Security reports directory
139,950 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,199001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
128,151–128,200 of 139,950
Other
49High
NIS2 0 · GDPR 10
NIS2 0 · GDPR 10
The website bovassetmanagement.com is currently inaccessible due to a Cloudflare Web Application Firewall (WAF) challenge page employing Turnstile human verification. This security mechanism blocks direct access to the site's actual content, preventing extraction of business, contact, or policy information. Consequently, no metadata, forms, or business details are available for analysis. The site appears to be protected by Cloudflare services, but no further technical or security details can be ascertained from the provided data. Without access to the real content, the website's digital maturity, security posture, and compliance status cannot be evaluated.
IB Contractors Ltdibcontractors.com
Real Estate · United Kingdom
43High
NIS2 5 · GDPR 10
NIS2 5 · GDPR 10
IB Contractors Ltd is a small, established construction company based in Cardiff, UK, with over two decades of experience in the industry. The company offers a range of services including building maintenance, construction management, and design & build projects. Their website reflects a professional and consistent brand image, supported by recognized industry certifications such as Federation of Master Builders and TrustMark. The target audience is local clients seeking reliable and quality construction services. Technically, the website is built on the Wix platform using modern technologies like React 18 and includes interactive features such as a contact form and chat widget. Security posture is good with HTTPS enforced and some client-side security hardening, though explicit security headers and a formal security policy are absent. Privacy compliance is weak due to the lack of privacy and cookie policies. Overall, the website is functional, professional, and trustworthy but could improve in privacy and security transparency.
- AAnn Wasserman
annquilts.com
Other · United States
34High
NIS2 5 · GDPR 10
NIS2 5 · GDPR 10
AnnQuilts.com is a small personal business website operated by Ann Wasserman, specializing in antique and vintage quilt repair, education, and art quilts. The site offers services including quilt restoration, lectures, workshops, and book sales, targeting quilting enthusiasts and antique quilt owners. The business is positioned as a niche expert with a strong personal brand and a history dating back to 1980. Technically, the website is built on static HTML with minimal modern technologies, lacking HTTPS and security headers, which poses significant security risks. The site is not mobile optimized and lacks privacy and cookie policies, indicating low digital maturity. Security posture is weak due to missing HTTPS and security best practices, and no incident response or vulnerability disclosure mechanisms are present. Overall, the website provides good content quality and business credibility but requires urgent improvements in security and privacy compliance to reduce risk and enhance trust.
- BBanju Boutique Ltd.
banjuboutique.com
Retail · Malta
47High
NIS2 0 · GDPR 10
NIS2 0 · GDPR 10
Banju Boutique Ltd. is a Malta-based retailer and importer specializing in bathroom and kitchen fittings, sanitary ware, tiles, and related accessories. The company positions itself as a leading importer in its sector, targeting consumers and businesses seeking quality bathroom and kitchen products. The website is built on WordPress using popular plugins and libraries, demonstrating a moderate level of digital maturity with good mobile optimization and user experience. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks advanced security headers and incident response information. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the website is professional and trustworthy, though domain registration privacy and recent domain age introduce minor concerns.
- IIndex of /
crowehorwath.co.id
Other · Indonesia
48High
NIS2 5 · GDPR 25
NIS2 5 · GDPR 25
The website at crowehorwath.co.id currently serves only a directory index page with minimal content, indicating either a misconfiguration or an unmaintained site. There is no visible business information, metadata, or user-facing content to describe the company's services or market position. The lack of HTTPS and presence of directory listing pose significant security risks. No privacy, cookie, or terms of service policies are present, and no contact information is available, limiting user trust and compliance with data protection regulations. Overall, the site is not professionally maintained and lacks essential digital maturity features.
- TThe Distillery Project
work-chicago.com
Media · United States
43High
NIS2 0 · GDPR 10
NIS2 0 · GDPR 10
The Distillery Project is an independent, award-winning creative and strategic agency based in Chicago, specializing in delivering clear, refined thinking and potent creativity to influence brand perception and consumer behavior. The website showcases their portfolio with multimedia content including videos hosted on Vimeo, and highlights their recognition as a Small Agency of The Year multiple times, indicating a strong market position within the creative media sector. The target audience primarily includes businesses seeking strategic branding and creative campaign services. Technically, the website is built using modern web technologies such as React and Next.js, with optimized multimedia integration and responsive design. However, there is no evidence of a common CMS, suggesting a custom or proprietary platform. Performance is moderate with good mobile optimization, though accessibility features are basic. SEO practices appear adequate with proper meta tags and Open Graph data. From a security perspective, the site lacks visible security headers and published security policies, which lowers its security posture. There is no evidence of HTTPS enforcement or vulnerability disclosure mechanisms. Contact information is clearly presented, but privacy and cookie policies are absent, indicating compliance gaps with GDPR and other privacy regulations. Overall, the website is professional and credible but would benefit from enhanced security practices and privacy compliance to reduce risk and improve trustworthiness. Strategic recommendations include implementing security headers, publishing privacy and cookie policies, and establishing incident response and vulnerability disclosure protocols.
- NNameshield
gnosis-bio.com
Technology
52Medium
NIS2 35 · GDPR 15
NIS2 35 · GDPR 15
The domain gnosis-bio.com is currently a parked domain registered through Nameshield, a company specializing in brand protection and domain management services. The website content is minimal, serving only as a placeholder with no active business or product information. The site links exclusively to Nameshield's official pages, indicating that the domain is under brand protection or awaiting future use. The technical infrastructure is basic, with simple HTML, CSS, and JavaScript, and lacks modern web features or CMS integration. No HTTPS or security headers are detected, which is a significant security gap. There are no privacy or cookie policies, contact information, or forms, limiting user trust and compliance with data protection regulations. Overall, the site functions solely as a parked domain with no active digital presence or business operations.
- Emotion Events
emotionevents.com.mt
Hospitality · Malta
30High
NIS2 0 · GDPR 15
NIS2 0 · GDPR 15
Emotion Events is a Malta-based Destination Management Company (DMC) specializing in organizing professional events such as conferences, meetings, congresses, and incentive travel. With over 20 years of experience and a French-speaking team, the company targets corporate clients seeking tailored event services in Malta. The website reflects a well-established local presence with a portfolio of reputable clients and partnerships. Technically, the site uses legacy technologies like jQuery 1.5.1 and integrates Cookiebot for GDPR cookie consent, but lacks modern security headers and a dedicated privacy policy page. Security posture is moderate with room for improvement, especially in updating libraries and enhancing security controls. Overall, the website is professional and trustworthy but would benefit from technical modernization and enhanced privacy compliance documentation.
Elektra en Líneaelektra.com.mx
Retail · Mexico
45High
NIS2 10 · GDPR 10
NIS2 10 · GDPR 10
Elektra is a prominent Mexican retail and e-commerce company specializing in a wide range of products including electronics, home appliances, furniture, motorcycles, clothing, and more. It operates under the Grupo Salinas umbrella and offers integrated financing options such as Crédito Elektra and Banco Azteca loans, facilitating consumer purchases. The website is well-structured, targeting Mexican consumers with a focus on online shopping convenience, promotions, and official brand stores. The technical infrastructure is robust, leveraging modern technologies like React and the VTEX e-commerce platform, complemented by extensive use of analytics and marketing tools including Google Tag Manager, Adobe Launch, Hotjar, and TikTok Pixel. The site is hosted on AWS Cloudfront CDN, ensuring fast performance and good mobile optimization. Security posture is strong with HTTPS enforced, secure cookie settings, and presence of security headers, although there is room for improvement by adding Content Security Policy and more restrictive frame options. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic with a comprehensive privacy policy but lacking a cookie consent mechanism. Overall, Elektra presents a high-quality, professional, and trustworthy online presence with extensive product offerings and strong business credibility. Strategic recommendations include enhancing security headers, implementing cookie consent, and adding a vulnerability disclosure policy to further strengthen trust and compliance.
Topshoptopshop.com
Retail
53Medium
NIS2 0 · GDPR 25
NIS2 0 · GDPR 25
Topshop is a well-known fashion retail brand preparing to launch its dedicated e-commerce website. The site currently serves as a 'coming soon' landing page featuring a marketing sign-up form to collect user interest for updates on product launches and collaborations. The brand leverages ASOS's infrastructure and assets, indicating a strong corporate affiliation and established market presence in the fashion retail sector. The target audience is primarily fashion-conscious consumers seeking trendy apparel. Technically, the website uses modern web technologies including JavaScript, HTML5, and video streaming with H.265 codec, hosted on ASOS and Akamai platforms, ensuring good performance and mobile optimization. Security-wise, the site uses HTTPS and secure form submission but lacks visible security headers and explicit privacy or cookie policies, which are areas for improvement. Overall, the website is professionally designed with consistent branding but currently limited content as it is a pre-launch page.
- SHIELD CONSULTANTS LTD
shield.com.mt
Other · Malta
47High
NIS2 55 · GDPR 20
NIS2 55 · GDPR 20
SHIELD CONSULTANTS LTD is a Maltese operational risk management consultancy specializing in Quality, Health and Safety, Security, Environmental, and Training services. The company positions itself as a leader in Malta and the Mediterranean, offering a comprehensive suite of services supported by innovative technology tools such as STORM. Their client base includes notable organizations, and they maintain certifications such as ISO 9001, enhancing their market credibility. The website reflects a professional and well-structured digital presence with responsive design and clear navigation. Technically, the website employs modern frameworks including Bootstrap, jQuery, and FontAwesome, with additional integrations like Google reCAPTCHA to secure user interactions. While performance and mobile optimization are good, there is room for improvement in accessibility and security headers. SEO practices are adequately implemented through meta tags and structured content. From a security perspective, the site uses HTTPS and incorporates reCAPTCHA on forms, but lacks visible security headers and publicly available incident response or vulnerability disclosure policies. Privacy compliance is partial, with a basic privacy policy hosted on a related domain but no cookie consent mechanism. The WHOIS data aligns well with the business claims, supporting legitimacy. Overall, SHIELD CONSULTANTS LTD presents a trustworthy and professional online presence with solid business credibility. Enhancements in security policies, privacy compliance, and transparency would further strengthen their risk posture and user trust.
- WNS (Holdings) Ltd
wns.com
Technology · United States
69Medium
NIS2 13 · GDPR 63
NIS2 13 · GDPR 63
WNS (Holdings) Ltd is a global digital-led business transformation services company specializing in technology, analytics, and business process expertise. It serves a broad range of industries including banking, healthcare, insurance, manufacturing, retail, energy, and transportation. The company is positioned as a market leader with multiple industry recognitions and a comprehensive portfolio of services such as analytics, generative AI, finance and accounting, customer experience, governance, risk and compliance, and technology services. WNS operates globally with headquarters and offices across the United States, United Kingdom, India, and other countries, emphasizing a diverse and inclusive work culture. Technically, the website is built on the DNN (DotNetNuke) CMS platform using ASP.NET WebForms, with modern JavaScript libraries like jQuery, Swiper.js, and Isotope.js for enhanced UI/UX. It integrates Google Tag Manager and OneTrust for analytics and cookie consent management, reflecting a mature digital infrastructure. The site is mobile-optimized, accessible, and SEO-friendly, providing a professional user experience. From a security perspective, the site enforces HTTPS, uses anti-CSRF tokens in forms, and implements cookie consent mechanisms. While some security headers like Content-Security-Policy and X-Frame-Options are not explicitly detected, the overall security posture is good with no exposed sensitive data or vulnerabilities found in the HTML content. The company holds certifications such as ISO 27001 and has received awards for analytics and sustainability. Overall, WNS demonstrates a strong business credibility and technical maturity with good privacy compliance and security practices. The risk assessment indicates a low risk with recommendations to enhance security headers and publish incident response contacts for further improvement.
Inspire Maltainspire.org.mt
Non-profit · Malta
45High
NIS2 5 · GDPR 75
NIS2 5 · GDPR 75
Inspire Malta is a well-established non-profit organization dedicated to empowering individuals with diverse abilities through education, therapy, social community engagement, and research. The organization serves over 1,700 individuals and their families, focusing on inclusion and support within the Maltese community. Their website reflects a strong commitment to accessibility, GDPR compliance, and community engagement, with clear calls to action for donations and volunteering. Technically, the site is built on WordPress with modern plugins and frameworks, ensuring a good user experience and mobile optimization. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, although some security headers could be improved. Overall, Inspire Malta presents a trustworthy and professional digital presence aligned with its mission and business model.
- Skillcast Group plc
skillcast.com
Education · United Kingdom
55Medium
NIS2 43 · GDPR 55
NIS2 43 · GDPR 55
Skillcast Group plc operates a comprehensive compliance training and management platform, offering over 400 expert courses and solutions to businesses primarily in the education, finance, insurance, and cybersecurity sectors. The company is well-positioned in the market, trusted by over 1,300 companies including large enterprises, and provides a broad range of services including LMS, policy management, compliance registers, and an AI digital assistant. The website reflects a mature digital presence with professional design, clear navigation, and strong branding consistency. Technically, the website is built on the HubSpot CMS platform, leveraging modern JavaScript libraries such as Swiper.js and Video.js, and integrates multiple analytics and marketing tools including Google Analytics, LinkedIn Insight, and Hotjar. The site is mobile-optimized and demonstrates good SEO and accessibility practices. Security posture is strong with HTTPS enforced and no visible vulnerabilities, although some security headers could be explicitly added for enhanced protection. Privacy compliance is robust, featuring a comprehensive privacy policy, cookie consent mechanisms, and GDPR adherence indicators. Contact information is clearly provided, including verified company email and phone number. No incident response or vulnerability disclosure policies were found, which could be areas for improvement. Overall, Skillcast presents a trustworthy, professional, and secure online presence suitable for its business model and target audience. Strategic recommendations include enhancing security headers, formalizing incident response disclosures, and continuing to maintain transparency in privacy and data protection practices.
- PParked Domain name on Hostinger DNS system
spotonconnections.com
Other
45High
NIS2 0 · GDPR 10
NIS2 0 · GDPR 10
The domain spotonconnections.com currently hosts a parked domain page managed by Hostinger DNS system. There is no active business content or services presented on the website. The page primarily serves as a placeholder with links directing users to Hostinger's hosting services and support resources. The technical infrastructure relies on older versions of Bootstrap and jQuery, with Google Analytics and Tag Manager scripts included for tracking. No forms or user data collection mechanisms are present. Security posture is minimal with no HTTPS/SSL information or security headers detected. Privacy and cookie policies are absent, and no contact or incident response information is provided, indicating a lack of compliance and transparency. Overall, the website is not operational as a business site and presents low trustworthiness and professionalism.
Curiagadea.com
Healthcare · United States
44High
NIS2 0 · GDPR 43
NIS2 0 · GDPR 43
Curia Global is a leading contract development and manufacturing organization (CDMO) with over 30 years of experience in the pharmaceutical and biologics sectors. The company offers comprehensive services spanning small molecule drug discovery, generic APIs, biologics development, sterile drug product manufacturing, and analytical testing. Positioned as a dedicated ally to biopharma companies of all sizes, Curia operates a global network of 23 facilities and 3,500 professionals, emphasizing flexibility, scalability, and scientific expertise. Technically, the website is built on WordPress with a modern tech stack including Google Tag Manager, Marketo, Microsoft Clarity, and HubSpot analytics, reflecting a mature digital marketing and analytics infrastructure. The site is well-optimized for SEO, mobile responsive, and accessible, with professional design and clear navigation. From a security perspective, the site enforces HTTPS and uses reCAPTCHA for form protection, but lacks explicit security headers and published security policies or incident response contacts. Privacy and cookie policies are comprehensive and GDPR compliant, supporting good privacy compliance. No critical vulnerabilities or suspicious content were detected. Overall, Curia Global's website demonstrates a strong business credibility and digital maturity with minor recommendations to enhance security posture and transparency. The domain registration details align well with the business claims, supporting high legitimacy and trustworthiness.
- MMuscat Mizzi Advocates
muscatmizzi.com
Other · Malta
44High
NIS2 35 · GDPR 10
NIS2 35 · GDPR 10
Muscat Mizzi Advocates is a boutique law firm based in Malta, specializing in Compliance, Dispute Resolution, and Transaction Law. The firm targets business sector clients who value creativity and efficiency in legal services. Their market position is that of a reputed boutique firm with a focus on delivering tailored legal solutions. The website reflects a professional and consistent brand image with clear service offerings and active engagement in industry events. Technically, the website is built using modern frameworks such as Nuxt.js and TailwindCSS, hosted behind Cloudflare, and employs Google Analytics for tracking. The site is mobile-optimized and performs moderately well, with good SEO and basic accessibility features. Security measures include HTTPS enforcement and Cloudflare Turnstile captcha to mitigate automated abuse. From a security perspective, the site demonstrates good practices with no visible vulnerabilities or exposed sensitive data. However, it lacks explicit security policies, incident response contacts, and comprehensive privacy documentation, which are areas for improvement. The domain registration details are consistent with the business claims, enhancing trustworthiness. Overall, the website presents a low-risk profile with strong business credibility but would benefit from enhanced privacy and security policy transparency to improve compliance and user trust.
Calamatta Cuschierifinancestack.com
Finance · Malta
63Medium
NIS2 5 · GDPR 55
NIS2 5 · GDPR 55
Calamatta Cuschieri is a leading financial planning and investment services firm based in Malta, with over 50 years of experience and managing assets exceeding €2.3 billion. The company offers a broad range of financial services including investment advice, wealth management, pensions, life insurance, and capital markets services. It targets both individual and corporate clients, providing expert advisory and an award-winning online trading platform. The firm operates multiple offices in Malta and Italy, reinforcing its regional presence. Technically, the website is built on WordPress with a modern tech stack including Yoast SEO, Google Tag Manager, Google Analytics, Facebook Pixel, and reCAPTCHA v3 for security. The site is well-optimized for SEO, mobile responsive, and incorporates GDPR-compliant cookie consent mechanisms. Performance is moderate with good accessibility and navigation. From a security perspective, the site enforces HTTPS, uses reCAPTCHA on forms, and employs a GDPR cookie consent plugin. However, explicit security policies and incident response information are not published, and no vulnerability disclosure or security.txt file is present. The domain registration details are consistent with the business claims, supporting high legitimacy. Overall, the website demonstrates a strong digital maturity and business credibility with minor areas for improvement in security transparency and accessibility compliance.
Contact Verification Suspension Pagebluegarden.se
Other
39High
NIS2 0 · GDPR 0
NIS2 0 · GDPR 0
The website bluegarden.se is currently inaccessible as a functional business site and instead displays a suspension notice due to non-completion of ICANN-mandated email verification for the domain registrant. The page provides detailed information about the reasons for suspension and instructions for domain owners to reactivate their domain by verifying their email address. There is no business content, contact information, or privacy policies present on the site. Technically, the site uses Bootstrap and Font Awesome for styling but lacks HTTPS and security headers, indicating a minimal security posture. No analytics or advertising technologies are detected. Overall, the site is in a suspended state and does not represent an active business presence.
Other
45High
NIS2 5 · GDPR 15
NIS2 5 · GDPR 15
The website ypassociation.org is currently inaccessible beyond a standard HTTP 404 Not Found error page, indicating that the requested resource does not exist or the site is not operational. There is no visible content, metadata, or structured data to analyze, and no business or contact information is provided. The lack of HTTPS and security headers further diminishes the site's security posture. Due to the absence of content and technical details, the website's business model, market position, and services cannot be determined. The technical infrastructure appears minimal or non-existent, with no detectable technologies or frameworks. Security posture is weak, with no policies or protections evident. Overall, the site presents a high risk due to lack of content, security, and compliance measures.
wagerlogic.com domain name is for sale. Inquire now.wagerlogic.com
Other
41High
NIS2 0 · GDPR 10
NIS2 0 · GDPR 10
The website wagerlogic.com serves as a landing page for selling the premium domain name wagerlogic.com, targeting businesses or individuals interested in gambling or betting related domains. The business model is focused on domain sales facilitated securely through Efty Pay, a trusted domain transaction platform. The site content is minimal and primarily promotional, emphasizing the domain's brandability and value appreciation potential. The technical infrastructure employs modern web technologies including Bootstrap, jQuery, Google Fonts, Font Awesome, and Google Analytics for tracking visitor data. Security measures include HTTPS enforcement and Google reCAPTCHA integration, with payment processing securely handled by Efty Pay. However, the site lacks explicit privacy, cookie, and terms of service policies, and does not provide direct contact information or security incident channels, which limits compliance and trust signals. Overall, the site is functional but basic in content and compliance.
- CCTF Technologies
portalctf.com.br
Transportation · Brazil
55Medium
NIS2 0 · GDPR 25
NIS2 0 · GDPR 25
CTF Technologies is a Brazilian company specializing in fleet management and automated payment solutions for businesses. The website reflects the company's rebranding as Sem Parar Empresas, emphasizing its leadership in providing automated toll, fuel, and freight payment services. The site targets companies of various sizes seeking efficient vehicle expense management. Technically, the website uses Bootstrap for responsive design and is protected by Incapsula WAF, indicating a moderate level of security infrastructure. However, there are gaps in privacy compliance and security best practices, such as missing cookie consent mechanisms and incomplete privacy policy links. The absence of visible security headers and incident response information suggests room for improvement in security posture. Overall, the website is functional and professional but would benefit from enhanced privacy and security features to increase trust and compliance.
Real Estate · Libya
60Medium
NIS2 0 · GDPR 43
NIS2 0 · GDPR 43
محفظة ليبيا أفريقيا للاستثمار هي مؤسسة استثمارية ليبية ذات شخصية اعتبارية مستقلة تأسست عام 2006، تركز على إدارة الاستثمارات في شركات متعددة القطاعات داخل ليبيا وأفريقيا وبعض الدول الأوروبية. تتمتع بموقع قوي في السوق الليبي والإفريقي مع تركيز على تنويع الاستثمارات في الطاقة، النقل، العقارات، والضيافة. الموقع الإلكتروني مبني على منصة WordPress مع استخدام تقنيات حديثة مثل UIkit وYoast SEO، ويوفر محتوى غني باللغة العربية مع دعم جيد للتصفح عبر الأجهزة المحمولة. من الناحية الأمنية، يستخدم الموقع HTTPS ويطبق ممارسات أمنية جيدة، لكنه يفتقر إلى بعض السياسات الأمنية المتقدمة مثل سياسة الاستجابة للحوادث أو صفحة الإفصاح عن الثغرات. لا توجد مؤشرات على وجود حواجز أمان تمنع الوصول للمحتوى، مما يعكس شفافية الموقع. التوصيات تشمل تعزيز سياسات الخصوصية والكوكيز، إضافة آليات موافقة على الكوكيز، وتحسين رؤوس الأمان HTTP. بشكل عام، الموقع يعكس مؤسسة ذات مصداقية عالية مع بنية تقنية متينة ومحتوى مهني.
AM Languageamlanguage.com
Education · Malta
45High
NIS2 5 · GDPR 28
NIS2 5 · GDPR 28
AM Language is a small education business specializing in English language courses in Malta. The company offers a variety of courses including general English, TEFL, IELTS preparation, and courses for teens and kids. They also provide accommodation arrangements and leisure activities to enhance the student experience. The website positions AM Language as a reputable and established language school with positive student testimonials and accreditations. Technically, the website is built on WordPress and uses common web technologies such as jQuery and Google Analytics. It is moderately optimized for performance and mobile use, with good SEO practices implemented. Security-wise, the site uses HTTPS with a good SSL configuration and includes basic security headers, but lacks advanced security policies and cookie consent mechanisms. Privacy compliance is basic, with a privacy policy present but no explicit GDPR compliance or cookie consent banner. Overall, the website is professional and trustworthy but could improve in privacy and security transparency.
- Toptal
toptal.com
Technology · United States
61Medium
NIS2 5 · GDPR 58
NIS2 5 · GDPR 58
Toptal is a leading global talent marketplace specializing in connecting businesses with the top 3% of freelance professionals in software development, design, marketing, management consulting, and product/project management. Founded in 2010 and headquartered in the United States, Toptal has established a strong market position with over 25,000 clients worldwide. The platform emphasizes quality by rigorously vetting its talent pool, ensuring high success rates and client satisfaction. Technically, the website leverages modern web technologies including React, JavaScript, and CSS, with integrations for Google Analytics and Tag Manager for performance and marketing insights. The site is well-optimized for mobile devices, accessibility, and SEO, providing a fast and user-friendly experience. The presence of comprehensive privacy and cookie policies with consent mechanisms indicates a mature approach to privacy compliance. From a security perspective, Toptal enforces HTTPS with strong SSL configurations and implements key security headers to protect users. No critical vulnerabilities or exposed sensitive data were detected. However, explicit security policies and incident response contacts are not publicly detailed, representing an area for improvement. Overall, Toptal presents a low-risk profile with a professional, secure, and compliant online presence. Strategic recommendations include enhancing transparency around security policies, adding vulnerability disclosure mechanisms, and maintaining rigorous third-party script audits to sustain trust and security posture.
My Brighton Hotelmyhotels.com
Hospitality · United Kingdom
32High
NIS2 0 · GDPR 25
NIS2 0 · GDPR 25
My Brighton Hotel is a hospitality business operating in the hotel accommodation sector, currently undergoing a major refurbishment with plans to relaunch in summer 2025. The website is professionally designed using WordPress and the Kadence theme, incorporating modern plugins and analytics tools. It demonstrates a moderate level of digital maturity with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enforced and cookie consent implemented, though explicit security headers and policies are lacking. The business maintains a clear communication channel via email and social media, but lacks phone contact and physical address details on the analyzed page. Overall, the website is trustworthy and compliant with GDPR, but could improve transparency with terms of service and security policies.
- Racine St. Catherine's
saintcats.org
Education · United States
40High
NIS2 5 · GDPR 10
NIS2 5 · GDPR 10
Racine St. Catherine's is a well-established Catholic high school located in Racine, Wisconsin, with a history dating back to 1864. The institution focuses on providing quality secondary education grounded in faith, community, and academic excellence. It serves students, parents, alumni, and supporters within the local and regional community, operating as a non-profit educational entity under the Siena Catholic Schools umbrella. The website reflects a consistent brand identity and offers comprehensive information about academics, admissions, athletics, faith, and community services.
- UUNEC
unec.com.mt
Energy · Malta
45High
NIS2 5 · GDPR 0
NIS2 5 · GDPR 0
UNEC is a Malta-based company specializing in the supply and servicing of industrial equipment, commercial vehicles, construction machinery, power generation solutions, and warehousing systems. It acts as the official representative for major brands such as Caterpillar and DAF, positioning itself as a key player in the local industrial and transportation sectors. The company offers a comprehensive range of services including leasing, rentals, and maintenance, targeting industrial and commercial clients in Malta. The website reflects a professional business with consistent branding and clear service offerings. Technically, the site is built on WordPress using Elementor, with modern front-end libraries and moderate performance. However, there is room for improvement in security posture, including the implementation of security headers and HTTPS verification. Privacy compliance is limited, with no visible privacy or cookie policies, which may pose regulatory risks. Overall, UNEC presents a credible and established business with a solid digital presence but should enhance its security and privacy practices to align with best practices and regulatory requirements.
Dragonara Gaming Limiteddragonaracasino.com
Hospitality · Malta
54Medium
NIS2 0 · GDPR 43
NIS2 0 · GDPR 43
Dragonara Casino is Malta's premier and oldest casino, established in 1964, offering a comprehensive range of gaming and hospitality services including live poker, table games, slots, and fine dining. The website reflects a mature business with a strong market position in the hospitality sector, targeting tourists and gaming enthusiasts. The digital infrastructure is built on WordPress with the Avada theme, integrating modern analytics and security tools such as Google reCAPTCHA Enterprise and Microsoft Clarity. The site is well-optimized for mobile and accessibility, providing a professional user experience. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. The business demonstrates compliance with GDPR and responsible gaming standards, supported by Malta Gaming Authority licensing and partnerships with BeGambleAware.org. Overall, the website and business present a trustworthy and professional image with solid technical and security foundations.
- Karkanja Ltd.
karkanja.com
Real Estate · Malta
59Medium
NIS2 5 · GDPR 40
NIS2 5 · GDPR 40
Karkanja Ltd. is a Malta-based property development company specializing in real estate projects in Gozo and Malta. Established in 2000, the company focuses on delivering quality residential and commercial properties directly to buyers. Their website reflects a professional presence with clear navigation, property search functionality, and detailed information about buying processes and government schemes. The company targets property buyers and investors interested in the Maltese real estate market. Technically, the website is built on WordPress with modern JavaScript libraries and tracking tools such as Google Analytics, Facebook Pixel, and AddThis, indicating a mature digital marketing approach. Security-wise, the site uses HTTPS and cookie consent mechanisms, but lacks explicit security policy or incident response information. Overall, the site is trustworthy and well-maintained, with room for improvement in formal security disclosures and contact transparency.
TerraCoreterracoregeo.com
Energy · South Africa
51Medium
NIS2 5 · GDPR 43
NIS2 5 · GDPR 43
TerraCore is a specialized technology company focused on providing advanced hyperspectral imaging solutions for mineral analysis, primarily serving the mining and energy sectors. The company positions itself as a world leader in hyperspectral core imaging, offering a range of services including onsite and in-lab imaging, equipment rental and sales, consulting, and digital core storage. Their technology enables clients to gain detailed mineralogical insights to optimize exploration and production processes. The website reflects a professional and content-rich digital presence with clear navigation and strong branding. Technically, the website is built on WordPress using Elementor and Astra theme, hosted likely on GoDaddy infrastructure. It employs modern web technologies and integrates Google Tag Manager for analytics. The site is mobile-optimized and performs well, with good SEO and accessibility features. Security-wise, HTTPS is enforced and anti-spam measures are in place, but there is room for improvement in security headers and privacy compliance mechanisms. The security posture is solid with no visible vulnerabilities or exposed sensitive data, but the absence of cookie consent and detailed security policies indicates partial compliance with privacy regulations like GDPR. The domain registration details align well with the business claims, supporting the legitimacy of the website. Overall, TerraCore demonstrates a mature digital presence with strong business credibility but could enhance privacy and security transparency. Strategic recommendations include implementing a cookie consent mechanism, publishing comprehensive security and incident response policies, adding terms of service, and enhancing security headers to strengthen trust and compliance.
Aristocrat Interactiveaspireglobal.com
Technology · Australia
56Medium
NIS2 0 · GDPR 58
NIS2 0 · GDPR 58
Aristocrat Interactive is a newly established but enterprise-scale company specializing in regulated Real Money Gaming (RMG) markets. It operates as a subsidiary of Aristocrat Leisure Limited and offers a comprehensive suite of online gaming solutions including iLottery, iGaming, sports betting, content aggregation, and casino management systems. The company targets regulated market operators, government lotteries, and casino operators, positioning itself as a global leader with a strong brand and extensive portfolio of gaming titles. Technically, the website is built on WordPress with Elementor and uses modern JavaScript libraries for enhanced user experience. The site is well-optimized for SEO, mobile-friendly, and includes accessibility features. Security posture is good with HTTPS enforced and consent management implemented, though explicit security headers and a public security policy could improve it further. Overall, the domain registration and business information are consistent and trustworthy, supporting a high legitimacy score.
Kogi Försäljnings ABkogi.se
Hospitality · Sweden
31High
NIS2 0 · GDPR 0
NIS2 0 · GDPR 0
Kogi Försäljnings AB is a well-established Swedish company specializing in professional kitchen equipment for restaurants and large kitchens, with a history dating back to the 1940s. The company operates primarily in the hospitality sector, offering a range of services including project coordination, interior design, visualization, graphic design, inventory management, delivery, financing, and service support. It holds a strong market position as a leading Nordic player and is part of the Hospitio group, which enhances its credibility and reach. Technically, the website is built on WordPress using the Avada theme and WooCommerce for e-commerce capabilities. It employs common web technologies such as jQuery and integrates Google Analytics and Jetpack Stats for tracking and analytics. The site is moderately optimized for performance and mobile devices, with a good user experience and clear navigation. However, accessibility features are basic, and SEO optimization is at a basic level. From a security perspective, the site uses HTTPS but lacks important security headers and does not provide a security.txt or vulnerability disclosure policy. Privacy and cookie policies are missing, which is a compliance gap, especially under GDPR. Contact information is clearly provided, but no incident response or security policy details are available. Overall, the security posture is moderate but could be improved with standard best practices. The overall risk assessment indicates a legitimate and professional business with a solid digital presence but with room for improvement in privacy compliance and security hardening. Strategic recommendations include implementing privacy and cookie policies with consent mechanisms, adding security headers, publishing a security.txt file, and enhancing accessibility and SEO practices.
Camilleri Paris Modecamilleriparismode.com
Retail · Malta
41High
NIS2 0 · GDPR 48
NIS2 0 · GDPR 48
Camilleri Paris Mode is a luxury retail business based in Malta specializing in high-end fabrics, homeware, furniture, and perfumery products. The company operates both physical stores and an e-commerce platform, targeting discerning customers seeking quality and exclusivity. The website is built on WordPress with WooCommerce and uses modern web technologies including Elementor and Slider Revolution to provide a rich user experience. Social media integration and product showcases enhance brand engagement. Security posture is solid with HTTPS and some security best practices, though there is room for improvement in security headers and explicit policies. Privacy compliance is basic with cookie policy present but lacking consent mechanisms. Overall, the site is professional, trustworthy, and well-positioned in its market segment.
- DDefault Web Site Page
smsmt.com
Other
49High
NIS2 0 · GDPR 25
NIS2 0 · GDPR 25
The website smsmt.com currently displays a default cPanel error page indicating server misconfiguration or DNS issues, rendering the site inaccessible for normal users. No business content, contact information, or policies are present, which suggests the site is either inactive or improperly configured. The hosting provider is identified as Efront via a link on the page. The lack of HTTPS and security headers further diminishes the site's security posture. Overall, the website does not provide any meaningful information about the business or services it may represent, resulting in a very low trust and credibility score.
MediaLinkmedialink.com
Media
58Medium
NIS2 0 · GDPR 25
NIS2 0 · GDPR 25
MediaLink is a well-established management consulting firm specializing in media, advertising, investment, and emerging technologies. The company positions itself as a strategic partner helping businesses accelerate change and growth. The website reflects a professional and modern digital presence built on React and Gatsby, optimized for performance, SEO, and mobile responsiveness. Security posture is solid with HTTPS enforced and secure form handling, though explicit security policies and incident response information are not published. Privacy and cookie policies are present and indicate GDPR compliance. Overall, the website demonstrates high professionalism and trustworthiness, with clear business focus and consistent branding.
E&S Groupellulschranz.com
Finance · Malta
39High
NIS2 0 · GDPR 55
NIS2 0 · GDPR 55
E&S Group is a Malta-based professional services firm specializing in corporate, tax, advisory, and regulatory services. Established in 2016, the company serves individuals and businesses both locally and internationally, offering a wide range of services including company formation, tax advisory, gaming licenses, residency and citizenship programs, and blockchain consultancy. The firm positions itself as a trusted partner in the financial and legal sectors, leveraging a strong digital presence and comprehensive service portfolio. Technically, the website is built on WordPress using the Salient theme and WPBakery Page Builder, enhanced with performance optimization tools like WP Rocket. It employs modern web technologies including jQuery, Revolution Slider, and integrates multiple marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and LinkedIn Insight Tag. The site is well-optimized for mobile devices, fast loading, and accessible, with structured data for SEO. From a security perspective, the site enforces HTTPS, uses security headers, and employs best practices like lazy loading and script deferral. No critical vulnerabilities or exposed sensitive data were detected. Privacy and cookie policies are present and GDPR compliant, with clear contact information available. The domain registration details are consistent with the business claims, enhancing trustworthiness. Overall, E&S Group's website demonstrates a high level of professionalism, technical maturity, and security awareness, making it a reliable platform for its target audience. Strategic recommendations include enhancing CSP implementation, adding explicit incident response contacts, and maintaining regular security updates.
- DDAVID GRISCTI & ASSOCIATES
dglawfirm.com.mt
Finance · Malta
46High
NIS2 5 · GDPR 3
NIS2 5 · GDPR 3
DAVID GRISCTI & ASSOCIATES is a small law firm specializing in Financial Services Law based in Malta, targeting clients requiring legal expertise in banking, trust, company, and investment services law. The firm emphasizes personalized and tailored legal services, positioning itself as a reputable player within the EU financial services jurisdiction. The website content is basic but provides a clear overview of the firm's focus areas and affiliations with recognized industry bodies, enhancing its credibility. Technically, the website uses basic JavaScript and static HTML without modern CMS or frameworks. The site lacks HTTPS, security headers, and cookie consent mechanisms, indicating a low level of digital maturity and security posture. Performance and mobile optimization are moderate to poor, with outdated coding practices observed. From a security perspective, the absence of HTTPS and security headers presents significant risks, including data interception and lack of protection against common web attacks. No forms or data collection mechanisms were detected, reducing exposure but also limiting user engagement. Privacy compliance is minimal, with a privacy policy present but no cookie or terms of service policies. No incident response or security policies are disclosed. Overall, the website presents moderate business credibility but requires urgent improvements in security and privacy compliance to reduce risk and enhance trustworthiness. Strategic recommendations include implementing HTTPS, adding security headers, updating technical infrastructure, and enhancing privacy and cookie policies.
Cornerstone Pentecostal Churchcornerstonepentecostal.org.uk
Non-profit · United Kingdom
39High
NIS2 5 · GDPR 60
NIS2 5 · GDPR 60
Cornerstone Pentecostal Church is a small non-profit religious organization based in the United Kingdom, providing Pentecostal Christian services, community outreach, and online media content. Their website serves as a hub for live and on-demand services, children and youth programs, and community engagement through a quarterly e-magazine. The church targets local community members and online viewers interested in Pentecostal teachings. Technically, the website is built on WordPress using the Astra theme and Elementor page builder, with additional plugins for SEO (Rank Math), cookie consent, and media sliders. Hosting appears to be provided by SiteGround. The site demonstrates good mobile optimization, SEO practices, and moderate performance. From a security perspective, the site enforces HTTPS, implements cookie consent mechanisms, and uses standard security headers. No critical vulnerabilities or exposed sensitive data were detected. However, explicit security policies and incident response information are absent, and no vulnerability disclosure or security.txt files are present. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, though it could improve transparency around security policies and incident response. The domain registration details align well with the organization's profile, supporting legitimacy and trustworthiness.
ThinkTalent Ltdthinktalent.com.mt
Education · Malta
37High
NIS2 0 · GDPR 3
NIS2 0 · GDPR 3
ThinkTalent Ltd is a Malta-based professional training and coaching company focused on developing essential skills for local businesses and professionals. With over 16 years of client history and recognized certifications such as OTHM and MFHEA licenses, the company offers a broad range of courses including sales, leadership, customer care, business English, and enforcement training. The website is built on the Odoo CMS platform, featuring a modern, responsive design with embedded multimedia content and clear navigation. Security posture is strong with HTTPS enforcement, CSRF protection on forms, and no exposed sensitive data. However, privacy compliance is limited by the absence of a cookie consent mechanism and a basic privacy policy lacking explicit GDPR statements. Overall, the site demonstrates high business credibility and trustworthiness but could improve privacy and compliance transparency.
- Avantech Limited
avantech.com.mt
Technology · Malta
62Medium
NIS2 0 · GDPR 63
NIS2 0 · GDPR 63
Avantech Limited is a Malta-based technology and retail company specializing in Canon cameras, scanners, copiers, office equipment, and software solutions. The company serves both local and international markets, offering a broad range of products and services including managed print services, equipment rental, and aftersales support. Their market position is that of a reputable and established local leader with a strong brand presence and ISO 9001:2015 certification. Technically, the website is built on a modern WordPress platform with WooCommerce and various plugins for e-commerce, forms, and analytics, demonstrating a mature digital infrastructure. Security measures include HTTPS, anti-spam protections, CAPTCHA on forms, and comprehensive cookie consent mechanisms, reflecting a good security posture. Overall, the site is professional, well-structured, and compliant with GDPR requirements, supporting a high level of trustworthiness.
IDEA Group 2024ideamalta.com
Education · Malta
51Medium
NIS2 5 · GDPR 28
NIS2 5 · GDPR 28
IDEA Group is a Malta-based consultancy and education provider with a 20-year history, offering a broad suite of services including SME support, digital consultancy, education, training, research, business strategy, and care services. The company targets SMEs, family businesses, and professionals seeking tailored business and educational solutions. Their market position is that of an established, trusted local player with a medium-sized operation and a consistent brand presence. Technically, the website is built on WordPress with modern plugins and frameworks such as Elementor and Slider Revolution, hosted likely on GoDaddy infrastructure. The site is moderately performant, mobile-optimized, and SEO-friendly. Security-wise, HTTPS is enforced and Google reCAPTCHA is implemented, but the site lacks explicit security headers and a cookie consent mechanism, which are areas for improvement. Overall, the website is professional, trustworthy, and compliant with GDPR to a basic extent, with clear contact channels and social media presence. The domain age and WHOIS data align well with the company's stated history, supporting legitimacy.
شركة قو للاتصالاتgo.com.sa
Telecommunications · Saudi Arabia
58Medium
NIS2 0 · GDPR 10
NIS2 0 · GDPR 10
GO Telecom is a telecommunications company based in Saudi Arabia, offering high-speed internet services including fiber and fixed wireless internet, along with digital services such as quick payment and order tracking. The company targets individual consumers and businesses within the Saudi market, positioning itself as a competitive local provider with a focus on modern connectivity solutions. Technically, the website is built on a modern Angular framework with Bootstrap for responsive design, integrating Google Tag Manager and Analytics for marketing and tracking purposes. Security-wise, the site enforces HTTPS and uses some security best practices but lacks a fully implemented Content-Security-Policy and does not provide explicit vulnerability disclosure or incident response information. Overall, the website is professional, user-friendly, and trustworthy, though improvements in privacy compliance and security headers are recommended.
Consulting Engineers Group Ltd.cegindia.com
Transportation · India
33High
NIS2 5 · GDPR 10
NIS2 5 · GDPR 10
Consulting Engineers Group Ltd. (CEG) is a well-established international infrastructure engineering consulting firm founded in 1984, specializing in a wide range of sectors including highways, bridges, railways, metros, tunnels, airports, buildings, water resources, and urban development. The company operates globally with over 1300 professionals and has a strong market position supported by ISO 9001:2015 certification and a broad portfolio of engineering and consulting services. The website reflects a professional and content-rich presence targeting government agencies, infrastructure developers, and urban planners. Technically, the website is built on WordPress using common plugins and libraries such as jQuery, Font Awesome, and Contact Form 7. The site shows moderate performance and good mobile optimization but lacks advanced accessibility features. SEO practices are adequately implemented with proper meta tags and structured navigation. From a security perspective, the site lacks visible security headers and vulnerability disclosure mechanisms, and no privacy or cookie policies are present, indicating compliance gaps especially regarding GDPR. The site uses HTTPS as indicated by canonical links but no explicit SSL configuration details are provided. Content protection measures like disabling right-click and keyboard shortcuts are implemented. Overall, the website is trustworthy and professional but would benefit from enhanced security practices, privacy compliance improvements, and explicit incident response information to strengthen its security posture and regulatory adherence.
- EERROR: The request could not be satisfied
e-rewards.com
Other
49High
NIS2 0 · GDPR 25
NIS2 0 · GDPR 25
The website e-rewards.com is currently inaccessible due to a 403 error generated by AWS CloudFront, indicating that requests are blocked likely by a Web Application Firewall or configuration error. As a result, no meaningful content, metadata, or business information is available for analysis. The lack of accessible content prevents assessment of the company's business model, services, or compliance posture. Technically, the site is hosted behind Amazon CloudFront, but no further infrastructure or technology details can be determined. Security posture cannot be evaluated due to absence of accessible data, and no privacy or security policies are found. Overall, the site is effectively blocked from external analysis, resulting in a very low AI score and inability to provide comprehensive insights.
Dingli & Dinglidingli.com.mt
Other · Malta
36High
NIS2 5 · GDPR 18
NIS2 5 · GDPR 18
Dingli & Dingli is a well-established boutique law firm based in Malta, operating in its fourth generation and authorized by the Malta Financial Services Authority to provide Company Service Provider services. The firm specializes in a broad range of legal areas including corporate, shipping, tax, and litigation, supported by subsidiary companies offering fiduciary and accounting services. The website reflects a professional and consistent brand image, targeting clients seeking specialized legal expertise in Malta. Technically, the website employs modern web technologies such as Bootstrap and jQuery, with good mobile optimization and moderate performance. Security posture is adequate with HTTPS enforced and cookie consent implemented, though it lacks explicit security policies and incident response information. Overall, the site demonstrates a high level of business credibility and trustworthiness, with minor areas for improvement in security transparency and compliance documentation.
- Zheta International
zhetainternational.com
Technology · Malta
48High
NIS2 0 · GDPR 25
NIS2 0 · GDPR 25
Zheta International is a boutique digital studio based in Malta specializing in website design, web development, and branding services. Positioned as a leading company in Malta within its niche, it targets businesses and individuals seeking professional digital presence solutions. The website reflects a professional and consistent brand image with clear service offerings and social media presence, although it lacks explicit contact details and formal privacy or cookie policies on the homepage. Technically, the website employs a modern front-end technology stack including Bootstrap, jQuery, Font Awesome, and other libraries to deliver a responsive and visually appealing user experience. SEO optimization is evident through meta tags and structured data, but accessibility features are basic. Performance is moderate with preloading of scripts and use of Google Fonts. From a security perspective, the site uses HTTPS and includes Google site verification, but lacks visible security headers such as CSP or HSTS in the provided data. No forms or input fields are present on the homepage, reducing immediate attack surface, but the absence of privacy and cookie policies and explicit consent mechanisms indicates compliance gaps. Google Analytics is used with a consent attribute, but no visible cookie banner or detailed privacy disclosures were found. Overall, the website is functional and professional but would benefit from enhanced privacy compliance, improved security header implementation, and clearer contact information to increase trust and meet regulatory requirements.
- The University of Sheffield
sheffield.ac.uk
Education · United Kingdom
65Medium
NIS2 5 · GDPR 63
NIS2 5 · GDPR 63
The University of Sheffield is a prestigious higher education institution based in the United Kingdom, recognized globally as a top-100 university and a member of the Russell Group. The website clearly targets prospective students, researchers, and business partners, offering comprehensive information on undergraduate, postgraduate, and research programs. The institution emphasizes its strong market position through awards and rankings, reinforcing its reputation for academic excellence and student experience. Technically, the website is built on Drupal 10, leveraging modern web technologies including FontAwesome for icons and OneTrust for cookie consent management. The site is well-optimized for mobile devices, accessible, and SEO-friendly, with a moderate performance profile. Hosting is managed via the university's own CDN, ensuring reliable delivery. From a security perspective, the site enforces HTTPS, implements cookie consent mechanisms, and includes security headers with nonce values for scripts. No critical vulnerabilities or exposed sensitive data were detected. However, explicit security policies and incident response contacts are not publicly available, representing an area for improvement. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations such as GDPR. The risk profile is low, with recommendations focusing on enhancing transparency around security policies and incident response to further strengthen user trust and compliance.
- HHelmerich & Payne, Inc.
kcadeutag.com
Energy · United States
61Medium
NIS2 5 · GDPR 63
NIS2 5 · GDPR 63
Helmerich & Payne, Inc. is a well-established enterprise in the energy sector specializing in drilling rig contracting and advanced drilling technologies. The company has a strong market position with a history dating back to 1920 and offers a broad range of drilling services including offshore, geothermal, land drilling, and managed pressure drilling. The website reflects a professional corporate presence with comprehensive content, clear navigation, and consistent branding. It also highlights recent acquisitions and subsidiaries such as KCA Deutag and Kenera, expanding its global footprint and service capabilities. Technically, the website employs modern analytics and marketing technologies including Google Tag Manager, LinkedIn Insight, StackAdapt, HubSpot, and OneTrust for cookie consent management. The site is mobile optimized, accessible, and SEO friendly, though the CMS and hosting provider are not explicitly identified. Performance is moderate with good technical implementation overall. From a security perspective, the site uses HTTPS with excellent SSL configuration and integrates cookie consent mechanisms compliant with GDPR. However, explicit security headers like Content-Security-Policy and incident response contacts are not found, indicating room for improvement in security transparency and readiness. No vulnerabilities or exposed sensitive data were detected. Overall, the website is trustworthy, professional, and compliant with privacy regulations, supporting the company's credibility and business operations effectively.
Thomas Smith & Co Ltdtcsmith.com
Transportation · Malta
57Medium
NIS2 0 · GDPR 55
NIS2 0 · GDPR 55
Thomas Smith & Co Ltd is a Malta-based company specializing in maritime-related services including express shipping, port agency, shipping logistics, and insurance brokerage. The company serves a broad range of clients including international brands and various vessel types, positioning itself as a reliable and established player in the transportation and insurance sectors. The website reflects a professional and consistent brand image with clear service offerings and subsidiary domains supporting its business model. Technically, the site is built on WordPress with Elementor and integrates modern tools such as Google Analytics and reCAPTCHA, indicating a moderate to good level of digital maturity. Security posture is adequate with HTTPS and basic protections, though there is room for improvement in security headers and incident response transparency. Privacy compliance is strong with clear policies and consent mechanisms. Overall, the site is trustworthy and well-maintained, supporting the company's market position effectively.