Security reports directory
139,947 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,196001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
129,451–129,500 of 139,947
- PProps utility solutions
props.se
Computer software · Sweden
64Medium
NIS2 5 · GDPR 75
NIS2 5 · GDPR 75
Nordic Business Forumnbforum.com
Other · Finland
60Medium
NIS2 5 · GDPR 43
NIS2 5 · GDPR 43
Nordic Business Forum is a well-established event organization based in Finland, specializing in large-scale business and leadership conferences, notably the Nordic Business Forum 2025. The company targets business leaders and executives globally, offering events, webinars, and publications to empower leadership and networking. The website reflects a mature digital presence with professional branding, comprehensive content, and clear navigation. Technically, the site is built on WordPress with modern plugins and analytics tools, ensuring good performance and SEO optimization. Security posture is strong with HTTPS and cookie consent mechanisms, though some security headers could be enhanced. Overall, the site demonstrates compliance with GDPR and provides transparent contact and policy information, supporting trust and credibility.
Axiansaxians.se
Technology · Sweden
68Medium
NIS2 40 · GDPR 75
NIS2 40 · GDPR 75
Axians is a leading Swedish IT and telecommunications provider with over 25 years of experience, offering a broad range of IT services including infrastructure, cloud solutions, cybersecurity, and digital workplace services. The company is positioned as a trusted partner for organizations requiring high availability and specialist expertise. Technically, the website is built on WordPress with modern libraries and frameworks, featuring good performance, mobile optimization, and accessibility. Security measures include HTTPS, reCAPTCHA, and a comprehensive cookie consent mechanism, although explicit security headers could be enhanced. Overall, the site reflects a professional and mature digital presence aligned with the company's market position and business model.
MultiQmultiq.com
Transportation · Denmark
51Medium
NIS2 0 · GDPR 28
NIS2 0 · GDPR 28
MultiQ, recently rebranded as Journeo A/S following acquisition by Journeo plc, is a medium-sized technology company specializing in Intelligent Transport Solutions across Europe. Their offerings focus on enhancing public transportation through real-time passenger information, fleet management, and transport display systems. The company targets public transport operators, authorities, and travelers, positioning itself as a key player in the sustainable smart city transport sector. The website reflects a professional and consistent brand image with clear business messaging and customer references. Technically, the site is built on WordPress using the Divi theme and integrates SEO best practices with structured data. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers and explicit policies are missing. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the website is trustworthy and well-maintained, supporting the company's market position.
Jowa ABjowa.com
Transportation · Norway
33High
NIS2 0 · GDPR 40
NIS2 0 · GDPR 40
Jowa AB is a well-established marine supplier specializing in environmental protection equipment and water treatment solutions for the maritime industry. With over 60 years of experience and a worldwide network including subsidiaries in multiple countries, Jowa positions itself as a trusted provider of high-quality, reliable products designed to protect the marine environment. The website reflects a professional and consistent brand image, emphasizing their commitment to sustainability and service excellence. Technically, the site is built on WordPress with modern plugins and tools, offering good SEO and mobile responsiveness. Security posture is adequate with HTTPS and cookie consent mechanisms, though there is room for improvement in security headers and incident response transparency. Overall, the site demonstrates a solid business presence with moderate technical maturity and compliance awareness.
Exobe ABuclarity.com
Technology · Sweden
39High
NIS2 5 · GDPR 25
NIS2 5 · GDPR 25
Exobe AB is a Swedish technology company specializing in digital workspace solutions, IT license management as a Microsoft Cloud Solution Provider, IT security, collaboration platforms, and AI-driven automation. The company positions itself as a trusted partner for organizations seeking to optimize their digital workplace and cloud investments. Their website reflects a mature digital presence with professional design, clear navigation, and multilingual support. Technically, the site is built on WordPress with modern performance optimizations including WP Rocket, lazy loading, and integration with Microsoft Dynamics 365 Marketing for form handling. Security posture is strong with HTTPS enforced, security event listeners, and cookie consent mechanisms, although explicit security policies and incident response contacts are not published. Overall, the site demonstrates good compliance with privacy regulations and business credibility through certifications and transparent contact information.
- Avalon Innovation
avaloninnovation.com
Technology · Sweden
63Medium
NIS2 0 · GDPR 70
NIS2 0 · GDPR 70
Avalon Innovation is a Swedish-based company specializing in product and system development consulting and project delivery. Positioned as a leading innovation partner in Scandinavia, the company offers expertise across multiple technical domains and serves a broad range of industries. Their website reflects a professional and modern digital presence built on the Squarespace platform, featuring clear navigation, client logos, and social media integration. The technical infrastructure is solid, leveraging HTTPS with HSTS and modern web technologies, ensuring secure and performant user experience. Privacy and cookie policies are implemented with GDPR compliance in mind, although terms of service and explicit security policies are not present. Overall, the security posture is strong with no visible vulnerabilities or exposed sensitive data. The domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness. Strategic recommendations include publishing terms of service, enhancing accessibility, and formalizing security and incident response disclosures.
- OOpenText
novell.com
Technology · United States
67Medium
NIS2 43 · GDPR 60
NIS2 43 · GDPR 60
OpenText is a leading enterprise software company that acquired Micro Focus in 2023, expanding its portfolio in digital transformation, analytics, cybersecurity, and cloud services. The website reflects a mature enterprise with a broad product offering targeting large organizations seeking advanced software solutions. Technically, the site employs modern web technologies including service workers, Google Tag Manager, and a robust CMS platform, ensuring good performance and mobile optimization. Security posture is strong with HTTPS, cookie consent mechanisms, and no visible vulnerabilities, although explicit security policies and incident response information are not found. Overall, the site demonstrates a professional and trustworthy presence aligned with OpenText's market position.
Mimax Solutions ABmimax.se
Technology · Sweden
30High
NIS2 0 · GDPR 0
NIS2 0 · GDPR 0
Mimax Solutions AB is a Swedish technology company specializing in Configure Price Quote (CPQ) solutions, offering advanced configurator tools, integration services with ERP, CRM, and CAD systems, and digital transformation consulting. The company positions itself as a niche specialist with a strong focus on CPQ, supported by partnerships including Microsoft and notable clients such as Kongsberg and Rolls Royce. Their website reflects a professional B2B service provider targeting businesses seeking to optimize their sales and pricing processes through CPQ technology. Technically, the website is built on WordPress with modern frameworks like Bootstrap and includes essential security features such as HTTPS, Google reCAPTCHA, and cookie consent mechanisms. The site demonstrates good SEO practices and moderate performance with mobile optimization. Security posture is solid with no visible vulnerabilities, though there is room for improvement in security headers and formal security policies. Overall, the domain registration and WHOIS data align well with the business claims, indicating legitimacy and trustworthiness.
Government · Sweden
57Medium
NIS2 0 · GDPR 15
NIS2 0 · GDPR 15
Patent- och registreringsverket (PRV) is the Swedish government agency responsible for intellectual property rights, including patents, trademarks, design registrations, and copyright information. The website serves a broad audience including businesses, IP professionals, students, and researchers, providing comprehensive information, e-services, and consulting. PRV holds a strong market position as the national authority for IP rights in Sweden, supporting innovation and growth. Technically, the website employs modern JavaScript libraries, Google Tag Manager, and Vimeo API for media, with good mobile optimization and accessibility. Security posture is solid with HTTPS and cookie consent mechanisms, though some advanced security headers and explicit security policies are absent. Overall, the site is professional, trustworthy, and well-maintained, reflecting its government status and mission.
- AAccount Suspended
rymdreklam.com
Other
41High
NIS2 0 · GDPR 25
NIS2 0 · GDPR 25
The website for rymdreklam.com is currently suspended by its hosting provider, displaying only a minimal 'Account Suspended' page with no active business content or services. The only contact information available is a webmaster email address. Due to the suspension, the site lacks any privacy, cookie, or terms of service policies, and no social media or phone contact details are present. The technical footprint is minimal, with only a FontAwesome stylesheet linked, and no analytics or tracking scripts detected. The site does not provide HTTPS or security headers, indicating a poor security posture. Overall, the website is inaccessible for normal user interaction or business evaluation, resulting in a very low trust and credibility score.
- SSensavis AB
sensavis.com
Education · Sweden
48High
NIS2 5 · GDPR 40
NIS2 5 · GDPR 40
Sensavis AB operates a specialized educational technology platform focused on visual learning tools that simplify complex subjects through interactive and personalized video content. The company targets educational institutions including schools and districts, offering license-based software solutions for Apple iOS and Windows platforms. Their market position is that of a niche edtech provider with a clear focus on enhancing student engagement and learning outcomes through innovative digital tools. Technically, the website is built on WordPress with a modern tech stack including jQuery, Google Analytics, Facebook Pixel, and a consent management platform ensuring GDPR compliance. The site demonstrates good mobile optimization and SEO practices, though some security headers are not explicitly confirmed. Security posture is solid with HTTPS enforced, reCAPTCHA integration, and consent-based tracking, but could be improved by publishing explicit security policies and implementing additional HTTP security headers. Overall, the website is professional, trustworthy, and compliant with privacy regulations, supporting a positive user experience and business credibility.
Royaltogelteleopti.com
Other · Indonesia
43High
NIS2 0 · GDPR 10
NIS2 0 · GDPR 10
RoyalTogel is an Indonesian online slot gaming platform offering a variety of slot games from well-known providers such as Pragmatic Play, PG Soft, and Habanero. The website promotes itself as a trusted and popular destination for slot players with features like auto spin, buyspin, and daily bonuses. The site uses AMP technology for fast mobile performance and includes structured data to enhance SEO. However, the site lacks critical security features such as HTTPS, privacy policies, and contact information, which significantly impacts trust and compliance. External links include social media and live chat but also suspicious domains that may pose risks. Overall, the site appears functional but lacks essential security and compliance measures.
- OOnitio Norge AS
infocare.com
Technology · Norway
59Medium
NIS2 0 · GDPR 58
NIS2 0 · GDPR 58
Onitio Norge AS is a medium-sized IT services company operating primarily in the Nordic region, delivering sustainable IT solutions, workforce consulting, and technology services. The company positions itself as a trusted partner enabling customers to focus on their core business by managing their IT needs. The website reflects a professional and modern digital presence with a strong emphasis on customer-centric services and sustainability. Technically, the site leverages modern frameworks such as React and Next.js, integrates with HubSpot for marketing and analytics, and employs cookie consent mechanisms compliant with GDPR. Security posture is solid with HTTPS enforced and security headers present, though explicit security policies and incident response contacts are not published. Overall, the site is well-optimized for performance, mobile responsiveness, and accessibility, supporting a positive user experience and trustworthiness.
Gaia System ABgaia.se
Transportation · Sweden
49High
NIS2 5 · GDPR 43
NIS2 5 · GDPR 43
Gaia System AB specializes in providing advanced digital solutions for public transport, including a cloud-based real-time platform and an online vehicle platform that enhance traffic and passenger information management. Recently acquired by Axentia Group, Gaia is positioned as a niche player focused on integrating real-time data and AI-driven services for transport authorities, operators, and passengers. The website demonstrates a mature digital presence with comprehensive content, customer testimonials, and clear business messaging. Technically, the site is built on WordPress with modern frameworks and includes robust security measures such as HTTPS, reCAPTCHA, and consent management. Privacy compliance is well addressed with detailed policies and cookie consent mechanisms. Overall, Gaia exhibits a strong security posture with no critical vulnerabilities detected, supporting its credibility and trustworthiness in the transportation technology sector.
Grand Public Communication ABgrandpublic.se
Media · Sweden
31High
NIS2 0 · GDPR 0
NIS2 0 · GDPR 0
Grand Public Communication AB is a Swedish creative brand agency specializing in brand strategy, communication design, digital design, marketing, and product design. The company operates multiple offices in Sweden and targets businesses seeking comprehensive brand and communication services. Their website showcases a professional and consistent brand image with rich multimedia content and detailed project case studies, positioning them as a reputable player in the media industry. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, Vimeo for video hosting, and Google Tag Manager for analytics. The site is mobile-optimized and accessible, with good SEO practices. However, performance is moderate and there is room for improvement in security headers and privacy compliance. From a security perspective, the site uses HTTPS but lacks visible security headers and published security policies. No privacy or cookie policies are found, indicating compliance gaps with GDPR. No incident response or vulnerability disclosure information is provided. Contact information is clearly presented, enhancing business credibility. Overall, the website is professional and trustworthy but should improve privacy and security practices to enhance compliance and reduce risk. Strategic recommendations include publishing privacy and cookie policies, implementing security headers, and establishing a vulnerability disclosure process.
- YYouwe Sverige
oddny.se
E-commerce · Sweden
59Medium
NIS2 0 · GDPR 58
NIS2 0 · GDPR 58
Youwe Sverige is a Nordic digital full-service agency specializing in e-commerce solutions, particularly leveraging Magento and Adobe Commerce platforms. The company emerged from the merger of Oddny and Youwe in 2021, enhancing its market presence and service portfolio in Sweden and the broader Nordic region. Their offerings include cloud hosting optimized for Magento 2, development services, digital marketing, and data-driven analytics and strategy. The website reflects a modern technical infrastructure built on Next.js with integrations for marketing and analytics tools such as Google Tag Manager, HubSpot, and Facebook Pixel, all managed with user consent mechanisms. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security policies and incident response contacts are not published. Overall, the site demonstrates good professionalism, technical maturity, and compliance with privacy regulations, positioning Youwe Sverige as a credible and trusted partner in the e-commerce digital agency space.
- Kvaser
kvaser.com
Technology · Sweden
49High
NIS2 5 · GDPR 48
NIS2 5 · GDPR 48
Kvaser AB is a well-established technology company specializing in Controller Area Network (CAN) connectivity solutions, offering a broad range of hardware and software products tailored for industries such as automotive, marine, medical, and industrial automation. The company has a strong market position with over 30 years of expertise and provides comprehensive developer resources and custom OEM solutions. Their website reflects a mature digital presence with professional design, clear navigation, and extensive content relevant to their target audience of engineers and businesses requiring CAN technology. Technically, the site is built on WordPress with WooCommerce and integrates modern analytics and marketing tools while maintaining good privacy compliance through Iubenda. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers could be improved. WHOIS data confirms legitimacy and consistency with the business claims. Overall, Kvaser demonstrates a high level of professionalism, trustworthiness, and technical maturity.
SEB KORT BANK ABeurocardinternational.com
Finance · Sweden
56Medium
NIS2 5 · GDPR 58
NIS2 5 · GDPR 58
Eurocard International, operated by SEB Kort Bank AB, is a well-established financial services provider specializing in corporate payment solutions across the European Economic Area. The company offers unified payment systems, travel accounts, and expense management tools tailored for multinational corporations. Their website reflects a professional and consistent brand image, targeting corporate administrators and cardholders with clear service offerings and support portals. Technically, the site leverages modern web technologies such as React and Adobe Launch for tag management, ensuring a responsive and accessible user experience. Security practices include session management cookies, anti-CSRF tokens, and cookie consent mechanisms, although explicit security headers and incident response policies are not prominently published. Overall, the website demonstrates a solid security posture with room for improvement in transparency and security policy disclosures. The domain registration details align well with the business claims, reinforcing the site's legitimacy and trustworthiness.
Retail Response Ltdretail-response.co.uk
Retail · United Kingdom
51Medium
NIS2 13 · GDPR 48
NIS2 13 · GDPR 48
Retail Response Ltd is a UK-based company specializing in retail IT support services, including managed services, service desk, on-site support, systems implementation, P2PE compliance, and project management. The company is positioned as a trusted provider with over 15 years of experience, serving some of the UK's largest retailers. Their business model focuses on delivering reliable and cost-effective retail IT solutions to maximize site uptime and business continuity. Technically, the website is built on the Wix platform using modern technologies such as React and Wix Thunderbolt, ensuring good performance and basic mobile optimization. Security-wise, the site enforces HTTPS, includes essential security headers, and demonstrates good security practices, although explicit security policies and incident response contacts are not found. Overall, the website reflects a professional and trustworthy business with solid digital maturity and compliance with privacy regulations.
Liedholms Maskinteknik ABliedholms.se
Manufacturing · Sweden
28High
NIS2 0 · GDPR 0
NIS2 0 · GDPR 0
Liedholms Maskinteknik AB is a well-established Swedish manufacturing company specializing in advanced welding, pressure vessel production, and machine construction. Founded in 1948 and based in Helsingborg, the company offers comprehensive services including project management, design, procurement, and certification. Their market position is strong within the industrial manufacturing sector, supported by recognized certifications such as ASME U and PED compliance. The website reflects a professional and consistent brand image targeting industrial clients requiring high-quality welding and pressure vessel solutions. Technically, the website is built on WordPress using the Avada theme, incorporating modern web technologies such as jQuery, Google Analytics, Google Tag Manager, and Facebook Pixel for marketing and analytics. The site is mobile-optimized with good SEO practices and accessibility features, although some improvements could be made in accessibility and performance tuning. From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA v3 to protect forms. However, it lacks several recommended security headers and does not provide explicit incident response or vulnerability disclosure information. Privacy compliance is acknowledged with a GDPR-compliant privacy policy, but the absence of a cookie consent mechanism is a notable gap. Overall, the website presents a low risk with a solid security posture and good business credibility. Strategic recommendations include enhancing security headers, implementing cookie consent, and publishing incident response contacts to further strengthen trust and compliance.
- Babyshop Group
babyshop.com
E-commerce · Sweden
48High
NIS2 5 · GDPR 43
NIS2 5 · GDPR 43
Babyshop Group operates a well-established e-commerce platform specializing in children's and baby clothing and accessories, primarily serving the Nordic and European markets. Founded in 2006 and headquartered in Stockholm, Sweden, the company offers a wide range of products including apparel, strollers, toys, and baby essentials. The website demonstrates a strong market position with a comprehensive product catalog and a focus on quality customer service and exclusive brands. Technically, the website employs modern web technologies such as React, Algolia for search, and integrates with multiple third-party services including Klarna for payments, Trustpilot for reviews, and Google Analytics for tracking. The platform is mobile-optimized, SEO-friendly, and provides a smooth user experience with clear navigation and structured data for enhanced search engine visibility. From a security perspective, the site enforces HTTPS, uses cookie consent mechanisms, and avoids exposing sensitive data in its HTML content. However, it lacks explicit security policy documentation and incident response contact details, which are recommended for enhanced transparency and compliance. No critical vulnerabilities or WAF blocking were detected, indicating a mature security posture. Overall, Babyshop.com presents a professional, trustworthy, and user-friendly online retail experience with strong compliance to privacy and cookie regulations. Strategic improvements in security policy transparency and additional security headers could further strengthen its security posture.
vchainvchain.se
Technology · Sweden
56Medium
NIS2 5 · GDPR 63
NIS2 5 · GDPR 63
vchain is a Swedish-based company specializing in connected supply chain management solutions. Their offerings include a broad range of services such as transportation management, supplier collaboration, supply chain analytics, and sustainability monitoring. The company targets supply chain professionals and enterprises across various industries including high-tech, industrial manufacturing, defense, medical devices, and pharma. The website demonstrates a strong market position with multiple case studies and testimonials, indicating a well-established presence in the supply chain technology sector. Technically, the website is built on the Tilda CMS platform, utilizing modern web technologies including jQuery, Owl Carousel, and Cookiebot for cookie consent management. The site is hosted on AWS Cloudfront CDN, ensuring reliable content delivery. Performance is moderate with good mobile optimization and basic accessibility features. SEO practices are well implemented with proper meta tags and structured content. From a security perspective, the site enforces HTTPS with good SSL configuration and includes standard security headers. The presence of a secure partner login portal and cookie consent mechanisms indicate a mature security posture. No critical vulnerabilities or exposed sensitive data were detected. However, the site lacks explicit security policies and incident response information, which could be improved. Overall, vchain's website reflects a professional, trustworthy, and compliant business with a solid technical foundation. Strategic recommendations include enhancing accessibility, publishing detailed security and incident response policies, and maintaining up-to-date third-party libraries to sustain security and compliance standards.
- social industries
socialindustries.se
Media · Sweden
44High
NIS2 0 · GDPR 0
NIS2 0 · GDPR 0
Social Industries is a well-established digital agency based in Sweden, specializing in social media marketing and digital services primarily targeting the Nordic market. Founded in 2011, the company positions itself as a leading agency in its sector, emphasizing adaptability and continuous learning. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to its audience. Technically, the site is built on the Squarespace platform, leveraging modern web technologies and third-party analytics and marketing tools such as Google Analytics, Pinterest tracking, and LinkedIn Insight Tag. The website is mobile-optimized and performs moderately well, with good SEO and basic accessibility features. Security-wise, the site enforces HTTPS with a solid SSL configuration and includes a cookie consent mechanism compliant with GDPR. However, it lacks advanced security headers and explicit security or incident response policies. Overall, the site demonstrates a mature digital presence with room for improvement in security best practices and compliance documentation.
Effectsofteffectsoft.se
Technology · Sweden
43High
NIS2 5 · GDPR 0
NIS2 5 · GDPR 0
Effectsoft is a Swedish IT consultancy specializing in software development, integration, and custom IT solutions, primarily serving clients in Halmstad and Göteborg. The company emphasizes close customer collaboration, agile methodologies, and delivering tailored solutions with a strong focus on quality and customer satisfaction. Their market position is that of a trusted regional player with a solid client portfolio and a commitment to innovation and excellence. Technically, the website is built on WordPress using the Enfold theme, enhanced with modern analytics tools such as Google Analytics and Microsoft Clarity, and employs Google reCAPTCHA for form security. The site is mobile-optimized, SEO-friendly, and includes comprehensive cookie consent mechanisms aligned with GDPR requirements. Performance is moderate with room for improvement in accessibility. From a security perspective, the site uses HTTPS and implements cookie consent and reCAPTCHA, but lacks explicit security headers and documented security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the HTML content. The domain registration details are consistent with the business claims, supporting legitimacy. Overall, Effectsoft presents a professional and trustworthy online presence with good privacy compliance and a solid technical foundation. Strategic improvements in security headers, incident response transparency, and accessibility would further enhance their security posture and user trust.
Comcentercomcenter.se
Telecommunications · Sweden
33High
NIS2 0 · GDPR 15
NIS2 0 · GDPR 15
Comcenter is a Swedish telecommunications company specializing in flexible business communication services including mobile subscriptions, broadband, coverage solutions, cloud-based telephone exchanges, and Teams telephony. Positioned as a regional B2B provider, Comcenter targets businesses seeking smarter and simpler communication solutions. The website reflects a mature digital presence with modern technologies such as WordPress, Elementor, WooCommerce, and integrated marketing and analytics tools like Google Tag Manager and Facebook Pixel. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Security posture is good with HTTPS enforced and no visible vulnerabilities, though explicit security policies and incident response information are absent. Overall, Comcenter demonstrates a professional and trustworthy online presence aligned with its business objectives.
- Refunder Scandinavia AB
refunder.se
E-commerce · Sweden
49High
NIS2 0 · GDPR 15
NIS2 0 · GDPR 15
Refunder Scandinavia AB operates a leading cashback platform in Sweden, offering users cashback rewards from over 1,200 online stores. The company positions itself as Sweden's largest cashback service with a strong user base exceeding 875,000 members. Key services include cashback on online purchases, a mobile app for tracking cashback, and promotional campaigns. The platform integrates secure login and payment methods such as BankID and Swish, enhancing user trust and security. Technically, the website employs modern frameworks like Laravel Livewire and Alpine.js, with Matomo analytics and Facebook SDK for marketing and tracking. The site is well-optimized for mobile and accessibility, with comprehensive privacy and cookie policies that comply with GDPR requirements. Security posture is strong with HTTPS, CSRF protection, and secure authentication, though additional security headers could be implemented. Overall, the website demonstrates a mature digital infrastructure and a trustworthy business model with clear contact information and positive user feedback.
Fyrbodals kommunalförbundfyrbodal.se
Government · Sweden
29High
NIS2 0 · GDPR 0
NIS2 0 · GDPR 0
Fyrbodals kommunalförbund is a regional municipal federation in Västra Götaland, Sweden, representing 14 member municipalities collaborating for sustainable regional development. The organization focuses on regional development, competence supply, welfare development, and political governance support, positioning itself as a key governmental entity in the region. The website reflects a professional and well-structured digital presence with comprehensive content tailored to its target audience of municipal stakeholders and residents. Technically, the site is built on WordPress with modern technologies including jQuery, Bootstrap, and FontAwesome, enhanced by SEO tools like Yoast and analytics via Matomo and Google Tag Manager. The site is mobile-optimized, accessible, and performs moderately well, supporting a positive user experience. From a security perspective, the site enforces HTTPS, avoids exposing sensitive data, and uses asynchronous loading for third-party scripts. However, it lacks explicit security headers and a published security or incident response policy. Privacy compliance is strong with clear GDPR-aligned privacy and cookie policies and a consent mechanism. Overall, the website demonstrates a high level of professionalism and trustworthiness with no critical security issues detected. Strategic recommendations include enhancing security headers, publishing incident response information, and considering a vulnerability disclosure policy to further strengthen security posture.
- Sjöfartsverket
sjofartsverket.se
Government · Sweden
43High
NIS2 5 · GDPR 0
NIS2 5 · GDPR 0
Sjöfartsverket is a Swedish government agency responsible for maritime accessibility, safety, and navigation services. The website presents a comprehensive overview of their services including navigational warnings, chart services, pilotage, and maritime rescue operations. The target audience includes professional mariners, the general public interested in maritime affairs, and government stakeholders. The agency holds a strong market position as the national maritime authority in Sweden, providing essential services under government mandate. Technically, the website employs a modern infrastructure with Episerver CMS, Matomo analytics for privacy-conscious tracking, and accessibility tools like ReadSpeaker. The site is mobile-optimized, well-structured, and includes SEO best practices. Performance is moderate with room for improvement in loading speed and security header implementation. From a security perspective, the site uses HTTPS and cookie consent mechanisms aligned with GDPR. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are absent. No critical vulnerabilities or blocking mechanisms were detected, indicating a mature security posture but with opportunities for enhancement. Overall, the website is professional, trustworthy, and compliant with privacy regulations. Strategic recommendations include publishing security policies, enhancing security headers, and formalizing vulnerability disclosure to further strengthen trust and security posture.
- Precio Fishbone AB (publ)
precio.se
Technology · Sweden
61Medium
NIS2 10 · GDPR 63
NIS2 10 · GDPR 63
Precio Fishbone AB (publ) is a Swedish IT consultancy specializing in digital transformation, software development, system integration, and cloud services. The company holds a strong market position in the Nordic region, leveraging Microsoft technologies and offering tailored IT solutions to businesses and organizations. Their website reflects a mature digital presence with comprehensive content, including investor relations, press releases, and client case studies. Technically, the site uses modern frameworks such as React and Next.js, hosted likely on Microsoft Azure, and integrates various analytics and marketing tools with a robust cookie consent mechanism. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities. The company maintains ISO 27001 certification and demonstrates GDPR compliance. Overall, the website is professional, well-structured, and trustworthy, supporting the company's credibility and business goals.
Formpipe Software ABformpipe.com
Technology · Sweden
46High
NIS2 5 · GDPR 58
NIS2 5 · GDPR 58
Formpipe Software AB is a well-established technology company specializing in premium business software solutions tailored for mid-sized to large companies and public organizations, primarily in the banking and public sectors. Their offerings include document composition (Lasernet), digital preservation, and ERP solutions, positioning them as a key player in digital transformation and data relationship management. The website reflects a mature digital presence with comprehensive content, clear navigation, and multilingual support, targeting professional audiences in Sweden, Denmark, Germany, UK, and the USA. Technically, the website employs a modern technology stack including jQuery, Flickity, GSAP, Google reCAPTCHA, and Cookiebot for consent management, hosted likely on Microsoft Azure with Episerver CMS. Performance and mobile optimization are good, though accessibility could be improved. The site integrates extensive analytics and marketing tools such as Google Analytics, Matomo, Microsoft Dynamics Marketing, and social media pixels, indicating a sophisticated approach to user tracking and marketing. Security posture is strong with HTTPS enforced, use of anti-CSRF tokens, and reCAPTCHA on forms. However, explicit security headers are not clearly documented and no public security or incident response policies were found. Privacy compliance is robust with GDPR-aligned privacy and cookie policies, and a clear consent mechanism. Contact information is comprehensive, including multiple international offices, emails, and phone numbers. Overall, Formpipe demonstrates a high level of professionalism, trustworthiness, and compliance, with minor areas for improvement in security header implementation and accessibility. The domain WHOIS data aligns well with the business claims, supporting legitimacy and trust.
OSM Maritime Grouposm.no
Transportation · Cyprus
60Medium
NIS2 45 · GDPR 43
NIS2 45 · GDPR 43
OSM Maritime Group operates as a leading global ship management company under the brand OSM Thome, managing a diverse fleet of approximately 1,000 vessels including tankers, bulkers, offshore, and cruise ships. The company emphasizes sustainability, crew welfare, and digital innovation, positioning itself as a market leader with a strong financial foundation and comprehensive marine services. Their business model integrates ship technical management, crew management, and a variety of marine services, supported by a global presence in over 20 countries. Technically, the website is built on WordPress using the Divi theme, enhanced with modern analytics and marketing tools such as Google Analytics, Facebook Pixel, and LinkedIn Insight Tag. Hosting is provided by SiteGround, and the site demonstrates good performance, mobile optimization, and SEO practices. The presence of a chatbot and advanced tracking indicates a mature digital infrastructure. From a security perspective, the site enforces HTTPS with strong SSL configuration and includes standard security headers. No critical vulnerabilities or exposed sensitive data were detected. However, explicit security policies and incident response contacts are not published, which could be improved to enhance transparency and readiness. Overall, the website reflects a professional, trustworthy maritime services company with a solid digital presence and good security posture. Strategic recommendations include publishing detailed security and incident response policies, enhancing accessibility, and maintaining vigilance on third-party scripts to sustain security and compliance.
Nacka kommunnacka.se
Government · Sweden
36High
NIS2 0 · GDPR 15
NIS2 0 · GDPR 15
Nacka kommun operates as the official municipal government website serving over 100,000 residents in Nacka, Sweden. The site provides comprehensive information about municipal services including education, social support, urban development, and local politics. It targets residents, businesses, and visitors seeking municipal resources and engagement opportunities. The business model is public sector focused, delivering essential community services and governance information. Technically, the website is built on the EPiServer CMS platform, leveraging modern JavaScript frameworks, SVG icons, and Azure Application Insights for analytics. The site demonstrates good mobile optimization, accessibility, and SEO practices, with a moderate performance profile. Hosting appears to be on Microsoft Azure infrastructure, ensuring reliability and scalability. From a security perspective, the site enforces HTTPS with strong SSL configuration and implements cookie consent mechanisms aligned with GDPR requirements. While explicit security headers are not fully documented in the HTML, best practices are implied. No critical vulnerabilities or exposed sensitive data were detected. However, the site lacks a published security policy or incident response contact, which could enhance transparency and trust. Overall, Nacka kommun's website is a professional, trustworthy, and well-maintained digital presence for a government entity. It balances user experience, compliance, and technical robustness effectively, supporting its role as a key information and service portal for the municipality.
PREMOgrupopremo.com
Manufacturing · Spain
62Medium
NIS2 5 · GDPR 25
NIS2 5 · GDPR 25
PREMO is a well-established global manufacturer specializing in passive electronic components, with over 60 years of industry experience. The company operates multiple business units focusing on mobility access and security, power systems, and advanced passive components, serving a diverse industrial clientele worldwide. Their website reflects a strong market position with comprehensive product offerings and global operational footprint. Technically, the website is built on the Shopify platform using modern web technologies and frameworks, ensuring fast performance, mobile optimization, and good accessibility. The integration of analytics and marketing tools is moderate and aligns with standard e-commerce practices. From a security perspective, the site enforces HTTPS, employs hCaptcha for form protection, and follows best practices in form security and data handling. However, explicit security policies and incident response information are absent, indicating room for improvement in transparency and compliance. Overall, the website presents a professional and trustworthy digital presence with minor gaps in privacy policy visibility and security documentation. The domain registration data supports the legitimacy and consistency of the business claims.
Niam ABniam.se
Real Estate · Sweden
62Medium
NIS2 5 · GDPR 58
NIS2 5 · GDPR 58
Niam AB is a well-established Northern European fund manager specializing in real estate, infrastructure, and credit investments. Founded in 1998 and headquartered in Stockholm, Sweden, Niam positions itself as a leading player in the European investment fund market, focusing on creating lasting value for clients and communities. The website reflects a professional and consistent brand image, targeting investors, partners, and potential employees with clear navigation and relevant content. Technically, the site is built on modern web standards using Umbraco CMS, Bootstrap framework, and integrates Cookiebot for GDPR-compliant cookie management along with Google Tag Manager for analytics. Security posture is strong with HTTPS enforced, appropriate security headers, and no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed through comprehensive privacy and cookie policies and active consent mechanisms. Overall, the website demonstrates a mature digital presence with good performance, accessibility, and SEO practices, supporting the company's credibility and trustworthiness.
1Office Estonia OÜ1office.co
Finance · Estonia
41High
NIS2 5 · GDPR 63
NIS2 5 · GDPR 63
1Office Estonia OÜ is a medium-sized accounting and business services provider established in 2016, offering comprehensive support including accounting, company formation, tax registration, legal services, and virtual office solutions across seven countries in Northern and Eastern Europe. The company targets businesses looking to establish or manage operations locally or internationally, leveraging its multi-country expertise and digital service delivery. The website reflects a mature digital presence with professional design, clear navigation, and multi-language support. Technically, the site is built on WordPress with WooCommerce and integrates modern marketing and analytics tools such as Google Analytics, Facebook Pixel, Hotjar, and Microsoft Clarity, ensuring good performance and user tracking capabilities. Security posture is strong with HTTPS enforced, use of reCAPTCHA, and cookie consent mechanisms, although explicit security policies and incident response information are not published. Overall, the site demonstrates high trustworthiness and business credibility, supported by customer reviews and partner affiliations.
- Kemikalieinspektionen
kemi.se
Government · Sweden
57Medium
NIS2 0 · GDPR 15
NIS2 0 · GDPR 15
Kemikalieinspektionen is a Swedish government agency dedicated to reducing risks to humans and the environment from chemicals. The website serves as an authoritative source of information, regulatory guidance, and news related to chemical safety and legislation in Sweden. It targets a broad audience including the general public, businesses, and other governmental bodies. The agency provides key services such as regulatory oversight, publication of chemical statistics, and support for compliance with chemical laws. The website is well-branded, consistent, and professionally maintained, reflecting its official status. Technically, the site is built on the SiteVision CMS platform, utilizing modern JavaScript frameworks including React and jQuery. It integrates Piwik PRO and Siteimprove Analytics for user tracking and performance monitoring. The site is mobile-optimized, accessible, and SEO-friendly, with appropriate meta tags and structured navigation. Performance is moderate, with room for optimization. From a security perspective, the site employs HTTPS with excellent SSL configuration, uses security headers, and implements cookie consent mechanisms compliant with GDPR. However, explicit security policies, incident response contacts, and vulnerability disclosure information are not publicly available, representing areas for improvement. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website demonstrates a strong security posture and good privacy compliance, supporting its role as a trusted government resource. Strategic recommendations include publishing detailed security and incident response policies, adding vulnerability disclosure mechanisms, and enhancing direct contact information for security matters to further strengthen trust and compliance.
Granngårdengranngarden.se
Retail · Sweden
41High
NIS2 5 · GDPR 63
NIS2 5 · GDPR 63
Granngården is a well-established Swedish retail and e-commerce company founded in 1880, specializing in products for animal owners, gardeners, and farmers. It operates over 100 physical stores alongside a comprehensive online platform, positioning itself as a leading provider in its sector. The company benefits from a strong brand presence, consistent customer engagement, and a broad product range tailored to its target audience. Technically, the website leverages modern technologies including Microsoft Azure, ASP.NET, Episerver CMS, and integrates advanced analytics and marketing tools such as Google Analytics, Microsoft Clarity, and Google Tag Manager. Security measures are robust, with HTTPS enforcement, security headers, and secure form handling. Privacy compliance is well-managed through a detailed cookie consent mechanism and comprehensive privacy policies. Overall, the site demonstrates a mature digital infrastructure and a strong security posture, supporting its business credibility and customer trust.
- FORCE Technology
madebydelta.com
Technology · Denmark
40High
NIS2 5 · GDPR 58
NIS2 5 · GDPR 58
Madebydelta is a technology-focused website representing a part of FORCE Technology, a large and established international consulting and service company. The company operates in multiple sectors including energy, environmental, electronics, pharmaceutical, food, maritime, and public sectors. The website offers detailed information about their services such as sensors, testing, consulting, and certification, targeting industrial clients. The technical infrastructure is based on a modern WordPress CMS with popular plugins and integrations including Google Analytics and Tag Manager, ensuring good digital maturity and performance. Security posture is solid with HTTPS, Cloudflare CDN, and a comprehensive cookie consent mechanism, although there is room for improvement in publishing explicit security policies and vulnerability disclosures. Overall, the website is professional, trustworthy, and GDPR compliant, supporting the company's market position and business credibility.
- TD SYNNEX Sweden AB
techdata.nu
Technology · Sweden
64Medium
NIS2 5 · GDPR 63
NIS2 5 · GDPR 63
TD SYNNEX Sweden AB operates as a leading distributor and solutions aggregator within the IT ecosystem, offering a comprehensive portfolio of technology products and services. The company is positioned as a key player in the Swedish and broader European IT distribution market, supported by its parent company TD SYNNEX Corporation. Their offerings span advanced solutions, endpoint devices, and specialized services, targeting channel partners and resellers. The website reflects a mature digital presence with integrated marketing and analytics tools, including AngularJS-based frameworks and multiple third-party services for user engagement and tracking. Security posture is adequate with HTTPS usage and cookie consent mechanisms, though explicit security policies and incident response details are not publicly disclosed. Overall, the site demonstrates good content quality, professional design, and compliance with GDPR requirements, supporting a high level of business credibility and trust.
Veprox ABveprox.se
Technology · Sweden
28High
NIS2 0 · GDPR 0
NIS2 0 · GDPR 0
Veprox AB is a Swedish technical consulting company specializing in product, process, and production development with a strong focus on sustainability and innovation. The company positions itself as a small but dynamic player with nearly two decades of experience, serving clients in automotive, offshore energy, medical technology, industrial sectors, and cybersecurity. Their business model emphasizes employee-driven project selection and delivering win-win-win outcomes for clients, consultants, and the company. Technically, the website is built on WordPress using the Avada theme and several plugins, with a moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced and email obfuscation, but lacks advanced security headers and published security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the website is professional and trustworthy, but could improve in privacy and security transparency.
Capishcapish.com
Technology · Sweden
50Medium
NIS2 5 · GDPR 28
NIS2 5 · GDPR 28
Capish is a technology company specializing in software tools for visualization and exploration of clinical data. Their flagship products, including Capish Reflect and Capish Curation, enable users to query and structure complex clinical datasets without requiring coding skills. The company targets healthcare professionals and organizations seeking innovative data solutions to improve clinical research and collaboration. The website reflects a professional and consistent brand image with clear contact information and a focus on user-friendly data exploration. Technically, the website is built on WordPress using the Customizr Pro theme and Nimble Builder plugin, leveraging modern JavaScript libraries such as jQuery and Swiper.js. The site is mobile-optimized and provides a good user experience, although some accessibility features are basic. SEO practices appear adequate with proper meta tags and structured navigation. From a security perspective, the site uses HTTPS (implied by external Office365 booking links), but lacks visible security headers and published security policies. There is no cookie consent mechanism detected, which may impact GDPR compliance. No incident response or vulnerability disclosure information is provided, indicating room for improvement in security transparency. Overall, the website is trustworthy and professionally maintained, with a solid business focus and technical foundation. Enhancements in privacy compliance and security policy publication would strengthen the site's security posture and regulatory adherence.
- Suzuki Sverige
suzuki.se
Transportation · Sweden
45High
NIS2 0 · GDPR 0
NIS2 0 · GDPR 0
Suzuki Sverige operates as the official Swedish portal for Suzuki products, providing navigation to specialized sites for automobiles, motorcycles, marine products, and ATVs. The website serves primarily as a brand presence and gateway for Swedish customers interested in Suzuki offerings. The technical infrastructure is basic, relying on a legacy CMS (Waxtrapp) and custom JavaScript, with Google Analytics integrated for visitor tracking. The site lacks modern web standards such as HTTPS, mobile optimization, and accessibility features, indicating a low digital maturity level. Security posture is weak, with no visible security headers or privacy policies, and no secure forms or contact mechanisms. Overall, the site presents moderate trustworthiness but requires significant improvements in security and compliance to meet current standards.
Consilium Safetyconsilium.se
Energy · Sweden
43High
NIS2 0 · GDPR 58
NIS2 0 · GDPR 58
Consilium Safety is a globally recognized leader specializing in fire, flame, and gas safety solutions primarily serving the shipping, transportation, offshore, and property sectors. The company offers a comprehensive portfolio of safety products and digital services designed to enhance safety management and operational control. Their market position is strong, supported by a professional and content-rich website that reflects their expertise and commitment to safety innovation. The technical infrastructure is based on a modern WordPress CMS with multilingual support and integrated analytics and consent management tools, indicating a mature digital presence. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in security headers and explicit security policies. Overall, the website demonstrates a high level of professionalism and trustworthiness, with clear business focus and compliance with privacy regulations.
System Verificationsystemverification.com
Technology · Sweden
51Medium
NIS2 5 · GDPR 58
NIS2 5 · GDPR 58
System Verification is a well-established global software quality assurance company specializing in advanced quality monitoring and analytics, leveraging AI insights to enhance end-user experiences. With over 22 years in the QA business and a workforce exceeding 300 employees, the company positions itself as a strategic partner focusing on innovation, efficiency, and security. Their service portfolio includes Quality AI, expert QA for digital transformation, tailored quality assessments, flexible subscription services, and dedicated teams, targeting businesses seeking to improve software quality and delivery. Technically, the website is built on WordPress with integrations of HubSpot for forms and analytics, Google Analytics, Google Tag Manager, and various marketing pixels. The site demonstrates good SEO practices, mobile optimization, and a modern tech stack, although some performance and accessibility improvements could be made. The presence of a comprehensive cookie consent mechanism and privacy policy indicates a mature approach to privacy compliance. From a security perspective, the site uses HTTPS and implements consent-based tracking controls but lacks explicit security headers and a published security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. The domain registration details align well with the company's claimed history and location, supporting its legitimacy. Overall, System Verification's website reflects a professional, trustworthy, and privacy-conscious organization with a solid market position in the technology sector. Strategic recommendations include enhancing security headers, publishing a security policy, and improving accessibility features to further strengthen their security posture and compliance.
Other · Sweden
29High
NIS2 0 · GDPR 0
NIS2 0 · GDPR 0
The website quickcool.se is a small-scale informational platform primarily targeting Swedish-speaking consumers interested in home improvement, interior decoration, pools, and solar energy solutions. It offers a series of articles and guides related to these topics but lacks explicit business identity or e-commerce functionalities. The site uses a modern front-end stack including Bootstrap, jQuery, and Font Awesome, served via reputable CDNs, indicating a basic but functional technical infrastructure. However, there is no evidence of HTTPS enforcement or advanced security headers, which poses a risk to user data confidentiality and trust. The absence of privacy, cookie, and terms of service policies further highlights compliance gaps, particularly with GDPR requirements. No contact information or incident response details are provided, limiting user trust and transparency. Overall, the site is moderately professional in design and content but requires significant improvements in security posture and privacy compliance to enhance credibility and user trust.
Castracastra.se
Technology · Sweden
50Medium
NIS2 5 · GDPR 30
NIS2 5 · GDPR 30
Castra AB is a Swedish IT consulting company positioned as a leading employer and service provider in the IT and management consulting sector. The company emphasizes a flexible, employee-driven business model that empowers consultants with freedom and co-determination. Castra has achieved notable market recognition, including being ranked Sweden's best workplace in 2024 and 2025, and holds several prestigious certifications and government contracts. Their key services include IT infrastructure, cybersecurity, system development, and management consulting. Technically, the website is built on WordPress using the Enfold theme, integrating modern JavaScript libraries and analytics tools, and is optimized for mobile and SEO. Security posture is strong with HTTPS, reCAPTCHA, and GDPR-compliant cookie consent mechanisms, though explicit security policies and incident response details are not published. Overall, the domain registration and business information are consistent and legitimate, supporting a high trustworthiness score.
Västtrafik ABvasttrafik.se
Transportation · Sweden
54Medium
NIS2 5 · GDPR 15
NIS2 5 · GDPR 15
Västtrafik AB operates as the regional public transportation authority for Västra Götaland, Sweden, providing comprehensive travel planning, ticketing, and traffic information services. The website serves a broad audience of public transport users in the region, offering tools and information to facilitate travel across multiple modes including bus, tram, train, and ferry. The business is positioned as a key regional transport provider under the Västra Götalandsregionen umbrella, with a large operational scale and a focus on sustainable and accessible mobility solutions. Technically, the website is built on the EPiServer CMS platform, leveraging modern JavaScript frameworks and libraries, including Matomo for analytics and EPiServer Forms for user feedback and contact forms. The site demonstrates good mobile optimization, accessibility, and SEO practices, with a moderate to fast performance profile. Hosting appears to be managed by the regional government infrastructure, ensuring reliability and alignment with public sector standards. From a security perspective, the site enforces HTTPS, uses secure cookies, and implements cookie consent mechanisms compliant with GDPR. While explicit security policies and incident response contacts are not published, the site shows adherence to best practices with no visible vulnerabilities or exposed sensitive data. The use of nonce attributes in scripts and consent-based tracking further enhance security and privacy. Overall, Västtrafik's website reflects a mature digital presence with strong business credibility, good technical implementation, and a solid security posture. Strategic recommendations include publishing detailed security policies, incident response information, and vulnerability disclosure guidelines to further enhance trust and compliance.
Advaniahi5.se
Technology · Sweden
44High
NIS2 5 · GDPR 15
NIS2 5 · GDPR 15
Advania is a leading Swedish IT services company with a strong market presence across the country, offering a broad range of services including AI & Innovation, IT Infrastructure, Managed Services, Modern Workplace, and Security. The company emphasizes customer satisfaction, sustainable technology solutions, and strategic partnerships with major technology providers. The website is built on HubSpot CMS, leveraging modern technologies and analytics tools, and demonstrates good digital maturity with responsive design and accessibility features. Security posture is strong with HTTPS enforcement and consent management, though some security headers could be improved. Overall, the site reflects a professional and trustworthy business with comprehensive privacy and cookie policies, but lacks direct contact emails or phone numbers, relying on a multi-step contact form for inquiries.
Sveriges riksdagriksdagen.se
Government · Sweden
54Medium
NIS2 5 · GDPR 0
NIS2 5 · GDPR 0
Sveriges riksdag is the official website of the Swedish Parliament, serving as the highest decision-making body in Sweden. The site provides comprehensive information about legislative work, decisions, parliamentary members, and political parties. It targets Swedish citizens, journalists, researchers, and students interested in Swedish democracy and governance. The website offers key services such as access to laws, parliamentary documents, live and archived web TV broadcasts, and educational resources. It holds a strong market position as the authoritative source for parliamentary information in Sweden. Technically, the website is built using modern web technologies including React and Next.js, with a CMS likely based on Episerver (Optimizely). It is mobile-optimized, accessible, and performs moderately well. The site employs SVG images and modern JavaScript frameworks to deliver a responsive and user-friendly experience. From a security perspective, the site enforces HTTPS, uses multiple security headers, and shows no signs of vulnerabilities or exposed sensitive data. Privacy and cookie policies are present with consent mechanisms, indicating good compliance with GDPR. However, explicit security or incident response policies are not prominently found, and no vulnerability disclosure or security.txt files are detected. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance, suitable for a government institution. It maintains a strong security posture and provides transparent contact information and social media presence. The risk level is low, but recommendations include enhancing incident response visibility and publishing vulnerability disclosure policies.