Security reports directory
139,946 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,195001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
130,651–130,700 of 139,946
HEIDI Chocolat SAheidi-chocolate.com
Retail · Romania
36High
NIS2 0 · GDPR 40
NIS2 0 · GDPR 40
HEIDI Chocolat SA is a premium chocolate manufacturer and retailer based in Romania, established in 2002. The company offers a wide range of chocolate products including pralines, tablets, personalized chocolates, and seasonal items, targeting chocolate consumers worldwide. The website reflects a medium-sized retail business with a focus on craftsmanship, natural ingredients, and positive brand messaging. Technically, the website uses a modern JavaScript stack with libraries such as jQuery, Owl Carousel, and integrates marketing and analytics tools like Facebook Pixel, Google Analytics, and Klaviyo. The site is mobile-optimized and provides a good user experience with clear navigation and product presentation. Security-wise, the site uses HTTPS and implements cookie consent mechanisms compliant with GDPR, but lacks explicit security policies or incident response contacts. Overall, the domain registration and business information are consistent and legitimate, supporting a trustworthy online presence.
tdepronova-tde.com
Energy · Austria
56Medium
NIS2 0 · GDPR 58
NIS2 0 · GDPR 58
TDE Group Limited is a medium-sized, established technology company specializing in advanced energy solutions focused on sustainability and digital innovation. With over 24 years of experience, the company operates in the energy sector providing data-driven technologies, performance evaluation platforms, and hydrogen and carbon solutions to accelerate the energy transition. Their market position is that of a pioneer with a strong commitment to quality, reliability, and environmental impact reduction. The website reflects a mature digital infrastructure built on WordPress with modern plugins and integrations such as Google Analytics, Matomo, and CookieYes for privacy compliance. Security measures include HTTPS, Google reCAPTCHA, and secure user registration forms, though explicit security headers could be improved. Overall, the company demonstrates a high level of professionalism, compliance with GDPR, and a clear business model targeting energy industry professionals and partners.
- PPOLIZEI Tecnologia
polizei.com.br
Technology · Brazil
23Critical
NIS2 0 · GDPR 10
NIS2 0 · GDPR 10
POLIZEI Tecnologia is a Brazilian technology consulting and advisory service provider as indicated by the website title and minimal content. The website currently serves primarily as a redirect to a subdirectory, with very limited content and no visible business or contact information. The technical infrastructure is minimal, relying on Google Analytics for visitor tracking but lacking modern security features such as HTTPS and security headers. The site shows basic mobile optimization and accessibility but overall poor design and user experience. Security posture is weak due to absence of HTTPS and security policies, and no privacy or cookie policies are present, indicating poor compliance with data protection regulations. Overall, the website appears to be either under development or a placeholder, limiting its credibility and trustworthiness.
Wukonig & Partner OGwukonig.com
Technology · Austria
49High
NIS2 0 · GDPR 60
NIS2 0 · GDPR 60
Wukonig & Partner OG operates wukonig.com, a well-established online marketing consulting agency based in Graz, Austria, specializing in SEO, SEA, and digital marketing services. With over 25 years of experience and multiple certifications including Google Premium Partner status, the company holds a strong market position in the D-A-CH region. Their service portfolio covers a broad range of online marketing solutions tailored for both B2B and B2C clients, emphasizing qualified lead generation and conversion optimization. Technically, the website employs modern JavaScript libraries such as jQuery, SmartMenus, and Splide.js, alongside FriendlyCaptcha for bot protection and CCM19 for cookie consent management. Hosting and privacy management are handled by CCM19, a reputable German provider. The site demonstrates good mobile responsiveness, accessibility, and SEO optimization, with a moderate performance profile. From a security perspective, the site uses HTTPS with good SSL configuration, employs CAPTCHA on forms, and maintains privacy compliance with GDPR through comprehensive cookie consent mechanisms. No critical vulnerabilities or exposed sensitive data were detected. However, the site lacks a dedicated security policy or incident response page, which could enhance transparency and trust. Overall, wukonig.com presents as a professional, trustworthy, and technically sound digital marketing agency website with strong business credibility and privacy compliance. Strategic recommendations include adding explicit security and incident response policies, enhancing HTTP security headers, and continuous monitoring of third-party scripts for vulnerabilities.
Rotax Limitedrotaxltd.com
Energy · Sri Lanka
29High
NIS2 0 · GDPR 10
NIS2 0 · GDPR 10
Rotax Limited is a well-established industrial electrical solutions provider based in Sri Lanka with over 60 years of experience. The company offers a broad range of services including automation, system integration, manufacturing, contracting, and supply of electrical products. It operates associate companies such as Rotax Global LTD in Canada and Roche Engineering Lanka, expanding its market reach internationally. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the website is built on WordPress with WooCommerce and uses modern plugins such as Elementor and Yoast SEO, indicating a mature digital infrastructure. Performance and mobile optimization are good, though accessibility features are basic. Security posture is solid with HTTPS enabled and no exposed sensitive data, but lacks explicit security headers and published security policies. The site lacks visible privacy and cookie policies, which is a compliance gap that should be addressed. Contact information is primarily via forms and social media links, with no direct emails or phone numbers explicitly labeled. Overall, the website is trustworthy and professional but could improve privacy compliance and security transparency. Strategic recommendations include implementing privacy and cookie policies with consent mechanisms, adding security headers, publishing incident response contacts, and enhancing accessibility and compliance features to strengthen trust and regulatory adherence.
- HHuber Holding AG
huberholding.com
Retail · Austria
48High
NIS2 5 · GDPR 25
NIS2 5 · GDPR 25
Huber Holding AG is a well-established Austrian company specializing in the production and distribution of high-quality underwear and lingerie brands such as HANRO, HUBER, and SKINY. Founded in 1908, the company has a long-standing presence in the retail and manufacturing sectors, targeting adult consumers with premium bodywear products. The website content is minimal and primarily serves as a frameset container pointing to another page, with metadata describing the business but lacking substantive content or interactive features. Technically, the website is built using outdated technology, specifically Microsoft FrontPage 5.0 and framesets, which are no longer considered modern or mobile-friendly. There is no evidence of modern CMS, analytics, or tracking tools, and the site lacks mobile optimization and accessibility features. Performance is likely slow due to legacy design choices, and SEO optimization is basic, relying mostly on meta tags. From a security perspective, the site does not demonstrate modern security best practices. There is no indication of HTTPS enforcement or SSL certificates in the provided data, no security headers, and no privacy or cookie policies to comply with GDPR. No contact information or incident response channels are visible, which limits transparency and user trust. These factors contribute to a low security posture and compliance level. Overall, the website presents a moderate business credibility due to the company's established history and consistent WHOIS data, but the digital presence is weak and outdated. The lack of security and privacy measures, combined with poor technical implementation, poses risks to user trust and regulatory compliance. Strategic improvements in security, privacy, and modernization of the website are recommended to enhance the company's digital maturity and customer confidence.
- K
Healthcare · Sweden
33High
NIS2 5 · GDPR 0
NIS2 5 · GDPR 0
Karolinska.se represents the digital presence of two leading Swedish healthcare and medical education institutions: Karolinska Universitetssjukhuset (University Hospital) and Karolinska Institutet (Medical University). The website serves as a bilingual landing page directing visitors to either institution's dedicated site, targeting patients, healthcare professionals, researchers, students, and partners. The business model is public healthcare and education, with a strong market position as a leading European hospital and world-renowned medical university. Technically, the site uses modern JavaScript and Azure Application Insights for monitoring, hosted likely on Microsoft Azure infrastructure. The design is professional and mobile-optimized, though accessibility and SEO features are basic. Security posture is moderate, with no visible security headers or explicit HTTPS confirmation in the provided data, and no privacy or cookie policies present. No contact or incident response information is provided, limiting transparency. Overall, the site is credible and functional but would benefit from enhanced security and compliance features.
Oberforsthofalm Familie Mayr KGoberforsthofalm.at
Hospitality · Austria
31High
NIS2 0 · GDPR 3
NIS2 0 · GDPR 3
Oberforsthofalm Familie Mayr KG operates a hospitality business in St. Johann im Pongau, Austria, specializing in alpine regional cuisine and event hosting. The website presents a well-structured and professionally designed platform that highlights the business's offerings, including dining, weddings, events, and an online shop. The company has a strong local presence and is recognized with multiple awards, enhancing its market position. Technically, the website is built on WordPress using the Divi theme, with modern web technologies and good mobile optimization. Security posture is adequate with HTTPS enabled, but lacks some security headers and incident response information. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism detected. Overall, the website is trustworthy and credible, though improvements in security and privacy practices are recommended.
KWS SAAT SE & Co. KGaAkws.com
Manufacturing · Germany
71Medium
NIS2 5 · GDPR 75
NIS2 5 · GDPR 75
KWS SAAT SE & Co. KGaA is a longstanding enterprise specializing in high-yield seed production and agricultural solutions, serving farmers globally with a strong emphasis on innovation and sustainability. The company maintains a robust digital presence with modern web technologies and comprehensive content targeting farmers, investors, and job seekers. Their market position is strong, particularly in sugarbeet seeds, supported by extensive research and digital services like myKWS. Technically, the website employs Vue.js and modern frontend practices, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though some security headers could be enhanced. Privacy compliance is well addressed with a detailed privacy policy and granular cookie consent. Overall, the site reflects a professional, trustworthy, and mature digital presence aligned with the company's enterprise status.
Healthcare · Australia
57Medium
NIS2 5 · GDPR 28
NIS2 5 · GDPR 28
St Vincent’s Institute of Medical Research (SVI) is a well-established Australian non-profit medical research institute with over 60 years of history. The organization focuses on pioneering research in critical health areas such as cancer, diabetes, heart disease, and infectious diseases. The website reflects a strong commitment to scientific discovery and community engagement, targeting researchers, students, donors, and healthcare professionals. The institute operates with a medium-sized team and emphasizes collaboration and innovation in medical science. Technically, the website is built on a modern WordPress platform using Bootstrap for responsive design, with integration of popular libraries such as jQuery and FontAwesome. It employs Google Analytics for user tracking and Vimeo for video content. The site is well-optimized for SEO and accessibility, with structured data enhancing search engine understanding. Performance is moderate, with good mobile optimization and clear navigation. From a security perspective, the site enforces HTTPS and includes standard security headers, demonstrating good baseline security practices. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of a visible cookie consent mechanism and explicit security or incident response policies indicates areas for compliance and transparency improvement. Overall, SVI’s website presents a professional and trustworthy digital presence aligned with its mission. Strategic recommendations include implementing a cookie consent banner, publishing terms of service and security policies, and enhancing privacy compliance to further strengthen user trust and regulatory adherence.
LSRT Associateslsrtassociates.com
Education · United States
45High
NIS2 0 · GDPR 10
NIS2 0 · GDPR 10
LSRT Associates is a small consulting firm specializing in Veracross software implementation, philanthropic consulting, and fractional CIO services primarily targeting independent schools and philanthropic organizations in the Saint Louis area. The website presents a professional and consistent brand image with clear service offerings but lacks direct contact details such as emails or phone numbers, relying on a contact form instead. The technical infrastructure is based on a modern WordPress CMS hosted on GoDaddy, utilizing contemporary plugins and themes with good mobile optimization and moderate performance. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though it lacks important security headers and formal privacy or cookie policies, indicating room for compliance improvement. Overall, the site is accessible without WAF or blocking mechanisms, but privacy compliance and security policy transparency are areas needing enhancement.
- VVIVEUM
viveum.com
Finance · Austria
33High
NIS2 5 · GDPR 43
NIS2 5 · GDPR 43
VIVEUM is a payment service provider based in Austria, offering a comprehensive portfolio of payment solutions including over 300 payment methods, plugins for popular shop systems, and PCI-DSS Level 1 certified services. The company targets online merchants, startups, and developers, positioning itself as a top provider in the e-commerce payment space. The website is built on WordPress with the Divi theme and integrates modern analytics and marketing tools such as Google Analytics, Facebook Pixel, and Hotjar, all managed with a robust cookie consent mechanism via Borlabs Cookie. Security posture is strong with HTTPS enforced and compliance with industry standards, though some security headers could be improved. Overall, the site is professional, well-structured, and compliant with GDPR requirements, providing clear contact information and trust signals.
- RE/MAX Exclusive Collection
exclusivecollection.com
Real Estate · United States
59Medium
NIS2 0 · GDPR 33
NIS2 0 · GDPR 33
RE/MAX Exclusive Collection is a well-established luxury real estate agency serving the Central Florida region with over 30 years of experience. The company leverages the global RE/MAX network to provide comprehensive real estate services including luxury home listings, market reports, mortgage assistance, and personalized agent support. The website reflects a professional and user-friendly platform designed to facilitate property searches and client engagement. Technically, the site employs modern web technologies such as Vue.js, Bootstrap, and integrates with Google Maps and analytics tools, ensuring a responsive and interactive user experience. Security posture is solid with HTTPS enforced and monitoring tools in place, though there is room for improvement in security headers and privacy compliance mechanisms. Overall, the site demonstrates a high level of business credibility and digital maturity, supporting its market position as a premier real estate service provider in its region.
- xt:Commerce GmbH
xt-commerce.com
E-commerce · Austria
52Medium
NIS2 0 · GDPR 58
NIS2 0 · GDPR 58
xt:Commerce GmbH is an established Austrian company specializing in eCommerce shop software solutions, boasting over 150,000 installations and a significant annual order volume. Their platform is modular, mobile-optimized, and integrates popular payment methods, targeting businesses seeking comprehensive online shop solutions. The website demonstrates a mature technical infrastructure built on WordPress with modern frameworks like Bootstrap and includes advanced consent management via Cookiebot and analytics through Matomo and Google Analytics. Security posture is solid with HTTPS and cookie consent, though improvements in security headers and explicit security policies are recommended. Overall, the site is professional, trustworthy, and compliant with GDPR, supporting a positive business reputation.
Greiner AGgreiner.com
Manufacturing · Austria
61Medium
NIS2 0 · GDPR 43
NIS2 0 · GDPR 43
Greiner AG is a globally leading Austrian manufacturing company specializing in plastic and foam solutions with three main divisions: Greiner Bio-One, Greiner Packaging, and NEVEON. The company serves diverse industries including packaging, medical technology, automotive, furniture, and sports. The website reflects a mature digital presence built on TYPO3 CMS with modern web technologies, offering a professional, well-structured, and mobile-optimized user experience. Security posture is strong with HTTPS and secure form handling, though some security headers and explicit security policies are absent. Privacy and cookie policies are comprehensive and GDPR compliant. Contact information is clearly presented with multiple channels including emails and phone numbers. Overall, the website demonstrates high business credibility and technical maturity, supporting the company's market position and operational transparency.
crosseye Marketing GmbHcrosseye.at
Hospitality · Austria
34High
NIS2 5 · GDPR 15
NIS2 5 · GDPR 15
crosseye Marketing GmbH is a specialized tourism marketing agency based in Austria, focusing on digital marketing services such as SEO, SEA, social media, content creation, and workshops tailored for tourism businesses and destinations. The company holds several certifications and maintains a professional online presence with clear contact information and GDPR-compliant privacy and cookie policies. Technically, the website is built on TYPO3 CMS and integrates modern analytics tools including Google Analytics, Google Tag Manager, and Matomo, reflecting a mature digital infrastructure. Security posture is moderate with HTTPS enforced and cookie consent implemented, but lacks visible security headers and incident response disclosures. Overall, the website is well-designed, mobile-optimized, and trustworthy, serving its niche market effectively.
Logifuture Malta Limitedlogispin.com
Technology · Malta
56Medium
NIS2 5 · GDPR 58
NIS2 5 · GDPR 58
Logifuture Malta Limited is a technology company specializing in delivering comprehensive iGaming solutions including sportsbook, games studio, virtual sports, fraud management, payments, and marketing analytics. The company targets iGaming operators and betting companies, positioning itself as a trusted partner with a strong portfolio of global clients. The website reflects a professional and consistent brand image with good content quality and user experience. Technically, the site is built on Webflow with modern fonts and scripts, optimized for performance and mobile use. Security measures include Google reCAPTCHA and a detailed cookie consent mechanism, though explicit security policies and headers are not evident. Overall, the site demonstrates a mature digital presence with good privacy compliance and business credibility.
- Pantec Engineering AG
pantec.com
Manufacturing · Liechtenstein
47High
NIS2 0 · GDPR 58
NIS2 0 · GDPR 58
Pantec Engineering AG is a medium-sized manufacturing and technology company based in Liechtenstein, specializing in laser and optical systems, control solutions, drive technology, and metrology. The company operates multiple specialized subsidiaries, each focusing on distinct industrial sectors such as automation, biosolutions, dynamics, embellishment, and metrology. Their website reflects a professional and consistent brand image, targeting industrial clients and machinery manufacturers. The business model is B2B with a focus on engineering and technology services. Technically, the website uses a modern tech stack including jQuery, RequireJS, Bootstrap, and various UI and mapping libraries, built on the proprietary eboxx Enterprise System CMS. The site is mobile optimized, accessible, and SEO friendly, with good performance and structured navigation. Security-wise, the site enforces HTTPS and implements cookie consent mechanisms, but lacks explicit security headers and a published security or incident response policy. No vulnerabilities or exposed sensitive data were detected. Overall, the domain registration details align well with the business claims, indicating high legitimacy and trustworthiness.
ELITEDOMAINSbtc.at
Other · Germany
32High
NIS2 0 · GDPR 0
NIS2 0 · GDPR 0
The website btc.at is a domain sales landing page operated through ELITEDOMAINS, a domain marketplace and escrow service provider. It offers the domain btc.at for sale with clear instructions on the purchase process, payment methods, and domain transfer. The site targets individuals and businesses interested in acquiring premium domains. Technically, the site is built using Angular framework with modern web fonts and responsive design, providing a good user experience and basic SEO optimization. Security posture is moderate with no visible security headers or explicit HTTPS enforcement in the HTML, but the use of escrow and verified payment methods adds trust. Privacy compliance is basic with a privacy policy linked externally but no cookie consent mechanism visible. Business credibility is moderate due to the lack of direct contact emails or phone numbers, relying instead on a contact form linked to the marketplace platform. Overall, the site is functional and professional but could improve in security transparency and privacy compliance.
Dale Carnegie Austriadale-carnegie.at
Education · Austria
38High
NIS2 0 · GDPR 75
NIS2 0 · GDPR 75
Dale Carnegie Austria is a well-established professional training provider with over 110 years of history, offering a wide range of courses in personal development, leadership, sales, and specialized training solutions. The company operates both B2B and B2C models, targeting businesses and individuals seeking professional growth. Their market position is strong, supported by global reach and local expertise in Austria. The website reflects a mature digital presence with modern technologies such as WordPress, Elementor, and Stripe for payments, alongside comprehensive GDPR-compliant cookie consent mechanisms. Security posture is solid with HTTPS and spam protection on forms, though some security headers could be improved. Overall, the site is professional, trustworthy, and user-friendly, supporting the company's credibility and business goals.
Hoyluhoylu.com
Technology
58Medium
NIS2 5 · GDPR 75
NIS2 5 · GDPR 75
Hoylu is a specialized technology company offering a cloud-based construction project planning platform that integrates digital whiteboarding, task management, and industry-specific planning modules. The platform is designed to unify disparate teams and data sources, providing a comprehensive solution for complex project management in the construction sector. The website demonstrates a mature digital infrastructure with modern technologies such as WordPress, Elementor, and integrated marketing and analytics tools including HubSpot and Google Analytics. Security posture is strong with HTTPS enforcement, cookie consent mechanisms, and no visible vulnerabilities or exposed sensitive data. Privacy policies are comprehensive and GDPR compliant, enhancing user trust. Overall, Hoylu presents as a credible, professional, and well-established business with a clear focus on delivering value to construction industry professionals.
- Gebr. Heinemann SE & Co. KG
gebr-heinemann.com
Retail · Germany
46High
NIS2 5 · GDPR 28
NIS2 5 · GDPR 28
Gebr. Heinemann SE & Co. KG is a globally recognized enterprise specializing in travel retail, operating both as a retailer and distributor across multiple channels including airports, border crossings, cruise ships, and diplomatic zones. The company collaborates with luxury brands and offers a diverse product portfolio ranging from cosmetics to fashion and accessories. Their market position is strong, supported by regional centers in Singapore and Miami, and a headquarters in Hamburg, Germany. Technically, the website leverages modern frameworks such as Next.js and React, with integrated cookie consent management via Usercentrics and analytics through Google Tag Manager. The site is well-optimized for mobile and SEO, providing a good user experience. Security posture is solid with HTTPS enforced and consent mechanisms in place, though some security headers and explicit incident response contacts are missing. Overall, the website is professional, trustworthy, and compliant with GDPR requirements.
- Interad Software GmbH
interad.at
Technology · Austria
37High
NIS2 0 · GDPR 43
NIS2 0 · GDPR 43
Interad Software GmbH is a well-established Austrian software company specializing in custom software solutions based on Microsoft .NET technologies. Founded in 2005, the company operates with a young and dynamic team from Graz and Krumpendorf am Wörthersee, serving clients both domestically and internationally. Their market position is strengthened by their status as a Microsoft Gold Partner and Microsoft Solutions Partner, placing them among the top 1% of Microsoft partners worldwide. Key services include individual software development, IT experts on demand, software consulting, and developer coaching. The company targets businesses seeking tailored IT solutions and expert consulting services. Technically, the website employs a modern tech stack including AngularJS, jQuery, and various third-party marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and CookieScript for consent management. The site is mobile-optimized with good SEO and accessibility basics, although some improvements could be made in accessibility and performance tuning. The website is hosted securely with HTTPS and includes a cookie consent mechanism compliant with GDPR. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and cookie consent but lacks some advanced security headers like CSP and HSTS. There is no visible security policy or incident response information, which could be improved to enhance trust and preparedness. No critical vulnerabilities or blocking mechanisms were detected, indicating a stable security posture. Overall, Interad presents a credible and professional online presence with strong business credibility and compliance. Strategic recommendations include enhancing security headers, publishing a security policy, and improving incident response transparency to further strengthen their security posture and trustworthiness.
- SSakhalin Energy
sakhalinenergy.com
Energy · Russia
55Medium
NIS2 0 · GDPR 28
NIS2 0 · GDPR 28
Sakhalin Energy operates as a major energy company focused on oil and gas production projects in Russia, notably the Sakhalin-2 project. The website serves as an informational portal presenting company details, safety and environmental policies, social programs, media releases, tenders, and career opportunities. The business model centers on resource development under a production sharing agreement, targeting industry stakeholders, contractors, and the public. Technically, the website is built on the Bitrix CMS platform and employs legacy technologies such as jQuery 1.8.2, along with modern tools like Google reCAPTCHA and FontAwesome. The site shows moderate performance and basic mobile optimization but lacks advanced accessibility and SEO features. The content is currently limited due to the site being under reconstruction. From a security perspective, the site uses HTTPS and includes reCAPTCHA for form protection but lacks visible security headers and uses outdated JavaScript libraries, which may expose it to vulnerabilities. Privacy compliance is minimal, with a basic privacy policy present but no cookie consent mechanism or GDPR indicators. Contact information and security policies are not clearly provided. Overall, the website presents a moderate risk profile with room for improvement in security practices, privacy compliance, and technical modernization. Strategic enhancements in these areas would strengthen trust and operational resilience.
- BBuyDomains.com
reisenet.com
E-commerce · United States
55Medium
NIS2 5 · GDPR 60
NIS2 5 · GDPR 60
The website reisenet.com is a premium domain sales landing page operated by BuyDomains.com, a large and established domain marketplace under Newfold Digital. The site offers domain purchase and brokerage services, targeting businesses and individuals seeking premium domain names. The technical infrastructure is based on AngularJS with modern integrations including Google Analytics, Google Tag Manager, reCAPTCHA, and accessibility tools like AudioEye. The site demonstrates strong compliance with GDPR and cookie regulations, featuring OneTrust consent mechanisms and detailed privacy policies. Security posture is robust with HTTPS, CSP headers, and secure form handling, though some improvements in CSP strictness and vulnerability disclosure could be made. Overall, the site is professional, accessible, and trustworthy, with a good balance of marketing and user experience features.
- JJeld-Wen Windows & Doors
jeld-wen.com
Manufacturing · United States
58Medium
NIS2 5 · GDPR 63
NIS2 5 · GDPR 63
Jeld-Wen Windows & Doors is a well-established enterprise specializing in the manufacturing and retail of interior and exterior doors, windows, and patio doors. The company targets homeowners, builders, architects, and construction professionals, offering a broad product portfolio with a strong market presence in the United States. Their website reflects a mature digital presence with comprehensive product information, dealer locators, and project support services. Technically, the site leverages modern web technologies including React, jQuery, and integrates multiple third-party marketing and analytics tools such as Google Analytics, Cookiebot, and Drift chat, indicating a high level of digital maturity. Security-wise, the website enforces HTTPS, employs a robust Content Security Policy, and manages cookie consent effectively, although it lacks explicit incident response and vulnerability disclosure pages. Overall, the site demonstrates a strong security posture with room for improvement in publishing security policies and terms of service. Strategic recommendations include implementing a security.txt file, enhancing security headers, and publishing incident response information to further strengthen trust and compliance.
- SSparkasse Neunkirchen
sparkasse-neunkirchen.de
Finance · Germany
56Medium
NIS2 0 · GDPR 43
NIS2 0 · GDPR 43
Sparkasse Neunkirchen operates as a regional financial institution in Germany, providing a wide range of banking and financial services including online banking, loans, insurance, investment products, and advisory services. The website is targeted at both private and corporate customers, reflecting a comprehensive digital presence with clear navigation and professional branding consistent with the Sparkassen-Finanzgruppe. The business model focuses on regional banking with strong local engagement and digital service offerings.
- DDresscode
dresscode21.com
E-commerce · Italy
59Medium
NIS2 5 · GDPR 48
NIS2 5 · GDPR 48
Dresscode is an Italian online fashion boutique operating on the Shopify platform, with a focus on customer satisfaction and leadership in the Italian online retail market for over seven years. The website offers a range of fashion products, emphasizing quality Italian manufacturing, customer support, and easy returns. Technically, the site leverages modern e-commerce technologies including Shopify's Dawn theme, PayPal integration, and marketing tools such as Facebook Pixel and EasySell. The security posture is strong with HTTPS enforced and secure payment gateways, though explicit security policies and cookie consent mechanisms are lacking. Overall, the site presents a professional and trustworthy e-commerce experience targeting Italian consumers.
ECOMAL Europe GmbHecomal.com
Manufacturing · Germany
49High
NIS2 0 · GDPR 43
NIS2 0 · GDPR 43
ECOMAL Europe GmbH is a well-established specialty distributor of electronic components with a strong European presence through 15 subsidiaries. The company focuses on distributing passive components, discrete semiconductors, and electromechanical components, partnering with notable global manufacturers. Their website reflects a mature business with clear branding, comprehensive contact information, and a user-friendly interface targeting electronics industry professionals. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and includes GDPR-compliant cookie consent mechanisms. Security posture is solid with HTTPS enforced and session management in place, though some security headers and explicit policies are missing. Overall, the website demonstrates good digital maturity and business credibility, supporting their market position as a trusted distributor in Europe.
fortunasportshelpsole.com
Media · Indonesia
43High
NIS2 0 · GDPR 10
NIS2 0 · GDPR 10
Fortunasports is an Indonesian online sports betting platform offering live sports schedules, competitive odds, and live betting with streaming features. The website serves as a front-facing portal but heavily links to an external domain fortunasports.xyz, which likely hosts the main service. The site uses common frontend technologies such as Bootstrap and jQuery but lacks modern SEO, accessibility, and security best practices. No privacy or cookie policies are present, and no company contact information is provided, which reduces user trust and compliance with data protection regulations. Security posture is weak due to absence of HTTPS and security headers. Overall, the site appears functional but lacks professionalism and transparency, posing risks to users and limiting business credibility.
MSX Internationalmsxi.com
Transportation
68Medium
NIS2 5 · GDPR 43
NIS2 5 · GDPR 43
MSX International is an enterprise-level service provider specializing in innovative mobility solutions, including sales performance, repair optimization, and customer engagement. The company leverages advanced technologies such as AI and data analytics to empower automotive industry clients globally. Their website demonstrates a mature digital presence built on WordPress with modern plugins and a strong focus on user experience and content quality. Security posture is solid with HTTPS and cookie consent mechanisms in place, though some security headers could be improved. Privacy compliance is well addressed with a comprehensive privacy policy and cookie management. Overall, the site reflects a trustworthy and professional organization with a clear market position in the transportation sector.
- TThe Language Company
languagecompany.at
Austria
28High
NIS2 0 · GDPR 0
NIS2 0 · GDPR 0
Automationstechnikautomationstechnik.pl
Manufacturing · Poland
29High
NIS2 5 · GDPR 15
NIS2 5 · GDPR 15
Automationstechnik is a well-established Polish company specializing in industrial automation and robotics solutions with over 25 years of experience. The company designs and builds advanced machines and assembly lines, focusing on optimizing production processes, intralogistics, and traceability systems. Their market position is strong within Poland's manufacturing sector, supported by multiple certifications and a portfolio of satisfied clients. Technically, the website is built on WordPress with modern frameworks and includes essential security and privacy features such as HTTPS, cookie consent, and Google reCAPTCHA. Security posture is good, though explicit security headers and published security policies could enhance it further. Overall, the company demonstrates a professional digital presence with strong business credibility and compliance with GDPR.
OSRAM GmbHosram.com
Energy · Germany
66Medium
NIS2 0 · GDPR 43
NIS2 0 · GDPR 43
OSRAM GmbH is a global leader in innovative and sustainable lighting solutions, offering a broad portfolio including LED lamps, luminaires, and light management systems. The company targets B2B customers across automotive, entertainment, and industrial sectors, positioning itself as a key player in the energy and transportation industries. The website reflects a mature enterprise with consistent branding and a professional online presence. Technically, the site employs modern JavaScript libraries, consent management tools, and integrates analytics and marketing services with user privacy considerations. Security posture is strong with HTTPS and consent mechanisms, though explicit security policies and incident response information are absent. Overall, the site is trustworthy, well-structured, and compliant with GDPR requirements.
180 Degrees Consulting180dc.org
Non-profit
54Medium
NIS2 0 · GDPR 43
NIS2 0 · GDPR 43
180 Degrees Consulting is a globally recognized university-based consultancy focused on providing affordable, high-quality consulting services to non-profits and socially-conscious organizations. With operations in over 30 countries and more than 170 branches, it has established itself as the largest organization of its kind, fostering social impact and leadership development among students worldwide. The website reflects a professional and consistent brand image, supported by strong client testimonials and partner logos, reinforcing its credibility and market position. Technically, the website is built on the Webflow platform, leveraging modern web technologies such as Google Tag Manager, jQuery, and Swiper.js for enhanced user experience and analytics. The site is well-optimized for mobile devices and demonstrates good performance and accessibility standards. However, there is room for improvement in security headers and explicit privacy consent mechanisms. From a security standpoint, the site uses HTTPS with a good SSL configuration and does not expose sensitive data. The absence of security headers and lack of incident response or security policy pages indicate areas for enhancement. Privacy compliance is basic, with privacy and cookie policies present but lacking active consent mechanisms. No critical vulnerabilities or blocking mechanisms were detected. Overall, the website presents a low-risk profile with strong business credibility and technical maturity. Strategic improvements in security policies, privacy compliance, and security headers would further strengthen its posture and trustworthiness.
Freecharge Payment Technologies Pvt. Ltd.freecharge.in
Finance · India
58Medium
NIS2 0 · GDPR 10
NIS2 0 · GDPR 10
Freecharge Payment Technologies Pvt. Ltd. operates a comprehensive digital payments platform in India, offering services such as mobile recharge, bill payments, UPI transactions, credit score checks, and business payment solutions including merchant services and payment gateways. The company targets both consumers and businesses, positioning itself as a trusted and fast payment facilitator with a strong market presence. The website demonstrates a mature technical infrastructure leveraging modern frameworks like React and Next.js, supported by robust analytics and marketing tools such as Google Tag Manager and MoEngage. Security posture is strong with HTTPS enforcement, bank-grade security claims, and no visible vulnerabilities, although explicit security policies and incident response details are not publicly available. Overall, the platform is professional, user-friendly, and trustworthy, though improvements in privacy compliance such as cookie consent mechanisms and vulnerability disclosure would enhance user trust and regulatory adherence.
SGKschawk.com
Manufacturing · United States
51Medium
NIS2 5 · GDPR 28
NIS2 5 · GDPR 28
SGK is a global packaging and brand experience company specializing in brand creative, packaging, content production, and brand environments. The company operates globally with a strong market position supported by its parent company, Matthews International Corporation, and several subsidiaries. The website reflects a professional and consistent brand image with comprehensive content targeting enterprise clients seeking packaging and brand experience solutions. Technically, the site is built on WordPress with modern SEO and analytics tools integrated, providing good performance and mobile optimization. Security posture is solid with HTTPS and no exposed sensitive data, though there is room for improvement in security headers and explicit incident response policies. Privacy compliance is partially addressed with a comprehensive privacy policy but lacks a visible cookie consent mechanism. Overall, the site is trustworthy and professionally maintained, supporting SGK's market credibility.
Talentortalentor.com
Other · Austria
50Medium
NIS2 5 · GDPR 58
NIS2 5 · GDPR 58
Talentor is a well-established international executive search network headquartered in Austria, operating since 2003 with partners in over 34 countries. The company specializes in executive and professional search services, HR consulting, and career development, targeting leading companies seeking top leadership talent globally. The website reflects a mature digital presence with professional design, responsive layout, and comprehensive content that supports their market position as a top global recruitment provider. Technically, the site uses modern web technologies including Craft CMS, JavaScript frameworks, and integrates analytics and marketing tools such as Google Analytics and Mailchimp. Security posture is strong with HTTPS enforcement, security headers, and cookie consent mechanisms, although explicit security policies and incident response contacts are not published. Overall, the website demonstrates high professionalism, trustworthiness, and compliance with privacy regulations, making it a credible platform for its business domain.
- W
Other
48High
NIS2 0 · GDPR 25
NIS2 0 · GDPR 25
The website at fpz.com currently serves a security challenge page that blocks direct access to its content, indicating the presence of a Web Application Firewall or similar security mechanism. The page references legacy CMS platforms Joomla 1.5 and WordPress 2.5, both of which are outdated and pose significant security risks. No meaningful business or contact information is available on the page, and no privacy or cookie policies are present. The technical infrastructure appears minimal, relying on basic HTML, CSS, and JavaScript with no modern frameworks or analytics detected. Security posture is weak due to lack of HTTPS enforcement, absence of security headers, and use of deprecated software. Overall, the site is inaccessible for detailed analysis and scores very low on content quality, technical implementation, security, privacy compliance, and business credibility.
- AAngelini Pharma Österreich GmbH
angelini.at
Healthcare · Austria
64Medium
NIS2 0 · GDPR 55
NIS2 0 · GDPR 55
Angelini Pharma Österreich GmbH operates as a pharmaceutical company specializing in brain health, oncology, pain management, and consumer health products. The company is part of the larger Angelini S.p.a. group and maintains a strong market presence in Austria and several European countries. Their website reflects a professional and consistent brand image, targeting healthcare professionals and consumers with comprehensive product and research information. Technically, the website employs modern JavaScript libraries such as jQuery, Slick Slider, and Piwik PRO for analytics, combined with a consent management platform to ensure GDPR compliance. The site is mobile-optimized and structured for good SEO and accessibility, although some accessibility features could be enhanced. From a security perspective, the site enforces HTTPS and uses privacy-conscious analytics with anonymization options. However, it lacks explicit security headers and a published security policy or incident response contact, which are recommended for improved security posture. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website demonstrates a mature digital presence with strong privacy compliance and business credibility. Strategic improvements in security headers and incident response transparency would further enhance trust and resilience.
Avance Consultingavanceservices.com
Technology
52Medium
NIS2 5 · GDPR 33
NIS2 5 · GDPR 33
Avance Consulting is a global talent solutions provider specializing in innovative recruitment and workforce services across multiple industries including technology, banking, manufacturing, and healthcare. The company operates internationally with offices and contacts spanning North America, Europe, Asia, and Oceania, serving both businesses and job seekers. Their business model focuses on comprehensive talent acquisition services such as permanent hires, contract staffing, contingent search, and managed services. The website reflects a mature digital presence built on WordPress with Elementor, integrating modern marketing and analytics tools. Security posture is solid with HTTPS enforced, though security headers could be improved. Privacy compliance is evident with a comprehensive privacy policy, but cookie consent mechanisms are lacking. Overall, the site projects professionalism and trustworthiness with multiple certifications and customer trust signals.
- Wwoom GmbH
woombikes.com
Retail · Austria
62Medium
NIS2 0 · GDPR 55
NIS2 0 · GDPR 55
woom GmbH is an Austrian company specializing in the design and sale of ergonomic, lightweight children's bikes tailored to various age groups and sizes. Founded in 2013 by two fathers who sought better bike options for their children, the company has grown to serve over 37 countries with a strong international presence. Their product range includes bikes, helmets, accessories, and a Riders Club membership, supported by a 10-year warranty and a 30-day money-back guarantee. The website reflects a mature e-commerce platform with a modern tech stack including Nuxt.js, TailwindCSS, and Shopify integration, ensuring a fast, responsive, and accessible user experience. Security best practices are observed with HTTPS, security headers, and no visible vulnerabilities, although explicit security and incident response policies are not found. Overall, the site demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations.
Dot Com Infowaydotcominfoway.com
Technology · India
62Medium
NIS2 5 · GDPR 45
NIS2 5 · GDPR 45
Dot Com Infoway is a well-established IT and AI solutions provider with over 25 years of experience, offering a broad range of services including AI development, mobile app development, digital marketing, and consulting. The company targets businesses globally, providing tailored AI products and services to enhance operational efficiency and customer engagement. Their market position is supported by a strong portfolio of case studies, client testimonials, and a consistent brand presence. Technically, the website is built on WordPress with modern plugins and frameworks, demonstrating good digital maturity and SEO practices. Security posture is solid with HTTPS and reCAPTCHA implementations, though improvements in security headers and explicit policies could enhance protection. Overall, the website is professional, trustworthy, and compliant with privacy regulations, reflecting a credible and mature business entity.
Barilla Groupbarillagroup.com
Manufacturing · Italy
67Medium
NIS2 5 · GDPR 75
NIS2 5 · GDPR 75
Barilla Group is a well-established Italian family-owned food company founded in 1877, specializing in the production and marketing of pasta, sauces, and bakery products globally. The website reflects a strong brand presence with a focus on sustainability, innovation, and corporate responsibility, targeting consumers and stakeholders interested in quality food products and ethical business practices. The company maintains a significant international footprint with operations in over 100 countries. Technically, the website employs modern web technologies including Vue.js, Google Tag Manager, and OneTrust for cookie consent, ensuring good performance, mobile optimization, and accessibility. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, although explicit security policies and incident response information are not prominently linked. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, though it lacks a visible terms of service page and direct contact information on the homepage. The domain registration details are consistent with the company's identity, supporting high legitimacy and trustworthiness.
mrp hotelsmrp-hotels.com
Hospitality · Austria
34High
NIS2 0 · GDPR 43
NIS2 0 · GDPR 43
mrp hotels is a leading European consultancy specializing in hospitality, hotel real estate, and hotel operator companies. With nearly two decades of experience, they provide comprehensive services including asset management, strategy consulting, digitalization, investment management, operator search, and ESG strategies. Their client base includes investors, owners, operators, banks, and developers across Europe. The website is built on a modern WordPress infrastructure using Elementor and Astra theme, optimized for performance, SEO, and mobile responsiveness. Security posture is strong with HTTPS, cookie consent, and no visible vulnerabilities, though a dedicated security policy and incident response information are absent. Overall, the site reflects a professional and trustworthy consultancy with strong branding and clear contact information.
Asteas GmbHiacbox.com
Technology · Austria
53Medium
NIS2 0 · GDPR 40
NIS2 0 · GDPR 40
IACBOX, operated by Asteas GmbH, is a well-established provider of internet hotspot and authentication systems, serving a broad range of sectors including hospitality, healthcare, and transportation. The company has a strong market presence with over 8,500 deployments worldwide since 2003, offering both subscription and permanent licensing models. Their solutions emphasize secure, user-friendly WiFi access for guests, employees, and customers, supported by cloud-based management portals. Technically, the website leverages modern frameworks such as Nuxt.js and Vue.js, ensuring fast performance, mobile optimization, and good SEO practices. Security posture is strong with HTTPS enforced, cookie consent mechanisms, and no visible vulnerabilities. However, explicit security policies and incident response information are not publicly detailed. Overall, the website and business demonstrate high professionalism, trustworthiness, and compliance with GDPR regulations.
Gebr. Swinkels Grondwerken BVswinkelsgrondwerken.nl
Manufacturing · Netherlands
26High
NIS2 0 · GDPR 3
NIS2 0 · GDPR 3
Gebr. Swinkels Grondwerken BV is a Dutch company specializing in groundworks and road construction, serving a diverse clientele including large construction firms, municipalities, holiday parks, and private individuals. The company offers a comprehensive range of services including earthworks, supply and processing of construction materials, and foundation laying. Their market position is that of a well-established regional player with a solid reputation and trusted partnerships. The website reflects a professional and consistent brand image with clear business information and legal documentation available for visitors. Technically, the website is built on WordPress using the Elementor page builder and Blocksy theme, incorporating modern web technologies such as jQuery and Google reCAPTCHA for form security. The site is mobile optimized and performs moderately well, with good SEO and basic accessibility features. Security posture is strong with HTTPS enforced, security headers present, and no visible vulnerabilities or exposed sensitive data. However, explicit security policies and incident response information are not published. Overall, the website demonstrates a mature digital presence with good privacy compliance, including a privacy policy and cookie consent mechanism. Contact information is complete and clearly presented, enhancing business credibility. No WAF or blocking mechanisms were detected, allowing full content access. The domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness. Strategic recommendations include publishing a dedicated security policy and incident response contact, enhancing accessibility, and considering a security.txt file for vulnerability disclosure to further strengthen trust and compliance.
Other
47High
NIS2 0 · GDPR 10
NIS2 0 · GDPR 10
The website nabucco-pipeline.com is currently inaccessible due to a Cloudflare security challenge page employing Turnstile CAPTCHA, which blocks direct access to any substantive content. As a result, no business information, policies, or contact details are available for analysis. The site appears to rely on Cloudflare's security infrastructure to mitigate automated access and potential threats. Due to the lack of accessible content, the technical infrastructure assessment is limited to the presence of Cloudflare services and basic HTML/CSS/JS technologies. Security posture benefits from Cloudflare's WAF and CAPTCHA but lacks visible security headers or documented policies. Overall, the site cannot be fully evaluated, and the risk assessment remains low due to insufficient data.
Volksbank Vorarlberg e. Gen.volksbank-vorarlberg.at
Finance · Austria
61Medium
NIS2 0 · GDPR 43
NIS2 0 · GDPR 43
Volksbank Vorarlberg e. Gen. is a well-established regional cooperative bank in Austria, founded in 1888, serving private customers, youth, entrepreneurs, and private banking clients. It operates as part of the Austrian Volksbank group and offers a comprehensive range of financial services including accounts, cards, loans, investments, insurance, and leasing. The website reflects a mature business with consistent branding, clear navigation, and a strong focus on customer engagement and trust through certifications and social media presence. Technically, the site uses standard web technologies such as jQuery and JavaScript, with moderate performance and good mobile optimization. Security practices include cookie consent mechanisms and secure login links, though some security headers could be improved. Privacy compliance is strong with clear policies and GDPR adherence. Overall, the site is professional, trustworthy, and well-aligned with the business's regional banking role.
Argent Australiaargentaust.com.au
Retail · Australia
56Medium
NIS2 5 · GDPR 43
NIS2 5 · GDPR 43
Argent Australia is a well-established supplier of premium bathroom, kitchen, laundry, commercial, and smart living products in Australia, operating since 1958. The company partners with leading European brands and serves a diverse clientele including retail, project, and builder markets. Their website reflects a professional and consistent brand image with clear navigation and comprehensive product offerings. Technically, the site is built on Drupal CMS with modern JavaScript libraries and tracking tools, providing a moderate performance and good mobile optimization. Security posture is solid with HTTPS and standard security practices, though explicit security policies and vulnerability disclosures are absent. Privacy compliance is basic with cookie consent mechanisms and a privacy policy present but lacking GDPR-specific details. Overall, the website demonstrates high business credibility and trustworthiness.