Security reports directory
139,950 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,199001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
127,801–127,850 of 139,950
- Film House
filmhouse.com
Media
48High
NIS2 5 · GDPR 25
NIS2 5 · GDPR 25
Film House is a small media production company specializing in a variety of film and video services including TV commercials, real estate videos, government projects, indie features, corporate films, documentaries, and convention TV. The website serves primarily as a navigational portal to these service categories but lacks detailed content and business information. The technical infrastructure is basic, relying on simple HTML and CSS with no modern frameworks or CMS detected. The site is not secured with HTTPS, which is a significant security concern. No privacy or cookie policies are present, and no contact information is provided on the homepage, limiting user trust and compliance with privacy regulations. Overall, the website demonstrates minimal digital maturity and security posture.
- PPublic Transport Authority of Western Australia
pta.wa.gov.au
Transportation · Australia
55Medium
NIS2 5 · GDPR 28
NIS2 5 · GDPR 28
The Public Transport Authority of Western Australia (PTA) operates as the primary government agency responsible for public transportation services across Western Australia. The website serves as a comprehensive portal providing information about its key services including Transperth, Transwa, Transregional, and School Bus Services. The PTA positions itself as a safe, customer-focused, integrated, and efficient public transport provider, targeting residents and visitors within the region. The site reflects a well-established government entity with a large operational scale and a clear focus on public transport infrastructure and service delivery. Technically, the website is built on the DNN (DotNetNuke) CMS platform using ASP.NET WebForms, enhanced with jQuery, Bootstrap, and various third-party analytics and tracking tools such as Google Tag Manager, Facebook Pixel, and Siteimprove Analytics. The site demonstrates good mobile optimization and accessibility basics, with a moderate performance profile. SEO practices are adequately implemented with proper meta tags and structured navigation. From a security perspective, the site uses HTTPS and includes anti-forgery tokens in forms, indicating some level of security awareness. However, there is a lack of visible security headers and no published vulnerability disclosure or incident response information. Privacy compliance is partially addressed with a comprehensive privacy policy and terms of use, but the absence of a cookie consent mechanism despite tracking scripts is a notable gap. No contact emails or phone numbers are explicitly provided on the homepage, which may affect user trust and support accessibility. Overall, the PTA website is a professional and trustworthy government site with solid business credibility and technical implementation. Security posture is adequate but could be improved with enhanced headers, explicit consent mechanisms, and incident response transparency. Strategic recommendations include implementing cookie consent, publishing security policies, and improving security headers to strengthen compliance and user trust.
Business Leaders Maltabusinessleadersmalta.com
Other · Malta
56Medium
NIS2 0 · GDPR 75
NIS2 0 · GDPR 75
Business Leaders Malta is a well-established conference provider based in Malta, specializing in organizing dynamic business events and conferences that attract over 500 business professionals. The company has a strong market position as a leading event organizer in Malta, focusing on business innovation, leadership, and networking. Their digital presence is built on a modern WordPress infrastructure with a variety of plugins enhancing user experience, analytics, and marketing capabilities. The website is professionally designed, mobile-optimized, and SEO-friendly, reflecting a mature digital strategy. Security posture is strong with HTTPS enforced, reCAPTCHA integration, and cookie consent mechanisms, although explicit security and incident response policies are not publicly available. Overall, the website and business demonstrate high trustworthiness and professionalism, with room for improvement in publishing security policies and direct contact information for incident response.
- RRestaurant Associates
restaurantassociates.com
Hospitality · United States
52Medium
NIS2 5 · GDPR 33
NIS2 5 · GDPR 33
Restaurant Associates (R/A) is a well-established on-site dining management company operating as a member of Compass Group, with over 75 years of experience in culinary innovation, hospitality, and well-being services. The company targets corporate clients and workplace dining markets, positioning itself as a leader in hospitality excellence. Their website reflects a mature digital presence with comprehensive content, clear branding, and active social media engagement. Technically, the site is built on WordPress using modern themes and plugins, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and no exposed sensitive data, though security headers could be enhanced and privacy compliance improved by adding cookie consent mechanisms. Overall, the domain registration and WHOIS data align well with the business claims, indicating a legitimate and trustworthy entity.
- GGEICO
geico.jobs
Finance · United States
55Medium
NIS2 0 · GDPR 25
NIS2 0 · GDPR 25
GEICO is a well-established insurance company specializing in auto insurance and is a wholly owned subsidiary of Berkshire Hathaway. The website analyzed is a careers portal hosted on the Workday platform, designed to provide job seekers with information about employment opportunities at GEICO. The site content is minimal and focused primarily on recruitment, with no visible privacy or cookie policies, contact information, or terms of service on the analyzed page. Technically, the site uses modern JavaScript and Workday's candidate experience framework, with assets served via Workday's CDN, indicating a moderate level of digital maturity. Security posture is moderate but could be improved by adding security headers and explicit HTTPS enforcement. Overall, the site is functional but lacks comprehensive compliance and transparency features.
Association Française du Marketingafm-marketing.org
Education · France
35High
NIS2 10 · GDPR 10
NIS2 10 · GDPR 10
The Association Française du Marketing (AFM) is a French academic non-profit organization founded in 1984, serving a community of approximately 700 members including researchers, doctoral candidates, and marketing practitioners. It focuses on promoting marketing research and disseminating knowledge primarily within the francophone academic and professional marketing community. The website offers comprehensive information on events, publications, membership, and job opportunities, positioning AFM as a leading scientific reference in marketing in France and internationally within the francophone sphere. Technically, the website employs a modern technology stack including jQuery, Google reCAPTCHA, Google Translate, and SEO tools integrated via SeoSamba's Marketing Operating System. The site is mobile-optimized, uses HTTPS, and includes structured data for SEO. Performance is moderate with good navigation and content quality. From a security perspective, the site uses HTTPS and Google reCAPTCHA to protect forms, but lacks explicit security headers and published security or incident response policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism, which is a gap given GDPR requirements. Overall, the website is professional, trustworthy, and well-aligned with its academic mission. Strategic recommendations include enhancing privacy compliance with cookie consent, publishing security policies, and implementing additional security headers to improve security posture and regulatory compliance.
Kyte Globalkyteconsultants.com
Technology · Malta
55Medium
NIS2 55 · GDPR 70
NIS2 55 · GDPR 70
Kyte Global is a well-established cybersecurity and compliance consultancy founded in 2006, serving clients in over 65 countries. The company specializes in providing comprehensive services including AML, GDPR, PCI DSS, ISO 27001, SOC 2, and penetration testing, targeting regulated entities primarily in the fintech, gaming, and technology sectors. Their market position is strong, supported by multiple certifications and a professional digital presence. Technically, the website is built on WordPress with modern tools such as Google Analytics, Microsoft Clarity, and CookieYes for privacy compliance. The site is well-optimized for SEO, mobile-friendly, and incorporates robust consent mechanisms. Security posture is solid with HTTPS enforced, reCAPTCHA protection on forms, and no visible vulnerabilities, though additional security headers could enhance protection. Overall, Kyte Global demonstrates a mature digital infrastructure aligned with its business objectives and compliance requirements.
EDITECeditec.co
Other
50Medium
NIS2 0 · GDPR 10
NIS2 0 · GDPR 10
EDITEC is a leading provider of lottery products and operations across Africa and the Middle-East, offering innovative and high-quality gaming solutions through a vast network of computerized points of sale. The company operates in multiple markets and emphasizes transparency, reliability, and responsible gaming. Their services include lottery, sports betting, gaming activities, and consultancy in various business domains. The website is built on WordPress using modern themes and plugins, providing a professional and responsive user experience. Security posture is moderate with HTTPS enabled and some security best practices observed, but there are concerns such as insecure password input fields and lack of security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the website is credible but could improve in security and compliance aspects.
Sovereign Order of Maltaorderofmalta.int
Non-profit · Italy
67Medium
NIS2 5 · GDPR 63
NIS2 5 · GDPR 63
The Sovereign Order of Malta is a historic lay religious Catholic order recognized as a sovereign subject of international law, with a significant global presence in humanitarian and medical aid across 130 countries. The organization operates with a clear mission focused on medical, social, and humanitarian projects, supported by diplomatic activities and a structured governance system. The website reflects this stature with comprehensive content, clear navigation, and multilingual support, targeting a broad audience including members, humanitarian partners, and the general public. Technically, the website is built on WordPress with a modern tech stack including jQuery, Bootstrap, and Owl Carousel, optimized for SEO and mobile responsiveness. Hosting is inferred to be via Cloudflare, ensuring good performance and security. Privacy compliance is robust, featuring a detailed cookie policy and consent mechanism powered by OneTrust, aligning with GDPR requirements. Security posture is strong with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. However, explicit security headers could be improved to enhance protection. Contact information is clearly presented with official emails, phone numbers, and physical addresses, reinforcing trust and credibility. Overall, the website demonstrates a mature digital presence suitable for a large international non-profit organization, with strong compliance and security practices. Strategic recommendations include enhancing security headers and continuous monitoring of third-party scripts to maintain security integrity.
Nouvtfork.com
Education · Malta
34High
NIS2 0 · GDPR 45
NIS2 0 · GDPR 45
Nouv is a Malta-based professional services and consulting firm with a strong regional presence including offices in Ireland and Saudi Arabia. The company offers a broad range of services including advisory, audit and assurance, tax, corporate services, and a dedicated academy providing accredited and bespoke training programs. Their market position is that of a trusted partner to businesses and individuals seeking professional growth and compliance support. Technically, the website is built on WordPress with WooCommerce and modern frontend frameworks like Bootstrap and Slick Carousel, integrated with Google Analytics, Facebook Pixel, and Zoho SalesIQ for marketing and customer engagement. Security posture is strong with HTTPS, cookie consent mechanisms, and reCAPTCHA, though a dedicated security policy and incident response contacts are not publicly available. Overall, the website is professional, well-branded, and compliant with GDPR, providing clear contact information and trust signals such as affiliations and certifications. The domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.
Other · Finland
45High
NIS2 0 · GDPR 25
NIS2 0 · GDPR 25
The website dinetarragon.com currently serves as a domain parking and resale page with no active business content or services. The primary visible content is a banner advertising the domain for sale and an embedded iframe loading external content from an untrusted third-party domain. The site lacks fundamental elements such as privacy policies, contact information, and HTTPS encryption, which significantly diminishes its credibility and trustworthiness. The domain is registered recently with privacy protection, consistent with a domain resale business model. From a technical perspective, the site uses basic HTML, CSS, and JavaScript with an iframe embedding external content. It is hosted behind AWS Cloudfront CDN but lacks modern security headers and HTTPS, exposing visitors to potential risks. Mobile optimization and accessibility are minimal, and SEO features are poor due to the lack of meaningful content. Security posture is weak, with no HTTPS, no security headers, and the presence of an iframe from a suspicious domain, which could expose users to malicious content. No privacy or cookie policies are present, and no contact or incident response information is available, indicating low compliance with privacy regulations such as GDPR. Overall, the site poses a moderate risk due to lack of security controls and transparency. Strategic recommendations include enabling HTTPS, removing or validating third-party iframe content, adding privacy and cookie policies, and providing clear contact information to improve trust and compliance.
- SSucuri WebSite Firewall - Access Denied
gfddesign.com
Other
51Medium
NIS2 5 · GDPR 28
NIS2 5 · GDPR 28
The website gfddesign.com is currently inaccessible due to a Sucuri Website Firewall block triggered by a country-based IP restriction (Block ID: GEO02). This block prevents any meaningful content from being accessed or analyzed, resulting in a lack of visible business information, contact details, or technical metadata. The page served is a standard Sucuri access denied message with links only to Sucuri resources and Google Fonts. Consequently, the digital maturity and technical infrastructure of the actual business behind the domain cannot be assessed. Security posture evaluation is limited to the presence of the WAF itself, which is actively blocking access from certain geographies, indicating some level of security enforcement but also potential overblocking risks. Overall, the site is currently non-functional for users from the blocked region, and no direct business or compliance information is available from the content.
Belair Propertybelair.com.mt
Real Estate · Malta
52Medium
NIS2 0 · GDPR 18
NIS2 0 · GDPR 18
Belair Property is a Malta-based real estate agency specializing in property sales, rentals, commercial and luxury properties. The website presents a professional and well-structured platform with comprehensive property listings, agent contact details, and exclusive offerings. The company targets property buyers, renters, and sellers primarily in Malta, positioning itself as a trusted and established player in the local real estate market. Technically, the website is built on WordPress with modern plugins and SEO optimizations, offering good mobile responsiveness and user experience. Security posture is solid with HTTPS enabled and secure forms, though some security headers and policies are missing. Privacy compliance is partial, lacking a cookie consent mechanism and explicit GDPR indicators. Overall, the site is trustworthy and professionally maintained, with room for improvement in privacy and security transparency.
The N Word Ltdicandothings.com
Media · Malta
43High
NIS2 0 · GDPR 10
NIS2 0 · GDPR 10
I Can Do Things, operated by The N Word Ltd, is a small Malta-based digital marketing agency specializing in social media marketing, online advertising, and media buying, with a focus on gaming, casino, and event promotion sectors. The company offers services including PPC advertising, digital strategy consulting, social media marketing, online reputation management, and content marketing. Their market position is niche and local, targeting businesses seeking to enhance their online presence and convert visitors into clients. Technically, the website uses a modern front-end stack including Bootstrap, Material Design, jQuery, and Font Awesome, hosted on Cloudflare Pages. While the site has a good design and user experience with clear navigation, mobile optimization and accessibility are basic. SEO optimization is also basic, with proper meta tags but no advanced structured data or rich snippets. From a security perspective, the site lacks HTTPS enforcement, which is a critical vulnerability. No security headers are detected, and there are no visible privacy or cookie policies, indicating poor privacy compliance. The use of Facebook Pixel and Cloudflare Analytics shows moderate user tracking but without transparent consent mechanisms. No incident response or security policies are published, and no certifications or compliance badges are visible. Overall, the website presents a professional but small-scale business with moderate trustworthiness. The lack of HTTPS and privacy policies significantly impacts security and compliance scores, suggesting urgent improvements are needed to protect user data and enhance trust.
Other
45High
NIS2 5 · GDPR 15
NIS2 5 · GDPR 15
The website maleth-aero.com is currently inaccessible, serving a minimal HTTP 403 Forbidden error page via an openresty server. No business content, metadata, or contact information is available for analysis. This lack of accessible content prevents assessment of the company's market position, services, or technical infrastructure. The absence of HTTPS and security headers further indicates a poor security posture. Due to the blocked content, the overall risk assessment is high, and strategic recommendations focus on restoring accessible, secure web presence with proper compliance and security controls.
AQSaqsmed.com
Energy · Malta
24Critical
NIS2 13 · GDPR 28
NIS2 13 · GDPR 28
AQS is a Malta-based company specializing in renewable energy solutions including solar photovoltaic systems, smart home automation, EV chargers, and energy storage. The company targets both residential and commercial customers, offering a range of products and services with leasing and revenue sharing options. Their market position is supported by a significant installed base of over 50,000 panels and a portfolio of notable projects. Technically, the website is built on WordPress with modern plugins and SEO tools, providing a good user experience and mobile optimization. Security posture is adequate with HTTPS enforced but lacks comprehensive security headers and explicit security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the website is professional and trustworthy with room for improvement in security and privacy compliance.
- Aramis Capital (Europe) Ltd.
aramiseurope.com
Finance · Malta
54Medium
NIS2 0 · GDPR 48
NIS2 0 · GDPR 48
Aramis Capital (Europe) Ltd. is a Malta-based financial services firm specializing in wealth management, capital raising, and advisory services targeted at European firms and investors. The company leverages Malta's position as a leading asset management and financial services center to provide tailored investment solutions. Their website reflects a professional and consistent brand image, with clear navigation and relevant content in French, catering to their target audience. The business model focuses on assisting clients in capital raising and advisory, positioning themselves as an experienced partner in the financial markets. Technically, the website is built on the Wix platform using modern technologies such as React and integrates Sentry for error monitoring. The site demonstrates moderate performance and basic mobile optimization, with standard SEO and accessibility features. Hosting is managed via Wix's infrastructure and CDN services, ensuring reliable availability. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms, indicating compliance with privacy regulations such as GDPR. However, there is room for improvement in implementing additional security headers and publishing explicit security or incident response policies. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website presents a trustworthy and professional front for Aramis Capital (Europe) Ltd., with a solid technical foundation and adequate privacy compliance. Strategic enhancements in security policies and technical optimizations could further strengthen their digital presence and risk posture.
- PParagon Offshore Limited
paragonoffshore.com
Energy
51Medium
NIS2 0 · GDPR 25
NIS2 0 · GDPR 25
Paragon Offshore Limited is an offshore drilling company that underwent significant corporate restructuring, culminating in its acquisition by Borr Drilling Limited in 2018. The website primarily serves as a corporate notice platform informing visitors about the ownership change and the status of shares. The company operates in the energy sector, specifically offshore drilling, and functions as a subsidiary under Borr Drilling Limited. The website content is minimal and focused on corporate information rather than marketing or customer engagement. Technically, the website is built with basic HTML, CSS, and JavaScript without modern frameworks or CMS detected. The site lacks mobile optimization and accessibility features, and no advanced SEO or analytics tools are evident. The performance is moderate but limited by the simplicity of the site. There is no evidence of HTTPS usage or security headers, which indicates a weak security posture. From a security perspective, the site lacks critical elements such as HTTPS, privacy and cookie policies, contact information, and incident response details. No forms or user input mechanisms are present, reducing attack surface but also limiting user engagement. The absence of security best practices and compliance indicators suggests the site is informational only and not designed for interactive or transactional use. Overall, the website presents a low-risk profile due to its static nature but suffers from poor security and privacy compliance. Strategic improvements in security, privacy policies, and technical modernization are recommended to enhance trust and compliance.
- KKambi
kambi.com
Information technology and services · United kingdom
54Medium
NIS2 5 · GDPR 75
NIS2 5 · GDPR 75
Inovatiq Limitedinovatiq.com
Media · Malta
48High
NIS2 0 · GDPR 25
NIS2 0 · GDPR 25
Inovatiq Limited operates as a specialized lead generation and affiliate marketing company primarily focused on the iGaming and entertainment sectors. The company targets multiple international markets including Asia, Africa, and the Americas, positioning itself as an emerging high-value online lead generator. Their key services include affiliate network management, SEO optimization, content marketing, and business development support for affiliates. The website reflects a professional and consistent brand image with clear messaging and partner endorsements. Technically, the site is built on WordPress with Elementor, leveraging modern web technologies and SEO best practices. Security posture is strong with HTTPS and security headers properly implemented, though there is room for improvement in privacy compliance and incident response transparency. Overall, the digital infrastructure supports their business goals effectively, with moderate performance and good mobile optimization.
- WW & E Baum
webaum.com
Other · United States
33High
NIS2 0 · GDPR 10
NIS2 0 · GDPR 10
W & E Baum is a specialized manufacturer and designer of donor recognition and memorial products with a legacy spanning over 100 years. The company serves a diverse clientele including houses of worship, educational institutions, hospitals, non-profits, and corporations primarily in the United States. Their product portfolio includes donor walls, trees, plaques, awards, and religious items, positioning them as a niche leader in the donor recognition market. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to their target audience. Technically, the website employs common web technologies such as jQuery, Owl Carousel, Adobe Launch, Google Tag Manager, and Zendesk Chat to enhance user experience and marketing capabilities. The site is moderately optimized for mobile devices and SEO, though accessibility features appear basic. Performance is moderate with asynchronous script loading. From a security perspective, the site lacks visible security headers and does not provide privacy or cookie policies, which are critical for GDPR compliance and user trust. While HTTPS usage is implied, it is not explicitly confirmed in the provided data. The absence of incident response and vulnerability disclosure information indicates room for improvement in security transparency. Overall, the security posture is moderate but could be significantly enhanced with standard best practices. The domain registration data aligns well with the company's claims, supporting legitimacy and trustworthiness. The website's business credibility is strong due to clear contact information, testimonials, and a long-standing market presence. Strategic recommendations include implementing comprehensive privacy and cookie policies, enhancing security headers, enforcing HTTPS, and improving GDPR compliance to elevate trust and security standards.
- Stella Maris
stellamaris.org
Healthcare · United States
52Medium
NIS2 0 · GDPR 28
NIS2 0 · GDPR 28
Stella Maris is a well-established non-profit healthcare provider specializing in elder care services including skilled nursing, long-term care, hospice, rehabilitation, and senior living options. Affiliated with the Sisters of Mercy and Mercy Health Services, it holds a strong regional position in Maryland with multiple awards and a trusted reputation. The website effectively communicates its services and mission to its target audience of elderly individuals and their families. Technically, the site is built on WordPress with modern SEO and accessibility features, providing a good user experience across devices. Security posture is solid with HTTPS and no visible vulnerabilities, though it lacks some advanced security headers and explicit incident response information. Privacy compliance is partial, with a comprehensive privacy policy but no cookie consent mechanism. Overall, the site is professional, trustworthy, and well-maintained, supporting the organization's mission and business goals.
- Hhet CAK
werkenbijcak.nl
Government · Netherlands
61Medium
NIS2 0 · GDPR 58
NIS2 0 · GDPR 58
Het CAK is a Dutch public sector organization providing essential government services related to healthcare accessibility and financial contributions for care. The website serves as a portal for citizens to access information and job vacancies, emphasizing a human-centered approach to service delivery. The technical infrastructure is modern, leveraging Nuxt.js and a CMS backend, with integration of Google Analytics and Tag Manager for user behavior insights. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and headers could be improved. Overall, the website is professional, accessible, and trustworthy, supporting the organization's mission effectively.
IFBBifbb.com
Other · Spain
59Medium
NIS2 0 · GDPR 40
NIS2 0 · GDPR 40
The International Fitness and Bodybuilding Federation (IFBB) is a globally recognized non-profit governing body for bodybuilding and fitness sports, founded in 1946 and headquartered in Madrid, Spain. It oversees a vast network of affiliated national members and organizes thousands of events annually, serving athletes, coaches, judges, and fans worldwide. The website reflects a mature digital presence with comprehensive content, event information, educational resources, and media galleries. Technically, the site is built on WordPress with modern plugins and frameworks, offering good performance and mobile optimization. Security posture is solid with HTTPS and GDPR compliance, though some security headers could be improved. No critical vulnerabilities or blocking mechanisms were detected, indicating a trustworthy and professional online presence.
- PHB Development
phbdevelopment.com
Other
51Medium
NIS2 0 · GDPR 40
NIS2 0 · GDPR 40
PHB Development is a consulting collective specializing in digital transformation across multiple sectors including finance, agriculture, education, energy, and humanitarian assistance. The company positions itself as an industry leader with a global footprint and a strong partner ecosystem. Their website reflects a professional and consistent brand with clear service offerings and impact stories. Technically, the site is built on WordPress with modern libraries and frameworks, supporting multilingual content and responsive design. Security posture is adequate with HTTPS and reCAPTCHA implemented, though lacking some security headers and explicit policies. Privacy compliance is minimal with no visible privacy or cookie policies. Overall, the site is trustworthy and professional but would benefit from enhanced security and compliance transparency.
- FFUJIFILM Holdings America Corporation
fujifilmusa.com
Technology · United States
65Medium
NIS2 35 · GDPR 63
NIS2 35 · GDPR 63
FUJIFILM Holdings America Corporation operates a comprehensive website serving the United States market, showcasing its broad portfolio across consumer imaging, healthcare, and business sectors. The company is positioned as a global leader in imaging and healthcare technology, offering products such as digital cameras, diagnostic imaging systems, printing equipment, and semiconductor materials. The website targets consumers, healthcare professionals, and business clients, reflecting an enterprise-level operation with consistent branding and high-quality content. Technically, the website is built on Drupal CMS and employs modern technologies including Google Tag Manager for analytics and OneTrust for cookie consent management. The site demonstrates good mobile optimization, accessibility, and SEO practices, with moderate performance. Security is robust with HTTPS enforced and privacy compliance mechanisms in place, although explicit security headers and a vulnerability disclosure policy are absent. The security posture is strong, with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed through comprehensive policies and consent banners. Incident response contact is available indirectly via a compliance hotline. The domain registration details align well with the corporate identity, supporting high legitimacy and trustworthiness. Overall, the website reflects a mature digital presence with strong business credibility and privacy practices. Strategic improvements could include adding explicit security headers, publishing a security.txt file, and providing direct incident response contact information to enhance security transparency and readiness.
ItLabs22itlabslv.com
Technology
36High
NIS2 0 · GDPR 43
NIS2 0 · GDPR 43
ITLABS22 is a small technology company specializing in digital marketing and IT solutions, offering services such as multi-channel CPC advertising, social media marketing, ad spend optimization, influencer marketing, CRM, and brand reputation building. The company positions itself as a region-leading provider of cost-effective digital marketing solutions, targeting businesses seeking to enhance their marketing efforts. The website is built on WordPress and uses common plugins like Contact Form 7 for data collection via forms. The technical infrastructure is moderate with some outdated components such as an old jQuery version, which may pose security risks. The site is mobile optimized and presents content clearly with good navigation and professional design. Security posture is basic with HTTPS enabled but lacks important security headers and explicit incident response or security policies. Privacy compliance is partial with privacy and cookie policies present but no consent mechanism. Contact information is limited to forms without direct emails or phone numbers. Overall, the website is functional and professional but could improve security and privacy practices to enhance trust and compliance.
Arkadia Grouparkadiagroup.fr
Energy · France
24Critical
NIS2 0 · GDPR 0
NIS2 0 · GDPR 0
Arkadia Group is a French independent engineering consulting company specializing in project management and engineering services across key industrial sectors including energy, transport, aerospace, defense, and life sciences. The company emphasizes a human-centered and sustainable engineering approach, supported by multiple ISO certifications (ISO 9001, ISO 19443, MASE, CERFI) that reinforce its commitment to quality and security. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content tailored to industrial clients in France and internationally. Technically, the site is built on WordPress with modern plugins and tools such as Yoast SEO, Google Tag Manager, and reCAPTCHA, ensuring good performance, SEO, and security practices. Security posture is strong with HTTPS, form protections, and cookie consent mechanisms, although explicit security policies and incident response contacts are not published. Overall, the domain registration and website content are consistent and trustworthy, indicating a legitimate and credible business.
Elit'Aviaelitavia.com
Transportation · Malta
59Medium
NIS2 47 · GDPR 28
NIS2 47 · GDPR 28
Elit'Avia is a Malta-based private aviation company founded in 2006, specializing in aircraft management, private charter, and aircraft sales and acquisitions. The company emphasizes sustainable aviation and offers bespoke services tailored to private aviation clients globally. Their market position is that of a leading global and sustainable operator with a strong commitment to client satisfaction and environmental responsibility. Technically, the website is built on WordPress using Elementor and jQuery, with good SEO and mobile optimization, though some accessibility features could be improved. Security-wise, the site uses HTTPS with no visible vulnerabilities and demonstrates transparency through a published security incident notice, but lacks a formal security policy and vulnerability disclosure. Overall, the website is professional, trustworthy, and well-aligned with the company's business claims.
Dmax & Associates Ltd.dmax.tv
Media · Malta
37High
NIS2 5 · GDPR 45
NIS2 5 · GDPR 45
Dmax & Associates Ltd. is a Malta-based company specializing in digital marketing services including social media management, email marketing intelligence, smartphone apps, knowledge sharing solutions, and data visualization services. The company targets businesses seeking focused and results-oriented marketing solutions, positioning itself as a regional player with a strong client testimonial base and a portfolio of digital products. The website is built on Joomla CMS with a moderate technical infrastructure leveraging common JavaScript libraries and third-party tools such as Google Analytics and MyLiveChat for user engagement and analytics. While the site demonstrates basic GDPR compliance through privacy and cookie policies and consent mechanisms, it lacks explicit security policies and incident response contacts. Security posture is moderate but impacted by the use of outdated JavaScript libraries and absence of security headers. Overall, the website is professional and functional but would benefit from technical and security improvements to enhance trust and compliance.
202 Jewellery202jewellery.com
Retail · Malta
56Medium
NIS2 5 · GDPR 48
NIS2 5 · GDPR 48
202 Jewellery is a retail business specializing in branded jewellery and watches, operating both online and through physical stores in Malta and Gozo. The website showcases a wide range of products including earrings, necklaces, bracelets, rings, charms, and watches, along with services such as welding and piercing studios. The company targets consumers in Malta and Gozo seeking high-quality silver jewellery and branded watches, supported by a loyalty program and gift card offerings. Technically, the website is built on the Wix platform, leveraging modern technologies including React 18 and various Wix apps for e-commerce, bookings, loyalty, and more. The site demonstrates good performance and basic mobile optimization, with a consistent and professional design. SEO and accessibility features are present but could be enhanced. From a security perspective, the site enforces HTTPS and includes some security best practices in its JavaScript. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic, with privacy and cookie policies present, though more comprehensive GDPR compliance measures could be implemented. Overall, 202 Jewellery presents a trustworthy and professional online presence with a solid technical foundation. Strategic improvements in privacy compliance, accessibility, and security headers would further enhance its security posture and user trust.
Other
46High
NIS2 0 · GDPR 25
NIS2 0 · GDPR 25
The website for castlepharmacy.co.uk is currently a minimal placeholder or parking page with no substantive content, metadata, or business information. It appears to be underdeveloped or inactive, lacking any visible privacy, cookie, or terms of service policies. The technical infrastructure is very basic, relying on minimal JavaScript and external scripts from Google Adsense and a parking service. There is no evidence of HTTPS or security best practices implemented, which poses significant security and trust concerns. Overall, the site does not provide any meaningful information about the business or its services, resulting in a low digital maturity level and poor user experience.
Famalco Groupfamalco.net
Other · Malta
57Medium
NIS2 0 · GDPR 25
NIS2 0 · GDPR 25
Famalco Group is a diversified conglomerate based in Malta, operating across eleven distinct sectors including fresh produce importation, logistics, retail franchising, real estate services, marketing, mobility, investment partnerships, property development, energy, and business solutions. The company holds exclusive franchise rights for prominent global brands and maintains a strong market presence in Malta and Central/Eastern Europe. Their business model leverages a broad portfolio of subsidiaries to deliver comprehensive services to a wide range of customers. The website reflects a mature digital infrastructure with modern technologies such as WordPress CMS, Slider Revolution, and integrated analytics and marketing tools. Security measures include HTTPS enforcement, Google reCAPTCHA, and a robust cookie consent mechanism, indicating a strong commitment to user privacy and data protection. Overall, the site is professionally designed, mobile-optimized, and SEO-friendly, supporting the company's market positioning and credibility.
Casapinta Design Groupcasapinta.com
Hospitality · Malta
33High
NIS2 5 · GDPR 28
NIS2 5 · GDPR 28
Casapinta Design Group is a Malta-based event management and exhibition contractor specializing in exhibitions, conventions, weddings, tent rentals, and custom event designs. Established since 2015, it holds a leading market position in Malta with a reputation for quality and reliability. The company targets businesses and individuals seeking comprehensive event solutions, offering a broad range of services from design to turnkey event management. Technically, the website is built on WordPress with a modern JavaScript stack including jQuery and various plugins for enhanced user experience and SEO. Hosting appears to be managed by SiteGround, ensuring moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and secure form handling via Gravity Forms, but lacks advanced security headers and explicit incident response policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism or GDPR-specific disclosures. Overall, the site is professional and trustworthy but could improve in security and privacy transparency.
- AAP Valletta
architecture-project.com
Real Estate · Malta
53Medium
NIS2 0 · GDPR 43
NIS2 0 · GDPR 43
AP Valletta is a well-established architectural firm based in Malta, specializing in sustainable heritage and multidisciplinary architectural services. Founded in 1991, the firm has a strong market position supported by numerous awards and a multinational team. Their website reflects a professional and content-rich presence, targeting clients interested in architectural design, restoration, and urban planning. Technically, the site is built on WordPress with modern JavaScript libraries and plugins, providing a good user experience and mobile optimization. Security-wise, the site uses HTTPS for external resources and implements cookie consent with opt-in mechanisms, but lacks visible advanced security headers and explicit security policies. Overall, the website demonstrates a moderate to good security posture with room for improvement in transparency and incident response readiness.
- MFC Merchant Bank Ltd.
mfcmerchantbank.com
Finance · Malta
49High
NIS2 0 · GDPR 25
NIS2 0 · GDPR 25
MFC Merchant Bank Ltd. is a Malta-based specialty trade and structured finance bank operating since 2016. It focuses on providing trade finance, factoring, forfaiting, and structured export finance services primarily to businesses engaged in import/export activities. The bank is a subsidiary of MFC Bancorp Ltd., a publicly listed company on the NYSE, which adds credibility and financial backing. The website is professionally designed and hosted on a specialized investor relations platform (Q4 Inc.), indicating a mature digital presence tailored for financial institutions. The technical infrastructure leverages ASP.NET Web Forms with modern JavaScript libraries and integrates analytics and marketing tools such as Google Analytics and ShareThis. Security practices include anonymized IP tracking and anti-CSRF tokens in forms, but lack visible advanced security headers and explicit privacy or cookie policies. Overall, the site presents a moderate security posture with room for improvement in compliance and security transparency.
Prohealth Ltd Maltaprohealth.com.mt
Healthcare · Malta
38High
NIS2 35 · GDPR 43
NIS2 35 · GDPR 43
Prohealth Ltd Malta is a well-established healthcare distributor specializing in pharmaceuticals, dermo-cosmetics, medical devices, and nutrition supplements. Founded in 1995, the company holds a leading market position in Malta with a broad portfolio of over 30 brands and a strong customer service reputation. The website reflects a professional and consistent brand image targeting healthcare providers and consumers in Malta. Technically, the site is built on WordPress with modern libraries and frameworks, optimized for mobile and SEO, and hosted likely on SiteGround. Security posture is strong with HTTPS enforced and cookie consent implemented, though explicit security headers could be improved. No critical vulnerabilities or blocking mechanisms were detected, indicating good operational security. Overall, the website and business demonstrate high professionalism, trustworthiness, and compliance with privacy regulations.
PT Freeport Indonesiaptfi.co.id
Energy · Indonesia
61Medium
NIS2 0 · GDPR 10
NIS2 0 · GDPR 10
PT Freeport Indonesia is a major mining company operating in Papua, Indonesia, specializing in copper, gold, and silver extraction and processing. The company maintains a strong market position with global concentrate marketing and emphasizes sustainability, community engagement, and corporate governance. The website reflects a professional digital presence with good content quality and navigation, supporting both Indonesian and English languages. Technically, the site uses modern JavaScript libraries and tracking tools, with moderate performance and good mobile optimization. Security posture is solid with HTTPS and secure forms, though lacks some advanced security headers and explicit incident response information. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is trustworthy and credible but would benefit from enhanced privacy and security disclosures.
Other
46High
NIS2 0 · GDPR 25
NIS2 0 · GDPR 25
The website aspider.com currently serves as a minimal placeholder or parked domain with no substantive content or business information. The site includes only a basic HTML shell with references to Google Adsense and a parking-lander script, indicating it is not an active commercial or informational website. There is no visible metadata, structured data, or contact details to provide insight into the business or its operations. Technically, the site uses JavaScript and React frameworks but lacks performance and SEO optimizations. Security posture is weak with no HTTPS detected and no security headers or policies in place. Overall, the site presents a low trust profile and minimal digital maturity.
Mr Messagingmrmessaging.net
Telecommunications · Malta
51Medium
NIS2 0 · GDPR 10
NIS2 0 · GDPR 10
Mr Messaging Limited is a Malta-based cloud communication service provider specializing in SMS and related telecommunications services. Founded in 2012, the company offers key services including Sending SMS, 2-WAY SMS, Number Portability (MNP), and Number Cleansing (HLR). Positioned as an industry leader, Mr Messaging targets businesses seeking reliable and cost-effective communication solutions to engage their customers globally. The website reflects a professional and consistent brand image supported by testimonials and GSMA certification, enhancing trustworthiness. Technically, the website is built on WordPress using modern frameworks such as Foundation CSS and jQuery, with SEO optimized via Yoast plugin. It integrates Google Analytics and LinkedIn Insight for user tracking and marketing analytics. The site is mobile-optimized with moderate performance and basic accessibility features. Security-wise, HTTPS is properly configured, but the absence of security headers and explicit security policies indicates room for improvement. The security posture is adequate but could be enhanced by implementing security headers, publishing privacy and cookie policies, and establishing incident response and vulnerability disclosure mechanisms. Contact information is available, though no phone number is explicitly provided. Social media presence is active on Instagram, Facebook, and LinkedIn. Overall, the website is functional, professional, and moderately secure, with opportunities to strengthen privacy compliance and security transparency.
- WWordPress › Error
avantacare.com
Other
56Medium
NIS2 0 · GDPR 25
NIS2 0 · GDPR 25
The website avantacare.com is currently inaccessible for normal use, displaying a WordPress critical error page indicating a backend failure or misconfiguration. This prevents any meaningful interaction or content consumption by visitors. The lack of visible business information, contact details, or policies severely limits the ability to assess the company's market position or services. Technically, the site is built on WordPress but is currently non-functional, with no evidence of security headers or HTTPS status from the provided data. The security posture is weak due to the critical error and absence of standard protections. Overall, the site presents a high risk for visitors and lacks trust signals, requiring urgent remediation to restore functionality and compliance.
Ophi Technologies Oyophi.fi
Energy · Finland
33High
NIS2 5 · GDPR 0
NIS2 5 · GDPR 0
Ophi Technologies Oy is a Finnish technology company specializing in bioenergy solutions, mechanical and automation design, and manufacturing services. The company positions itself as an innovative domestic player with a focus on maximizing customer value through technology products and engineering services. Their partnership with Siemens underscores their industrial credibility and market presence. The website is professionally designed using WordPress and Elementor, featuring clear navigation and bilingual support (Finnish and English). The technical infrastructure includes modern web technologies and a moderate performance profile with good mobile optimization. Security posture is solid with HTTPS enforced and form validation implemented, though explicit security policies and cookie consent mechanisms are absent. Overall, the site reflects a trustworthy and credible business with room for improvement in privacy compliance and security transparency.
- Sonova AG
sonova.com
Healthcare · Switzerland
62Medium
NIS2 0 · GDPR 63
NIS2 0 · GDPR 63
Sonova AG is a leading global provider of innovative hearing care solutions, including hearing instruments, audiological care, consumer hearing products, and cochlear implants. Founded in 1947 and headquartered in Switzerland, Sonova operates multiple core brands and serves customers worldwide. The website reflects a mature digital presence built on Drupal 10, with modern web technologies and a strong focus on user experience, accessibility, and mobile optimization. Security posture is solid with HTTPS enforcement and cookie consent managed via OneTrust, though some security headers could be improved. Privacy compliance is robust, with clear policies and GDPR adherence. Overall, the website projects high professionalism and trustworthiness, supporting Sonova's market leadership in healthcare technology.
Think Design Collaborative Pvt. Ltd.thinkdesign.in
Technology · India
41High
NIS2 5 · GDPR 63
NIS2 5 · GDPR 63
Think Design Collaborative Pvt. Ltd. is a well-established global UI/UX design agency founded in 2004, specializing in user research, data visualization, and service design. The company serves a diverse clientele including enterprises, startups, and multinational conglomerates, positioning itself as a leader in design thinking and innovation. The website reflects a mature digital presence with comprehensive content, clear navigation, and professional branding. Technically, the site is built on WordPress with Elementor, leveraging modern JavaScript libraries and analytics tools such as Google Analytics and HubSpot. Security posture is strong with HTTPS enforced and appropriate security headers, though explicit security and incident response policies are not publicly documented. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site demonstrates high professionalism, trustworthiness, and technical maturity.
- Sacred Heart Greenwich
cshgreenwich.org
Education · United States
58Medium
NIS2 5 · GDPR 10
NIS2 5 · GDPR 10
Sacred Heart Greenwich is a well-established independent Catholic school serving Pre-K through Grade 12 girls, with a strong emphasis on college preparatory education and holistic student development. The school is part of a global Sacred Heart network, which enhances its market position and brand trust. The website reflects a professional and consistent brand image with comprehensive academic and extracurricular offerings, targeting families seeking quality education in the Greenwich, Connecticut area. Technically, the site uses modern analytics and tracking tools, is built on the Finalsite CMS platform, and is hosted with Cloudflare services, ensuring good performance and security. However, there are gaps in privacy compliance, notably the absence of a visible privacy policy and cookie consent mechanism, which could expose the institution to regulatory risks. Security posture is generally good with HTTPS and tracking protections, but explicit security headers are missing, and no incident response or security policy information is provided. Overall, the website is credible and trustworthy but would benefit from enhanced privacy and security transparency.
ShowsHappening Ltd.showshappening.com
E-commerce · Malta
53Medium
NIS2 5 · GDPR 58
NIS2 5 · GDPR 58
ShowsHappening Ltd. operates an online platform focused on event discovery and ticket sales primarily in Malta. The website offers a comprehensive catalog of events including concerts, theatre, clubbing, and cultural activities, targeting local attendees and event promoters. The business model centers on facilitating ticket transactions and event promotion, with a complementary platform, ShowsManager.com, for ticket sellers. Technically, the site employs modern JavaScript libraries such as jQuery, Semantic UI, Swiper.js, and Axios, hosted partially on Microsoft Azure Blob Storage for media assets. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS and anti-forgery tokens but lacks explicit security headers and incident response information. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Overall, the website is professional, trustworthy, and well-positioned in its niche market.
LOQUSloqusgroup.com
Technology · Malta
54Medium
NIS2 0 · GDPR 55
NIS2 0 · GDPR 55
LOQUS is a Malta-based ICT solutions provider specializing in business intelligence software for fleet management, routing, tracking, and enforcement systems. With over 25 years of market presence, the company offers a suite of software products including DispatchIT, RouteIT, TrakIT, and VMS, targeting businesses requiring efficient job dispatch, GPS tracking, and marine safety solutions. Their market position is that of an established regional player with a focus on technology-driven operational efficiency. Technically, the website employs a modern tech stack including Bootstrap, jQuery, and various slider libraries, with good mobile optimization and SEO practices. Security-wise, the site implements a GDPR-compliant cookie consent mechanism but lacks visible security headers and explicit security policies, indicating room for improvement in security posture. Overall, the website is professional and trustworthy, with clear contact information and privacy policies, but could enhance its security and incident response transparency.
- Novus Softech Ltd.
novusbet.com
Technology · Cyprus
64Medium
NIS2 5 · GDPR 43
NIS2 5 · GDPR 43
Novusbet is a well-established sports betting technology provider founded in 2016, offering a comprehensive sportsbook platform, gaming solutions, and omnichannel software tailored for operators worldwide, especially in Africa and Latin America. The company operates under Novus Softech Ltd., based in Cyprus, and maintains a strong market position with proprietary algorithms and a broad portfolio of betting and gaming products. Their website reflects a mature digital presence with multilingual support and detailed product information. Technically, the site uses modern web technologies including Vue.js, HTML5, and integrates multiple analytics and marketing tools such as Google Analytics, Facebook Pixel, and LinkedIn Insight Tag. Security posture is strong with HTTPS enforced, CSRF tokens, and GDPR-compliant data collection practices, although explicit security policies and incident response information are not publicly available. Overall, the website is professional, trustworthy, and well-optimized for performance and SEO.
- MMalta Red Cross
redcross.org.mt
Non-profit · Malta
45High
NIS2 0 · GDPR 0
NIS2 0 · GDPR 0
Malta Red Cross is a well-established non-profit organization dedicated to humanitarian aid, first aid training, and emergency operational services within Malta. The website provides comprehensive information about their services, volunteering opportunities, donation options, and educational courses. It targets the general public, volunteers, and donors, positioning itself as a trusted national Red Cross society with strong brand recognition and social media presence. Technically, the website is built on ASP.NET Web Forms with common libraries such as jQuery and Bootstrap, integrating Google Analytics and Facebook SDK for tracking and social engagement. The site is moderately optimized for mobile devices and offers a good user experience with clear navigation and professional design. However, SEO and accessibility features are basic and could be enhanced. From a security perspective, the site uses HTTPS and avoids exposing sensitive data but lacks important security headers and formal privacy or cookie policies, which are critical for GDPR compliance. No incident response or vulnerability disclosure mechanisms are evident. The WHOIS data aligns well with the website's claims, supporting its legitimacy. Overall, the site scores well on business credibility but has room for improvement in privacy compliance and security best practices.
- DDuška Vrhovac
duskavrhovac.com
Other · Serbia
27High
NIS2 5 · GDPR 25
NIS2 5 · GDPR 25
The website duskavrhovac.com serves as a personal and informational platform dedicated to the author Duška Vrhovac, offering multilingual content including biography, literary works, translations, interviews, and related materials. The site targets readers and literary enthusiasts interested in the author's work, operating as a small-scale, niche literary website without commercial e-commerce features. Technically, the site is built with basic HTML, CSS, and JavaScript, lacking modern frameworks or CMS integration. The design is dated, with limited mobile optimization and basic accessibility features. Security posture is weak, as the site is served over HTTP without HTTPS encryption, lacks security headers, and exposes a personal email address directly in the HTML. No privacy or cookie policies are present, indicating non-compliance with GDPR and related regulations. Visitor analytics are implemented via StatCounter, but user tracking is minimal. Overall, the site demonstrates moderate trustworthiness but requires significant improvements in security, privacy compliance, and technical modernization.