Low-risk security reports
14,261 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,165001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
1,301–1,350 of 14,261
SiteGroundsiteground.eu
Technology
80Low
NIS2 10 · GDPR 83
NIS2 10 · GDPR 83
SiteGround is a large, established web hosting provider offering services to over 3 million domains globally. Their business model focuses on providing ultrafast, secure, and reliable web hosting solutions with 24/7 expert support. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content tailored to website owners and developers. Technically, the site uses modern JavaScript libraries, Google Tag Manager, Cookiebot for GDPR compliance, and integrates with trusted third-party services such as Stripe for payments and Typeform for forms. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and policies could be improved. Overall, the website demonstrates a high level of professionalism and trustworthiness consistent with a major technology company.
Ramo ASramo.no
Retail · Norway
78Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Ramo AS is a Norwegian importer and retailer specializing in well-known sports and outdoor brands such as Scott, Nordica, Syncros, Therm-ic, and Sidas. The company has an established market presence since 1999, targeting consumers interested in sports equipment within Norway. Their website reflects a professional retail platform with a focus on user experience and compliance with privacy regulations. Technically, the website leverages ASP.NET technology, Cloudflare CDN and security services, and Shopify for e-commerce functionalities. The site is well-optimized for mobile devices and includes a comprehensive cookie consent mechanism aligned with GDPR requirements. Security posture is strong with HTTPS enforcement and appropriate security headers, although there is room for improvement in publishing explicit security policies and incident response information. Overall, the website is trustworthy, professionally maintained, and compliant with relevant privacy standards.
- SScantrade
scantrade.se
Retail · Sweden
78Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Scantrade is a Swedish retail supplier specializing in alpine, cycling, outdoor, and club sports equipment. Established since 2008, the company maintains a professional and consistent online presence with a well-structured website that targets retail customers and sports clubs in the Nordic region. The website employs modern technologies including ASP.NET, Shopify, and Cloudflare, indicating a mature digital infrastructure. The presence of Google Analytics and Sleeknote reflects active marketing and user engagement strategies. Security posture is adequate with HTTPS enabled and cookie consent mechanisms in place, though there is room for improvement in security headers and incident response transparency. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.
- Mizuno Norge
mizuno.no
Retail · Norway
78Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Mizuno.no is the official Norwegian online store for Mizuno sportswear and equipment, targeting Norwegian consumers interested in sports products. The website operates as an e-commerce retail platform, leveraging ASP.NET technology and Cloudflare for hosting and security. It integrates multiple third-party services such as Google Analytics, Lipscore for reviews, and CookieInformation for consent management, demonstrating a mature digital infrastructure. The site is well-branded, consistent, and provides a comprehensive cookie consent mechanism aligned with GDPR requirements. Security posture is solid with HTTPS enforced and Cloudflare protection, though some security headers could be improved. The absence of publicly available WHOIS data suggests privacy protection, which is common for commercial sites but reduces transparency. Overall, the site is professional, trustworthy, and compliant with privacy standards.
3M3m.com
Manufacturing · United States
80Low
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
3M is a large multinational technology and manufacturing company that applies science and innovation to deliver a broad portfolio of products and solutions across multiple industries including automotive, commercial solutions, consumer products, electronics, energy, government, manufacturing, safety, and transportation. The website reflects a mature digital presence with comprehensive content, multimedia elements, and clear navigation tailored to a diverse audience of industrial, commercial, and consumer customers. The company maintains strong branding consistency and trust indicators such as investor relations and sustainability disclosures. Technically, the site uses modern JavaScript frameworks, tag management, and performance monitoring tools, hosted likely on Akamai with IBM WebSphere Portal CMS. Security posture is good with HTTPS, cookie consent mechanisms, and no visible vulnerabilities, though explicit security headers and incident response contacts are not evident. WHOIS data is unavailable due to registry restrictions, but the website's professional nature and corporate disclosures support legitimacy. Overall, the site is well-constructed, secure, and compliant with privacy regulations, serving as a reliable digital asset for 3M's global operations.
- Harmonie Norge AS
harmonie.no
Manufacturing · Norway
76Low
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
Harmonie Norge AS operates a professional e-commerce website focused on manufacturing and retailing doors, windows, and smart lock solutions primarily for the Norwegian market. The company has a consistent brand presence and offers a range of products including exterior and interior doors, garage doors, and accessories. The website is built on a modern technical stack with JavaScript frameworks, Google Analytics, and a cookie consent mechanism, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enforced, but lacks visible security headers and explicit privacy and terms policies. Overall, the website is trustworthy and functional but could improve compliance and security transparency.
stopsmokingstopsmoking.ch
Healthcare · Switzerland
77Low
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
stopsmoking.ch is a professionally designed national platform based in Switzerland dedicated to supporting individuals in quitting smoking. It offers comprehensive educational content, counseling services, and tools tailored for both smokers and healthcare professionals. The platform is well-positioned in the healthcare and non-profit sectors, targeting a mature audience seeking tobacco cessation support. Technically, the site is built on TYPO3 CMS, employs modern JavaScript libraries like Swiper.js, and uses Matomo analytics hosted on a Swiss cloud provider, reflecting a good level of digital maturity and privacy awareness. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with GDPR and cookie regulations.
Dansk Ungdoms Fællesrådduf.dk
Non-profit · Denmark
77Low
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
Dansk Ungdoms Fællesråd (DUF) is a well-established Danish non-profit umbrella organization founded in 1996, representing 78 nationwide youth and children's organizations. The organization focuses on promoting youth participation in democratic processes and supporting the development of youth associations through projects, funding, education, and international cooperation. The website reflects a mature market position with comprehensive content and clear communication tailored to youth organizations and stakeholders in Denmark. Technically, the site is built on the TYPO3 CMS platform, leveraging modern web standards, responsive design, and privacy-conscious analytics tools. Security posture is solid with HTTPS enforced and script integrity checks, though some security headers and formal policies are absent. Overall, DUF demonstrates a high level of professionalism, trustworthiness, and compliance with GDPR, making it a credible and authoritative source in its sector.
AdmiralCloudadmiralcloud.com
Technology
80Low
NIS2 17 · GDPR 70
NIS2 17 · GDPR 70
AdmiralCloud is a technology company specializing in Digital Asset Management solutions for enterprises. Their website presents a professional and well-structured platform built on WordPress with the Divi theme, indicating a moderate level of digital maturity. The site includes modern web technologies such as lazy loading scripts and font optimizations, contributing to a good user experience and performance. However, the absence of WHOIS data raises questions about domain registration transparency. Security posture is moderate, with cookie consent implemented but lacking visible security headers and explicit privacy or terms of service pages. Overall, the website is functional and business-focused but would benefit from enhanced transparency and security practices to improve trust and compliance.
- Granicus, LLC
shapeyourcitysaintjohn.ca
Government · Canada
76Low
NIS2 37 · GDPR 85
NIS2 37 · GDPR 85
Shape Your City Saint John is a digital community engagement platform operated by Granicus, LLC, designed to facilitate public participation in city planning and projects for the City of Saint John, Canada. The platform offers residents a space to stay informed, provide feedback, and engage with municipal initiatives. The website demonstrates a solid market position as a government-focused engagement tool, leveraging modern web technologies and a reputable platform provider. Technically, the site is built on Next.js and Chakra UI frameworks, ensuring responsive design and accessibility. It integrates analytics and user engagement tools such as Google Analytics, Segment, and Intercom, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforcement, security headers, and domain transfer protections, though DNSSEC is not enabled. Privacy compliance is well addressed with comprehensive privacy and cookie policies and consent mechanisms. Overall, the site is professional, trustworthy, and well-aligned with its government service mission.
Govstackgovstack.com
Government · United States
76Low
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Govstack is a technology provider specializing in digital solutions for public sector organizations, focusing on enhancing community engagement through modular platforms such as CMS, forms, events, and citizen portals. The company positions itself as a trusted partner in government technology, supported by client testimonials, industry awards, and active participation in public sector associations. Their business model targets local governments and public sector entities primarily in North America and other English-speaking countries. Technically, the website employs modern analytics, marketing, and accessibility tools, demonstrating a mature digital infrastructure with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though explicit security policies and incident response contacts are not publicly disclosed. The absence of WHOIS data for the domain is a notable transparency gap, slightly reducing trustworthiness. Overall, Govstack presents a professional, credible, and well-structured online presence suitable for its target audience.
Four Agency Worldwide Limitedjoipolloi.com
Technology · United Kingdom
82Low
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Four Agency Worldwide Limited is a UK-based creative technology agency that acquired Joi Polloi in 2022, integrating their team into its award-winning Creative Technology Unit. The company specializes in building interactive content, immersive experiences, and digital platforms for clients primarily in the cultural and media sectors. Their portfolio includes work for notable clients such as the BBC, Channel 4, and the Natural History Museum, positioning them as a reputable player in the creative technology industry. The website reflects a professional and consistent brand image with comprehensive service offerings and client case studies. Technically, the website is built on Drupal 10 and leverages modern analytics and marketing tools including HubSpot, Microsoft Clarity, and Google Tag Manager. It is mobile-optimized, accessible, and includes a cookie consent mechanism aligned with GDPR requirements. The site demonstrates good SEO practices and performance, although explicit hosting provider details are not disclosed. From a security perspective, the site enforces HTTPS and employs cookie consent banners, but lacks visible security headers and explicit incident response or vulnerability disclosure information. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is unavailable or privacy protected, which is common for businesses of this type and size, and does not detract from the site's legitimacy given the professional content and clear contact information. Overall, the website presents a secure, compliant, and credible digital presence for Four Agency Worldwide Limited, with room for improvement in security transparency and incident response readiness.
- EURAXESS Croatia
euraxess.hr
Government · Croatia
79Low
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
EURAXESS Croatia is a national portal affiliated with the European Commission, providing comprehensive information and personalized support services to researchers and their families to facilitate mobility and career development within Croatia and Europe. The platform offers job listings, funding opportunities, and practical guidance on visas, healthcare, accommodation, and other essential topics. The website targets researchers, entrepreneurs, research organizations, and businesses, positioning itself as a key facilitator in the European research ecosystem. Technically, the website is built on Drupal 10, leveraging modern web technologies and adhering to good practices in mobile optimization, accessibility, and SEO. Hosting appears to be managed by CARNET, a Croatian academic and research network, which aligns with the domain registration data. The site performs moderately well with a clean, professional design and clear navigation. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism, reflecting compliance with GDPR and privacy standards. However, there is room for improvement in security headers and publishing explicit security policies or incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. Overall, EURAXESS Croatia presents a trustworthy, professional, and well-maintained online presence that effectively serves its target audience. Strategic recommendations include enhancing security headers, publishing a security policy, and expanding contact information to improve transparency and user trust.
RC Printerrcprinter.com
E-commerce · Canada
77Low
NIS2 17 · GDPR 85
NIS2 17 · GDPR 85
RC Printer is a small Canadian e-commerce business specializing in kits for 3D printed RC vehicles, targeting hobbyists and enthusiasts interested in building their own remote-controlled creations. The website is built on the Shopify platform, leveraging modern web technologies and third-party apps such as Judge.me for customer reviews and Zoorix for cross-selling. The site demonstrates good digital maturity with fast performance, mobile optimization, and clear navigation. Privacy and cookie policies are present and GDPR compliant, with a consent mechanism implemented. Security posture is strong with HTTPS enforced and standard security headers, though DNSSEC is not enabled and no explicit security or incident response policies are published. Overall, the business appears legitimate and trustworthy with consistent domain registration data and transparent contact information.
Prusa Research a.s.prusa-research.com
Manufacturing · Czech Republic
78Low
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
Prusa Research a.s. operates a comprehensive e-commerce platform specializing in Original Prusa 3D printers, filaments, resins, and accessories. Founded by Josef Prusa, a key figure in the RepRap project, the company targets hobbyists, professionals, educators, and businesses with a strong emphasis on quality, community, and education. The website demonstrates a mature digital presence with modern technologies such as Next.js, React, and Cloudflare, ensuring fast performance and mobile optimization. Security measures include HTTPS, reCAPTCHA Enterprise, and cookie consent management, although explicit security policies and incident response details are not publicly available. The absence of WHOIS registration data slightly impacts trust but is mitigated by strong branding and external trust signals.
- Commerce
commerce.com
Technology
76Low
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Commerce is a technology company focused on powering e-commerce growth through flexible and connected tools such as BigCommerce, Feedonomics, and Makeswift. The website presents a professional and modern digital presence, leveraging contemporary web frameworks like Next.js and React, and hosting assets on Google Cloud Storage. The site is well-optimized for mobile and SEO, providing a good user experience for its target audience of businesses seeking e-commerce solutions. However, the absence of WHOIS registration data raises concerns about domain legitimacy and ownership transparency. Security posture is generally good with HTTPS enabled, but lacks explicit security headers and formal security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is functional and professional but would benefit from enhanced transparency and security documentation.
- AAdrecord
adrecord.com
E-commerce · Sweden
85Low
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
Adrecord is a Swedish affiliate marketing platform established since 2010, recently unified with the Adtraction group to enhance service and technology. The company focuses on performance-based digital marketing through affiliates, influencers, and ambassadors, targeting e-merchants primarily in the Nordic region. Their platform offers measurable results, transparency, and personal support, positioning them as a reliable player in the e-commerce marketing sector. Technically, the website uses modern frameworks like Bootstrap and Google Tag Manager, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though lacks explicit security headers and incident response information. The absence of WHOIS data for the domain reduces trust slightly, but the strong branding and partnership with Adtraction support legitimacy. Overall, the site is professional, user-friendly, and compliant with GDPR requirements.
IPSENipsen.com
Healthcare · France
76Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Ipsen is a global biopharmaceutical company specializing in innovation and specialty care to improve patient outcomes worldwide. The company maintains a strong market position in healthcare with a focus on pharmaceutical research, development, and commercialization. Their website reflects a professional and enterprise-grade digital presence, supporting multiple languages and providing comprehensive information for investors, patients, and healthcare professionals. The technical infrastructure is built on WordPress with modern frameworks and performance optimizations, ensuring fast and accessible user experience across devices. Security posture is robust with HTTPS, security headers, and consent mechanisms, though there is room for improvement in publishing explicit security policies and incident response details. The absence of WHOIS data is a notable gap but does not detract significantly from the overall credibility given the professional branding and content quality. Strategic recommendations include enhancing transparency around security policies and incident response, and adding vulnerability disclosure mechanisms to strengthen trust and compliance.
Adafruit Industriesadafruit.com
Technology · United States
79Low
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Adafruit Industries operates a professional e-commerce website specializing in unique and fun DIY electronics and kits. The company targets hobbyists, educators, and makers with a broad range of products including Arduino boards, sensors, LEDs, Raspberry Pi accessories, and educational kits. The website is well-branded and positioned as a niche leader in the maker community with a strong focus on educational content and community engagement. Technically, the site uses modern web technologies such as Bootstrap, jQuery, and Zencart for e-commerce functionality, providing a responsive and accessible user experience. Security posture is solid with HTTPS enabled and no obvious vulnerabilities detected, though security headers could be improved. Privacy compliance is limited due to the absence of explicit privacy and cookie policies in the provided content. Overall, the site is trustworthy and professional, but WHOIS data is unavailable, which slightly reduces trustworthiness from a domain registration perspective.
- SStitch Fix
stitchfix.com
Retail · United States
81Low
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Stitch Fix operates as a leading personal styling and clothing subscription service targeting men, women, and kids primarily in the United States. The company offers curated clothing boxes delivered to customers' doors with free shipping and returns, emphasizing convenience and personalized style. The website reflects a mature digital presence with rich multimedia content, clear calls to action, and a strong brand identity. Technically, the site leverages modern frameworks such as Next.js and React, integrates multiple marketing and analytics tools, and employs robust security measures including HTTPS and security headers. Privacy compliance is well addressed with comprehensive policies and cookie consent mechanisms. However, the absence of WHOIS registration data and explicit security or incident response policies slightly detract from overall trust. Overall, the site demonstrates a high level of professionalism and security readiness suitable for a large retail business.
- ZOLL Medical Corporation
zoll.com
Healthcare · United States
80Low
NIS2 47 · GDPR 68
NIS2 47 · GDPR 68
ZOLL Medical Corporation is a well-established healthcare technology company specializing in advanced medical devices and software solutions aimed at saving lives across various care settings including emergency, critical, and non-acute care. The company operates globally with a strong market presence and a comprehensive portfolio of products and services tailored to healthcare professionals, EMS, hospitals, and military sectors. Their website reflects a professional and consistent brand image with clear navigation and relevant content targeting their audience effectively. Technically, the website employs modern technologies such as Google Tag Manager, Bootstrap, and Azure DNS hosting, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforced and domain transfer protections in place, though there is room for improvement in security headers and incident response transparency. Privacy compliance is well addressed with accessible privacy and cookie policies and consent mechanisms. Overall, the domain registration data supports the legitimacy and trustworthiness of the business, aligning with its long operational history.
Simplifaisimplifai.ai
Technology
80Low
NIS2 27 · GDPR 95
NIS2 27 · GDPR 95
Simplifai is a technology company specializing in agentic AI solutions tailored for the insurance industry. Their platform automates claims processing and customer service, leveraging smart and secure AI agents to improve operational efficiency. Positioned as a niche AI provider, Simplifai targets insurance companies seeking digital transformation through automation. The website reflects a professional brand with consistent messaging and a clear focus on B2B SaaS offerings. Technically, the website is built on modern web technologies including Webflow CMS, HubSpot marketing and analytics tools, Google Tag Manager, and Cookiebot for consent management. The site is well-optimized for performance and mobile responsiveness, with good SEO and accessibility basics in place. The use of multiple analytics and tracking services indicates a mature digital marketing infrastructure. From a security perspective, the site enforces HTTPS with strong SSL configuration and includes standard security headers. Cookie consent is implemented with granular user controls, supporting GDPR compliance. However, there is no publicly available dedicated security policy or incident response information, which could be improved to enhance trust and transparency. Overall, the domain WHOIS data is privacy protected, which is common for technology companies. The website content and technical setup indicate a legitimate and professional business. The risk profile is low, with no signs of malicious activity or content safety concerns. Strategic recommendations include publishing a security policy, providing incident response contacts, and enhancing accessibility features to further strengthen the security posture and user trust.
蔡司zeiss.com.tw
Technology · Taiwan
76Low
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
ZEISS Taiwan operates as a regional branch of the global ZEISS Group, a leading technology company specializing in optics and optoelectronics. The website reflects a professional corporate presence targeting both general and professional audiences in Taiwan, offering services in vision care, medical technology, and semiconductor manufacturing technology. The site is well-branded and consistent with the global ZEISS identity. Technically, the website is built on Adobe Experience Manager, uses modern JavaScript libraries, and implements GDPR-compliant cookie consent via OneTrust. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security policies and incident response contacts are not published. Overall, the website is trustworthy and professionally maintained, with room for improvement in privacy and security transparency.
ZEISSzeiss.ch
Technology · Switzerland
77Low
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
ZEISS Switzerland operates as a regional corporate website for the global ZEISS Group, a leading technology company specializing in optics and optoelectronics. The website serves as a language selection gateway directing users to localized content in German and French. The company is positioned as a major player in the technology sector with a focus on precision optics and related services. The digital infrastructure is built on Adobe Experience Manager, leveraging modern web technologies and integrated with Google Tag Manager and OneTrust for analytics and privacy compliance. Security posture is strong with HTTPS enforcement and cookie consent mechanisms, though explicit security policies and incident response information are not publicly visible on this page. Overall, the website reflects a professional and trustworthy corporate presence with good compliance to privacy regulations.
ZEISSzeiss.se
Technology · Sweden
76Low
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
ZEISS is a globally recognized leader in optics and optoelectronics, with a strong presence in Sweden as evidenced by this localized corporate website. The site provides information about ZEISS's vision care and medical technology sectors, targeting both general and professional audiences. The website is built on a modern technical infrastructure, leveraging Adobe Experience Manager CMS, Google Tag Manager for analytics, and OneTrust for cookie consent management. The design is professional, mobile-optimized, and accessible, reflecting a mature digital presence. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security headers and published security policies could enhance trust further. The absence of WHOIS data for the subdomain is consistent with it being a subdomain rather than a separately registered domain, and does not detract from the legitimacy of the site. Overall, the site demonstrates a high level of professionalism and compliance with privacy regulations, making it a trustworthy digital asset for ZEISS in Sweden.
ZEISSzeiss.sk
Technology · Slovakia
78Low
NIS2 2 · GDPR 100
NIS2 2 · GDPR 100
ZEISS Slovenská republika is a regional website representing ZEISS, an international leader in optics and optoelectronics technology. The site targets both general and professional audiences interested in vision care and medical technology solutions. The business model focuses on manufacturing and providing advanced optical and medical technology products and services. The website reflects a mature digital presence with a modern CMS (Adobe Experience Manager), good SEO, and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and headers could be improved. Overall, the site is professional, trustworthy, and aligned with the corporate brand.
ZEISSzeiss.it
Technology · Italy
76Low
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
ZEISS Italia is a regional corporate website for ZEISS, a global leader in optics and optoelectronics. The site targets both general and professional audiences in Italy, showcasing ZEISS's key sectors including Vision Care, Medical Technology, and Semiconductor Manufacturing Technology. The business model is primarily B2B with some B2C elements, reflecting ZEISS's role as a technology and manufacturing solutions provider. The website content is professionally presented with consistent branding and localized international presence.
ZEISSzeiss.hu
Technology · Hungary
79Low
NIS2 2 · GDPR 100
NIS2 2 · GDPR 100
ZEISS Hungary is a regional branch of the internationally recognized Carl Zeiss AG, a leader in optical and optoelectronic technologies. The website serves as a corporate portal providing information about ZEISS's presence and services in Hungary, targeting both professional and general audiences interested in vision care, medical technology, and industrial solutions. The site is well-structured with multilingual support and uses modern web technologies including Adobe Experience Manager and Google Tag Manager for analytics and marketing. Technically, the website demonstrates a mature digital infrastructure with responsive design, accessibility considerations, and performance optimizations. The use of structured data and SEO best practices enhances discoverability. Security posture is strong with HTTPS enforced and standard security headers likely in place, although explicit security policies and incident response information are not published on the homepage. Privacy compliance is supported by a comprehensive cookie consent mechanism via OneTrust, indicating adherence to GDPR requirements. However, explicit privacy policies and terms of service are not directly found on the homepage, suggesting they may reside on other pages. Contact information is available through a dedicated contact page but lacks direct emails or phone numbers on the main page. Overall, the website reflects a professional, trustworthy, and secure corporate presence with room for improvement in publishing explicit security and privacy documentation to enhance transparency and user trust.
ZEISSzeiss.fi
Technology · Finland
77Low
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
ZEISS Finland operates as a regional branch of the internationally recognized Carl Zeiss AG, specializing in optics and optoelectronics technology. The website serves as a corporate portal providing information about ZEISS's vision care and medical technology sectors, targeting both business and general audiences in Finland. The site is built on Adobe Experience Manager, indicating a mature digital infrastructure with modern content management capabilities. The presence of Google Tag Manager and OneTrust cookie consent reflects a moderate level of digital marketing and privacy compliance maturity. Security posture is strong with HTTPS and security headers implemented, though explicit security policies and incident response information are not publicly disclosed. Overall, the site is professional, trustworthy, and aligned with corporate branding standards.
ZEISSzeiss.cz
Technology · Czech Republic
79Low
NIS2 2 · GDPR 100
NIS2 2 · GDPR 100
ZEISS Česká republika is the Czech branch of ZEISS, a globally recognized technology company specializing in optics and optoelectronics. The website reflects a professional corporate presence with a focus on vision care, medical technology, and industrial applications. The company holds a leading market position in its industry segment and targets both general consumers and professional clients. The digital infrastructure is built on Adobe Experience Manager, leveraging modern web technologies and ensuring good mobile optimization and accessibility. Security posture is strong with HTTPS enforcement and security headers, although explicit security policies and incident response contacts are not publicly available. Privacy compliance is well addressed with GDPR-aligned cookie consent and privacy policies. Overall, the website demonstrates a mature digital presence consistent with a large enterprise brand.
ZEISSzeiss.at
Technology · Austria
79Low
NIS2 2 · GDPR 100
NIS2 2 · GDPR 100
ZEISS is a globally recognized technology company specializing in optics and optoelectronics, with a strong presence in Austria as reflected by the localized website. The site demonstrates a professional digital presence built on Adobe Experience Manager, incorporating modern web technologies and a responsive design. The company targets both general and professional audiences in the optics and medical technology sectors. While the website is well-structured and content-rich, WHOIS data is unavailable, limiting domain registration transparency. Cookie consent is implemented, indicating some privacy compliance efforts. Security posture is moderate with HTTPS usage and cookie consent but lacks visible security headers and incident response information.
- Magna International Inc.
magna.com
Transportation · Canada
83Low
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Magna International Inc. is a leading global mobility technology company with over 65 years of expertise in automotive manufacturing and innovation. The company offers a broad portfolio of products and complete vehicle engineering services, positioning itself as a key player in the transportation sector. Their website reflects a mature digital presence with comprehensive investor relations, ESG initiatives, and career opportunities, targeting automotive industry professionals, investors, and potential employees. Technically, the website is built on the Sitefinity CMS platform and employs modern web technologies including jQuery, Google Tag Manager, and CookiePro for consent management. The site is mobile-optimized, accessible, and SEO-friendly, delivering a professional user experience with multimedia content and clear navigation. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks explicit security policy disclosures and incident response contacts. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is unavailable, which is unusual for a large public company, but the website's content and external references strongly support its legitimacy. Overall, Magna's website demonstrates a strong business and technical foundation with good security hygiene, though improvements in transparency around security policies and incident response are recommended for enhanced trust and compliance.
Thieme Groupthieme.com
Healthcare · United States
82Low
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
Thieme Group is a well-established international medical and scientific publisher committed to improving healthcare through high-quality information and educational resources. Their website reflects a professional and comprehensive digital presence targeting physicians, researchers, and medical educators. The company operates a publishing business model with a strong focus on healthcare and education sectors. Technically, the website uses modern CMS technology (Scrivito) and includes cookie consent mechanisms, indicating a mature digital infrastructure. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers could be improved. The absence of WHOIS data is a minor concern but does not detract significantly from the overall legitimacy given the professional content and branding. Strategic recommendations include enhancing security headers, publishing a security.txt file, and improving transparency around domain registration.
Thieme Gruppethieme.de
Healthcare · Germany
82Low
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
Thieme Gruppe is a well-established German healthcare and medical publishing company focused on providing high-quality medical information and digital health services. The website demonstrates a strong commitment to accessibility, data protection, and compliance with international standards such as ISO 27001 and GDPR. The technical infrastructure leverages modern CMS technology (Scrivito) and includes cookie consent mechanisms, indicating a mature digital presence. Security posture is robust with HTTPS, security headers, and no visible vulnerabilities. However, the absence of WHOIS registration data introduces a minor trust concern. Overall, the site is professional, secure, and compliant, serving a broad audience of healthcare professionals and related stakeholders.
- UnitedHealth Group
unitedhealthgroup.com
Healthcare · United States
84Low
NIS2 2 · GDPR 100
NIS2 2 · GDPR 100
UnitedHealth Group is a leading enterprise in the healthcare sector, focused on helping people live healthier lives and improving the health system globally. The company offers health insurance and healthcare services, targeting a broad general audience. Their market position is strong as a large enterprise with consistent branding and professional digital presence. Technically, the website is built on Adobe Experience Manager, leveraging Adobe Launch for tag management, OneTrust for consent management, and Qualtrics for user feedback, indicating a mature digital infrastructure. The site is well-optimized for mobile and accessibility, with good SEO practices. Security posture is strong with HTTPS, security headers, and privacy compliance, though explicit security policy and incident response contacts are not published. WHOIS data is unavailable, which slightly impacts transparency but the website's trust signals and corporate presence mitigate concerns. Overall, the site is professional, secure, and compliant with privacy regulations.
- Vestas
vestas.com
Energy · Denmark
84Low
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Vestas is a globally recognized leader in the renewable energy sector, specializing in the design, manufacture, installation, and servicing of wind turbines worldwide. The company targets businesses and governments seeking sustainable energy solutions, positioning itself as a key player in the energy industry with a comprehensive portfolio of wind energy services. The website reflects this stature with professional design, clear branding, and detailed service descriptions, catering to an enterprise-level audience. Technically, the website leverages a modern technology stack including Adobe Experience Manager as its CMS, Adobe Experience Cloud for marketing, Google Tag Manager, and multiple analytics platforms such as Google Analytics, Piwik PRO, and Hotjar. Hosting and security are supported by Cloudflare, ensuring fast performance and robust SSL configurations. The site is mobile-optimized and accessible, with a strong focus on privacy compliance demonstrated by a comprehensive cookie consent mechanism and GDPR-aligned policies. From a security perspective, the site enforces HTTPS and employs reputable third-party services for analytics and performance monitoring. However, explicit security headers are not clearly visible in the HTML content, and no public security or incident response policies are found, which could be areas for improvement. The absence of WHOIS data is noted but likely due to privacy protection, common for large enterprises. Overall, the website presents a low-risk profile with strong business credibility and technical maturity. Strategic recommendations include enhancing visible security policies, publishing vulnerability disclosure information, and providing clearer contact channels for security incidents to further strengthen trust and compliance.
- SSiemens Energy
siemens-energy.com
Energy
85Low
NIS2 10 · GDPR 83
NIS2 10 · GDPR 83
Siemens Energy is a global leader in energy technology, focusing on supporting companies and countries to reduce emissions and transition to sustainable energy systems. The company offers a broad portfolio of products and services including gas turbines, power plants, energy storage, electrolyzers, and digital grid solutions. The website reflects a mature enterprise with a strong market position and comprehensive service offerings tailored to the energy sector. Technically, the site is built on Adobe Experience Manager, leveraging modern web technologies and Adobe marketing and analytics tools, indicating a high level of digital maturity. Security posture is solid with HTTPS enforced and consent management implemented, though some security headers and incident response information could be improved. Overall, the site is professional, well-branded, and trustworthy, though the lack of WHOIS data limits domain registration trust analysis. Strategic recommendations include enhancing security headers, publishing incident response contacts, and adding vulnerability disclosure information.
- ZZF Friedrichshafen AG
zf.com
Transportation · Germany
79Low
NIS2 20 · GDPR 50
NIS2 20 · GDPR 50
ZF Friedrichshafen AG is a global technology leader specializing in advanced mobility products and systems for passenger cars, commercial vehicles, and industrial technology. The company serves vehicle manufacturers, mobility providers, and startups, focusing on electrification and sustainable mobility solutions. Their extensive product portfolio and global presence position them strongly in the transportation and technology sectors. The website reflects a mature digital presence with comprehensive corporate, sustainability, and investor information, supporting their market leadership. Technically, the website employs modern web technologies including JavaScript frameworks, Piwik PRO analytics, and responsive design optimized for mobile devices. The site demonstrates good SEO and accessibility practices, with structured data enhancing search engine understanding. Performance is moderate, with opportunities for further optimization. From a security perspective, the site enforces HTTPS and includes a Content Security Policy header, though additional security headers could enhance protection. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is well addressed with clear privacy and cookie policies, including GDPR adherence. Contact and compliance information is readily available, supporting transparency. Overall, the website presents a low-risk profile with strong business credibility and professional digital infrastructure. The absence of WHOIS data reduces transparency but does not detract from the site's legitimacy given the extensive corporate content and recent press activity.
Ørstedorsted.com
Energy · Denmark
88Low
NIS2 25 · GDPR 95
NIS2 25 · GDPR 95
Ørsted is a leading global renewable energy company focused on driving the transition to green energy through wind and solar solutions. The company operates a professional, well-structured website that clearly communicates its mission, sustainability priorities, and corporate governance. The technical infrastructure leverages modern web technologies including AngularJS, Sitecore CMS, and advanced analytics tools such as Piwik PRO and Google Tag Manager, indicating a mature digital presence. The website is mobile-optimized, accessible, and SEO-friendly, supporting a positive user experience. From a security perspective, the site enforces HTTPS and employs domain transfer protections, but lacks DNSSEC and explicit security policies or incident response contacts. The cookie consent mechanism is robust and GDPR-compliant, with detailed categorization and third-party disclosures. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of a vulnerability disclosure policy and security.txt file suggests room for improvement in transparency and security culture. Overall, Ørsted's website reflects a high level of professionalism, trustworthiness, and compliance with privacy regulations. The domain registration data aligns well with the company's history and business profile, reinforcing legitimacy. Strategic recommendations include enabling DNSSEC, publishing security policies, and enhancing security headers to further strengthen the security posture.
Enel Green Powerenelgreenpower.com
Energy · Italy
80Low
NIS2 2 · GDPR 73
NIS2 2 · GDPR 73
Enel Green Power is a leading global renewable energy company specializing in the generation and sale of clean energy from various renewable sources including wind, solar, hydro, geothermal, and storage. The company operates worldwide with a significant installed capacity of 67.2 GW, positioning itself as the largest renewable energy company globally. Their business model includes direct sales, Power Purchase Agreements (PPA), and a strong commitment to sustainability and innovation. The website reflects a mature digital presence with comprehensive content, educational resources, and a clear focus on the energy transition. Technically, the website is built on Adobe Experience Manager, leveraging modern web technologies and analytics tools such as Adobe DTM, Facebook Pixel, LinkedIn Insight Tag, and Dynatrace for performance monitoring. The site is well-optimized for mobile devices, accessible, and SEO-friendly. Security posture is strong with HTTPS enforced and use of reCAPTCHA, although explicit security headers were not fully confirmed in the HTML content. From a security and compliance perspective, the site includes privacy and cookie policies with consent mechanisms and appears GDPR compliant. However, no direct contact information, security policy, or incident response contacts were found, which could be improved for transparency. The WHOIS data is missing or unavailable, which is unusual for a large enterprise and reduces domain registration transparency, though the overall site professionalism and content quality mitigate concerns. Overall, Enel Green Power's website is a high-quality, professional platform that effectively communicates its business and sustainability mission. Strategic recommendations include enhancing visible security policies, adding direct contact information for security and compliance, and clarifying domain registration details to improve trust and transparency.
hansgrohehansgrohe.in
Manufacturing · India
79Low
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
Hansgrohe is a premium manufacturer and retailer of bathroom and kitchen fixtures, specializing in taps, showers, and kitchen sinks. The website www.hansgrohe.in targets quality-conscious consumers and professionals in India, offering modern and durable products. The brand is well-established with a consistent and professional online presence, leveraging modern web technologies and analytics tools to optimize user experience and marketing efforts. The technical infrastructure is robust, with use of SAP Hybris platform, Google Tag Manager, Piwik PRO, Facebook Pixel, and New Relic monitoring, indicating a mature digital setup. Security posture is strong with HTTPS enforcement, consent management for cookies, and no visible vulnerabilities or exposed sensitive data. However, the absence of explicit privacy policy and terms of service pages, as well as lack of visible contact information, slightly reduce privacy compliance and business transparency scores. Overall, the website is professional, secure, and trustworthy, with room for improvement in compliance documentation and contact accessibility.
hansgrohehansgrohe.com.au
Retail · Australia
77Low
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
Hansgrohe Australia operates a premium retail website specializing in bathroom and kitchen fixtures including taps, mixers, showers, and kitchen sinks. The website targets consumers and businesses in Australia seeking high-quality, modern design products. The business model focuses on manufacturing and retailing premium fixtures, positioning itself as a trusted brand in the home improvement sector. The website demonstrates a mature digital presence with comprehensive privacy and cookie policies, consent management, and integration of multiple analytics and marketing tools. Technically, the site is built on the SAP Commerce Cloud (Hybris) platform, leveraging modern JavaScript libraries and tracking technologies, with good mobile optimization and SEO practices. Security posture is strong with HTTPS enforcement, consent-based cookie management, and no visible vulnerabilities or exposed sensitive data. However, WHOIS data is privacy protected, limiting domain age and registrant insights. Overall, the site reflects a professional, trustworthy business with a solid technical foundation and compliance awareness.
hansgrohehansgrohe-asia.com
Retail · Hong Kong
79Low
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
Hansgrohe Asia operates a professional and content-rich website offering premium bathroom and kitchen fixtures targeted at consumers and businesses in Asia. The company positions itself as a premium brand with a broad product range including showers, faucets, and kitchen sinks. The website demonstrates a mature digital infrastructure with modern tracking and analytics tools such as Google Tag Manager, Facebook Pixel, and Piwik PRO, alongside performance monitoring via New Relic. The site is well-optimized for mobile and SEO, with clear navigation and professional design. From a security perspective, the website enforces HTTPS and employs cookie consent mechanisms compliant with GDPR, reflecting a strong privacy posture. However, the absence of WHOIS registration data for the domain raises concerns about domain legitimacy and trustworthiness, which slightly diminishes the overall security confidence. No critical vulnerabilities or security issues were detected in the website content or technical setup. Overall, the website is reliable and professional, with good privacy and security practices, but the missing WHOIS data warrants further investigation to confirm domain ownership and registration legitimacy. Strategic recommendations include enhancing security headers, publishing explicit security policies, and improving accessibility compliance to further strengthen trust and compliance.
hansgrohehansgrohe-usa.com
Retail · United States
81Low
NIS2 17 · GDPR 95
NIS2 17 · GDPR 95
Hansgrohe USA operates as a premium manufacturer and retailer of bathroom and kitchen fixtures, specializing in faucets, showers, and related products. The company positions itself as a quality-conscious brand offering modern design and durable products to consumers and professionals in the United States. The website reflects a mature digital presence with comprehensive content, clear navigation, and strong branding consistency. Technically, the site leverages modern analytics and marketing technologies such as Google Tag Manager, Facebook Pixel, Piwik PRO, and Visual Website Optimizer, integrated with a robust cookie consent mechanism ensuring GDPR compliance. Security posture is strong with HTTPS enforced, security headers present, and no visible vulnerabilities or exposed sensitive data. However, the absence of WHOIS data limits domain registration trust analysis, though the website's professionalism and technical maturity mitigate concerns. Overall, Hansgrohe USA demonstrates a solid business and digital footprint with room for improvement in publishing explicit security policies and incident response information.
hansgrohehansgrohe.at
Manufacturing · Austria
79Low
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
Hansgrohe Austria GmbH operates a professional and well-structured website offering premium bathroom and kitchen fixtures including faucets, showers, and sinks. The company targets both end consumers and professional partners within Austria, positioning itself as a premium brand in the manufacturing and retail sector. The website demonstrates a mature digital presence with integrated partner tools and comprehensive product offerings. Technically, the site leverages modern analytics, consent management, and performance monitoring tools, indicating a high level of digital maturity. Security posture is strong with HTTPS enforcement, cookie consent mechanisms, and no visible vulnerabilities. However, explicit security policies and incident response information are not publicly disclosed, representing an area for improvement. Overall, the website reflects a trustworthy and professional brand with good compliance to privacy regulations.
Novalnet AGnovalnet.de
Finance · Germany
82Low
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
Novalnet AG is a German-based payment service provider offering comprehensive payment solutions tailored for various business models. The company provides a broad range of payment options through a single integration, targeting businesses that require efficient and secure payment processing. With ISO 27001 certification and GDPR compliance, Novalnet positions itself as a trustworthy and secure partner in the finance and technology sectors. The website reflects a professional and consistent brand image, supporting its market position as a reliable PSP in Europe. Technically, the website is built on WordPress and incorporates modern JavaScript libraries and marketing tools such as LinkedIn Insight and Writesonic's Botsonic widget. The site is mobile-optimized and demonstrates good SEO and accessibility practices, although some accessibility enhancements could be beneficial. Security measures include HTTPS enforcement, security headers, and cookie consent mechanisms, contributing to a strong security posture. No critical vulnerabilities or blocking mechanisms were detected, and the domain registration data aligns well with the company's claims, supporting legitimacy. However, the absence of a public vulnerability disclosure or security.txt file and explicit incident response contacts suggests areas for improvement in transparency and incident readiness. Overall, Novalnet AG's digital presence is robust, secure, and professional, with room for enhancements in security communication and accessibility.
EnergySageenergysage.com
Energy · United States
84Low
NIS2 25 · GDPR 88
NIS2 25 · GDPR 88
EnergySage operates as a leading online marketplace specializing in clean home energy solutions, primarily targeting homeowners in the United States. Founded in 2011, the company offers a platform for comparing solar energy systems, backup power, EV charging, and heating/cooling solutions. The website demonstrates a professional and consistent brand presence with excellent content quality and user experience. Technically, the site leverages modern JavaScript frameworks and multiple analytics and marketing tools, indicating a mature digital infrastructure. Security posture is generally good with HTTPS enforced and no exposed sensitive data, though the absence of security headers and vulnerability disclosure mechanisms suggests room for improvement. The lack of WHOIS data slightly impacts domain trustworthiness, but overall, the business credibility remains high based on available contact information and structured data.
- MMyCatFinancial
mycatfinancial.com
Finance · United States
83Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
MyCatFinancial is a financial services portal affiliated with Caterpillar Inc., providing customers with access to their accounts, contracts, payment information, and rewards management. The website serves a niche market of Caterpillar customers, offering a secure login and account management platform. The business is positioned as a medium-sized entity founded in 2017, with consistent branding and a clear focus on financial services related to Caterpillar products. Technically, the site employs modern JavaScript frameworks, Salesforce components, and Google Tag Manager for analytics, with a moderate performance profile and good mobile optimization. Security posture is solid with HTTPS enforcement and domain status locks, though DNSSEC is not enabled and no explicit security policy or vulnerability disclosure is published. Privacy compliance is well addressed with cookie consent mechanisms and accessible privacy and cookie policies. Overall, the site is professional, trustworthy, and serves its target audience effectively.
m|eventsconference2web.com
Technology
77Low
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
m|events is a specialized provider of advanced digital meeting services worldwide, focusing on onsite and online medical conference technology. The company offers unique tools and features designed to elevate event experiences, targeting event organizers and medical conference planners. Their business model is B2B, leveraging digital platforms to deliver comprehensive event solutions. The website is professionally designed, consistent in branding, and demonstrates good content quality and user experience. Technically, the site is built on the HubSpot CMS platform, utilizing modern web technologies and marketing automation tools, with good mobile optimization and SEO practices. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response contacts are not publicly detailed. Privacy compliance is well addressed with cookie consent mechanisms and GDPR-aligned policies. However, WHOIS data is unavailable, which raises some concerns about domain registration transparency. Overall, the website is trustworthy and professional, but domain registration details should be verified for full legitimacy assurance.
- European Lung Foundation
europeanlung.org
Healthcare · United Kingdom
80Low
NIS2 2 · GDPR 95
NIS2 2 · GDPR 95
The European Lung Foundation (ELF) is a well-established non-profit organization founded in 2011, dedicated to improving lung health by connecting patients, the public, and healthcare professionals. It operates internationally with a strong presence in Europe and is affiliated with the European Respiratory Society. The website serves as an information hub, providing educational resources, patient engagement opportunities, campaigns, and fundraising avenues. The target audience includes patients with lung conditions, healthcare providers, and the general public interested in lung health. Technically, the website is built on WordPress, leveraging modern tools such as Gravity Forms for data collection, Google Tag Manager, Microsoft Clarity, and Facebook Pixel for analytics and marketing. It is hosted with Cloudflare DNS and Mesh Digital Limited as the registrar. The site demonstrates good performance, mobile optimization, accessibility, and SEO practices. From a security perspective, the site enforces HTTPS, uses reCAPTCHA v3 on forms, and provides a comprehensive cookie consent mechanism. However, it lacks DNSSEC and some advanced security headers. There is no publicly available security policy or incident response contact information, which could be improved to enhance trust and compliance. Overall, the website is professional, trustworthy, and compliant with GDPR and privacy regulations. It effectively balances user experience with privacy and security considerations, making it a reliable resource for its audience.