Low-risk security reports
14,261 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,165001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
12,901–12,950 of 14,261
UAB Ignitisignitis.lt
Energy · Lithuania
81Low
NIS2 2 · GDPR 95
NIS2 2 · GDPR 95
UAB Ignitis operates as the largest electricity and gas supplier in Lithuania, serving over 1.6 million customers nationwide. The company offers a broad range of energy services and positions itself as a provider of smart energy solutions. The website content is professionally presented in Lithuanian, targeting both residential and business customers within Lithuania. The business model focuses on energy supply and related services, with a strong market position as the leading energy provider in the country. Technically, the website is built on the Drupal CMS platform and integrates multiple modern technologies including Google Tag Manager, Cookiebot for cookie consent management, and various analytics and marketing tools such as Hotjar, Gemius, VWO, and MailerLite. The site is mobile-optimized and demonstrates good SEO and accessibility practices, although some accessibility features could be enhanced. From a security perspective, the website enforces HTTPS and employs cookie consent mechanisms aligned with GDPR requirements. However, explicit security headers are not evident in the analyzed content, and the jQuery version used is outdated, which could pose security risks. There is no publicly available security policy or incident response contact information, and no vulnerability disclosure program is detected. Overall, the website is legitimate and professionally maintained, with strong privacy compliance and business credibility. The absence of WHOIS data limits domain registration analysis, but the business presence and content quality support a high trust level. Strategic improvements in security headers, updated libraries, and published security policies would enhance the security posture and trustworthiness further.
Simplanovasimplanova.com
Technology
76Low
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Simplanova is a specialized Microsoft ISV Development Center focusing on Microsoft Dynamics NAV and Dynamics 365 Business Central development and upgrade services. The company offers a range of services including ERP upgrades, migrations, add-on upgrades, and CRM development, targeting businesses using Microsoft Dynamics products. The website reflects a professional service provider with a clear niche in Microsoft ERP modernization. Technically, the website is built on WordPress and integrates multiple modern marketing and analytics tools such as HubSpot, LinkedIn Insight, Hotjar, and Cookiebot for cookie consent management. The site is hosted behind Cloudflare, ensuring good performance and security at the network level. Security posture is adequate with HTTPS enabled and cookie consent implemented; however, the absence of DNSSEC and security headers indicates room for improvement. No explicit privacy policy or terms of service pages were found, which is a compliance gap. Contact information is not explicitly visible, which may affect user trust and business credibility. Overall, the domain registration data supports the legitimacy of the business with a long-standing domain and consistent registration details.
Alma litteraalgrupe.lt
Retail · Lithuania
79Low
NIS2 25 · GDPR 100
NIS2 25 · GDPR 100
Alma littera is the largest adult, children, and youth literature publisher in the Baltic states, boasting over 32 years of publishing experience. The company operates primarily as a book publisher and retailer, targeting a broad audience including adults, children, and teenagers in Lithuania and the Baltic region. Their website is hosted on the Shopify platform, leveraging modern e-commerce technologies and standard marketing and analytics tools such as Google Analytics, Google Tag Manager, and LinkedIn Insight Tag. Cookie consent is managed via Cookiebot, indicating a commitment to user privacy and compliance with cookie regulations. However, explicit privacy policies and contact information are not found on the analyzed page, which may impact user trust and compliance transparency.
Metos B.V.metos.nl
Retail · Netherlands
83Low
NIS2 2 · GDPR 100
NIS2 2 · GDPR 100
Metos B.V. operates a professional B2B e-commerce platform specializing in commercial kitchen equipment and related services in the Netherlands. The company offers custom projects, innovative concepts, and service & maintenance, positioning itself as a one-stop-shop for large kitchen solutions. The website is built on the Shopify platform, leveraging modern e-commerce technologies and third-party apps to facilitate customer interactions, including a detailed contact form and quote request features. The site demonstrates good digital maturity with responsive design, SEO optimization, and integrated marketing and analytics tools. Security measures include HTTPS enforcement, CAPTCHA on forms, and cookie consent management via Cookiebot, although explicit security policies and incident response contacts are not published. Overall, the website is professional, trustworthy, and well-structured, supporting the company's enterprise-level operations.
- Locatory.com
locatory.com
Transportation
76Low
NIS2 17 · GDPR 95
NIS2 17 · GDPR 95
Locatory.com operates as a specialized online marketplace serving the aviation industry, connecting airlines, maintenance, repair, and overhaul (MRO) providers, and suppliers globally. The platform aims to streamline procurement and sales processes within the aviation sector, positioning itself as a leading marketplace in this niche. The website content and branding emphasize trust and global reach, targeting aviation professionals and businesses. Technically, the site is built on WordPress with modern SEO optimizations, analytics integrations including Google Analytics, Microsoft Clarity, and Mouseflow, and employs Cookiebot for GDPR-compliant cookie consent management. The site is mobile-optimized and demonstrates good performance and accessibility standards. Security-wise, the site enforces HTTPS and integrates security monitoring tools but lacks explicit security policies and incident response information. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, which should be verified. Overall, Locatory.com presents a professional and functional digital presence with room for improvement in transparency and security documentation.
DPDdpd.lt
Transportation · Lithuania
78Low
NIS2 17 · GDPR 65
NIS2 17 · GDPR 65
DPD Lithuania operates as a parcel delivery and courier service provider, serving both business and private customers. It is part of the international DPD group under Geopost, offering parcel delivery, parcel locker services, and e-commerce shipping solutions. The website is professionally designed, mobile-optimized, and provides clear navigation and parcel tracking features. The technical infrastructure is based on WordPress with modern libraries such as jQuery and Bootstrap, and integrates consent management and analytics tools. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though public security policies and incident response contacts are not explicitly published. WHOIS data for the main domain is unavailable, likely due to privacy protection, which slightly reduces trust but is common for large enterprises. Overall, the site demonstrates a mature digital presence with good compliance and security practices.
CoinGatecoingate.com
Finance · Lithuania
81Low
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
CoinGate is a well-established cryptocurrency payment gateway and financial service provider founded in 2005 and based in Lithuania. The company offers a comprehensive suite of services enabling businesses worldwide to accept, process, and settle cryptocurrency payments securely and compliantly. With a strong emphasis on AML/KYC compliance and regulatory adherence, CoinGate positions itself as a trusted partner for merchants seeking to integrate crypto payments with fiat settlement options. The website demonstrates a mature digital presence with excellent content quality, clear navigation, and robust SEO practices. Technically, the site leverages modern technologies including WordPress CMS, Google Tag Manager, Hotjar analytics, and Cloudflare DNS services, ensuring good performance and mobile optimization. Security posture is strong with HTTPS enforced and domain protections in place, though there is room for improvement in publishing explicit security policies and vulnerability disclosure mechanisms. Overall, CoinGate presents a credible, professional, and trustworthy platform with a high level of business and technical maturity.
- Oriola
oriola.fi
Healthcare · Finland
79Low
NIS2 2 · GDPR 73
NIS2 2 · GDPR 73
Oriola is a Nordic health and wellbeing company focused on providing comprehensive pharmaceutical and healthcare services. The company operates primarily in Finland and Sweden, serving pharmacies, pharmaceutical companies, healthcare providers, and retail health product companies. Their business model centers on wholesale distribution, clinical services, regulatory affairs, and digital services, positioning them as a key player in the Nordic healthcare market. The website reflects a professional and consistent brand with a strong emphasis on sustainability and investor relations.
- CCritical Software
criticalsoftware.com
Technology · Portugal
83Low
NIS2 47 · GDPR 68
NIS2 47 · GDPR 68
Critical Software is a well-established technology company specializing in safety, mission, and business-critical software and system services. With over 25 years of experience, it serves demanding industries such as aviation, automotive, defence, energy, finance, government, medical devices, railway, and space. The company is recognized for its expertise in safety-critical software development, testing, verification, and validation, and is trusted by leading global brands including Airbus, Leonardo, BMW, Siemens, ESA, and Thales. The website reflects a mature digital presence with professional design, clear navigation, and multilingual support.
KRASTA AUTOkrasta-auto.lt
Transportation · Lithuania
80Low
NIS2 17 · GDPR 95
NIS2 17 · GDPR 95
KRASTA AUTO is an official BMW and MINI dealership in Lithuania, offering new and used vehicles alongside servicing options. The website positions itself clearly as an authorized representative, targeting car buyers and service customers within the Lithuanian market. The business model revolves around vehicle sales and after-sales services, leveraging the strong BMW brand. Technically, the website is built on WordPress and integrates multiple modern analytics and marketing tools such as Google Analytics, Facebook Pixel, and Cookiebot for cookie consent management. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, the site enforces HTTPS and includes several security headers, though the Content Security Policy is limited and could be improved. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of a privacy policy and terms of service pages, as well as missing WHOIS registration data, slightly reduce the overall trustworthiness. Strategic recommendations include publishing comprehensive privacy and terms documents, enhancing security policies, and adding a vulnerability disclosure mechanism to improve compliance and trust.
- CCGTrader
cgtrader.com
Technology
88Low
NIS2 47 · GDPR 95
NIS2 47 · GDPR 95
CGTrader operates a large and professional 3D model marketplace serving a diverse audience including 3D designers, VR/AR developers, and enterprises. The platform offers extensive 3D assets, freelance job opportunities, and community engagement features, positioning itself as a leading player in the 3D content industry. Technically, the website employs modern frameworks like React and integrates advanced analytics and error monitoring tools, ensuring a robust and responsive user experience. Security posture is strong with HTTPS enforcement, security headers, and CSRF protections, though explicit security policies and incident response details are absent. The missing WHOIS data introduces some uncertainty about domain registration legitimacy, but the overall business credibility and website professionalism mitigate major concerns. Strategic recommendations include publishing security policies, enhancing direct contact information, and verifying domain registration details.
- Brødrene Aa
braa.no
Energy · Norway
77Low
NIS2 2 · GDPR 80
NIS2 2 · GDPR 80
Brødrene Aa is a Norwegian company specializing in the design and construction of energy efficient fast ferries made from carbon fibre composites. Positioned as a world leader in this niche maritime manufacturing sector, the company operates a skilled workforce at its main shipyard in Hyen, Norway. The website reflects a professional digital presence built on the Squarespace platform, featuring multimedia content and clear navigation to showcase their products and services. Technically, the site employs modern web technologies and maintains good security practices including HTTPS and HSTS, though it lacks some advanced security headers and published security policies. Privacy compliance is partially addressed with a cookie consent banner, but no formal privacy or terms of service documents are found. Overall, the site is trustworthy and well-maintained, supporting the company's market position and business credibility.
Plastikse, UABplastikse.com
Manufacturing · Lithuania
78Low
NIS2 2 · GDPR 95
NIS2 2 · GDPR 95
Plastikse, UAB is a Lithuania-based manufacturer specializing in PET bottles and customized packaging solutions. Established in 2009, the company leverages over 20 years of cumulative industry experience to serve a global clientele of over 250 loyal customers. Their business model focuses on bespoke design and sustainable manufacturing practices, including the use of recycled materials and renewable energy sources. The website reflects a professional and consistent brand image with clear navigation and comprehensive product offerings. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and Contact Form 7, ensuring good SEO and user interaction capabilities. Hosting is provided by Bluehost with Cloudflare DNS, and the site employs HTTPS with Google reCAPTCHA for form security. Cookie consent is managed via a GDPR-compliant plugin offering granular user controls, indicating a mature approach to privacy compliance. Security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. However, the absence of explicit security headers and incident response policies suggests room for improvement. The site demonstrates good privacy compliance with clear policies and contact information but lacks a dedicated vulnerability disclosure or security.txt file. Overall, Plastikse presents a trustworthy and professional online presence aligned with its manufacturing business. Strategic recommendations include enhancing security headers, publishing incident response and vulnerability disclosure information, and continuous monitoring of privacy compliance to maintain trust and security standards.
Forteventofortevento.lt
Technology · Lithuania
81Low
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Fortevento is a Lithuanian-based IT service provider specializing in custom IT solutions that combine advanced technologies with expert experience. Established in 2010, the company has completed over 100 successful projects, positioning itself as a trusted partner for businesses seeking tailored technology services. The website reflects a professional and consistent brand image, targeting business clients primarily in Lithuania. Technically, the site is built on WordPress with modern tools such as Google Tag Manager and Cookiebot for analytics and privacy compliance. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Security posture is solid with HTTPS enforced and a comprehensive cookie consent mechanism, but could be improved by adding security headers and a vulnerability disclosure policy. Overall, the website demonstrates a mature digital presence with good privacy compliance and business credibility.
- NNordic training international
nti-group.com
Human resources · Latvia
82Low
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
- LITGRID, AB
litgrid.eu
Energy · Lithuania
78Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Litgrid, AB is a Lithuanian energy sector company specializing in electricity transmission and grid management. The website presents a professional and well-structured digital presence, targeting stakeholders in the energy industry and the general public interested in Lithuania's electricity infrastructure. The company operates as a key national transmission system operator, providing essential services for the country's energy distribution. The technical infrastructure of the website includes modern JavaScript libraries such as jQuery and Chart.js, integration with Cookiebot for cookie consent management, and Google Analytics for visitor tracking. The site is served over HTTPS with appropriate security headers, indicating a good security posture. Mobile optimization and accessibility are adequately addressed, though there is room for improvement in SEO and accessibility features. Security-wise, the website enforces HTTPS, uses a cookie consent mechanism compliant with GDPR, and does not expose sensitive data or vulnerable libraries. However, it lacks publicly available security policies, incident response contacts, and vulnerability disclosure mechanisms, which are recommended for enhanced transparency and trust. Overall, the website is trustworthy and professionally maintained, with a strong focus on privacy compliance and user consent. Strategic recommendations include publishing security and incident response policies, improving accessibility and SEO, and adding clear contact information for security and general inquiries.
PROBARtheprobar.com
E-commerce · United States
77Low
NIS2 17 · GDPR 58
NIS2 17 · GDPR 58
PROBAR is a well-established e-commerce business specializing in plant-based, gluten-free, and GMO-free protein meal bars and snacks. Founded in 2004, the company targets families, athletes, and outdoor enthusiasts seeking healthy nutrition options. The website is built on Shopify, leveraging a modern tech stack including JavaScript libraries and marketing integrations such as Yotpo and Facebook Pixel. The site demonstrates good design quality, mobile optimization, and clear navigation, supporting a positive user experience. Security posture is solid with HTTPS enforced and domain registration protections, though improvements in security headers and DNSSEC could enhance resilience. Privacy and cookie policies are present and GDPR compliant, supporting regulatory adherence. Overall, PROBAR presents a credible, professional online presence with extensive marketing and analytics capabilities.
Softerasoftera.lt
Technology · Lithuania
78Low
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
Softera is a Lithuanian technology company specializing in business digitalization solutions, primarily leveraging Microsoft Dynamics 365. The company targets manufacturing, trading, and service sectors, offering tailored software implementations to meet business needs. Their market position is that of a specialized B2B solutions provider within Lithuania, focusing on digital transformation. Technically, the website is built on WordPress with modern plugins and tracking tools such as Google Analytics, Microsoft Clarity, and Facebook SDK, complemented by a cookie consent mechanism via Cookiebot. The site is mobile-optimized and demonstrates good SEO practices, although accessibility features are basic. Security posture is solid with HTTPS enforced and no obvious vulnerabilities detected, but the absence of security headers and explicit security policies suggests room for improvement. The lack of WHOIS data and registrant transparency introduces some risk regarding domain legitimacy. Overall, the website is professional and functional but would benefit from enhanced privacy disclosures and contact transparency to improve trust and compliance.
- UUAB Bartus pro
rontgen.lt
Finance · Lithuania
83Low
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Röntgen.lt is a Lithuanian-based crowdfunding platform specializing in short-term business loans secured by real estate collateral. Founded in 2017 and operated by UAB Bartus pro, the platform targets investors seeking secure investment opportunities with relatively low entry thresholds. The website presents a professional and consistent brand image, with clear navigation and multilingual support (Lithuanian and English). The business model focuses on facilitating investments into business loans, leveraging real estate as security to mitigate risk. The platform has a sizable investor community and significant invested capital, indicating a strong market position in Lithuania's fintech and real estate finance sectors. Technically, the website employs modern web technologies including Bootstrap, Font Awesome, and integrates multiple third-party services such as Google Analytics, Hotjar, LinkedIn Insight, and Facebook Pixel. Cookie consent is managed via Cookiebot with a comprehensive consent mechanism, ensuring GDPR compliance. Hosting and DNS services are provided through Cloudflare, enhancing performance and security. The site is mobile-optimized and demonstrates good SEO and accessibility practices, although some accessibility features could be improved. From a security perspective, the site enforces HTTPS, uses reCAPTCHA to protect forms, and implements CSRF protection cookies. Security headers are partially present, and no critical vulnerabilities or exposed sensitive data were detected. However, explicit security policies and incident response contacts are not published, and no vulnerability disclosure mechanism (e.g., security.txt) is found, which could be improved to enhance trust and transparency. Overall, Röntgen.lt presents a trustworthy and professional online presence with solid technical and security foundations. Strategic recommendations include publishing detailed security and incident response policies, enhancing accessibility, and implementing a formal vulnerability disclosure process to further strengthen security posture and compliance.
Ubiquiti Inc.ubnt.com
Technology · United States
88Low
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
Ubiquiti Inc. is a leading technology company specializing in enterprise networking and security solutions, offering a unified software interface alongside industry-leading hardware products. Their market position is strong within the enterprise networking sector, targeting IT professionals and organizations seeking scalable and integrated networking solutions. The website reflects a mature digital presence with modern technologies such as React, Google Analytics, and consent management tools, indicating a high level of digital maturity and user experience focus. Security posture is robust with HTTPS enforcement, comprehensive security headers, and secure form implementations, although explicit security policies and incident response information are not publicly disclosed. Overall, the website and business presence suggest a trustworthy and professional organization, though the lack of WHOIS transparency slightly reduces domain registration trust. Strategic recommendations include publishing detailed security policies and vulnerability disclosure information to enhance trust and compliance.
- Zedge
zedge.net
Technology
80Low
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
Zedge is a leading mobile personalization platform offering millions of ringtones, wallpapers, notification sounds, and AI-powered image creation tools. It serves a large global user base with a freemium business model that includes free and premium content, monetized through advertising and in-app purchases. The website is built on modern web technologies including React and Next.js, with integrations for analytics and advertising such as Google Analytics, Hotjar, and Amazon Ads. The site demonstrates strong digital maturity with excellent design, mobile optimization, and user experience. Security posture is generally good with HTTPS enabled and asynchronous loading of third-party scripts, though explicit security headers and privacy policies are not detected in the provided content. WHOIS data is missing, which slightly reduces trustworthiness but does not negate the professional presence and market leadership of the brand. Overall, Zedge presents a robust platform with room for improvement in privacy compliance and security header implementation.
TD Baltictdbaltic.com
Technology · Estonia
78Low
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
TD Baltic is a well-established international IT and consumer goods distribution company operating primarily in the Baltic states. With over 31 years of experience, it serves a solid client base of specialized IT resellers and offers a broad portfolio of products from major global vendors such as HP, Dell Technologies, and Cisco. The company focuses on providing comprehensive supply chain services including logistics, stocking, and value-added services, positioning itself as a leading technology distributor in the region. The website reflects a professional and consistent brand image with clear business information and contact details. Technically, the website is built using modern JavaScript frameworks like React and integrates Google Maps API for location services. The site is mobile-optimized with good SEO and accessibility basics, though some improvements in accessibility and security headers could be made. Performance is moderate, and the site uses HTTPS with a strong SSL configuration. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and cookie consent mechanisms, but lacks explicit security policies, incident response information, and vulnerability disclosure channels. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data for the subdomain is missing, which is typical for subdomains, and does not detract from the overall legitimacy of the business. Overall, TD Baltic presents a credible and professional online presence with a solid business foundation. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and improving accessibility features to further strengthen trust and compliance.
- UAB Be kredito
bekredito.lt
Retail · Lithuania
76Low
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Bekredito.lt is a Lithuanian company operating in the retail sector, specializing in item rentals with an option for customers to purchase the rented items. The business targets Lithuanian consumers seeking flexible access to goods without immediate purchase. The website presents a professional and consistent brand image, with clear business descriptions and social media presence. Technically, the site employs modern frontend technologies such as Vue.js and Pinia, integrates Google Tag Manager, Cookiebot for consent management, and Hotjar for analytics, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforcement and appropriate security headers, though explicit security policies and incident response contacts are absent. Privacy compliance is well addressed with comprehensive cookie consent mechanisms and a detailed privacy policy in Lithuanian. However, the absence of WHOIS data for the domain raises concerns about domain registration legitimacy, which should be verified to ensure trustworthiness. Overall, Bekredito.lt demonstrates a good balance of business professionalism, technical implementation, and privacy compliance, with room for improvement in transparency and domain legitimacy verification.
Government · United States
79Low
NIS2 25 · GDPR 95
NIS2 25 · GDPR 95
The National Democratic Institute (NDI) is a well-established non-profit organization founded in 1994, dedicated to supporting democratic institutions worldwide. The website reflects a professional and consistent brand presence, targeting governments, civil society, and democracy advocates globally. The organization offers key services including election observation, governance support, and civil society strengthening. The website is built on Drupal 10 and uses Cloudflare DNS services, indicating a modern and secure technical infrastructure. Google Tag Manager is employed for analytics and tracking, though explicit privacy and cookie policies are not found in the provided content. Security posture is generally good with HTTPS enabled and domain registration consistent with the organization's profile, but DNSSEC is not enabled and security headers are not detected, representing areas for improvement. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and explicit security policies.
Magnetic mro asmagneticmro.com
Airlines/aviation · Estonia
80Low
NIS2 17 · GDPR 65
NIS2 17 · GDPR 65
Fugrofugro.com
Energy · Netherlands
85Low
NIS2 17 · GDPR 85
NIS2 17 · GDPR 85
Fugro is a globally recognized leader in geo-data solutions, specializing in providing critical data and insights to support sustainable development and enhance safety across various industries. Founded in 1962 and headquartered in the Netherlands, the company offers advanced geo-data services that empower clients to make informed decisions for infrastructure, energy, and environmental projects. The website reflects a mature enterprise with a clear focus on technology and sustainability, targeting businesses and organizations requiring specialized geo-data expertise. The technical infrastructure of the website is modern and robust, leveraging Next.js for server-side rendering, Amazon Cloudfront for content delivery, and advanced analytics tools such as Visual Website Optimizer and Google Tag Manager. The site is well-optimized for performance, mobile responsiveness, and accessibility, indicating a high level of digital maturity. The use of structured data (JSON-LD) enhances SEO and content discoverability. From a security perspective, the website employs HTTPS with strong SSL configurations and implements security best practices such as Content Security Policy nonces and cookie consent mechanisms. However, there is a lack of publicly available security policies, incident response information, and vulnerability disclosure programs, which are important for transparency and trust in enterprise environments. The absence of WHOIS data for the domain is a notable gap that slightly reduces the overall trust score. Overall, Fugro's website presents a professional and trustworthy digital presence aligned with its market position as a leader in geo-data solutions. Strategic improvements in privacy transparency, security policy publication, and domain registration visibility would further enhance trust and compliance posture.
- INVL Asset Management
invl.com
Finance · Lithuania
78Low
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
INVL Asset Management operates as a leading alternative asset manager in the Baltic states, focusing on private equity, real estate, private debt, and fund of funds. The company targets investors seeking diversified alternative investment opportunities in the Baltic region. The website presents a professional and consistent brand image with comprehensive information about investment funds and sustainability initiatives. Technically, the site employs modern JavaScript libraries, Google Tag Manager, and Cookiebot for consent management, indicating a mature digital infrastructure. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the website enforces HTTPS and uses Google reCAPTCHA to prevent bot abuse, alongside a robust cookie consent mechanism. However, the absence of explicit security headers and lack of published security policies or incident response contacts represent areas for improvement. The missing WHOIS registration data is a notable concern for domain legitimacy, though the professional web presence and privacy compliance mitigate some risk. Overall, the site scores well on content quality, technical implementation, and security posture but could enhance business credibility by providing clearer contact and legal information.
Exadelexadel.com
Technology · United States
86Low
NIS2 25 · GDPR 88
NIS2 25 · GDPR 88
Exadel is a well-established enterprise software development and consulting company founded in 1998, with a strong market position recognized by Forrester as a leader in Agile Development. The company targets enterprises seeking technology transformation and digital leadership, offering key services including software development and consulting. The website reflects a mature digital presence built on WordPress, utilizing modern technologies such as Google reCAPTCHA, Matomo analytics, and CookiePro for privacy compliance. Security posture is strong with HTTPS enforced and anti-clickjacking measures, though some security headers could be enhanced. The domain registration is stable and consistent with the business history, supporting legitimacy. Overall, the website demonstrates professionalism, good privacy compliance, and a solid technical foundation.
Comfort Zone Holdingcomfortzone.it
E-commerce · Italy
76Low
NIS2 10 · GDPR 50
NIS2 10 · GDPR 50
Comfort Zone Holding operates an international e-commerce platform specializing in skincare products that combine clean ingredients with scientific formulations. The website targets consumers primarily in Europe and the United States through localized country-specific subdomains, providing tailored shopping experiences. The business model focuses on direct online retail leveraging the Shopify platform, which supports scalability and multi-region operations. The brand positions itself as a niche player emphasizing product efficacy and natural formulations.
Son de Florsondeflor.com
Retail · Lithuania
76Low
NIS2 2 · GDPR 85
NIS2 2 · GDPR 85
Son de Flor is a Lithuania-based e-commerce retailer specializing in Baltic linen clothes and accessories, emphasizing handcrafted quality and elegance. The website is built on the Shopify platform, leveraging multiple marketing and analytics tools such as TikTok Pixel, Google Tag Manager, Hotjar, and Trustpilot to enhance customer engagement and track performance. The site supports multiple languages and currencies, targeting a European audience. Technically, the site is well-implemented with HTTPS and modern e-commerce features, though DNSSEC is not enabled and explicit security headers are missing. Privacy compliance is weak due to the absence of visible privacy and cookie policies. Business credibility is supported by consistent WHOIS data and a well-aged domain.
CGI Inc.cgilithuania.lt
Technology · Lithuania
93Low
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
CGI Lithuania is a prominent IT services and consulting provider operating as part of the global CGI Inc. group, established in 1976. The website presents a professional and comprehensive digital presence targeting Lithuanian businesses seeking advanced IT and business consulting solutions. The site leverages modern technologies including Drupal CMS, Google Tag Manager, New Relic monitoring, and TrustArc for privacy compliance, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforcement and cookie consent mechanisms, though explicit security policies and incident response contacts are not published. The domain WHOIS data is unavailable, likely due to privacy or registry restrictions, which slightly reduces transparency but does not detract from the site's legitimacy given the strong brand presence and content quality. Overall, the website demonstrates a high level of professionalism, compliance, and technical maturity suitable for an enterprise IT services firm.
Rockwool A/Srockwool.nl
Manufacturing · Netherlands
76Low
NIS2 25 · GDPR 83
NIS2 25 · GDPR 83
ROCKWOOL Group is a globally recognized leader in manufacturing stone wool insulation products, serving the construction and building sectors with thermal, fire-safe, acoustic, and sustainable insulation solutions. The company targets professionals in construction, architecture, and building maintenance, emphasizing energy efficiency and sustainability. The website reflects a mature digital presence with comprehensive content, structured data, and a consistent brand image. Technically, the site employs modern JavaScript frameworks, integrates marketing and analytics tools such as Marketo, Google Tag Manager, and Cookiebot, and provides a robust cookie consent mechanism aligned with GDPR requirements. Security posture is solid with HTTPS enforced and no visible sensitive data exposure, though explicit security headers are not detected in the provided data. The absence of WHOIS data is a notable anomaly but does not detract significantly from the overall trustworthiness given the professional presentation and extensive business information. Strategic recommendations include enhancing security headers, publishing explicit security policies, and improving transparency around incident response. Overall, ROCKWOOL's website demonstrates strong business credibility, technical maturity, and privacy compliance, positioning it well in its industry.
Education · Lithuania
76Low
NIS2 17 · GDPR 65
NIS2 17 · GDPR 65
Kauno technologijos universitetas (KTU) is a leading Lithuanian public university offering a wide range of academic programs from bachelor's to doctoral levels, including professional studies and MBA. The institution is well-positioned in the national education market, recognized as the second-best university in Lithuania according to QS rankings. KTU serves students, researchers, and business partners with comprehensive education, research, and innovation services. The website reflects a mature digital presence with extensive content, clear navigation, and multilingual support.
- Royal Boskalis Westminster NV
boskalis.com
Energy · Netherlands
83Low
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Royal Boskalis Westminster NV is a leading global services provider specializing in dredging, maritime infrastructure, and maritime services. The company targets global maritime and coastal infrastructure markets, offering innovative solutions to complex infrastructural challenges. The website reflects a mature enterprise with consistent branding and a clear business focus in the energy and transportation sectors. Technically, the website employs modern technologies including Matomo analytics for privacy-conscious tracking and Cookiebot for consent management, hosted on Azure DNS infrastructure. The site is mobile optimized and accessible with good SEO practices. Security posture is solid with HTTPS enforced, CSRF protection in forms, and bot mitigation via Google reCAPTCHA, though some security headers are not explicitly detected. Privacy compliance is well addressed with a comprehensive cookie policy and consent mechanism, but explicit privacy and security policies are limited. No vulnerability disclosure or incident response contacts are found. The domain WHOIS data is consistent, public, and aligns with the company's history, supporting legitimacy. Overall, the website is professional, secure, and compliant with minor areas for improvement.
- NEO GROUP
neogroup.eu
Manufacturing · Lithuania
78Low
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
NEO GROUP is a prominent European manufacturer specializing in PET resins and polyols, with a strategic location in Lithuania. The company emphasizes sustainability by producing PET resins with recycled content and serves a broad European market with a large manufacturing capacity. Their website reflects a mature digital presence built on WordPress, utilizing modern libraries and frameworks to deliver a responsive and user-friendly experience. Security practices include HTTPS enforcement and security headers, alongside a cookie consent mechanism, though dedicated security and incident response policies are not publicly available. Overall, the website demonstrates a solid security posture with room for improvement in transparency and incident readiness.
mindcurv groupigniti.de
Technology
82Low
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
mindcurv group is a digital transformation consultancy specializing in digital platforms, cloud solutions, and e-commerce. Recently acquired by Accenture Song, it leverages a combination of strategy, branding, marketing, and technology to help businesses evolve sustainably in the digital age. The company targets organizations seeking to modernize and digitize their business models with a focus on continuous evolution rather than one-off projects. Technically, the website is built on the Neos CMS with the Flow PHP framework, uses modern JavaScript libraries, and integrates Adobe Analytics for data insights. The domain is registered consistently with the parent company Accenture, indicating legitimacy. Security posture is good with HTTPS and cookie consent mechanisms, but lacks some security headers and explicit privacy policies. Overall, the website is professional, content-rich, and well-branded, though it could improve transparency around privacy and contact information.
Urbomedbank.lt
Finance · Lithuania
77Low
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Urbo is a Lithuanian bank established in 2023, offering a comprehensive range of banking services to private individuals and business clients. Their services include housing and consumer loans, business financing, deposits, payment services, insurance, and digital banking solutions. The website is professionally designed, mobile-optimized, and provides clear navigation and relevant content tailored to their target audience in Lithuania. The company maintains an active online presence with social media links and multiple service subdomains for internet banking, document management, loan applications, and API access. Technically, the website leverages modern JavaScript frameworks such as Alpine.js and Livewire, is hosted behind Cloudflare, and integrates Google Tag Manager and Facebook Pixel for analytics and marketing. Security posture is strong with HTTPS enforced, appropriate security headers, and no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with accessible privacy and cookie policies and a consent mechanism. However, explicit security policies and incident response contacts are not found, representing an area for improvement. Overall, Urbo presents a trustworthy and professional digital presence consistent with a modern financial institution.
Teltonikateltonika.lt
Technology · Lithuania
77Low
NIS2 47 · GDPR 73
NIS2 47 · GDPR 73
Teltonika IoT Group is a well-established provider of Internet of Things solutions, offering a broad ecosystem that includes telematics, networking, telemedicine, EV charging, and electronics manufacturing services. The company positions itself as a reliable partner with 25 years of experience and significant investment in research and development, targeting businesses across multiple industries such as transport, energy, and healthcare. The website reflects a professional and consistent brand image with clear navigation and good content quality, supporting its B2B business model and market presence. From a technical perspective, the website employs modern technologies including Nuxt.js and Tailwind CSS, hosted with reputable providers like Amazon Registrar and Cloudflare DNS. The site is mobile-optimized and accessible, with good SEO practices evident. However, some security best practices such as enabling DNSSEC and publishing security headers are missing, which could be improved to enhance the security posture. Security-wise, the site uses HTTPS and Cloudflare DNS, but lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. No privacy or cookie policies were found, which is a compliance gap especially under GDPR. The absence of contact emails and phone numbers on the main site reduces transparency and user trust. Overall, the website is trustworthy and professionally maintained but would benefit from enhanced privacy and security disclosures, improved DNS security, and clearer contact information to strengthen compliance and user confidence.
BlueBridgebluebridge.lt
Technology · Lithuania
76Low
NIS2 30 · GDPR 88
NIS2 30 · GDPR 88
BlueBridge is a Lithuanian IT services company specializing in comprehensive IT infrastructure solutions for businesses, including software deployment, maintenance, data management, cybersecurity, and network services. The company positions itself as a professional and reliable IT partner for enterprises seeking efficient and secure IT solutions. The website is built on WordPress with modern plugins such as WPBakery and Yoast SEO, indicating a moderate level of digital maturity and technical infrastructure. The site is mobile-optimized and includes cookie consent mechanisms via Cookiebot, demonstrating awareness of privacy compliance requirements. Security posture is generally good with HTTPS enabled and consent management in place; however, the absence of explicit privacy policies, terms of service, and incident response information indicates areas for improvement. Overall, the domain registration is transparent and consistent with the business's founding year, supporting legitimacy. Strategic recommendations include publishing comprehensive privacy and security policies, enhancing contact transparency, and implementing additional security headers to strengthen trust and compliance.
Monksmediamonks.com
Technology
81Low
NIS2 47 · GDPR 58
NIS2 47 · GDPR 58
Monks is a large, award-winning digital content, data, media, and technology agency focused on delivering innovative marketing solutions driven by AI and digital transformation. Their website demonstrates a high level of digital maturity with modern technologies including Drupal CMS, advanced JavaScript frameworks, and integrations with analytics and marketing platforms such as Google Tag Manager, mParticle, and Zaius. The site is professionally designed, mobile-optimized, and rich in multimedia content, reflecting a strong brand presence and market position. Security posture is good with HTTPS enforced and cookie consent implemented, though explicit security policies and vulnerability disclosures are absent. The absence of WHOIS data is notable and may indicate privacy protection or registration inconsistencies, but the overall trust signals from awards and social media presence support legitimacy. Privacy compliance could be improved by publishing clear privacy and terms of service policies. Overall, Monks presents as a credible and professional digital marketing powerhouse with room for enhanced transparency in privacy and security disclosures.
Hello Digital Marketinghellodigital.marketing
Technology · Canada
76Low
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Hello Digital Marketing is a well-established Winnipeg-based web design and digital marketing agency serving clients across Canada and the U.S. since 2013. The company offers a comprehensive suite of services including custom WordPress and Shopify development, managed hosting, AI design and development, and digital marketing automation. Their market position is strong with over 450 clients and a focus on SMBs and enterprises seeking growth through digital channels. Technically, the website is built on WordPress with modern SEO and performance optimizations, leveraging Google Analytics and Tag Manager with consent mode enabled. Security posture is solid with HTTPS and no visible vulnerabilities, though explicit security headers and privacy policies are lacking. Overall, the site demonstrates professionalism and trustworthiness, though improvements in privacy compliance and security policy transparency are recommended.
Strings By Mailstringsbymail.com
Retail · United States
77Low
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Strings By Mail is an established online retailer specializing in guitar and orchestral strings, accessories, sheet music, and related musical products. The website targets musicians and music enthusiasts, offering a broad catalog including classical, acoustic, electric, and bass guitar strings, as well as orchestral strings and instructional materials. The business operates primarily as an e-commerce platform with additional services such as a subscription string delivery service. The company maintains a strong market position within its niche, supported by trust indicators like customer testimonials and security seals. Technically, the website is built on the Zen Cart e-commerce platform and utilizes a variety of JavaScript libraries including jQuery, Owl Carousel, and Yotpo for reviews. The site is mobile responsive with good SEO and accessibility basics, though some libraries are outdated which may pose security risks. HTTPS is enforced, and security best practices such as Google reCAPTCHA are implemented, but advanced security headers are not explicitly detected. From a security perspective, the site shows a moderate security posture with no visible critical vulnerabilities but could improve by updating libraries and enhancing security headers. Privacy compliance is basic, with a privacy policy present but no visible cookie consent mechanism. WHOIS data is missing or indicates the domain may not be currently registered, which is a significant concern for domain legitimacy and trust. Overall, the website is professional and functional with good content quality and user experience. However, the lack of WHOIS registration data and outdated technical components suggest areas for improvement in security and trustworthiness. Strategic recommendations include updating technical components, enhancing security headers, implementing cookie consent, and investigating domain registration status to ensure legitimacy.
Sobha Realtysobharealty.com
Real Estate · United Arab Emirates
84Low
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Sobha Realty is a leading luxury real estate developer based in the United Arab Emirates, specializing in high-end apartments, penthouses, villas, and investment properties primarily in Dubai. The company positions itself as a premium brand focused on craftsmanship, thoughtful design, and signature quality, targeting affluent buyers and investors in the UAE real estate market. The website reflects a mature digital presence with professional design, clear navigation, and mobile optimization, supporting its market position effectively. Technically, the site is built on Drupal CMS, leveraging modern JavaScript libraries and multiple analytics and marketing tools, indicating a well-developed digital infrastructure. Security posture is good with HTTPS enforced and anti-clickjacking measures, though improvements such as enabling DNSSEC and adding security.txt could enhance trust further. Privacy compliance is strong with a comprehensive privacy policy and cookie consent mechanism, aligning with GDPR requirements. Overall, the website and domain registration data indicate a legitimate, professional business with a strong online presence and good security hygiene.
Civocivo.com
Technology
78Low
NIS2 53 · GDPR 83
NIS2 53 · GDPR 83
Civo is a cloud computing service provider specializing in Kubernetes-powered infrastructure and cloud native services. Their platform emphasizes speed, simplicity, and transparent pricing, targeting developers and businesses seeking efficient and scalable cloud solutions. Key offerings include managed Kubernetes, compute instances, managed databases, private cloud software, and GPU-powered machine learning environments. The company positions itself as an innovative alternative to traditional cloud providers with a focus on developer experience and sustainability. Technically, the website employs a modern tech stack with Google Tag Manager, Google Analytics, Facebook Pixel, HubSpot, Intercom, and Mouseflow for analytics and marketing. The site is well-optimized for performance, mobile responsiveness, and accessibility, with comprehensive SEO metadata and structured data. Security best practices are observed with HTTPS, reCAPTCHA on forms, and cookie consent mechanisms, although explicit security policies and incident response information are not published. The security posture is strong with no visible vulnerabilities or exposed sensitive data. Privacy compliance is good, with GDPR-aligned cookie consent and privacy policy. However, the absence of WHOIS data and domain registration details introduces a moderate trust concern. The website demonstrates high professionalism, clear navigation, and strong trust indicators such as customer testimonials and industry partnerships. Overall, Civo presents a credible and professional cloud service platform with a strong technical foundation and user-centric design. Strategic improvements include publishing detailed security policies, incident response contacts, and improving transparency around domain registration to enhance trustworthiness.
PlatformCon 2025 | The #1 platform engineering eventplatformcon.com
—
76Low
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
- Qt Group
qt.io
Technology
81Low
NIS2 25 · GDPR 88
NIS2 25 · GDPR 88
Qt is a well-established provider of software development tools and frameworks, targeting developers and enterprises across various industries including automotive, automation, medical, consumer electronics, and aerospace. The website presents a professional and consistent brand image, offering comprehensive tools for the software development lifecycle. The technical infrastructure leverages modern marketing and analytics platforms such as HubSpot CMS and Visual Website Optimizer, indicating a mature digital presence. Security posture is adequate with HTTPS enforced and cookie consent implemented, though explicit security policies and incident response information are not publicly available. Overall, the site demonstrates a solid business and technical foundation with room for improvement in transparency and security best practices.
Arsenal Football Clubarsenal.com
Retail · United Kingdom
76Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Arsenal Football Club's official website serves as a comprehensive digital platform delivering news, match information, multimedia content, and e-commerce services to a global audience of football fans and supporters. The site is professionally designed with consistent branding and integrates official partner logos, reflecting its strong market position as a leading English football club. Technically, the website leverages Drupal 10 CMS, modern JavaScript libraries, and robust consent management tools, ensuring a responsive and accessible user experience across devices. Security posture is solid with HTTPS enforcement, security headers, and privacy compliance via OneTrust, although explicit security policies and incident response contacts are not publicly disclosed. Overall, the website demonstrates a mature digital presence with good privacy and security practices, supporting the club's business and fan engagement objectives.
Travel Nevadatravelnevada.com
Hospitality · United States
77Low
NIS2 2 · GDPR 80
NIS2 2 · GDPR 80
Travel Nevada is the official tourism website for the state of Nevada, providing comprehensive travel information including vacations, hotels, events, attractions, and road trips. The website targets travelers and tourists interested in exploring Nevada and serves as a key resource for visitor information. The business operates as a state tourism promotion entity with a medium-sized digital presence and a long-established domain dating back to 1995. Technically, the site is built on WordPress with a modern tech stack including SEO optimization, analytics, and marketing tools. It uses Cloudflare DNS and has HTTPS enabled, ensuring basic security and performance standards. However, the site lacks DNSSEC and visible security headers, and does not publish privacy or cookie policies, which are critical for compliance and user trust. The extensive use of third-party tracking scripts without clear consent mechanisms indicates privacy compliance gaps. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security transparency.
Barncancerfondenbarncancerfonden.se
Non-profit · Sweden
76Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Barncancerfonden is a Swedish non-profit organization dedicated to combating childhood cancer through fundraising, supporting affected children and families, and funding research. The website is professionally designed with clear navigation and multiple calls to action for donations and support. The organization targets donors, families affected by childhood cancer, researchers, and corporate partners. Technically, the site uses modern analytics tools including Matomo, Google Tag Manager, and Azure Application Insights, and implements cookie consent mechanisms, indicating a mature digital infrastructure. Security posture is good with HTTPS enforced and no visible vulnerabilities, though some security headers and explicit security policies are absent. WHOIS data for the exact subdomain queried is unavailable, but this is due to querying a subdomain rather than the registered domain, which is common and not suspicious. Overall, the website is trustworthy, professional, and compliant with GDPR requirements.
Ellevioellevio.se
Energy · Sweden
79Low
NIS2 2 · GDPR 100
NIS2 2 · GDPR 100
Ellevio is a major Swedish electricity distribution company serving nearly one million customers. The company focuses on driving electrification and investing in sustainable energy solutions to support an electrified society. The website content is primarily in Swedish and targets local customers and stakeholders interested in energy distribution and sustainability. Technically, the website employs modern analytics tools such as Matomo and Microsoft Application Insights, along with a comprehensive cookie consent mechanism powered by Cookiebot, indicating a mature digital infrastructure. The site uses HTTPS and integrates customer chat services, enhancing user engagement and support. Security posture is generally good with encrypted connections and privacy-focused analytics, but lacks explicit security policies and some security headers. The absence of WHOIS data for the exact domain queried suggests it may be a subdomain or the query was not for the registered domain, which slightly reduces transparency. Overall, the website is professional, secure, and compliant with cookie consent regulations, but could improve by publishing clear privacy and security policies and providing direct contact information.