment of the company's market position, services, or compliance posture. Technically, the site is hosted behind CloudFront but is currently non-functional from an external visitor perspective. From a security standpoint, the site does not expose any headers or SSL configuration details due to the block, and no privacy or cookie policies are detectable. This lack of accessibility severely limits the ability to evaluate security maturity or compliance with regulations such as GDPR. The overall risk is elevated due to the inability to verify the website's legitimacy or security controls. Strategically, restoring proper website accessibility and resolving the CloudFront 403 error is critical. Once accessible, a full audit of security headers, privacy policies, and business information should be conducted to ensure compliance and trustworthiness. Until then, the site should be considered high risk for users and partners due to lack of transparency and availability.
Probe Groupprobegroup.com.au
Technology · Australia
55Medium
NIS2 0 · GDPR 25
NIS2 0 · GDPR 25
Probe Group is a leading Australian-based company specializing in Customer Experience (CX) and Business Process Outsourcing (BPO) services. The company emphasizes a people-first approach combined with digital innovation to deliver exceptional client experiences. Their market position is strong, supported by a portfolio of subsidiary brands including Probe CX, Convai, Innovior, MicroSourcing, and Beepo. The website reflects a professional and consistent brand image targeting businesses seeking advanced CX and BPO solutions.
Blab Solutionsblabsolutions.net
Technology · Malta
41High
NIS2 0 · GDPR 10
NIS2 0 · GDPR 10
Blab Solutions is a small freelance web design and development service based in Malta, targeting local businesses and individuals seeking affordable and intelligent website solutions. The company offers a range of digital services including web design, development, domain and email hosting, SEO, web statistics, and social media campaigns. The website content is basic and primarily marketing-focused, with limited contact information and no visible privacy or security policies. Technically, the website employs a traditional tech stack including Bootstrap, jQuery, and various icon/font libraries. The site appears moderately optimized for mobile devices and performance but lacks advanced SEO and accessibility features. There is no evidence of a CMS or hosting provider details. Security posture is minimal with no HTTPS confirmation or security headers detected, and no forms or data collection mechanisms that would require enhanced security. From a security perspective, the site lacks critical elements such as privacy policies, cookie consent, security policies, and incident response contacts. No vulnerabilities or exposed sensitive data were detected in the provided content, but the absence of HTTPS and security headers is a significant concern. Overall, the site presents a moderate risk profile primarily due to missing security and privacy compliance features. Strategically, the business should prioritize implementing HTTPS, adding privacy and cookie policies, and enhancing security headers to improve trust and compliance. Expanding contact information and adding structured data could also improve SEO and user trust. Regular security audits and vulnerability disclosures would further strengthen the security posture and business credibility.
- CCrane Currency
cranecurrency.com
Manufacturing · United States
66Medium
NIS2 0 · GDPR 58
NIS2 0 · GDPR 58
Crane Currency is a globally recognized leader in banknote security, specializing in the design, production, and printing of secure banknotes for central banks worldwide. Their offerings include advanced micro-optic security features, high-quality banknote paper substrates, and comprehensive design services. The company positions itself as a full-service provider with deep expertise and control over the entire banknote production process, serving a specialized B2B market. Technically, the website is built on the Umbraco CMS platform, leveraging modern web technologies such as JavaScript, Google Tag Manager, and Cookiebot for consent management. The site demonstrates good digital maturity with responsive design, accessibility considerations, and SEO optimization. Security-wise, the site enforces HTTPS, uses cookie consent mechanisms, and avoids exposing sensitive data, though it lacks explicit security headers and published security policies. Overall, the domain registration and WHOIS data align well with the company's identity, supporting high legitimacy and trust. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and providing clearer contact information for privacy and security inquiries.
Ivantipulsesecure.net
Technology · United States
61Medium
NIS2 35 · GDPR 63
NIS2 35 · GDPR 63
Ivanti, a leading enterprise software company, acquired Pulse Secure in 2020 and continues to offer secure network access and endpoint management solutions under the Ivanti brand. The website clearly communicates this transition and provides comprehensive information about products, solutions, and support services targeting enterprise customers seeking secure access and IT management capabilities. The technical infrastructure leverages modern analytics and telemetry tools such as Google Analytics and Microsoft Application Insights, combined with a robust cookie consent mechanism powered by OneTrust, reflecting a mature digital presence. Security posture is strong with HTTPS enforcement, privacy compliance, and clear incident response contacts, although explicit security headers and vulnerability disclosure mechanisms could be enhanced. Overall, the website demonstrates a professional, trustworthy, and well-maintained digital asset aligned with Ivanti's enterprise market position.
CITRICcitric.ws
Technology · Spain
33High
NIS2 5 · GDPR 25
NIS2 5 · GDPR 25
Citric is a small technology consultancy based in Spain specializing in custom digital product development, user experience (UX), user interface (UI) design, brand strategy, and sustainability consulting. The company targets businesses and brands seeking tailored digital solutions and brand reinvention, with a focus on sustainable and user-centered design. Their market position is that of a specialized boutique agency offering strategic and technical services to enhance digital presence and product quality. Technically, the website employs modern front-end technologies including Bootstrap, jQuery, and various JavaScript libraries, with good mobile optimization and SEO practices. The site uses HTTPS and includes cookie consent mechanisms, reflecting a moderate level of digital maturity and privacy compliance. Security posture is adequate with HTTPS enforced, but lacks explicit security headers and documented incident response policies. Overall, the website is professional, trustworthy, and compliant with GDPR, though improvements in security headers and explicit contact information could enhance trust further.
CARMA International Inccarma.com
Media · United Kingdom
55Medium
NIS2 5 · GDPR 43
NIS2 5 · GDPR 43
CARMA International Inc is a global media intelligence provider specializing in delivering comprehensive media monitoring, PR measurement, and consultancy services. The company operates internationally with a large workforce and multiple offices, providing services in over 100 languages. Their business model combines software platforms with expert-led research solutions, targeting organizations that require detailed media analysis and communication evaluation. The website reflects a mature digital presence with professional design, clear navigation, and multilingual support. Technically, the website is built on WordPress using Elementor and several advanced plugins, integrating multiple analytics and marketing tools such as Google Analytics, HubSpot, Facebook Pixel, and Hotjar. The site is mobile-optimized and demonstrates good SEO and accessibility practices. Security posture is strong with HTTPS enforced and no visible sensitive data exposure, although explicit security headers could be improved. Overall, CARMA shows a high level of digital maturity and business credibility, supported by client testimonials, partner logos, and structured data. No WAF or blocking mechanisms were detected, allowing full content access and analysis. The domain registration details align well with the business claims, supporting legitimacy and trustworthiness. Strategic recommendations include enhancing security headers, maintaining plugin updates, and publishing explicit security and incident response policies to further strengthen trust and compliance.
- AAtom
dium.com
Technology · United States
56Medium
NIS2 5 · GDPR 43
NIS2 5 · GDPR 43
Atom operates a comprehensive online marketplace specializing in premium domain name sales, branding contests, and related services. The platform targets startups and businesses seeking memorable domain names and branding solutions, positioning itself as a trusted intermediary with a strong market presence. The website for Dium.com exemplifies their offering of high-value domains with flexible purchase options including installment plans and escrow services. Technically, the site employs modern web technologies such as Bootstrap for responsive design, New Relic for performance monitoring, and Intercom for customer engagement, hosted behind Cloudflare's infrastructure ensuring fast and secure delivery. Security posture is robust with HTTPS enforced and no evident vulnerabilities, though there is room for improvement in explicit cookie consent and published security policies. Overall, Atom demonstrates a mature digital presence with strong business credibility and user trust indicators.