Security reports directory
139,950 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,199001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
128,501–128,550 of 139,950
- CCardinal Health
cardinalhealth.com
Healthcare · United States
67Medium
NIS2 5 · GDPR 63
NIS2 5 · GDPR 63
Cardinal Health is a large, enterprise-level healthcare services and distribution company focused on improving the cost-effectiveness of healthcare. Their website presents comprehensive information about their healthcare services, medical and pharmaceutical products, supply chain logistics, and specialty distribution services. The company targets healthcare providers, hospitals, pharmacies, manufacturers, and specialty physician practices. The website is professionally designed, well-structured, and optimized for both desktop and mobile users. Technically, the site leverages modern technologies including Adobe Experience Manager as the CMS, jQuery, Adobe Dynamic Media, Coveo Search, Google Tag Manager, and OneTrust for cookie consent management. The site uses HTTPS with strong SSL configuration and integrates reCAPTCHA for form security. Analytics are implemented via Adobe Analytics, Google Analytics, and LinkedIn Insight Tag, indicating a mature digital marketing and data collection strategy. From a security perspective, the website demonstrates good practices such as HTTPS enforcement, use of reCAPTCHA, and cookie consent mechanisms. However, some security headers like Content-Security-Policy and X-Frame-Options are not detected and could be added to enhance security. No critical vulnerabilities or exposed sensitive data were found. Overall, the website is trustworthy, compliant with privacy regulations including GDPR, and reflects a mature business with strong digital presence. The domain WHOIS data aligns with the company's identity and history, supporting legitimacy. Strategic recommendations include enhancing security headers, publishing a dedicated security policy, and adding a vulnerability disclosure mechanism to further strengthen security posture.
Other
53Medium
NIS2 0 · GDPR 0
NIS2 0 · GDPR 0
The website altern.com.mt is currently inaccessible due to a Cloudflare Turnstile security challenge page that blocks direct content access. As a result, no business information, contact details, or policies are visible. The site appears to be protected by Cloudflare's security mechanisms, indicating an intent to prevent automated access or attacks. The technical infrastructure relies on Cloudflare services, but no CMS or additional technologies are detectable from the provided data. Due to the lack of accessible content, the security posture cannot be fully assessed, and no privacy or compliance information is available. Overall, the site is effectively blocked for analysis, resulting in a low AI score and limited insights.
- Steadfast Companies
steadfastcompanies.com
Real Estate · United States
60Medium
NIS2 0 · GDPR 28
NIS2 0 · GDPR 28
Steadfast Companies is a well-established real estate investment, development, and management firm with over 30 years of history. The company positions itself as an integrated and multifaceted real estate entity focused on delivering measurable results to investors, partners, residents, and associates. Their website reflects a professional and consistent brand image, targeting stakeholders in the real estate sector, including institutional investors and residents. Key services include real estate investment, property management, development, and investment management. The company operates primarily in the United States, with a medium-sized organizational footprint. Technically, the website is built on WordPress with modern SEO and accessibility tools such as Yoast SEO and UserWay. It uses Google Analytics for tracking and is mobile-optimized with good performance. The site employs HTTPS with a good SSL configuration, though some security headers are missing. There is no visible cookie consent mechanism or explicit cookie policy, which is a privacy compliance gap. No forms collecting personal data were detected on the homepage, reducing immediate privacy risks. From a security perspective, the site demonstrates a solid baseline with HTTPS and no exposed sensitive data. However, it lacks published security policies, incident response contacts, and vulnerability disclosure mechanisms, which are recommended for enhanced trust and compliance. The domain registration data aligns well with the business claims, showing a consistent and legitimate entity with no suspicious patterns. Overall, the website is professional, trustworthy, and well-maintained but would benefit from improved privacy compliance measures and enhanced security transparency to further strengthen stakeholder confidence.
- Core Lab
corelab.com
Energy · United States
52Medium
NIS2 5 · GDPR 58
NIS2 5 · GDPR 58
Core Laboratories operates as a leading global provider of proprietary reservoir description and production enhancement services primarily serving the oil and gas industry. With a presence in over 70 offices across more than 50 countries, the company offers specialized laboratory and field services that enable clients to optimize reservoir performance and maximize hydrocarbon recovery. Their service portfolio includes advanced diagnostics, AI-driven data analysis, and carbon capture subsurface characterization, positioning them as a key player in energy sector innovation. Technically, the website is built on a modern WordPress CMS platform utilizing a variety of plugins and frameworks such as Elementor, Visual Composer, and GeneratePress. The infrastructure is hosted on WPEngine, ensuring reliable performance and scalability. The site demonstrates good mobile optimization, SEO practices, and accessibility features, supported by comprehensive metadata and structured data for enhanced search engine visibility. From a security perspective, the site enforces HTTPS with strong SSL configuration and implements several security headers. Client portals incorporate two-factor authentication, and cookie consent mechanisms are in place, reflecting a mature security posture. No critical vulnerabilities or exposed sensitive data were detected, though explicit security policies and vulnerability disclosure mechanisms could be improved. Overall, the website reflects a professional, trustworthy, and technically sound digital presence aligned with the company's market position. Strategic recommendations include enhancing security transparency, expanding incident response contact information, and further improving accessibility compliance to maintain leadership in digital maturity.
- Maltalingua Ltd.
maltalingua.com
Education · Malta
36High
NIS2 0 · GDPR 10
NIS2 0 · GDPR 10
Maltalingua Ltd. operates a well-established English language school in Malta, offering a range of courses for adults, juniors, and families. The school is internationally accredited and recognized with multiple awards, positioning it as a leading education provider in the Maltese market. Their services include language courses, accommodation arrangements, and cultural activities, targeting students worldwide seeking English language education in a Mediterranean setting. Technically, the website is built on Drupal 9, leveraging modern web technologies such as jQuery, Owl Carousel, and lazy loading for images. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Integration with Google Tag Manager and Tawk.to live chat indicates a moderate level of digital maturity and customer engagement. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks certain security headers and a formal security policy or incident response information, which are areas for improvement. Privacy compliance is partial, with a privacy policy present but no visible cookie consent mechanism, which may pose GDPR compliance risks. Overall, Maltalingua presents a credible and professional online presence with strong business credibility and good technical implementation. Strategic enhancements in privacy compliance and security practices would further strengthen their security posture and regulatory adherence.
- Maltapost
maltapost.com
Logistics and supply chain
53Medium
NIS2 0 · GDPR 33
NIS2 0 · GDPR 33
- Konnekt Search & Selection Ltd.
konnekt.com
Other · Malta
35High
NIS2 5 · GDPR 28
NIS2 5 · GDPR 28
Konnekt Search & Selection Ltd. operates as a leading recruitment agency in Malta, specializing in connecting employers with jobseekers across various sectors. The company offers a broad range of services including talent search, recruitment training, payroll, and salary benchmarking, positioning itself as a comprehensive recruitment partner in the Maltese market. The website reflects a professional and user-friendly platform with extensive job search capabilities and resources for candidates and employers alike. Technically, the site employs a modern tech stack with popular JavaScript libraries and frameworks, integrates multiple analytics and marketing tools, and demonstrates good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and no visible sensitive data exposure, though there is room for improvement in security headers and formal security policies. Privacy compliance is addressed with a clear privacy policy and cookie consent mechanism, aligning with GDPR requirements. Overall, the website and business present a trustworthy and credible front with clear contact information and regulatory licensing.
Enemalta plcenemalta.com.mt
Energy · Malta
65Medium
NIS2 5 · GDPR 60
NIS2 5 · GDPR 60
Enemalta plc is the leading electricity services provider and network operator in Malta, established in 1977. The company offers a comprehensive range of energy services including electricity distribution, network upgrades, and customer support. It maintains a strong market position as the primary utility provider in the Maltese Islands, serving both residential and business customers. Subsidiaries such as Energiva and partnerships like ARMS extend its service offerings into power engineering and utility retail optimization. The website reflects a mature digital presence with modern WordPress infrastructure, SEO optimization, and customer engagement features such as outage maps and contact forms. Privacy and cookie compliance are well implemented, demonstrating adherence to GDPR requirements. Security posture is solid with HTTPS enforcement and reCAPTCHA integration, though formal security policies and incident response contacts are not publicly disclosed. Overall, the site is professional, trustworthy, and aligned with the company's business objectives.
MIB Insurance Brokersmib.com.mt
Finance · Malta
56Medium
NIS2 5 · GDPR 15
NIS2 5 · GDPR 15
MIB Insurance Brokers is Malta’s largest insurance broker and risk management services firm with over 40 years of experience. The company offers a wide range of insurance products for personal and business clients, including health, home, travel, motor, boat, personal accident, life, and various business insurance solutions. Their market position as a pioneer and leader in Malta's insurance sector is supported by a professional and well-structured website that clearly targets both individual and corporate customers. The website demonstrates a mature digital presence with integrated SEO, analytics, and GDPR-compliant data collection mechanisms. Technically, the site is built on WordPress with modern plugins and frameworks, ensuring good performance and mobile optimization. Security posture is strong with HTTPS, reCAPTCHA, and cookie consent mechanisms, although some security headers could be improved. Overall, the domain registration data aligns well with the business claims, reinforcing legitimacy and trustworthiness.
Little Oneslittleones.co
E-commerce · New Zealand
68Medium
NIS2 0 · GDPR 75
NIS2 0 · GDPR 75
Little Ones is a New Zealand-based e-commerce business specializing in baby and toddler sleep programs and a mobile sleep app. The company has a strong market presence with over 800,000 families helped worldwide and multiple industry awards. Their offerings include downloadable sleep programs tailored by age group, a comprehensive mobile app with tracking and notifications, and access to certified sleep consultants. The website is built on Shopify, leveraging several third-party integrations for reviews, marketing, and analytics, demonstrating a mature digital infrastructure. Security posture is strong with HTTPS, secure forms, and no visible vulnerabilities, although explicit security policies and incident response contacts are not published. Privacy compliance is well addressed with clear privacy and cookie policies and active consent mechanisms. Overall, the business appears legitimate, professional, and trustworthy with a high-quality user experience.
Falzon Group of Companiesfalzongroup.com
Energy · Malta
31High
NIS2 0 · GDPR 10
NIS2 0 · GDPR 10
Falzon Group of Companies is a Malta-based bespoke fuel energy provider specializing in supplying fuel and environmental solutions to local and international industries, including marine fuels and lubricants. The company positions itself as a leading supplier in the Mediterranean region, offering a comprehensive range of services such as fuel for industry, bunker supplies, household heating fuels, environmental services, and lubricants. Their business model focuses on a supply chain and logistics operation that delivers fuel where and when customers need it. Technically, the website is built on WordPress using the Salient theme and several plugins including WPBakery Page Builder and Contact Form 7. The site demonstrates moderate performance with good mobile optimization and basic accessibility features. SEO practices are adequately implemented with proper meta tags and structured navigation. From a security perspective, the site uses HTTPS with excellent SSL configuration but lacks security headers and explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is weak due to the absence of privacy and cookie policies and consent mechanisms. Contact information is clearly provided, enhancing business credibility. Overall, the website is professional and trustworthy with a solid business presence but would benefit from improved privacy compliance and enhanced security practices to reduce risk and increase user trust.
GOgo.com.mt
Telecommunications · Malta
71Medium
NIS2 35 · GDPR 58
NIS2 35 · GDPR 58
GO is a leading Maltese telecommunications and energy services provider offering a comprehensive range of products including fibre internet, mobile plans, TV services, and energy solutions. The company targets personal, business, and wholesale customers within Malta, positioning itself as a market leader with a strong brand presence and extensive service portfolio. The website reflects a mature digital infrastructure leveraging modern technologies such as Next.js and React, integrated with WordPress backend and enhanced SEO via Yoast. Security posture is robust with HTTPS enforcement, security headers, and privacy compliance mechanisms including cookie consent and GDPR-aligned policies. However, incident response contact details and vulnerability disclosure mechanisms could be improved to enhance transparency and trust. Overall, GO demonstrates a high level of professionalism, technical maturity, and market credibility.
- BBuyDomains.com
gonetworks.com
E-commerce · United States
55Medium
NIS2 0 · GDPR 60
NIS2 0 · GDPR 60
BuyDomains.com operates as a premium domain marketplace offering domain sales, brokerage, and lead capture services. The website targets businesses and individuals seeking memorable and brandable domain names, positioning itself as a trusted and established player in the domain sales industry. The platform integrates multiple marketing and analytics tools, including Google Analytics, Eloqua, and Google Tag Manager, to optimize user engagement and conversion tracking. Technically, the site is built on AngularJS 1.8.2, leveraging modern web technologies such as service workers for offline capabilities and Google reCAPTCHA for bot mitigation. The integration of Genesys chat enhances customer support capabilities. The website demonstrates good mobile optimization and basic accessibility features, with a moderate performance profile. From a security perspective, the site enforces HTTPS and employs a Content-Security-Policy, although the policy permits 'unsafe-inline' and 'unsafe-eval' scripts, which could be improved. The use of reCAPTCHA and secure form handling indicates a focus on preventing automated abuse. However, explicit security policies and incident response information are not present. Overall, the website presents a professional and trustworthy front with comprehensive privacy and cookie policies, GDPR compliance mechanisms, and clear contact information. The domain registration data aligns with the business claims, supporting legitimacy. Strategic recommendations include tightening security headers, adding vulnerability disclosure information, and enhancing accessibility.
Other
53Medium
NIS2 0 · GDPR 10
NIS2 0 · GDPR 10
The website www.bov.com is currently inaccessible beyond a Cloudflare security challenge page that requires human verification via Turnstile captcha. Due to this, no actual business content, metadata, or contact information is available for analysis. The site appears to be protected by Cloudflare's WAF, indicating an intent to mitigate automated access or attacks. Without access to substantive content, it is not possible to assess the company's market position, services, or technical infrastructure in detail. The security posture cannot be fully evaluated, but the presence of Cloudflare protection suggests some level of security awareness. Overall, the site currently presents a low trust profile due to lack of accessible information and transparency.
Other
45High
NIS2 5 · GDPR 28
NIS2 5 · GDPR 28
The website desgas.com is a parked domain primarily serving advertising content with minimal original or business-related content. It lacks any clear business identity, contact information, or user engagement features. The site relies on third-party advertising networks such as Google Adsense and Bodis for monetization. Technically, the site uses basic HTML, CSS, and JavaScript with no detected CMS or advanced frameworks. The site is not optimized for mobile or accessibility beyond basic standards and lacks SEO best practices. Security posture is weak with no HTTPS detected and no security headers present. Privacy compliance is minimal with no cookie consent or GDPR indicators. Overall, the site represents a low-trust, low-value web presence with significant risks if used for business purposes.
- Sseifert-mtmsystems.com is parked
seifert-mtmsystems.com
Other
46High
NIS2 0 · GDPR 25
NIS2 0 · GDPR 25
The domain seifert-mtmsystems.com is currently parked and does not host an active website or business content. The placeholder page indicates the domain is registered and may have active email services, but no further business information or services are presented. The site is minimalistic, with basic HTML, CSS, and JavaScript, and is hosted by Domeneshop AS, a domain registration provider. There is no evidence of a content management system or advanced technical infrastructure. Security posture is weak due to lack of HTTPS and security headers, and no privacy or cookie policies are present. Overall, the site lacks business credibility and trust indicators, reflecting a dormant or inactive domain status.
Bally's Interactivejackpotjoygroup.com
Media · United States
57Medium
NIS2 0 · GDPR 43
NIS2 0 · GDPR 43
Bally's Interactive Careers website serves as the digital recruitment portal for Bally's Interactive, the digital division of Bally's Corporation, a major player in the entertainment and gaming industry. The company operates globally with a portfolio of brands in sports betting, iGaming, and casino resorts. The website effectively targets job seekers interested in these sectors, providing clear navigation, engaging content, and strong branding consistent with the parent company. Technically, the site is built on WordPress with modern SEO and analytics tools integrated, ensuring good performance and user experience across devices. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though explicit security policies and incident response contacts are not publicly detailed. Overall, the site reflects a mature digital presence aligned with corporate standards, supporting recruitment and brand awareness effectively.
- Blevins Franks
blevinsfranks.com
Finance · United Kingdom
51Medium
NIS2 5 · GDPR 33
NIS2 5 · GDPR 33
Blevins Franks is a well-established financial advisory firm specializing in cross-border tax, wealth management, pensions, investments, and estate planning services primarily targeting British expatriates living in Europe. With over 50 years of experience and multiple offices across Europe and the UK, the company holds a strong market position as a leading adviser for UK nationals abroad. Their business model focuses on personalized financial planning and advisory services, supported by a comprehensive digital presence and strong regulatory compliance across jurisdictions including the UK, Malta, and France. Technically, the website is built on a modern WordPress CMS platform with WooCommerce integration, leveraging popular libraries such as jQuery and FontAwesome. It employs Google Analytics, Facebook Pixel, and Google Tag Manager for marketing and analytics purposes, alongside a cookie consent management system to ensure GDPR compliance. The site demonstrates good mobile optimization, SEO practices, and user experience design, reflecting a mature digital infrastructure. From a security perspective, the website enforces HTTPS and uses standard WordPress security practices, though explicit security headers are not clearly detected and could be improved. No critical vulnerabilities or exposed sensitive data were found. Privacy compliance is strong with clear privacy and cookie policies, and contact information is readily available. However, the absence of an incident response contact or vulnerability disclosure policy suggests room for enhancement in security transparency. Overall, Blevins Franks presents a trustworthy, professional, and compliant online presence with a solid business foundation. Strategic recommendations include enhancing security headers, publishing incident response and vulnerability disclosure information, and further improving accessibility features to maintain high standards in security and compliance.
Betsson Groupbetssongroup.com
Media · Sweden
66Medium
NIS2 5 · GDPR 48
NIS2 5 · GDPR 48
Betsson Group is a leading European iGaming company operating over 20 brands offering casino, sportsbook, and other gaming products across multiple countries. The company is a subsidiary of Betsson AB, a publicly listed entity on Nasdaq Stockholm, reflecting a strong market position and extensive industry experience spanning over six decades. The website targets job seekers and industry professionals, emphasizing career opportunities and responsible gaming initiatives. Technically, the site is built on WordPress with modern SEO and analytics integrations, including Yoast SEO Premium, Google Tag Manager, and Facebook Pixel, ensuring good digital maturity and performance. Security posture is robust, with HTTPS enforced, ISO 27001 certification, and appropriate security headers, though incident response and vulnerability disclosure policies are not explicitly published. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with privacy regulations, making it a credible and authoritative source in the iGaming sector.
Albertaalberta.com.mt
Other · Malta
63Medium
NIS2 13 · GDPR 60
NIS2 13 · GDPR 60
Alberta is a leading fire safety and security company based in Malta, offering a wide range of accredited fire and security solutions including installation, risk assessments, and training. The company holds notable certifications such as LPCB and MCCAA, positioning itself as a trusted provider for both residential and business clients locally and internationally. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive content tailored to its target audience. Technically, the site is built on WordPress with WooCommerce and Gravity Forms, leveraging modern plugins and technologies for performance, security, and user experience. Security posture is strong with HTTPS, reCAPTCHA protection, and cookie consent mechanisms, though some security headers could be enhanced. Overall, Alberta demonstrates a high level of business credibility and digital maturity, supported by consistent WHOIS data and active social media engagement.
GoDaddy Operating Company, LLCrightstructures.com
Technology · United States
46High
NIS2 5 · GDPR 25
NIS2 5 · GDPR 25
The website rightstructures.com is a domain sales landing page operated by Afternic, a GoDaddy company. It offers the domain for sale with options to buy outright or lease to own, supported by a domain broker. The site targets individuals or businesses interested in acquiring this specific domain name. The business model is focused on domain aftermarket sales, leveraging the strong market position of Afternic and GoDaddy. The platform provides a professional user experience with clear contact options and a responsive design. Technically, the site is built using modern web technologies including React and Next.js, hosted on AWS infrastructure. It employs secure HTTPS connections and includes standard security headers. The site integrates tracking and marketing tools such as Google Analytics and Tealium, with basic privacy and cookie policies in place. Performance is moderate with good mobile optimization and basic accessibility features. From a security perspective, the website demonstrates good practices with enforced HTTPS, secure forms protected by reCAPTCHA, and no visible vulnerabilities or exposed sensitive data. However, explicit security policies and incident response information are not present, representing an area for improvement. The domain registration is consistent with the business, registered to GoDaddy Operating Company, LLC, reinforcing legitimacy. Overall, the website presents a low-risk profile with a solid security posture and credible business operations. Strategic recommendations include publishing detailed security and incident response policies, enhancing privacy compliance disclosures, and continuing to monitor for emerging vulnerabilities to maintain trust and compliance.
- Nno-one.nl is for sale !!
no-one.nl
Other
39High
NIS2 0 · GDPR 0
NIS2 0 · GDPR 0
The website no-one.nl is a minimalistic domain-for-sale landing page offering the premium domain name for purchase. It targets domain investors or buyers interested in acquiring this specific domain. The site provides a simple form to request an offer, protected by Google reCAPTCHA v2 to prevent spam submissions. However, the site lacks any privacy, cookie, or terms of service policies, and does not provide any contact emails, phone numbers, or physical addresses, which limits trust and transparency. Technically, the site uses common front-end technologies such as Bootstrap, Font Awesome, Animate.css, Google Fonts, and jQuery. The form uses Google reCAPTCHA v2 for bot protection. The site appears to be served over HTTP without HTTPS, which is a significant security concern. No security headers or advanced security frameworks are detected. The site is basic in design and mobile optimization, with moderate performance. From a security perspective, the absence of HTTPS and security headers reduces the security posture significantly. The use of reCAPTCHA is a positive measure against spam. No vulnerabilities or exposed sensitive data were detected in the HTML content. The lack of privacy and cookie policies indicates poor privacy compliance. WHOIS data shows privacy protection for the registrant, which is typical for domain sales but reduces transparency. Overall, the website scores low on trustworthiness and professionalism due to minimal content, lack of business information, and poor security practices. Strategic recommendations include implementing HTTPS, adding privacy and cookie policies, providing clear contact information, and improving security headers and compliance measures.
Streamline Financial Servicesstreamlineplanning.com
Finance · United States
57Medium
NIS2 5 · GDPR 25
NIS2 5 · GDPR 25
Streamline Financial Services is a small financial advisory firm specializing in retirement planning, investment management, and tax reduction services. The company emphasizes fiduciary responsibility and employs multiple certified professionals including CFP®, CFA, and other financial designations. Their target audience is individuals seeking to take control of their retirement and financial life. The website is built on the HubSpot CMS platform, leveraging modern web technologies such as jQuery, Font Awesome, and embedded Typeform for client engagement. The site is well-structured, mobile-optimized, and provides clear navigation and professional content including client testimonials and certifications. Security posture is adequate with HTTPS enforced and no exposed sensitive data, but lacks explicit security headers and a public security policy. Privacy compliance is weak due to absence of privacy and cookie policies or consent mechanisms. Contact information is clearly presented with phone, physical address, and an embedded contact form. Overall, the website presents a trustworthy and professional image with room for improvement in privacy compliance and security best practices.
The Boots Company PLCmothercare.com
Retail · United Kingdom
62Medium
NIS2 5 · GDPR 63
NIS2 5 · GDPR 63
Mothercare, presented via the Boots.com platform, is a well-established specialist brand offering a wide range of baby and child-related products including clothing, nursery essentials, toys, and travel equipment. Boots, a major UK retail company, leverages its extensive e-commerce infrastructure to provide a seamless shopping experience for parents and caregivers. The website demonstrates a strong market position with comprehensive product offerings and loyalty programs such as the Advantage Card. Technically, the site employs modern frameworks like React and Dojo, integrates advanced search via Algolia, and uses multiple analytics and marketing tools to optimize user experience and business insights. Security posture is robust with HTTPS enforced, cookie consent managed by OneTrust, and no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the website is professional, trustworthy, and aligned with industry best practices, supporting Boots' reputation as a leading retail brand in the UK.
Ganado Advocatesganadoadvocates.com
Finance · Malta
58Medium
NIS2 5 · GDPR 40
NIS2 5 · GDPR 40
Ganado Advocates is a well-established Maltese commercial law firm with a strong international presence and a broad range of legal services spanning corporate, maritime, financial, and regulatory sectors. The website reflects a professional and comprehensive digital presence, showcasing their expertise and thought leadership through publications and insights. Technically, the site is built on WordPress with modern frameworks and plugins, ensuring good performance and mobile responsiveness. Security measures include HTTPS enforcement, Google reCAPTCHA, and a robust cookie consent mechanism, although some security headers could be improved. Overall, the site demonstrates a mature security posture with no critical vulnerabilities detected. The domain registration details align well with the business claims, supporting legitimacy and trustworthiness.
- NNolimit city
nolimitcity.com
Gambling & casinos · Malta
61Medium
NIS2 5 · GDPR 63
NIS2 5 · GDPR 63
- shireburn
shireburn.com
Technology · Malta
41High
NIS2 0 · GDPR 25
NIS2 0 · GDPR 25
Shireburn is a technology company specializing in cloud-based software solutions for HR, payroll, attendance, accounting, inventory, and point of sale management. The company serves over 7,500 organizations, primarily in Malta, and holds significant market share in private sector employment and audit firms. Their product suite includes Indigo People and the Shireburn Business Suite, targeting businesses seeking integrated and efficient operational tools. The website reflects a mature digital presence with modern technologies such as WordPress, Bootstrap, and various analytics and marketing tools. Security posture is strong with HTTPS enforced and ISO certifications, though some security headers and incident response details are absent. Privacy compliance is basic with cookie consent implemented but no explicit GDPR statements or DPO contacts. Overall, the site is professional, trustworthy, and well-optimized for user experience and SEO.
Sara Grechevsaragrech.com
Real Estate · Malta
51Medium
NIS2 5 · GDPR 55
NIS2 5 · GDPR 55
Sara Grech Real Estate is a well-established, female-led real estate agency based in Malta, offering comprehensive property brokerage services including buying, selling, renting, and leasing. The company has a strong market position with over 35 years of experience and a commitment to professionalism and personalized service. Their digital presence is supported by a modern WordPress-based website with advanced search capabilities and extensive filtering options, optimized for SEO and mobile devices. Security measures include HTTPS, Google reCAPTCHA, and GDPR-compliant consent management, though explicit security policies are not publicly available. Overall, the website reflects a mature digital infrastructure with good security posture and privacy compliance, supporting the company's credibility and trustworthiness.
- DDizz Group
dizz.com.mt
Retail · Malta
31High
NIS2 0 · GDPR 0
NIS2 0 · GDPR 0
Dizz Group is a Malta-based retail and property management company founded in 2000, specializing in fashion brands ranging from affordable fast fashion to premium labels. The company operates physical stores, manages properties including malls and residential units, and offers a loyalty app to engage customers. Their digital presence is built on WordPress with a professional design and good mobile optimization. The website integrates multiple brand stores and promotes online shopping portals. Security posture is adequate with HTTPS and form validation but lacks advanced security headers and explicit privacy compliance mechanisms. Contact is primarily via web forms, with no direct emails or phone numbers published. Social media presence is strong, enhancing brand trust. Overall, the website reflects a medium-sized, established retail business with a solid market position in Malta.
Frank Salt Real Estate Ltdfranksalt.com.mt
Real Estate · Malta
63Medium
NIS2 5 · GDPR 75
NIS2 5 · GDPR 75
Frank Salt Real Estate Ltd is a well-established, family-owned real estate company in Malta, operating since 1969. It holds a strong market position as the largest and longest-standing real estate firm in the region, offering a comprehensive range of services including property sales, lettings, commercial property services, home interiors, property management, and relocation assistance. The company targets a diverse audience including local buyers, renters, landlords, expats, and foreign investors. Technically, the website is built on WordPress with Elementor and integrates modern analytics and marketing tools such as Google Analytics, Facebook Pixel, and Hotjar, all managed with a robust consent mechanism to ensure privacy compliance. Security posture is strong with HTTPS enforced and no critical vulnerabilities detected, although some security headers could be improved. Overall, the website demonstrates excellent design, usability, and content quality, reflecting the company's professionalism and market leadership.
GiG Software PLCgaminginnovationgroup.com
Technology · Malta
66Medium
NIS2 43 · GDPR 55
NIS2 43 · GDPR 55
GiG Software PLC is a leading technology provider specializing in iGaming platform and sportsbook solutions, serving a broad range of regulated markets globally. Their business model focuses on delivering scalable, multi-jurisdictional platform technology combined with AI-driven solutions and managed services to optimize operator performance and player engagement. The company holds reputable licenses from the Malta Gaming Authority and the UK Gambling Commission, reinforcing its market position and regulatory compliance. Technically, the website is built on WordPress with modern SEO and analytics integrations including Yoast SEO, Google Tag Manager, FullStory, and LinkedIn Insight. The site demonstrates good mobile optimization and user experience, with comprehensive cookie consent mechanisms and privacy policies aligned with GDPR requirements. The technical stack is mature but could benefit from updating legacy analytics scripts and enhancing security headers. From a security perspective, the site enforces HTTPS and employs best practices such as external link security attributes and cookie consent. However, explicit security and incident response policies are not publicly detailed, representing an area for improvement. No critical vulnerabilities or blocking mechanisms were detected, indicating a solid security posture. Overall, GiG Software PLC presents a trustworthy and professional online presence with strong business credibility and compliance. Strategic recommendations include enhancing security header implementation, publishing detailed security policies, and modernizing analytics tools to maintain leadership in the competitive iGaming technology sector.
ICT Solutionsictsolutions.com.mt
Technology · Malta
57Medium
NIS2 35 · GDPR 55
NIS2 35 · GDPR 55
ICT Solutions is a Malta-based systems integrator specializing in IT consulting, implementation, support, and management services. The company positions itself as a trusted partner for digital transformation, cloud infrastructure, cyber security, and IT strategy. With multiple Microsoft Partner of the Year awards and ISO certifications, ICT Solutions demonstrates strong industry credibility and expertise. The website reflects a mature digital presence with clear messaging, professional design, and comprehensive service offerings. Technically, the site uses WordPress with modern plugins and scripts, ensuring good performance and mobile optimization. Security measures include HTTPS, reCAPTCHA, and adherence to ISO 27001 standards, indicating a robust security posture. Privacy and cookie policies are present with consent mechanisms, supporting GDPR compliance. Overall, ICT Solutions presents a trustworthy and professional image suitable for its target business audience.
Other
50Medium
NIS2 5 · GDPR 15
NIS2 5 · GDPR 15
The website at stkeurope.com is currently inaccessible, returning a standard HTTP 404 Not Found error page with minimal HTML content. There is no visible business information, metadata, or structured data to analyze. The lack of content and absence of security configurations such as HTTPS or security headers indicate a non-functional or misconfigured website. Consequently, no insights into the company's market position, services, or technical infrastructure can be derived. The security posture is poor due to the absence of HTTPS and security best practices, and no privacy or compliance policies are present. Overall, the site presents a high risk due to its inaccessibility and lack of transparency.
- Naser Group, Inc.
nasergroup.org
Other · United States
31High
NIS2 5 · GDPR 10
NIS2 5 · GDPR 10
Naser Group, Inc. operates as a leading funeral services network provider, primarily serving the Latin community in the United States and Latin America. Established in 2003, the company has built one of the largest funeral networks spanning the US and 17 Latin American countries, offering services such as repatriation, cremation, and international funeral logistics. Their business model focuses on connecting funeral homes and associations to provide comprehensive funeral solutions internationally. Technically, the website is built using Adobe Muse with a static site approach, leveraging technologies like jQuery 1.8.3, Google Analytics, and Google reCAPTCHA v2. While the site has a professional design and clear navigation, it uses some outdated libraries and lacks advanced accessibility and SEO features. Mobile optimization is basic but functional. From a security perspective, the site uses HTTPS and implements reCAPTCHA to protect forms from spam. However, it lacks important security headers and uses an outdated jQuery version, which could expose it to vulnerabilities. There is no visible privacy or cookie policy, nor incident response contact information, indicating gaps in compliance and security transparency. Overall, the website is functional and credible with good business information and partner networks. However, improvements in security practices, privacy compliance, and technical modernization are recommended to enhance trust and reduce risk.
Intercomp Ltdintercomp.com.mt
Retail · Malta
54Medium
NIS2 5 · GDPR 23
NIS2 5 · GDPR 23
Intercomp Ltd operates a comprehensive e-commerce and retail platform based in Malta, specializing in electronics, computing devices, home appliances, and related accessories. The company has established a strong market presence since its founding in 2016, offering a wide range of products from popular brands such as Apple, Dell, Samsung, and more. Their business model focuses on direct sales with value-added services like easy payment schemes and customer support, targeting both individual consumers and business clients within Malta. Technically, the website leverages a mature WordPress and WooCommerce infrastructure, integrating modern plugins and marketing tools to enhance user experience and operational efficiency. The site demonstrates good mobile optimization, SEO practices, and accessibility features, although some improvements could be made in accessibility compliance. Security-wise, the site enforces HTTPS, uses reCAPTCHA on forms, and employs nonce tokens to protect against common web vulnerabilities. However, explicit security headers like CSP and X-Frame-Options are not clearly detected and should be implemented to strengthen security posture. Privacy and cookie policies are present and include consent mechanisms, indicating compliance with GDPR requirements. Overall, the website is professional, trustworthy, and well-maintained, with no critical security issues detected. Strategic recommendations include enhancing security headers, conducting regular security audits, and improving accessibility features to further solidify the site's security and compliance stance.
- LL-Università ta' Malta
um.edu.mt
Education · Malta
46High
NIS2 0 · GDPR 3
NIS2 0 · GDPR 3
The University of Malta is a prominent higher education institution in Malta offering a wide range of undergraduate, postgraduate, doctoral, and micro-credential courses. It serves a diverse audience including prospective and current students, academic staff, and researchers. The website reflects a mature digital presence with comprehensive academic and service information, strong branding, and multiple trust indicators such as certifications and testimonials. Technically, the site employs modern web technologies including Bootstrap, jQuery, and advanced sliders, with integration of analytics and marketing tools like Google Analytics and Facebook Pixel. Security posture is solid with HTTPS usage and cookie consent mechanisms, though there is room for improvement in security headers and incident response disclosures. Overall, the site is professional, user-friendly, and trustworthy, supporting the university's market position as Malta's leading academic institution.
SON Architecturesonarchitects.com
Real Estate · Malta
53Medium
NIS2 0 · GDPR 10
NIS2 0 · GDPR 10
SON Architecture is a small architecture and design practice based in Valletta, Malta, specializing in the rehabilitation of historic buildings and contemporary architectural solutions. The website presents a professional and visually appealing portfolio of their works, targeting clients interested in architectural services within Malta. The technical infrastructure leverages modern web technologies including Webflow CMS, jQuery, Slick Carousel, and Google Analytics with IP anonymization, indicating a moderate level of digital maturity. However, the site lacks critical privacy and security policies, contact information, and security headers, which impacts its overall security posture. There are no detected WAF or blocking mechanisms, and the site is fully accessible. The absence of privacy and cookie policies and contact details represents compliance and trust gaps that should be addressed to improve user confidence and regulatory adherence.
Chilizchilipoker.com
Technology
65Medium
NIS2 5 · GDPR 60
NIS2 5 · GDPR 60
Chiliz is a leading sports-focused blockchain platform that partners with over 70 elite sports teams to deliver innovative Web3 solutions, including Fan Tokens™ and a robust validator network. The company targets brands, developers, entrepreneurs, sports teams, and fans, providing a comprehensive ecosystem for blockchain-based sports engagement. The website demonstrates a high level of digital maturity with modern technologies such as WordPress, Elementor, GSAP animations, and performance optimizations. Security posture is strong with HTTPS, secure forms, and cookie consent mechanisms, though explicit security policies and incident response contacts are absent. Overall, Chiliz presents a professional, trustworthy, and well-structured online presence with clear business objectives and community engagement.
Dhalia Real Estate Servicesdhalia.com
Real Estate · Malta
40High
NIS2 0 · GDPR 28
NIS2 0 · GDPR 28
Dhalia Real Estate Services is a well-established Malta-based real estate agency, operating since 1982 and recognized as the largest privately owned agency in Malta. The company offers a comprehensive range of services including property sales, leasing, investment advice, and valuation services, targeting property buyers, renters, and investors primarily in Malta and Gozo. The website reflects a professional and trustworthy brand with consistent messaging and multiple partner brands enhancing its market presence. Technically, the site is built on modern frameworks such as Next.js and React, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and asynchronous script loading, but lacks some advanced security headers and published security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the site demonstrates high business credibility and good technical maturity, though improvements in security and privacy compliance are recommended.
MONSOON BRANDS LTDmonsoon.co.uk
Retail · United Kingdom
60Medium
NIS2 0 · GDPR 58
NIS2 0 · GDPR 58
Monsoon UK is a well-established retail and e-commerce company specializing in women's and children's clothing, accessories, and wedding collections. The website reflects a mature digital presence with comprehensive product categorization, multiple payment options, and integration with various marketing and analytics platforms. The company maintains a consistent brand image and offers a user-friendly shopping experience with good mobile optimization and clear navigation. Privacy and cookie policies are present and GDPR compliant, supporting user consent mechanisms. Technically, the site is built on Salesforce Commerce Cloud (Demandware) and uses modern JavaScript libraries and third-party services to enhance functionality and marketing efforts. Security posture is strong with HTTPS enforced, security headers present, and no visible vulnerabilities or exposed sensitive data. However, explicit incident response and vulnerability disclosure information are not found, representing an area for improvement. Overall, the site is professional, trustworthy, and well-positioned in the UK retail market.
Volo Media Ltd.volo.com.mt
Media · Malta
54Medium
NIS2 0 · GDPR 3
NIS2 0 · GDPR 3
Volo Media Ltd. is a digital publishing company based in Malta operating over 200 websites across 8 markets, focusing on sectors such as deals, shopping, travel, finance, dating, and food. Their business model centers on generating revenue through advertising, lead generation, and driving organic and paid traffic to client websites. The company emphasizes content quality, SEO, and email marketing to build long-term relationships with users and partners. Technically, the website is built on WordPress with common libraries such as jQuery and Bootstrap, and uses marketing tools like Google Analytics and Facebook Pixel. The site is mobile optimized and has good SEO practices, though accessibility features are basic. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks advanced security headers and published security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. WHOIS data is privacy protected, which is typical but reduces transparency. Overall, the website is professional and functional with moderate trustworthiness.
deVere Groupdevere-group.com
Finance · United Kingdom
51Medium
NIS2 0 · GDPR 10
NIS2 0 · GDPR 10
deVere Group is a globally recognized independent financial advisory firm specializing in wealth management, pension transfers, investment management, and tax planning. The company targets high net worth individuals and expatriates seeking tailored financial solutions. Their market position is strong, supported by a large international presence and a leadership team focused on innovation and client-centric services. The website reflects a mature digital infrastructure built on WordPress and Elementor, integrating modern analytics and marketing tools with GDPR-compliant consent mechanisms. Security posture is robust with HTTPS, security headers, and no visible vulnerabilities, although explicit security policies are not publicly detailed. Overall, the site demonstrates professionalism, trustworthiness, and compliance with privacy regulations, supporting the company's credibility in the financial services sector.
Air Malta Plc.airmalta.com
Transportation · Malta
55Medium
NIS2 5 · GDPR 40
NIS2 5 · GDPR 40
Air Malta Plc., the national airline of Malta, ceased flight operations on March 30th, 2024 after 50 years of service. The website serves primarily as an announcement platform informing visitors of the cessation and directing them to KM Malta Airlines, the new national airline. The business model was focused on passenger air transport, representing Malta internationally. The website content is basic, with limited contact information and no privacy or terms of service policies published. Technically, the site is built on the GoDaddy Website Builder platform, using modern web fonts and JavaScript frameworks such as React. The site includes a cookie consent banner but lacks advanced analytics or tracking tools. Security posture is moderate with no visible security headers or incident response policies, and no WHOIS data was provided for domain legitimacy analysis.
B2B Maltab2bmalta.com
Other · Malta
48High
NIS2 5 · GDPR 25
NIS2 5 · GDPR 25
B2B Malta is a Malta-based business advisory firm specializing in market research, feasibility studies, business planning, funding applications, and mentoring services. The company positions itself as a trusted partner for businesses seeking to maximize potential and commercialize innovations. The website reflects a professional and consistent brand image, targeting businesses and entrepreneurs primarily in Malta but with multinational aspirations. The technical infrastructure is based on WordPress with Elementor and several modern plugins, providing a good user experience with mobile optimization and SEO considerations. Security posture is adequate with HTTPS and cookie consent mechanisms, though improvements are recommended in security headers and explicit privacy policies. Overall, the website is functional, professional, and trustworthy, with room for enhanced compliance and security maturity.
- FFIMBank
fimbank.com
Finance · Malta
56Medium
NIS2 5 · GDPR 43
NIS2 5 · GDPR 43
FIMBank is a Malta-based financial institution specializing in trade finance, factoring, forfaiting, and related banking services. It operates as part of the KIPCO Group and maintains an extensive international network across multiple continents. The website presents a professional image with clear navigation and comprehensive information about its services, targeting corporate clients and investors. The digital infrastructure is built on ASP.NET WebForms with Bootstrap and jQuery, supporting both desktop and mobile users with moderate performance and good SEO practices. Security posture is adequate with HTTPS enforced and cookie consent implemented, though explicit security policies and headers are lacking. The site uses Google Analytics and Tag Manager for tracking with user consent, and social media presence is established on Facebook and LinkedIn. Overall, the website reflects a credible and established financial services provider with room for security enhancements.
Malta Gaming Authoritymga.org.mt
Government · Malta
55Medium
NIS2 5 · GDPR 3
NIS2 5 · GDPR 3
The Malta Gaming Authority (MGA) is a government regulatory body responsible for overseeing licensed gaming operations in Malta. The website clearly communicates the MGA's mission to ensure fairness, transparency, crime prevention, and protection of minors and vulnerable players. The MGA holds a strong market position as the national gaming regulator, providing key services such as licensee registration, enforcement actions, and player support. The target audience includes players, licensees, and industry stakeholders. The business model is regulatory and compliance-focused, with a medium-sized organizational footprint. Technically, the MGA website is built on WordPress and leverages modern web technologies including jQuery, Font Awesome, and integrations with Mailchimp for newsletter subscriptions. The site is hosted behind Cloudflare, providing CDN and security benefits. Performance is moderate with good mobile optimization and accessibility features. SEO is well implemented with proper meta tags and structured data. From a security perspective, the site enforces HTTPS and uses Cloudflare for protection. No critical vulnerabilities or exposed sensitive data were detected. However, security headers are not explicitly present, and there is no published security policy or incident response contact information. Privacy compliance is good with a comprehensive privacy policy, but lacks a cookie consent mechanism. The site uses tracking tools such as Google Tag Manager and Hotjar with moderate user tracking. Overall, the MGA website demonstrates a strong security posture and professional digital presence suitable for a government regulatory authority. Strategic recommendations include adding security headers, implementing cookie consent, publishing security policies, and considering a vulnerability disclosure program to further enhance trust and compliance.
- PPPB Counterparty Services Limited
betfair.com
E-commerce · United Kingdom
63Medium
NIS2 5 · GDPR 63
NIS2 5 · GDPR 63
Betfair is a leading online gambling platform offering a wide range of betting services including sportsbook, exchange betting, casino games, poker, bingo, and virtual sports. The company operates under multiple regulated licenses, primarily in the UK and Malta, ensuring compliance with strict gambling regulations. The website provides various welcome offers and promotions targeting new customers, with clear terms and conditions and responsible gambling tools prominently featured. Technically, the site uses modern web technologies such as jQuery, Slick Carousel, and Google Tag Manager, and is optimized for both desktop and mobile users. Security measures include HTTPS enforcement, secure login forms, and cookie consent mechanisms, contributing to a strong security posture. Overall, Betfair presents a professional, trustworthy, and user-friendly online gambling experience.
Finance · Greece
38High
NIS2 5 · GDPR 0
NIS2 5 · GDPR 0
AFI Microfinance is a licensed microfinance institution in Greece focused on providing microloans and business development services to underserved entrepreneurs and vulnerable social groups. Supported by major financial institutions like Eurobank and the Hellenic Development Bank, AFI offers loans up to 25,000 euros alongside training, mentoring, and networking opportunities. The website demonstrates a mature digital presence with modern technologies, responsive design, and comprehensive content tailored to its target audience. Security posture is solid with HTTPS, cookie consent, and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is well addressed with GDPR-aligned policies and user consent mechanisms. Overall, AFI Microfinance presents a trustworthy and professional online presence aligned with its business goals.
- KidStart Limited
kidstart.co.uk
Finance · United Kingdom
59Medium
NIS2 0 · GDPR 43
NIS2 0 · GDPR 43
KidStart Limited operates a UK-based cashback platform designed to help families save money for their children by earning cashback on everyday online purchases from a wide range of partner retailers. The website is well-branded and targets parents, grandparents, and family members interested in building savings for children. The business model leverages affiliate partnerships with major retailers and financial services, including a Junior ISA offering. The site demonstrates a solid market position with visible trust indicators such as FCA authorization and customer testimonials. Technically, the website uses a traditional tech stack including jQuery, Font Awesome, Facebook SDK, and Google Analytics. While the site is mobile-optimized and has good SEO practices, some technical debt is evident with the use of an older jQuery version and lack of modern security headers. Performance is moderate, and accessibility is basic but functional. From a security perspective, the site enforces HTTPS and integrates secure Facebook OAuth login flows. However, it lacks explicit security headers and uses an outdated JavaScript library version, which could expose it to vulnerabilities. Privacy compliance is strong with clear privacy and cookie policies and GDPR indicators. No direct contact emails or phone numbers are provided on the main pages, which may affect user trust slightly. Overall, KidStart presents a trustworthy and professional online presence with a good balance of business credibility and privacy compliance. Security posture is adequate but could be improved by updating libraries and adding security headers. The domain registration data aligns well with the business claims, supporting legitimacy. Strategic improvements in security and contact transparency would enhance trust and resilience.
Serenataserenataflowers.com
Retail · United Kingdom
57Medium
NIS2 0 · GDPR 43
NIS2 0 · GDPR 43
Serenata Flowers is a well-established UK-based online florist specializing in flower and plant delivery services. The company offers a wide range of floral arrangements, including bouquets, letterbox flowers, and gifts, with a strong emphasis on freshness, quality, and customer satisfaction. Their market position is supported by extensive customer reviews and a comprehensive product catalog. Technically, the website is built on modern frameworks such as Nuxt.js and Vue.js, hosted behind Cloudflare for performance and security. The site is mobile-optimized, fast, and accessible, with good SEO practices including structured data. Security posture is strong with HTTPS enforced and appropriate security headers, though explicit security policies and incident response information are not publicly available. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. Overall, the website presents a professional, trustworthy, and user-friendly experience for customers seeking floral products online.