Security reports directory
139,945 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,194001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
134,951–135,000 of 139,945
websolute spawebsolute.com
Technology · Italy
60Medium
NIS2 25 · GDPR 40
NIS2 25 · GDPR 40
Websolute spa is a medium-sized Italian digital company specializing in comprehensive digital services including strategy, branding, demand generation, e-commerce, technology, and artificial intelligence. The company positions itself as a digital partner for ambitious brands aiming for global market presence. Technically, the website is built on modern frameworks such as Next.js and React, hosted on Cloudflare, and uses Pimcore as CMS, ensuring good performance and mobile optimization. Security posture is solid with valid SSL and Cloudflare protection, though improvements like HSTS and additional security headers are recommended. Privacy and cookie policies are present and GDPR compliant, but no explicit terms of service or incident response policies were found. Overall, the website demonstrates high professionalism, rich content, and strong business credibility, supported by a portfolio of reputable clients and subsidiaries. The domain registration data aligns well with the business claims, indicating a trustworthy and legitimate entity.
- Interferenza s.r.l.
interferenza.net
Technology · Italy
44High
NIS2 25 · GDPR 58
NIS2 25 · GDPR 58
Interferenza s.r.l. is a small, established Italian web hosting provider with nearly three decades of experience offering services including shared hosting, VPS, dedicated servers, domain registration, and e-commerce hosting solutions. The company targets businesses and individuals seeking professional yet affordable hosting services. Their market position is supported by customer testimonials and partnerships with recognized technology brands such as Dell, MySQL, Apache, and Fedora. Technically, the website runs on an Apache server with PHP and uses legacy technologies like Flash for some interactive content. However, the site lacks modern performance optimizations and mobile responsiveness is basic. Security posture is weak due to the absence of a valid SSL certificate and HTTPS support, no HSTS, and missing DNS security features. Privacy compliance is partially addressed with cookie and privacy policies, but GDPR compliance indicators are minimal. Overall, the site demonstrates moderate business credibility but requires significant improvements in security and technical modernization to enhance trust and user experience.
- PPS Professionals Connect
professionalsconnect.co.za
Other · South Africa
60Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
ProfessionalsConnect.co.za presents a minimal web presence with very limited content and no visible business descriptions or contact information. The website title suggests a professional networking or connection platform, but no further details are provided to clarify the business model, services, or target audience. Technically, the site uses the Angular framework and common icon libraries but lacks performance data and SEO optimizations. Critically, the site does not have a valid SSL certificate, does not support HTTPS, and lacks essential security headers, exposing it to potential security risks. There are no privacy or cookie policies, and no contact or business information is available, which significantly reduces trust and compliance posture. Overall, the site appears incomplete or underdeveloped, with a low security and privacy maturity level.
Banca Agricola Commercialebacinvestments.sm
Finance · San Marino
56Medium
NIS2 25 · GDPR 43
NIS2 25 · GDPR 43
Banca Agricola Commerciale (BAC) is a well-established financial institution based in San Marino, providing a broad range of banking and financial services to both private individuals and businesses. The website reflects a mature and professional organization with a strong local presence and a history dating back to 1920. The business model focuses on traditional banking services complemented by digital tools such as mobile apps and online account management. BAC maintains a consistent brand image and offers comprehensive information about its products, subsidiaries, and news updates. Technically, the website is built on WordPress with modern web technologies and includes SEO and accessibility features, although performance is moderate. Security posture is a significant concern due to the absence of a valid SSL certificate and HTTPS support, which exposes users to risks and undermines trust. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the domain registration data supports the legitimacy of the business, but technical security improvements are urgently needed.
- WWeddings By Emaar
weddingsbyemaar.com
Hospitality · United Arab Emirates
57Medium
NIS2 25 · GDPR 25
NIS2 25 · GDPR 25
Weddings by Emaar is a specialized platform offering comprehensive wedding planning resources including venues, vendors, and honeymoon destinations, primarily targeting couples in the UAE. The website is professionally designed using WordPress and Elementor, with integrations such as Google Tag Manager and New Relic for analytics and monitoring. However, the absence of HTTPS and minimal security headers represent significant security risks. The site lacks privacy and cookie policies, which impacts compliance and user trust. Overall, the business appears legitimate and well-branded, but the technical security posture requires urgent improvement to protect user data and enhance trust.
Rove Hotelsrovehotels.com
Hospitality · United Arab Emirates
68Medium
NIS2 25 · GDPR 43
NIS2 25 · GDPR 43
Rove Hotels is a hospitality brand offering stylish and affordable hotel accommodations primarily in Dubai and the UAE. The website presents a comprehensive portfolio of hotels, detailed descriptions, booking capabilities, and promotional offers targeting families, travelers, and business guests. The brand is positioned as a modern, accessible hotel chain with a strong digital presence and multi-language support. Technically, the website is built on WordPress, leveraging modern JavaScript frameworks and CDN services to deliver a responsive and user-friendly experience. However, the security posture is weakened by the absence of a valid SSL certificate and lack of TLS protocol support, which poses significant risks to user data confidentiality and trust. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. Overall, the site is professional and credible but requires urgent remediation of its SSL/TLS configuration to ensure secure communications.
Armani Hotelsarmanihotels.com
Hospitality · United Arab Emirates
73Medium
NIS2 25 · GDPR 58
NIS2 25 · GDPR 58
Armani Hotels & Resorts operates as a luxury hospitality brand offering premium hotel accommodations and curated lifestyle experiences in Milan and Dubai, with plans for expansion. The website reflects a high level of professionalism, rich content, and strong brand alignment with Giorgio Armani and Emaar Hospitality Group. Technically, the site is built on WordPress with Bootstrap and integrates multiple third-party services for booking and analytics. However, the lack of a valid SSL certificate and HTTPS support is a critical security gap that undermines user trust and data protection. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site presents a strong market position but requires urgent security improvements.
—
71Medium
NIS2 25 · GDPR 43
NIS2 25 · GDPR 43
Security assessment completed with an overall score of 0/100 (unknown risk). 6 high-priority issues should be addressed promptly. Total of 18 security findings identified across all modules.
Emaar Hospitality Groupemaarhospitality.com
Hospitality · United Arab Emirates
71Medium
NIS2 25 · GDPR 43
NIS2 25 · GDPR 43
Emaar Hospitality Group operates as a leading luxury hospitality provider primarily in the UAE and surrounding regions, offering a portfolio of hotels, resorts, leisure clubs, restaurants, and event venues. The company targets affluent customers seeking premium lifestyle experiences and event hosting services. Their market position is strong within the Middle East hospitality sector, supported by multiple well-known brands and subsidiaries. Technically, the website is built on WordPress with modern SEO and performance plugins, hosted on Microsoft Azure, and uses Bootstrap for responsive design. However, the site suffers from a critical security flaw due to an invalid or missing SSL certificate, which undermines user trust and security. Security headers are well configured, but the lack of HTTPS and modern TLS protocols is a significant risk. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Business credibility is high given the professional content and consistent branding, but contact information is not directly visible on the main page. Overall, the site is professional and content-rich but requires urgent security improvements to ensure safe user interactions.
- Nida School
nidaschool.org
Education · United States
58Medium
NIS2 25 · GDPR 25
NIS2 25 · GDPR 25
Nida School is a small, non-profit educational organization focused on translation studies, particularly Bible translation. The website presents the institution's mission to build capacities in translation through research and training, targeting students and professionals in this niche. The business model is educational and non-profit, with a market position as a specialized institution in translation studies. The website content is well-structured and professionally designed, with consistent branding and relevant services highlighted, such as MA programs and symposia. Technically, the website is built on the Squarespace platform, utilizing standard web technologies including Typekit fonts and embedded social media widgets. However, the site suffers from a lack of a valid SSL certificate, resulting in no HTTPS support, which critically impacts security posture. Performance metrics are missing or indicate slow loading, and accessibility features are basic. SEO is reasonably well implemented with proper meta tags and Open Graph data. From a security perspective, the absence of HTTPS and HSTS, along with disabled modern TLS protocols, represent significant vulnerabilities. Security headers are partially present but insufficient. No privacy or cookie policies are found, and no incident response or vulnerability disclosure mechanisms are in place. The domain is mature and registered with privacy protection, which is justified for this type of organization. Social media presence is active, but no direct company contact emails or phone numbers are provided on the site. Overall, the website is functional and informative but requires urgent improvements in security configuration, privacy compliance, and contact transparency to enhance trustworthiness and protect user data. Strategic recommendations include obtaining a valid SSL certificate, enabling HTTPS and HSTS, publishing privacy and cookie policies, and providing clear contact information.
Plesk Obsidian 18.0.70alphavilletraduzioni.eu
Technology · Italy
41High
NIS2 25 · GDPR 15
NIS2 25 · GDPR 15
The website alphavilletraduzioni.eu currently serves a default Plesk Obsidian control panel interface rather than a public-facing business website. This indicates that the domain is either under development or used solely for server management purposes. The technical infrastructure is based on Plesk 18.0.70 running on an nginx server, with JavaScript libraries such as Prototype.js and RequireJS. However, the site lacks a valid SSL certificate, resulting in no HTTPS support, which significantly impacts security posture. Security headers are partially implemented but insufficient without encryption. No privacy policy, terms of service, or contact information is present, limiting compliance and business credibility. The domain registration is consistent and legitimate, but the lack of active business content reduces trustworthiness and user engagement.
- PPETRA-E Network
petra-education.eu
Education · Netherlands
55Medium
NIS2 25 · GDPR 0
NIS2 25 · GDPR 0
The PETRA-E Network website serves as an educational platform dedicated to literary translation, connecting institutions and individuals across Europe. It offers a professional framework for literary translation competences and fosters collaboration through resource sharing and events. The network is positioned as a niche educational entity with partnerships across multiple European universities and organizations. Technically, the website is built on WordPress with common web technologies such as jQuery and Bootstrap, hosted likely by Utrecht University. While the site provides good content quality and user experience, it lacks critical security implementations such as a valid SSL certificate and proper HTTPS configuration. Privacy and cookie policies are absent, which impacts compliance with GDPR standards. The site includes minimal user tracking via a lightweight analytics plugin and provides contact primarily through email and social media channels. Overall, the website is functional and professional but requires significant improvements in security and privacy compliance to enhance trust and protect users.
Related:fusp.it
Fondazione Unicampus San Pellegrinossmlitalia.it
Education · Italy
41High
NIS2 17 · GDPR 58
NIS2 17 · GDPR 58
Fondazione Unicampus San Pellegrino is an educational and research institution accredited by the Italian Ministry of University and Research (MUR), specializing in linguistic mediation, translation, and intercultural communication. The foundation operates multiple campuses in Italy and offers a range of academic programs including bachelor's degrees, master's degrees, executive masters, and certification courses. The website reflects a well-structured and professionally designed platform targeting students and professionals in the linguistic and translation fields. Technically, the site is built on WordPress with modern plugins and LMS integration, but it lacks a valid SSL certificate, which is a critical security concern. Privacy and cookie policies are present and GDPR compliant, but no explicit security or incident response policies are found. Overall, the business credibility is strong, but the security posture requires urgent improvement to protect user data and enhance trust.
Related:fusp.italphavilletraduzioni.eu
Detas SpAdetasultra.com
Manufacturing · Italy
55Medium
NIS2 25 · GDPR 43
NIS2 25 · GDPR 43
Detasultra, a division of Detas SpA, specializes in patented cable gland systems and related industrial products serving multiple sectors including manufacturing, energy, and transportation. The company maintains a mature online presence with a well-structured website offering detailed product categories and multilingual support. The technical infrastructure leverages modern web technologies such as Webflow CMS, Google Tag Manager, and Weglot for translation, but suffers from a critical lack of a valid SSL certificate, exposing the site to security risks. Privacy and cookie policies are present, indicating basic GDPR compliance, and contact information is clearly provided. However, the imminent domain expiry and absence of domain protection locks present operational risks.
Related:detas.com
Haake Technik GmbHhaake.it
Manufacturing · Italy
44High
NIS2 25 · GDPR 18
NIS2 25 · GDPR 18
Haake Technik GmbH is a family-run company specializing in the development and manufacturing of industrial safety equipment, including safety edges, bumpers, mats, switches, and locking systems. With over 30 years of experience and an international presence, the company serves industrial clients focused on workplace and machine safety. The website reflects a professional business with clear product offerings and strong customer references. Technically, the site uses modern tracking and consent tools but suffers from a critical lack of a valid SSL certificate, resulting in no HTTPS support and exposing users to security risks. Performance is slow, and security headers are missing, indicating room for improvement in technical and security infrastructure. Privacy compliance is well addressed with comprehensive policies and consent mechanisms. Overall, the business credibility is strong, but the security posture requires urgent attention to protect user data and maintain trust.
- RREO AG
reoitalia.com
Energy · Italy
38High
NIS2 25 · GDPR 25
NIS2 25 · GDPR 25
REO ITALIA S.r.l. is a medium-sized Italian company specializing in the production and supply of inductive, resistive, and electronic components, serving industrial and energy sectors globally. The company emphasizes sustainability and offers customized product development, training, repair, and technical support services. The website is built on WordPress with WooCommerce and multilingual support, providing a professional and content-rich user experience. However, the absence of a valid SSL certificate and HTTPS implementation represents a critical security vulnerability that undermines user trust and data protection. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Overall, the business presents a credible and professional digital presence but must urgently address its security posture to protect users and comply with best practices.
Related:videmi.de
Detas SpAevchargers.it
Energy · Italy
50Medium
NIS2 25 · GDPR 0
NIS2 25 · GDPR 0
Detas SpA operates the EVchargers division, providing a comprehensive range of electric vehicle charging solutions tailored for private users, businesses, and public infrastructures in Italy. Their offerings include WallBox home chargers, commercial charging stations, ultra-fast chargers, and complementary software platforms for mobile and desktop management. The company holds ISO9001 and ISO14001 certifications, indicating a commitment to quality and environmental standards, and serves notable clients such as Esselunga and Pirelli, positioning itself as a reputable player in the energy and transportation sectors. Technically, the website is built on a modern stack leveraging Webflow CMS, Cloudflare CDN, Weglot for multilingual support, and Plausible Analytics for privacy-conscious user tracking. The site demonstrates good design quality, mobile optimization, and SEO practices. However, performance metrics are unavailable, and accessibility is basic. From a security perspective, the site suffers from critical issues including the absence of a valid SSL certificate and HTTPS support, lack of TLS protocol enablement, and missing security headers like HSTS. While some security best practices are partially implemented (e.g., secure cookies), the overall security posture is weak, exposing users and the business to potential risks. Privacy compliance is adequate with visible privacy and cookie policies and GDPR adherence. Overall, the website presents a professional business front with solid content and branding but requires urgent security improvements to protect data integrity and user trust. Strategic enhancements in SSL deployment, security headers, and incident response transparency are recommended to elevate the security maturity and compliance posture.
Detas SpAattraversamentipedonali.it
Transportation · Italy
53Medium
NIS2 25 · GDPR 0
NIS2 25 · GDPR 0
Detas SpA operates Attraversamenti Pedonali Luminosi, specializing in LED-based pedestrian crossing safety systems tailored for various road types and power sources. The company targets public entities and road safety professionals, offering configurable products and technical support. The website reflects a medium-sized Italian business with a professional online presence and ISO certifications, reinforcing its market credibility. Technically, the site leverages modern web technologies including Webflow CMS, Google Fonts, Weglot for multilingual support, and Plausible Analytics for privacy-conscious tracking. However, the absence of a valid SSL certificate and incomplete HTTPS implementation significantly undermines the security posture. While privacy and cookie policies are well addressed via Iubenda, the lack of explicit incident response or security policies is noted. Overall, the site is functional and professional but requires urgent security improvements to protect user data and enhance trust.
Related:d-power.com
Detas SpA - D-Power Divisiond-power.com
Transportation · Italy
60Medium
NIS2 25 · GDPR 43
NIS2 25 · GDPR 43
D-Power, a division of Detas SpA, specializes in advanced LED lighting solutions for road safety, including fixed installations and roadwork signaling. The company holds ISO9001 and ISO14001 certifications and is recognized by the Italian Ministry of Transport for compliance with high standards. Their market position is that of a specialized manufacturer serving transportation and construction sectors primarily in Italy. Technically, the website is built on Webflow and uses modern web technologies such as Google Fonts, Weglot for multilingual support, and Plausible Analytics for privacy-focused tracking. However, the absence of a valid SSL certificate and HTTPS support significantly weakens the security posture. The site lacks cookie consent mechanisms and incident response disclosures, which are important for compliance and trust. Business contact information is clearly presented, supporting credibility. Overall, the website is professional and functional but requires urgent security improvements to protect user data and enhance trust.
Related:detas.com
Detas SpA - Divisione Dledsdleds.com
Energy · Italy
55Medium
NIS2 25 · GDPR 25
NIS2 25 · GDPR 25
Detas SpA - Divisione Dleds is an Italian company specializing in the design and manufacture of advanced LED lighting solutions for street, industrial, office, and school environments. The company holds ISO9001 and ISO14001 certifications, indicating a commitment to quality and environmental management. Their website reflects a professional presence with clear product categories, technical resources, and multilingual support via Weglot, targeting business and public sector clients in the energy and transportation sectors. Technically, the website is built on Webflow, uses Cloudflare for hosting and CDN, and integrates modern web fonts and analytics tools. However, the absence of a valid SSL certificate and lack of modern TLS protocols significantly weaken the security posture. Privacy policies are present but lack a cookie consent mechanism, and no incident response or vulnerability disclosure information is provided. Overall, the website is functional and professional but requires urgent security improvements to protect user data and enhance trust.
DENVER USA Inc.denverusamachinery.com
Manufacturing · United States
41High
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
DENVER USA Inc. operates as the U.S. subsidiary of DENVER S.p.A., specializing in manufacturing and selling advanced CNC machinery for stone and glass processing. The company positions itself as a technologically innovative provider with a strong service and support presence in the U.S., including a parts warehouse and technicians. Their product range includes CNC routers, bridge saws, polishing machines, and vertical/horizontal CNC glass machines, supported by flexible financing options. The website is built on WordPress with common plugins and libraries, presenting professional content and clear contact information. However, the site lacks critical security configurations such as a valid SSL certificate and HTTPS, which significantly impacts its security posture. No privacy or cookie policies are present, indicating compliance gaps. Social media and contact channels are well established, supporting business credibility.
Related:denver.sm
Studio Leonardo sncstudioleonardo.com
Technology · Italy
41High
NIS2 25 · GDPR 25
NIS2 25 · GDPR 25
Studio Leonardo is a small Italian web agency established in 1996, specializing in communication, marketing, web solutions, and SEO services primarily targeting small and large companies. The website is built on WordPress with a modern but somewhat dated technology stack including jQuery, Bootstrap, and various WordPress plugins. While the site has good SEO metadata, structured data, and a consistent brand presence, it lacks critical security infrastructure such as a valid SSL certificate, which severely impacts its security posture. Cookie consent is managed via Cookiebot, indicating some level of privacy compliance, but no privacy policy or terms of service pages were found. Contact information is clearly provided, including phone numbers, physical address, and contact forms.
- AABC Entertainment
abc.com
Media · United States
66Medium
NIS2 17 · GDPR 43
NIS2 17 · GDPR 43
ABC.com is the official website of ABC Entertainment, a leading US media company under The Walt Disney Company. The site offers extensive content including TV shows, news, live streams, and special events across multiple platforms such as Hulu, Disney+, FX, Freeform, and National Geographic. The website demonstrates a high level of digital maturity with a modern tech stack including React and comprehensive integration with analytics and advertising platforms. However, a critical security issue is the absence of a valid SSL certificate, which undermines secure HTTPS communication. Privacy and cookie policies are comprehensive and GDPR compliant, reflecting a strong commitment to user privacy. Overall, the site is professionally designed, user-friendly, and content-rich, serving a broad US audience with high-quality media content.
Related:hulu.com
ABC Newsgoodmorningamerica.com
Media · United States
57Medium
NIS2 17 · GDPR 43
NIS2 17 · GDPR 43
GoodMorningAmerica.com is the official website for Good Morning America, a flagship morning news and lifestyle program under ABC News, owned by The Walt Disney Company. The site offers a rich mix of news, entertainment, lifestyle content, and affiliate e-commerce deals, targeting a broad audience interested in current events, culture, wellness, and shopping. The website is professionally designed with consistent branding and a strong social media presence, reflecting its position as a major media enterprise in the United States. Technically, the site leverages modern web technologies including React, AWS CloudFront CDN, and tag management tools like Google Tag Manager and Ensighten. The site is mobile-optimized and SEO-friendly, with comprehensive metadata and structured content. However, the SSL/TLS configuration is currently invalid, with no valid certificate and no modern TLS protocols enabled, which poses a significant security risk and impacts user trust. From a security perspective, while the site does not exhibit common vulnerabilities such as Heartbleed or POODLE, the lack of a valid SSL certificate and absence of security headers like HSTS reduce its security posture. Privacy policies and terms of service are comprehensive and hosted on Disney domains, indicating good privacy compliance. Contact information is limited to a web form, with no direct emails or phone numbers publicly listed. Overall, the website is a high-quality, authoritative media platform with excellent content and business credibility. The primary risk lies in its SSL/TLS misconfiguration, which should be addressed promptly to ensure secure user connections and maintain trust. Strategic improvements in security configuration and enhanced accessibility features would further strengthen the site’s digital maturity and user confidence.
- AABCNews
abcnewsstore.com
Media
57Medium
NIS2 25 · GDPR 43
NIS2 25 · GDPR 43
ABCNEWS Store is a small-scale e-commerce website offering select ABC News programs and reports for purchase. The site targets consumers interested in news media content and operates under the ABC brand umbrella, with links to official Disney privacy and terms pages indicating corporate affiliation. The business model centers on retailing media content with direct email contact for customer inquiries. Technically, the website is hosted on Amazon S3 with CloudFront CDN, utilizing basic web technologies such as JavaScript, CSS, and Google Fonts. The site exhibits slow performance with minimal optimization for mobile and accessibility. The design is basic with limited content and navigation, lacking modern CMS or frameworks. From a security perspective, the site lacks a valid SSL certificate and does not support HTTPS, exposing users to potential risks. No security headers or advanced protections are implemented, and no cookie or privacy consent mechanisms are present. These deficiencies significantly reduce the security posture and privacy compliance of the website. Overall, the website presents moderate business credibility due to brand association but suffers from critical security shortcomings. Strategic improvements in SSL deployment, security headers, and privacy compliance are essential to enhance trust and protect users.
MECAL MACHINERY S.r.lmecal.com
Manufacturing · Italy
46High
NIS2 25 · GDPR 58
NIS2 25 · GDPR 58
Mecal Machinery S.r.l is an Italian manufacturing company specializing in the production of machines and systems for processing aluminum, PVC, and light alloys. The company targets industrial clients requiring advanced machinery solutions and maintains a multilingual website to serve an international audience. Their business model focuses on manufacturing, technical support, and product distribution. The website demonstrates a good level of professionalism and content quality, with clear navigation and multilingual support. Technically, the site is built on WordPress with modern JavaScript libraries and CSS frameworks, but lacks HTTPS, which is a critical security gap. Privacy compliance is well managed through Iubenda, including cookie consent mechanisms. Contact information is comprehensive, enhancing business credibility.
Tecno Logica SRLtecno-logica.com
Manufacturing · Italy
68Medium
NIS2 25 · GDPR 58
NIS2 25 · GDPR 58
Tecno Logica SRL is a medium-sized manufacturing company specializing in bespoke industrial automation and robotics solutions primarily serving the wood, automotive, and industrial sectors. As part of the SCM Group, a recognized global leader in material processing technologies, Tecno Logica benefits from strong market positioning and trust. The website presents a professional and content-rich platform targeting industrial manufacturers seeking advanced automation solutions. Technically, the site uses modern technologies including Pimcore CMS, Bootstrap, and Google Tag Manager, providing a good user experience and mobile optimization. However, the absence of a valid SSL certificate and HTTPS severely impacts the security posture, exposing the site to risks and undermining user trust. Privacy compliance is well addressed with comprehensive policies and consent mechanisms. Overall, the site is functional and credible but requires urgent security improvements.
SCM Groupelettronicasammarinese.sm
Manufacturing · San Marino
63Medium
NIS2 17 · GDPR 58
NIS2 17 · GDPR 58
Elettronica Sammarinese operates as a medium-sized manufacturing company specializing in electronic product design, construction, and related services. It is part of the SCM Group, a larger industrial entity, and targets industrial clients requiring specialized electronic manufacturing solutions. The website content is professionally presented and consistent with its business focus, offering clear navigation and multilingual support. Technically, the site is built on a traditional LAMP stack with Pimcore CMS and uses common frontend libraries such as Bootstrap and jQuery. However, the PHP version is outdated, and the site lacks a valid SSL certificate, resulting in no HTTPS support, which is a critical security concern. Privacy compliance is well addressed through third-party policies from iubenda, including cookie consent mechanisms. Security headers are properly configured, but the absence of HTTPS and modern TLS protocols significantly lowers the security posture. Overall, the website is functional and professional but requires urgent security improvements to protect user data and enhance trust.
Related:scmgroup.comhiteco.net
- SSCM Group
scmfonderie.it
Manufacturing · Italy
58Medium
NIS2 17 · GDPR 58
NIS2 17 · GDPR 58
SCM Foundry, part of SCM Group, is a medium-sized Italian manufacturing company specializing in grey and ductile iron castings for various industrial sectors including gear motors, machinery, pumps, compressors, agriculture, railways, and nautical industries. With over 70 years of experience and a production capacity of 12,000 tons per year, SCM Foundry offers comprehensive services from product conception to prototyping and production engineering. The website reflects a professional business presence with clear sector focus and good content quality. Technically, the site uses Pimcore CMS, Apache server, and integrates modern analytics tools such as Microsoft Clarity and Google Tag Manager, but the PHP version is outdated and performance data is unavailable. Security posture is weak due to the absence of a valid SSL certificate and HTTPS, exposing the site to significant risks. Privacy compliance is strong with comprehensive policies managed via Iubenda. Overall, the site is functional and credible but requires urgent security improvements to protect user data and enhance trust.
Hitecohiteco.net
Manufacturing · Italy
71Medium
NIS2 17 · GDPR 58
NIS2 17 · GDPR 58
Hiteco is a specialized manufacturer focused on high technology electromechanical components for machine tool manufacturers, including electrospindles, birotary heads, boring units, and aggregates. The company targets industrial clients requiring precision components and offers a comprehensive product catalog and customer service. The website is built on a Pimcore CMS platform with a modern tech stack including Apache, PHP, jQuery, and Bootstrap, but suffers from critical security shortcomings due to lack of a valid SSL certificate and disabled TLS protocols. Privacy compliance is well addressed through iubenda policies and cookie consent mechanisms. Overall, the site presents a professional business image but requires urgent security improvements to protect users and enhance trust.
SCM Groupcms.it
Manufacturing · Italy
71Medium
NIS2 17 · GDPR 58
NIS2 17 · GDPR 58
SCM Group operates the website cms.it, representing CMS S.p.A., a leading manufacturer of advanced machining centers, thermoforming machines, and cutting systems. Founded in 1969 and headquartered in Italy, the company serves diverse industrial sectors including aerospace, automotive, marine, and construction. The website reflects a mature business with comprehensive content, clear branding, and a global market presence. Technically, the site uses a Pimcore CMS on an Apache server with PHP 7.1 and integrates modern JavaScript libraries and consent management tools. However, the absence of a valid SSL/TLS certificate and HTTPS support is a critical security gap, significantly reducing the site's security posture. Security headers are well configured but cannot compensate for the lack of encryption. Privacy compliance is strong, with detailed policies managed via Iubenda and GDPR adherence evident. Contact information is clearly presented, supporting business credibility. Overall, the site is professional and trustworthy but requires urgent remediation of SSL issues to ensure secure user interactions.
- SSocial Più Srl
socialpiu.com
Hospitality · San Marino
62Medium
NIS2 25 · GDPR 58
NIS2 25 · GDPR 58
Social Più Srl is a specialized social media marketing agency primarily serving the hospitality, tourism, e-commerce, and corporate sectors. The company offers tailored marketing and advertising solutions designed to drive measurable business results. The website content is professionally presented in Italian, targeting businesses in San Marino and Italy, with a clear focus on hotels, camping villages, companies, and e-commerce platforms. The company is part of the TITANKA! Spa group, indicating a structured business backing. Technically, the website is built on the TITANKA! CMS platform, using Apache server technology and incorporates modern marketing tools such as Google Analytics, Google Tag Manager, and Facebook Pixel for tracking and advertising. The site uses Bootstrap for responsive design and shows good mobile optimization and SEO practices. However, performance metrics are not available, and the site reports zero load time and page size, indicating incomplete performance data. From a security perspective, the website lacks a valid SSL/TLS certificate and does not support any TLS protocols, which is a critical vulnerability exposing users to potential data interception. Security headers like X-Frame-Options and X-Content-Type-Options are present, but the absence of HTTPS severely impacts the security posture. Privacy and cookie policies are present with consent mechanisms, showing GDPR compliance awareness, but no explicit security policy or incident response information is found. Overall, while the business and content quality are good and the company appears legitimate and professional, the lack of HTTPS is a major security risk that must be addressed immediately. Strategic recommendations include installing a valid SSL certificate, enabling modern TLS protocols, and enhancing security headers and practices to protect user data and improve trustworthiness.
Related:titanka.comsemplify.net
- Semplify Srl
semplify.net
Technology · San Marino
65Medium
NIS2 25 · GDPR 58
NIS2 25 · GDPR 58
Semplify Srl is an IT services company based in San Marino, specializing in enterprise-level IT consulting, cloud infrastructure, and outsourcing services. The company operates a datacenter in Milan and offers a range of services including cloud servers, virtual desktop infrastructure, business email, and network management. Their market position is that of a regional IT service provider with a focus on innovation and performance for business clients. Technically, the website is built on an older but functional technology stack including Apache, Bootstrap, and jQuery, managed via the TITANKA! CMS. However, the absence of a valid SSL certificate and HTTPS support is a critical security shortfall. Privacy and cookie policies are present with consent mechanisms, and contact information is comprehensive and clearly presented. The security posture is weak due to lack of TLS and modern security features, which poses risks to user data and trust. Overall, the site is professional and trustworthy but requires urgent security improvements to meet modern standards.
Related:titanka.com
Aetnagroup S.p.A.techlabtest.com
Manufacturing · Italy
65Medium
NIS2 17 · GDPR 58
NIS2 17 · GDPR 58
Techlab is a specialized packaging test laboratory focused on improving the stability of palletized loads during transportation. The company operates internationally with multiple research centers and holds accreditation from Accredia, indicating recognized quality standards. Their services include packaging testing, consulting, and load stability optimization, targeting manufacturers and businesses requiring packaging solutions. The website is professionally designed with clear navigation and multilingual support, reflecting a mature digital presence. However, the absence of a valid SSL certificate and lack of HTTPS support represent critical security vulnerabilities that undermine user trust and data protection. Privacy and cookie policies are present and GDPR compliant, and the contact form collects user data with appropriate consent mechanisms. Overall, the business credibility is strong, but the security posture requires urgent improvement to meet modern standards.
Related:robopac.comocme.com
- OCME S.r.l.
ocme.com
Manufacturing · Italy
60Medium
NIS2 25 · GDPR 58
NIS2 25 · GDPR 58
OCME S.r.l. is a large Italian manufacturing company specializing in advanced packaging, filling, palletizing, and intralogistics solutions for industrial production lines. The company operates primarily in the manufacturing sector, serving B2B clients requiring end-of-line automation and packaging technologies. OCME is part of the Aetna Group Holding SPA, with subsidiaries including Robopac and Aetna, reinforcing its market position as a key player in packaging manufacturing. The website presents professional branding, consistent content, and a clear focus on industrial solutions and services including remote and on-site support.
Related:aetnagroup.comrobopac.com
Other
72Medium
NIS2 25 · GDPR 40
NIS2 25 · GDPR 40
The website robopac.com is currently inaccessible due to a Cloudflare security challenge page that requires JavaScript and cookies to proceed. This prevents access to any substantive content, including business, contact, or policy information. The domain is registered and uses Cloudflare DNS and mail services, indicating a legitimate setup, but the lack of accessible content severely limits analysis. The SSL certificate is invalid or missing, resulting in no HTTPS security, which is a critical security issue. The site employs several security headers but lacks modern TLS protocols and HSTS, reducing its security posture. Overall, the site is not usable for visitors without bypassing the Cloudflare challenge, and no privacy or cookie policies are present.
- UUNA
unacom.it
Media · Italy
44High
NIS2 25 · GDPR 15
NIS2 25 · GDPR 15
UNA is an Italian association representing communication companies, providing networking, events, training, and sector-specific hubs to its members. The website serves as a portal for members and interested parties to access services, news, and industry information. The association holds a solid market position within Italy's communication sector, targeting companies and professionals seeking collaboration and industry representation. The business model is membership-based, offering value through events, awards, and specialized hubs. Technically, the website is built on WordPress with Elementor, integrating modern marketing and analytics tools such as Google Tag Manager and Iubenda for consent management. However, the site currently lacks a valid SSL certificate and HTTPS support, which is a critical security gap. Performance data is incomplete but suggests potential slowness. Mobile optimization and SEO are adequately addressed. From a security perspective, the absence of HTTPS and modern TLS protocols severely impacts the site's security posture. No advanced security headers or incident response policies are evident. Privacy compliance is strong, with clear privacy and cookie policies and consent mechanisms in place. The domain registration data aligns well with the business claims, indicating legitimacy. Overall, the site is professional and content-rich but requires urgent security improvements to protect user data and enhance trust. Strategic recommendations include implementing HTTPS, enabling security headers, and establishing incident response protocols.
ACT Allianceactalliance.org
Non-profit
46High
NIS2 17 · GDPR 43
NIS2 17 · GDPR 43
ACT Alliance is a large, global non-profit coalition comprising 152 members operating in 127 countries, focused on humanitarian aid, climate justice, gender justice, migration, peace, and advocacy. The website reflects a well-structured organization with clear thematic areas and a broad international presence. Technically, the site is built on WordPress with modern frameworks such as Bootstrap and uses various JavaScript libraries for UI and mapping functionalities. However, the security posture is weak due to the absence of a valid SSL certificate and lack of essential security headers, which exposes users to risks and undermines trust. Privacy compliance is partially met with a comprehensive privacy policy but lacks cookie consent mechanisms. Overall, the site is professional and credible but requires urgent security improvements to protect user data and enhance trust.
JobForwardjobforward.org
Government · United States
63Medium
NIS2 25 · GDPR 43
NIS2 25 · GDPR 43
JobForward is a workforce development organization formed in 2025 by the merger of the Institute for American Apprenticeships and Training Funding Partners. It provides consulting, apprenticeship program design, grant writing, and workforce planning services targeting employers, workforce boards, educators, and job seekers. The organization manages significant workforce funding and operates nationally with a focus on registered apprenticeship programs and workforce solutions. Technically, the website is built on WordPress with modern plugins and Google Tag Manager for analytics, hosted likely on GoDaddy with Cloudflare CDN. However, the site lacks a valid SSL certificate and proper HTTPS configuration, which is a critical security concern. Privacy compliance is partial with a privacy policy present but no cookie policy or terms of service. Contact information is clearly provided including phone numbers, physical addresses, and a contact form. Social media presence on LinkedIn and Facebook supports business credibility. WHOIS data aligns well with the business claims, showing a consistent and legitimate registration. Overall, the website is professional and functional but requires urgent improvements in security and privacy compliance to enhance trust and protect users.
- M.M.Warburg & CO
warburg-bank.de
Finance · Germany
64Medium
NIS2 25 · GDPR 15
NIS2 25 · GDPR 15
M.M.Warburg & CO operates a professional online banking platform targeting banking customers primarily in Germany. The website offers secure login mechanisms including electronic TAN authentication and provides clear customer support phone contacts. The technical infrastructure is based on AngularJS with custom JavaScript and CSS, delivering a good user experience and mobile optimization. However, the absence of a valid SSL certificate and lack of modern TLS protocols represent critical security vulnerabilities that undermine trust and data protection. Security headers are well implemented, but the SSL/TLS configuration requires urgent remediation. Privacy compliance is strong with a clear cookie consent mechanism and a comprehensive privacy policy. Overall, the website is functional and professional but needs immediate security improvements to meet industry standards.
- M.M.Warburg & CO Gruppe GmbH
mmwarburggruppe.com
Finance · Germany
59Medium
NIS2 25 · GDPR 43
NIS2 25 · GDPR 43
The Warburg Gruppe website represents a well-established financial holding company specializing in private banking, asset management, and investment banking services. The group operates multiple subsidiaries, each with a clear market focus, serving high-net-worth individuals and institutional clients primarily in Germany. The website content is professionally presented, targeting a sophisticated audience with detailed information about the group and its subsidiaries. Technically, the site uses a Java-based CMS (OpenCms) and integrates modern marketing and analytics tools such as Usercentrics for consent management and Google Tag Manager. However, a critical security gap exists due to the absence of HTTPS/SSL, exposing users to potential risks. Privacy compliance is well addressed with comprehensive policies and consent mechanisms. Overall, the site demonstrates strong business credibility but requires urgent security improvements.
- M.M.Warburg & CO (AG & Co.) KGaA
mmwarburg.com
Finance · Germany
59Medium
NIS2 17 · GDPR 43
NIS2 17 · GDPR 43
M.M.Warburg & CO is a well-established independent private bank in Germany with a history dating back to 1798. The bank offers a broad range of financial services including private banking, asset management, corporate and investment banking, and institutional client services. The website targets private clients, business customers, and institutional investors, emphasizing personalized service and long-term client relationships. Technically, the website uses modern web technologies such as Apache server, UserCentrics consent management, Google Analytics, and Google Tag Manager, and is built on OpenCms. However, a critical security issue is the absence of a valid SSL certificate and HTTPS support, which severely impacts the security posture. Privacy compliance is strong with a comprehensive privacy policy and cookie consent mechanism. The website is professionally designed with consistent branding and rich content, including reports and multimedia. Overall, the site reflects a reputable financial institution but urgently needs to address its SSL/TLS configuration to ensure secure communications.
Green & Durable Groupgreenanddurablegroup.com
Energy · Belgium
59Medium
NIS2 25 · GDPR 40
NIS2 25 · GDPR 40
Green & Durable Group is a Belgian-based company specializing in sustainable energy solutions for both private individuals and businesses. Their business model focuses on wholesale distribution of solar and storage systems alongside installation services for energy-saving systems. The company positions itself as a leader in the green energy sector with ambitions to expand pan-Europe and achieve significant revenue growth. The website is professionally designed, multilingual, and provides clear contact information and privacy compliance via Iubenda. Technically, the site uses Google Tag Manager and Google Fonts, hosted on Combell infrastructure. However, a critical security weakness is the absence of a valid SSL certificate and lack of HTTPS support, which severely impacts the security posture. Privacy compliance is strong with a comprehensive cookie and privacy policy and consent mechanism. Overall, the site demonstrates good business credibility but requires urgent security improvements to protect user data and trust.
Olaf Schmidt Coachingolafschmidt.de
Technology · Germany
28High
NIS2 0 · GDPR 0
NIS2 0 · GDPR 0
Olaf Schmidt Coaching is a small German-based business specializing in LinkedIn lead generation coaching, targeting self-employed professionals and companies, particularly in marketing and sales. The website presents a professional coaching service with clear offerings including personalized LinkedIn strategies, workshops, and weekly support. Technically, the site is built on WordPress with Elementor and uses common web technologies such as Apache and PHP. However, the site lacks a valid SSL certificate, resulting in no HTTPS support, which is a critical security flaw. The presence of LinkedIn Insight tracking and Calendly integration indicates a moderate level of digital maturity but also raises privacy considerations. Security posture is weak due to missing HTTPS and security headers, and privacy compliance is basic with only a privacy policy found but no cookie consent mechanism. Overall, the site is functional and professionally presented but requires urgent security improvements to protect user data and improve trust.
- Trenitalia
trenitalia.com
Transportation · Italy
46High
NIS2 5 · GDPR 0
NIS2 5 · GDPR 0
Trenitalia is the primary rail transport operator in Italy, offering a comprehensive range of train services including high-speed Frecciarossa, Intercity, regional, and international connections. The website provides extensive information on ticketing, travel options, loyalty programs, and customer support, targeting both domestic and international travelers. As part of the Gruppo Ferrovie dello Stato Italiane, Trenitalia holds a strong market position in the transportation sector. Technically, the website is built on Adobe Experience Manager with modern web technologies such as Bootstrap, jQuery, and Adobe Launch for tag management. It integrates multiple external services for analytics, marketing, and user experience enhancements. The site is mobile-optimized and accessible, with clear navigation and rich content. From a security perspective, the site lacks a valid SSL certificate and does not support HTTPS or modern TLS protocols, which is a critical vulnerability. While some security headers are present, the absence of HTTPS significantly undermines the security posture. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site is professional and trustworthy in content and business credibility but requires urgent improvements in SSL/TLS implementation to ensure user data protection and secure communications.
- One Srl
oneinfo.it
Finance · Italy
34High
NIS2 0 · GDPR 33
NIS2 0 · GDPR 33
One Srl is an Italian credit management and debt recovery agency based in Treviso, operating nationally with over 35 years of experience. The company offers a range of services including contractual consultancy, courtesy calls, out-of-court and judicial debt recovery, and credit assignment solutions. The business is positioned as a trusted and certified player in the finance sector, leveraging IT solutions for client transparency and efficiency. Technically, the website uses a traditional LAMP stack with Apache and PHP 5.6, complemented by modern front-end libraries and Google marketing tools. However, the absence of HTTPS and use of outdated PHP versions represent significant security weaknesses. The company maintains comprehensive legal and privacy documentation, demonstrating good privacy compliance and business credibility. Overall, the website is professional and content-rich but requires urgent security upgrades to meet modern standards.
Other · Italy
44High
NIS2 0 · GDPR 15
NIS2 0 · GDPR 15
The website htamedica.com currently serves as a parked domain page hosted by Aruba.it, indicating that the domain is registered but not actively used for business purposes. The page provides no business description, services, or contact information, limiting its utility and trustworthiness. The technical infrastructure is based on Microsoft IIS 10.0 and ASP.NET, hosted by Aruba.it, but lacks modern security configurations such as a valid SSL certificate and HTTPS support. This absence significantly impacts the site's security posture and user trust. No privacy, cookie, or terms of service policies are present, and no forms or data collection mechanisms are implemented. Overall, the site is minimalistic and does not provide any meaningful content or business insights.
- FFoster wheeler
fwc.com
Oil & energy · United kingdom
55Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 13 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.
- MMegarray media corp.
puroaloevera.com
Publishing
58Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 9 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.
Media
27High
NIS2 5 · GDPR 15
NIS2 5 · GDPR 15
The website egoteck.com is a Chinese-language media content platform primarily focused on providing access to domestic Chinese animation, movies, TV series, and variety shows. It targets Chinese-speaking audiences interested in streaming and viewing domestic video content. The business model appears to be content aggregation and streaming without clear monetization or subscription details. The domain is relatively new, registered in 2023, consistent with a small media content provider. Technically, the site runs on an nginx server and uses jQuery for client-side scripting. The site lacks HTTPS support due to an invalid or missing SSL certificate, which significantly impacts security posture. Performance data is minimal, and the site shows basic mobile optimization and SEO practices. Accessibility features are limited. Security-wise, the absence of HTTPS and security headers, along with no privacy or cookie policies, indicates a low security maturity level. No vulnerabilities or WAF protections are detected, but the lack of secure communication channels and policies poses risks. The WHOIS data shows consistent registration information with no privacy protection, which supports legitimacy but also exposes registrant data. Overall, the site is functional but basic, with significant room for improvement in security, privacy compliance, and professional business presentation. Strategic recommendations include implementing HTTPS, adding privacy and cookie policies, improving accessibility, and enhancing trust signals.