Medium-risk security reports
99,068 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,177001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
13,501–13,550 of 99,068
- Erzbistum Bamberg
erzbistum-bamberg.de
Government · Germany
59Medium
NIS2 17 · GDPR 28
NIS2 17 · GDPR 28
The Erzbistum Bamberg website represents the official online presence of the Archdiocese of Bamberg, a significant religious institution in northern Bavaria, Germany. It provides extensive information about the diocese's structure, services, events, and community outreach, targeting Catholic faithful, church employees, and interested visitors. The site is well-positioned as a regional religious authority with a broad range of pastoral, educational, and media services. Technically, the website employs a modern technology stack including Bootstrap, jQuery, and various plugins for enhanced user experience and responsiveness. The hosting is stable with dedicated nameservers, and the site uses HTTPS with a good SSL configuration. Security practices include a comprehensive cookie consent mechanism and asynchronous script loading, though some security headers could be improved. Privacy compliance is strong, with clear privacy and cookie policies aligned with GDPR requirements. No critical vulnerabilities or blocking mechanisms were detected, and the site maintains a high trust level with consistent WHOIS data and legitimate domain registration. Overall, the website demonstrates a mature digital presence suitable for its institutional role, with recommendations to enhance security headers and publish incident response policies for further trust and compliance.
enoveticenovetic.ch
Technology · Switzerland
74Medium
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
enovetic is a Swiss-based company specializing in software solutions and business process outsourcing for the personal leasing and pension fund sectors. Their offerings include digital platforms and expert services aimed at simplifying administration in work, health, and pension management. The company positions itself as a comprehensive service provider with a strong focus on HR-related outsourcing and software products tailored to their target audience. Technically, the website is built on WordPress with modern technologies such as Tailwind CSS and integrates advanced analytics and monitoring tools like Datadog RUM and Google Analytics. Security posture is solid with HTTPS enforced and bot protection via Cloudflare Turnstile, though some security headers and policies could be improved. Privacy compliance is well addressed with a comprehensive cookie consent mechanism and GDPR-aligned privacy policy. Overall, the website reflects a professional and trustworthy business presence with good technical implementation and compliance.
Marek Mati — Grafický dizajn a vizuálna komunikáciamarekmati.com
Other · Slovakia
71Medium
NIS2 2 · GDPR 58
NIS2 2 · GDPR 58
Marek Mati is a professional graphic and type designer based in Slovakia, specializing in complex visual communication solutions for cultural, social, and research projects. The website serves as a comprehensive portfolio showcasing his education, clients, collaborations, events, and services. The business operates primarily as a small freelance and consultancy entity with a niche focus on design and cultural institutions. Technically, the website is built on WordPress using Elementor and Elementor Pro, hosted likely by Websupport.sk, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. Privacy compliance is partial with a privacy policy present but no cookie consent mechanism. Overall, the site is professional, trustworthy, and well-branded, though improvements in security and privacy practices are recommended.
Erasmusplus Slovenskoerasmusplus.sk
Education · Slovakia
55Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Erasmusplus Slovensko operates as the national agency for the Erasmus+ program in Slovakia, providing comprehensive information, support, and administrative services related to educational mobility, project funding, and youth initiatives. The website serves a broad audience including students, educational institutions, and project recipients, positioning itself as a key governmental entity in the education sector. The business model is focused on public service and program facilitation, with a medium-sized organizational footprint and a history dating back to 2015. Technically, the website is built on a modern WordPress platform utilizing popular plugins such as WPBakery Page Builder and Revolution Slider, with integration of Google Analytics for user tracking. The site demonstrates good digital maturity with responsive design, SEO optimization, and moderate performance. Security measures include HTTPS enforcement and standard security headers, though explicit security policies and incident response contacts are not publicly detailed. The security posture is solid with no detected vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies, including consent mechanisms aligned with GDPR requirements. Contact information is transparent and accessible, enhancing business credibility. No adult or questionable content is present, making the site safe for general audiences. Overall, the site reflects a professional and trustworthy digital presence for a government-affiliated educational agency. Strategic recommendations include publishing a dedicated security policy, adding vulnerability disclosure information, enhancing accessibility features, and maintaining regular security audits to sustain and improve the security posture.
- NNárodný inštitút vzdelávania a mládeže
iuventa.sk
Education · Slovakia
59Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Národný inštitút vzdelávania a mládeže (NIVaM) is a Slovak national educational institute focused on providing training, consulting, research, and organizing educational competitions primarily for youth and educators. The website reflects a stable and professional presence with a medium-sized organizational footprint, targeting educational institutions and youth audiences. The business model is governmental/non-profit, emphasizing public service and educational support. The site is well-branded and consistent with its institutional identity. Technically, the website is built on WordPress with WooCommerce and several plugins for enhanced functionality such as GDPR compliance and newsletter management. The infrastructure includes modern JavaScript libraries and tracking tools like Google Analytics and Tag Manager. Performance and mobile optimization are good, though accessibility could be improved. The site uses HTTPS with no visible blocking or WAF interference. Security posture is solid with HTTPS and cookie consent mechanisms in place, but lacks explicit security headers and published incident response policies. No vulnerabilities or exposed sensitive data were detected in the provided content. Privacy compliance is strong with clear privacy and cookie policies in Slovak, aligned with GDPR requirements. Overall, the website presents a low-risk profile with good business credibility and compliance. Strategic improvements could focus on enhancing security headers, accessibility, and publishing formal security and incident response documentation.
- AApache HTTP Server Test Page powered by CentOS
mesiacvzdelavania.sk
Other
51Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
The website mesiacvzdelavania.sk currently serves only a default Apache HTTP server test page powered by CentOS, indicating that the site is either under construction or undergoing maintenance. There is no active business content, contact information, or policies published on the site. The domain is registered since 2018 with a valid registrar and no privacy protection, which suggests legitimacy in registration but no active operational presence online. Technically, the site uses Apache HTTP Server on CentOS with Bootstrap and Open Sans font for styling, but lacks modern web features, SEO optimization, and accessibility enhancements. Security posture is weak due to absence of HTTPS and security headers, exposing the site to potential risks. No privacy or cookie policies are present, and no data collection mechanisms or analytics are detected, indicating minimal digital maturity. Overall, the site is low trust and low professionalism with critical gaps in security and compliance.
Cheminées Poujoulat Italypoujoulat-italia.it
Energy · Italy
53Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Cheminées Poujoulat Italy is a European leader specializing in the manufacture and distribution of chimney ducts and metal roof outlet products. The website targets European customers and businesses requiring chimney and roofing solutions, positioning itself strongly in the energy sector. The business model focuses on manufacturing and supplying specialized metal products for chimneys and roofing. The website is built on WordPress using the Divi theme, enhanced with Yoast SEO for search optimization and Cookiebot for cookie consent management. Google Analytics is integrated with consent mode to respect user privacy. Security posture is adequate with HTTPS enabled and consent mechanisms in place, but lacks advanced security headers and explicit security policies. Privacy compliance is partial due to the absence of a dedicated privacy policy and terms of service pages. Contact information is not explicitly provided on the main page, which may affect user trust and support accessibility. Overall, the website is professional, well-branded, and technically sound but would benefit from enhanced privacy and security disclosures to improve compliance and user trust.
Outsteeloutsteel.be
Energy · Belgium
52Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Outsteel is a Belgian company specializing in the design and manufacture of decorative and protective covers for heat pumps, air conditioning units, and pool heat pumps. As a brand under Cheminées Poujoulat, it targets homeowners and businesses seeking aesthetic and functional HVAC accessories. The website is built on WordPress with WooCommerce and Elementor, supporting multilingual content and e-commerce capabilities. It employs modern SEO and analytics tools such as Rank Math and Google Analytics, indicating a mature digital presence. Security posture is strong with HTTPS and security headers, though no explicit security or incident response policies are published. WHOIS data is restricted, which slightly impacts domain trust but the website content and business information appear professional and consistent. Overall, the site is well-structured, GDPR compliant, and provides clear contact information, supporting a trustworthy business profile.
MackMedia GmbH & Co. KGmackmedia.de
Media · Germany
70Medium
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
MackMedia GmbH & Co. KG is a German media entertainment company specializing in 360° media production, attraction media, and brand licensing. The company targets businesses and clients in the entertainment industry, offering a range of media production services including advertisement films, content marketing, and interactive attractions. The website reflects a professional and consistent brand image with a clear focus on media and entertainment sectors. Technically, the site is built on WordPress CMS, leveraging modern tools such as Yoast SEO for search optimization and Google Tag Manager for analytics. The presence of OneTrust cookie consent indicates attention to privacy compliance, although explicit privacy and terms of service documents are not found in the provided content. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but could be improved with additional security headers and published policies. Overall, the website is well-structured, user-friendly, and trustworthy, with moderate technical performance and good mobile optimization.
- Hobby technik
hobbytechnik.cz
Manufacturing · Czech Republic
61Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
Hobby technik is a Czech-based e-commerce business specializing in electrical and electronic equipment for professionals and amateurs. The company offers a wide range of products including laboratory tables, power supplies, soldering technology, educational kits, and personal protective equipment. Their market position is that of a niche supplier catering to educational institutions, workshops, and individual professionals within the Czech Republic. The website is built on the Shoptet platform, featuring modern tracking and marketing tools such as Google Analytics and Facebook Pixel, with a cookie consent mechanism in place to comply with privacy regulations. However, the absence of WHOIS data for the domain raises concerns about domain legitimacy and registration transparency.
Utility Fleet Professionalutilityfleetprofessional.com
Energy · United States
61Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Utility Fleet Professional is a well-established media platform founded in 2005, serving the utility fleet management sector with comprehensive industry news, expert insights, podcasts, webinars, and event coverage. The website is professionally designed, mobile-optimized, and integrates modern technologies such as WordPress CMS, Yoast SEO, Google Analytics, and UIkit framework, reflecting a mature digital infrastructure. The business is positioned as a leading resource for utility fleet professionals in the United States, supported by a parent company, Utility Business Media, Inc., and strong social media engagement. Security posture is good with HTTPS, security headers, and domain locking, though there is room for improvement in privacy compliance and incident response transparency. Overall, the website demonstrates high professionalism and trustworthiness, with recommendations to enhance privacy policies and security disclosures to align with best practices.
- Europa-Park GmbH & Co Mack KG
ep-juniorclub.de
Hospitality · Germany
65Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
Europa-Park JUNIOR CLUB is a well-established, family-oriented online club offering free educational and entertainment content targeted at children. The website is professionally designed using TYPO3 CMS and modern front-end frameworks, providing a good user experience with mobile optimization and clear navigation. The business is linked to the reputable Europa-Park GmbH & Co Mack KG, enhancing its market credibility. Technically, the site is hosted on DomainControl nameservers, uses HTTPS, and employs standard web technologies with moderate performance. Security posture is solid with HTTPS enforced, though security headers and explicit incident response policies are absent. Privacy compliance is good with a comprehensive privacy policy, but lacks an explicit cookie consent mechanism. No vulnerabilities or suspicious elements were detected. Overall, the site is safe, trustworthy, and suitable for its target audience of children and families.
- Westdeutscher Rundfunk
wdrmaus.de
Media · Germany
64Medium
NIS2 17 · GDPR 28
NIS2 17 · GDPR 28
The website www.wdrmaus.de is the official online presence of the German public broadcaster Westdeutscher Rundfunk's children's program 'Die Sendung mit der Maus'. It provides educational and entertaining content for children including videos, games, crafts, and audio stories. The site is well-branded and professionally designed, targeting a young audience with a focus on learning and fun. The business model aligns with public media educational services, positioning it as a trusted and established media brand in Germany. Technically, the site uses a modern JavaScript stack including jQuery, CreateJS, and ARD's custom media player. The infrastructure appears stable and moderately performant with good mobile optimization and accessibility features. SEO and metadata are well implemented, supporting discoverability and social sharing. Hosting is likely managed by WDR or its partners, with domain name servers consistent with the organization. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, no explicit security headers were detected in the HTML source, and there is no visible cookie consent mechanism despite the use of tracking analytics (Piano). No security or incident response policies are published, and contact is limited to a web form without direct email or phone contacts. Overall, the security posture is moderate but could be improved with better header policies and transparency. The site is safe for general audiences, especially children, with no adult or questionable content detected. The domain WHOIS data aligns with the WDR organization, supporting legitimacy. The overall risk is low, but recommendations include adding cookie consent, security headers, and publishing security policies to enhance compliance and trust.
Media · Germany
54Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
The website www.logo.de is a children’s news portal operated by ZDF, a major German public broadcaster. It provides news content tailored for children and youth, featuring videos, images, and interactive elements. The site is well-branded, professionally designed, and targets a young audience with educational and safe content. The business model aligns with public media broadcasting, focusing on informative and accessible news for children. Technically, the site uses modern web technologies including Next.js and React, ensuring fast performance and excellent mobile optimization. Security posture is strong with HTTPS enforced and standard security headers present, though explicit security policies and incident response contacts are not published. Privacy compliance is robust with clear privacy and cookie policies and consent mechanisms. Overall, the site is trustworthy, safe, and professionally maintained, suitable for its target audience.
Heating & Powerheating-and-power.com
Energy
59Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Heating & Power is a specialized B2B company providing turnkey chimney and exhaust solutions, including design, manufacturing, installation, and maintenance services. The company targets industrial sectors such as energy, manufacturing, and infrastructure, leveraging European manufacturing facilities and subcontracting networks. The website is professionally designed using WordPress and Elementor, with good SEO and mobile optimization. Security posture is solid with HTTPS and reCAPTCHA implemented, though security headers and privacy policies are lacking. WHOIS data is missing, which raises some concerns about domain transparency. Overall, the site presents a credible business presence with room for improvement in compliance and security documentation.
Cheminées Poujoulat Italypoujoulat.it
Energy · Italy
53Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Cheminées Poujoulat Italy is a European leader specializing in chimney ducts and metal roof outlets, targeting the energy sector. The website is built on WordPress using the Divi theme and integrates SEO and analytics tools such as Yoast SEO and Google Analytics. The site demonstrates good design quality, mobile optimization, and clear navigation, supporting a positive user experience. Security posture is moderate with HTTPS enforced and cookie consent implemented, but lacks explicit security policies and incident response contacts. Privacy compliance is basic, with a cookie consent mechanism but no visible privacy or terms of service pages. Overall, the website is professional and trustworthy, though improvements in privacy and security transparency are recommended.
Poujoulat plpoujoulat.pl
Energy · Poland
55Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Poujoulat pl is a medium-sized company operating in the energy sector in Poland, specializing in steel chimney systems for fireplaces, stoves, and boilers. The website targets homeowners, businesses, and industrial clients, offering solutions tailored to these segments. The company maintains a professional online presence with consistent branding and a clear business focus. Technically, the website is built on WordPress using modern themes and plugins such as Kadence Blocks and Rank Math SEO, indicating a moderate to good level of digital maturity. Performance and mobile optimization are adequate, though accessibility features are basic. Security posture is generally good with HTTPS enforced, but lacks some security headers and explicit security policies on the site. Privacy compliance is weak due to the absence of privacy and cookie policies and lack of consent mechanisms. Overall, the domain registration data aligns well with the website content, supporting legitimacy and trustworthiness.
Poujoulat UKpoujoulat.co.uk
Energy · United Kingdom
71Medium
NIS2 2 · GDPR 58
NIS2 2 · GDPR 58
Poujoulat UK is a well-established manufacturer and supplier of chimney systems and flues, serving residential, commercial, and industrial markets. As part of the larger Poujoulat Group, founded in 1950, the company holds a strong market position as a European leader in metal chimney flues and stacks. Their services include product manufacturing, technical support, project management, logistics, and training, targeting homeowners, installers, architects, and contractors. The website reflects a professional and consistent brand presence with comprehensive product information and customer engagement features.
AIR SYSTEM CHIMNEY DESIGN SRLpoujoulat.ro
Manufacturing · Romania
56Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Poujoulat Romania operates as a specialized provider of premium chimney systems imported from France, targeting residential, commercial, and industrial sectors. The company emphasizes quality, safety, and energy efficiency, offering both products and professional installation and consultancy services. The website reflects a well-structured business with a clear market niche in chimney manufacturing and installation within Romania. Technically, the site is built on WordPress with common plugins and libraries, providing a moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and incident response disclosures. Privacy and cookie policies are present and GDPR compliant, supporting regional regulatory adherence. Overall, the business presents a credible and professional online presence with strong trust indicators but could improve security practices and transparency in WHOIS data.
Poujoulat GmbHpoujoulat.de
Energy · Germany
58Medium
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
Poujoulat GmbH is a German-based manufacturer specializing in chimney and ventilation systems, serving both professional and private customers. The company offers a range of products and services including solutions for single-family homes, multi-family houses, and project management. Their products are lab-tested and recommended by leading heating device manufacturers, indicating a strong market position and industry trust. The website targets professionals such as architects and planners, as well as building owners, reflecting a B2B and B2C business model. Technically, the website is built on WordPress with the Divi theme and integrates multiple analytics and marketing tools such as Google Analytics, Microsoft Clarity, Hotjar, Facebook Pixel, and Sendinblue. Hosting is managed via Gandi.net, a reputable provider. Security posture is good with HTTPS enforced and cookie consent implemented, though the absence of security headers and privacy policy are notable gaps. Overall, the website is professional, well-branded, and trustworthy, with room for improvement in privacy compliance and security best practices.
Poujoulat Switzerland SApoujoulat.ch
Energy · Switzerland
55Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
Poujoulat Switzerland SA is a well-established subsidiary of the European leader Poujoulat Group, specializing in chimney conduits and smoke evacuation systems for residential and industrial applications in Switzerland. The company offers comprehensive technical support and customized solutions, targeting installers, architects, engineers, and project owners. The website reflects a professional and consistent brand image with clear business information and multilingual support. Technically, the site is built on WordPress with modern plugins and demonstrates good performance and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies could be improved. Overall, the domain registration and WHOIS data align well with the business claims, supporting legitimacy and trustworthiness.
Poujoulat Beluxpoujoulat.be
Energy · Belgium
60Medium
NIS2 2 · GDPR 85
NIS2 2 · GDPR 85
Poujoulat Belux is a well-established European leader specializing in metal chimney and ventilation systems, serving Belgium and Luxembourg with a comprehensive product range and professional services. The website reflects a mature digital presence built on WordPress with Elementor, integrating multiple analytics and marketing tools while maintaining GDPR compliance through clear privacy and cookie policies. Security posture is strong with HTTPS and reCAPTCHA protections, though some security headers and incident response disclosures could be improved. The WHOIS data is restricted, typical for commercial entities, but the website's professional content and contact information support its legitimacy. Overall, the site effectively targets professionals and end-users in the energy and construction sectors, providing valuable resources and configurators.
KIRAkira.sk
Government · Slovakia
55Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
KIRA is a regional innovation and development agency affiliated with the Trnava Self-Governing Region in Slovakia. The agency focuses on supporting regional entrepreneurship, social and health innovations, civil society development, and tourism promotion, particularly cycling infrastructure. The website is professionally designed using WordPress and Oxygen Builder, featuring modern JavaScript libraries and responsive design. It provides clear information about its mission, projects, and social media presence but lacks direct contact forms and cookie consent mechanisms. Security posture is good with HTTPS enabled and no exposed sensitive data, though security headers and incident response policies are absent. Overall, the site reflects a legitimate, government-affiliated organization with a strong regional focus.
Europass Slovenskoeuropass.sk
Education · Slovakia
50Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Europass Slovensko operates as the official Slovak national portal providing comprehensive information and services related to Europass documents, mobility certificates, and educational frameworks. The website targets students, job seekers, educational institutions, and volunteers within Slovakia, offering key services such as Europass CV templates, mobility registration, and addenda to certificates. The portal is positioned as a trusted government/non-profit resource with a consistent brand and active social media presence. Technically, the website is built on WordPress using the Astra theme and Elementor page builder, integrating analytics tools like Google Analytics and Microsoft Clarity. The site demonstrates moderate performance with good mobile optimization and basic accessibility features. It employs a GDPR-compliant cookie consent mechanism, reflecting awareness of privacy regulations. From a security perspective, the site enforces HTTPS with excellent SSL configuration but lacks visible security headers and explicit security policies. No vulnerabilities or exposed sensitive data were detected. The absence of a security.txt or vulnerability disclosure policy suggests room for improvement in incident response readiness. Overall, Europass Slovensko presents a professional, trustworthy, and secure online presence appropriate for its educational mission. Strategic enhancements in security headers, privacy documentation, and accessibility could further strengthen its posture and user trust.
- PPrievidza
prievidza.sk
Government · Slovakia
60Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
The website prievidza.sk serves as the official digital portal for the city of Prievidza, Slovakia, providing residents and visitors with comprehensive municipal information, public services, news, and event updates. It targets local citizens and tourists, offering easy access to administrative resources and community engagement tools. The site is well-positioned as a trusted government resource with a clear focus on transparency and accessibility. Technically, the site is built on WordPress with modern SEO enhancements via the Yoast plugin, and integrates Google Analytics and Tag Manager for visitor insights. The infrastructure appears stable and moderately performant, with mobile optimization and basic accessibility features in place. Hosting is inferred to be managed by Euronet, a reputable provider, supported by consistent DNS records. From a security perspective, the site enforces HTTPS and employs a cookie consent mechanism aligned with GDPR requirements. While no advanced security headers were detected, the use of a stop user enumeration plugin indicates attention to common WordPress vulnerabilities. No critical security issues or vulnerabilities were found in the content or configuration. However, the absence of explicit security policies or vulnerability disclosure channels suggests room for improvement in security transparency. Overall, prievidza.sk is a credible, well-maintained municipal website with good content quality and user experience. Strategic enhancements in security policy publication and header implementation would further strengthen its posture and trustworthiness.
- Mesto Partizánske
partizanske.sk
Government · Slovakia
61Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
The website www.partizanske.sk serves as the official online presence for the city of Partizánske, Slovakia. It provides residents and visitors with comprehensive municipal information including governance, public services, events, and transparency documents. The site is well-branded with official city emblems and maintains a clear structure targeting local citizens and stakeholders. The business model is that of a government entity focused on public administration and community engagement. Technically, the site is built on the WEBY PORTÁL CMS platform provided by WEBY GROUP, utilizing modern JavaScript libraries such as jQuery and Fancybox. The site demonstrates moderate performance and good mobile optimization, though accessibility features are basic. SEO is implemented at a basic level with appropriate meta tags and structured navigation. From a security perspective, the site uses HTTPS and includes a cookie consent mechanism, indicating awareness of privacy compliance. However, explicit security headers and incident response policies are not evident. No vulnerabilities or exposed sensitive data were detected in the content. The WHOIS data confirms the domain's legitimacy and consistency with the official city government identity. Overall, the website is a trustworthy, professional municipal portal with good content quality and business credibility. It lacks some advanced security and compliance features but meets essential requirements for a government site. Strategic improvements in security headers, accessibility, and incident response documentation would enhance its posture.
- TVN CORPORATE MEDIA
tvn-cm.de
Media · Germany
56Medium
NIS2 17 · GDPR 85
NIS2 17 · GDPR 85
TVN CORPORATE MEDIA is a medium-sized German creative agency specializing in effective and creative video campaigns across social media, events, and other communication channels. With nearly 40 years of experience and offices in Hannover and Cologne, they provide comprehensive media production and communication strategy services. The website is built on TYPO3 CMS with modern technologies and integrates GDPR-compliant consent management and analytics tools. Security posture is solid with HTTPS and no visible vulnerabilities, though some security policies and incident response information are absent. Overall, the site is professional, trustworthy, and well-optimized for users and search engines.
—
57Medium
NIS2 2 · GDPR 85
NIS2 2 · GDPR 85
TAURON Dystrybucja S.A.tauron-dystrybucja.pl
Energy · Poland
74Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
TAURON Dystrybucja S.A. is the largest energy distributor in Poland, providing a wide range of services including network connection, remote meter reading, and customer support for both individual and business clients. The company maintains a professional and comprehensive online presence with clear navigation, multiple service portals, and extensive customer resources. The website is well-structured, mobile-optimized, and integrates modern technologies such as Google Tag Manager, Microsoft Clarity, and various JavaScript libraries to enhance user experience and analytics capabilities. Security measures include HTTPS enforcement, cookie consent mechanisms, and privacy policies aligned with GDPR requirements. Despite the absence of publicly available WHOIS data, the website's branding, content quality, and trust indicators strongly support its legitimacy and market position. Overall, the digital infrastructure reflects a mature and secure environment suitable for a major utility provider.
- Polsat Box
polsatbox.pl
Media · Poland
72Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
Polsat Box is a prominent Polish media and telecommunications company specializing in digital television subscription services. The website serves as a portal for customers to explore offerings, manage subscriptions, and access support. The site is professionally designed with good content quality and clear navigation, targeting Polish consumers interested in media services. Technically, the website employs modern JavaScript frameworks, cookie consent tools, and Google Tag Manager for analytics, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security headers and incident response information are lacking. The absence of WHOIS data is a notable gap, slightly impacting trustworthiness. Overall, the website is safe, compliant with GDPR, and suitable for general audiences.
Retail · Poland
67Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
nowyswiat.shop is a Polish e-commerce website specializing in retail sales of branded merchandise related to the RNŚ brand, including apparel, mugs, albums, and accessories. The site targets general consumers interested in RNŚ products and operates on the Shoper platform, a known e-commerce solution. The business appears to be a small-sized entity founded around 2020, with a consistent brand presence and a focus on online retail. Technically, the website employs modern JavaScript libraries, Google Analytics, and Tag Manager for tracking, and is hosted via Ascio Technologies Inc. The site is mobile-optimized with good navigation and SEO practices, though accessibility features are basic. Security posture is moderate with HTTPS enforced and domain transfer protection enabled, but lacks advanced security headers and DNSSEC. Privacy compliance is strong with clear privacy and cookie policies and consent mechanisms in place. No direct contact emails or phone numbers are published, and no incident response or security policy information is available. Overall, the website is professional and trustworthy with room for security enhancements.
Central Kladnocentralkladno.cz
Retail · Czech Republic
54Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Central Kladno is a well-established retail shopping center located in the Czech Republic, founded in 2008. The website presents a professional and user-friendly interface showcasing over 110 shops, parking facilities, gift vouchers, and various services aimed at shoppers and visitors. The business targets the general public in the Kladno region, positioning itself as a key regional retail hub. Technically, the site is built on WordPress with modern SEO and analytics tools such as Google Analytics, Facebook Pixel, Hotjar, and Microsoft Clarity, indicating a mature digital infrastructure. Security-wise, the site enforces HTTPS and implements cookie consent mechanisms, though it could improve by adding explicit security headers and incident response information. Overall, the website is safe, family-friendly, and compliant with GDPR regulations, reflecting a trustworthy and credible business presence.
Media · Germany
53Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
Funk & Fernsehen Nordwestdeutschland Marketing- und Vertriebs GmbH & Co. KG operates the website ffn-werbung.de, providing advertising services primarily focused on radio and digital audio in the Niedersachsen and Bremen regions of Germany. The company offers a range of advertising formats including traditional radio spots, digital audio, 360° campaigns, specials, and podcast advertising. The website positions itself as a regional media group with a strong presence and reach, targeting advertisers seeking to engage audiences in these German states. The site is professionally designed, with clear branding and consistent messaging aligned with its business focus.
Radio ffnffn-history.de
Media · Germany
58Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
The website www.ffn-history.de serves as a historical timeline archive commemorating 38 years of radio ffn, a German radio broadcasting station. It targets German-speaking listeners and fans interested in the station's history and moderators. The site is built on TYPO3 CMS and employs modern web technologies including Turbo Frames and SVG icons, providing a good user experience with clear navigation and mobile optimization. The content is professionally presented and consistent with the brand identity of radio ffn. From a technical perspective, the site uses HTTPS with a Content-Security-Policy header to upgrade insecure requests, ensuring a secure browsing environment. However, additional security headers could be implemented to enhance protection. The site includes tracking scripts from script.ioam.de, indicating moderate user tracking without explicit cookie consent mechanisms, which may affect GDPR compliance. The WHOIS data aligns well with the website's business history and domain age, supporting the legitimacy of the site. Contact information is limited to an email address in the footer, with no phone numbers or physical addresses provided. No forms or incident response contacts are found, and no vulnerability disclosure or security policy pages are evident. Overall, the website is safe, professional, and trustworthy, with room for improvement in privacy compliance and security header implementation. Strategic recommendations include adding cookie consent, enhancing security headers, and providing clearer security and incident response information.
- VVerbraucherzentrale Hamburg
vzhh.de
Non-profit · Germany
58Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
Verbraucherzentrale Hamburg is a well-established non-profit organization dedicated to consumer protection and advice in Hamburg, Germany. The website offers comprehensive information and services including consumer counseling, energy consulting, legal support, and educational events. The organization targets consumers seeking independent and competent support in private consumption matters. Technically, the website is built on Drupal 10 with Commerce 2 and uses Matomo for analytics, reflecting a modern and privacy-conscious infrastructure. Security posture is good with HTTPS enforced and cookie consent implemented, though explicit security policies and incident response contacts are not published. Overall, the site is professional, trustworthy, and compliant with privacy regulations, though it could improve transparency by publishing privacy and security policies.
SAT.1sat1bayern.de
Media · Germany
62Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
The website www.sat1.de/serien/regional-bayern serves as a regional news portal for Bavaria under the SAT.1 brand, a well-known German media company. It provides current news, video content, live TV streaming links, and program information targeting German-speaking audiences interested in Bavarian regional news. The site integrates with the Joyn streaming platform for video content delivery. Technically, the site is built using modern web technologies including React and Next.js, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and cookie consent managed via Usercentrics, though explicit security policies and privacy policies are not clearly presented in the provided content. Overall, the site is professional, trustworthy, and content-rich, suitable for a general audience with no adult content detected.
enovetic global SAenovetic.com
Finance · Luxembourg
57Medium
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
enovetic global SA is a newly founded (2023) financial services company specializing in digital platforms and consulting for European pension funds and occupational retirement provision. Positioned in Luxembourg, a leading European financial center, the company offers cross-border advisory services, partner network integration, and administration solutions to employers, employees, and distribution partners. The website reflects a professional and modern digital presence built on WordPress with Tailwind CSS and integrates advanced analytics and user tracking tools such as Datadog RUM and Google Tag Manager. Security posture is solid with HTTPS and Cloudflare DNS, though improvements like DNSSEC and explicit security headers are recommended. Privacy compliance is well addressed with comprehensive cookie and privacy policies and an opt-in consent mechanism. Contact is primarily via web forms, with no direct emails or phone numbers publicly listed. Overall, the website and domain registration are consistent and trustworthy, supporting the company's market positioning in the European pension fund sector.
ORANGE-BOX.networkorange-box.network
Technology · Germany
60Medium
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
ORANGE-BOX.network is a specialized German service provider offering advanced event network technology solutions including WLAN, fiber optic networks, and bonding technologies for large-scale events such as festivals, congresses, and trade fairs. The company targets event organizers primarily in major German cities and positions itself as a niche provider delivering scalable, high-availability network infrastructures. The website reflects a professional and consistent brand image with clear contact information and GDPR-compliant privacy and cookie policies. Technically, the site is built on WordPress with modern plugins and integrates Google Analytics and Tag Manager for tracking, indicating a moderate level of digital maturity. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers and explicit policies are absent. Overall, the site is trustworthy and well-maintained, though WHOIS data is unavailable due to TLD restrictions, slightly reducing domain trust signals.
- OOpito Labs GmbH
opito-streaming.com
Media · Germany
50Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Opito Streaming, operated by Opito Labs GmbH, is a German-based professional streaming and live event production service provider founded in 2020. The company offers a comprehensive portfolio including full-service congress and conference streaming, live remote connections, pre-recording, live on-site production, hybrid events, and scalable streaming solutions with real-time recordings and video-on-demand. Their market position is that of a leading streaming expert with over 20 years of experience in the broader media and event production industry, targeting businesses and organizations requiring professional streaming services. Technically, the website employs modern front-end technologies such as Bootstrap, Material Design Bootstrap, Font Awesome, and jQuery, hosted by Hetzner Online GmbH. The site is mobile optimized with good design and user experience, though SEO and accessibility are basic. Analytics usage is minimal with Google Analytics scripts commented out, indicating a low level of user tracking. From a security perspective, the site lacks visible HTTPS confirmation in the provided data and does not implement common security headers, which lowers its security posture. No privacy or cookie policies are present, indicating gaps in GDPR compliance. Contact information is clearly provided, but no incident response or security policy details are available. Overall, the website is professional and trustworthy in business presentation but requires improvements in security best practices and privacy compliance to enhance trust and reduce risk. Strategic recommendations include enabling HTTPS, adding privacy and cookie policies, implementing security headers, and establishing vulnerability disclosure mechanisms.
Gesamtverband der Personaldienstleister e. V.ig-zeitarbeit.de
Other · Germany
75Medium
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
The Gesamtverband der Personaldienstleister e. V. (GVP) operates as a prominent industry association representing personnel service providers in Germany. The website serves as a comprehensive platform offering members access to industry news, tariff agreements, legal advice, educational seminars, and networking events. It positions itself as a key voice in the German personnel services market with a large membership base and extensive service offerings. Technically, the site is built on WordPress with Elementor and WooCommerce, integrating modern web technologies and SEO tools such as Rank Math and Google Tag Manager. Security measures include HTTPS, security headers, CAPTCHA for forms, and cookie consent management, reflecting a mature security posture. No critical vulnerabilities or suspicious activities were detected, and the site complies well with GDPR and privacy standards. Overall, the website is professional, trustworthy, and well-maintained, supporting the organization's business objectives effectively.
Sauftragsauftrag.eu
E-commerce · Germany
71Medium
NIS2 2 · GDPR 60
NIS2 2 · GDPR 60
Sauftrag is a small German e-commerce business specializing in party supplies, branded merchandise, and alcoholic beverages such as herbal liqueurs. The website is built on the Shopify platform, leveraging a modern tech stack including jQuery, Owl Carousel, and various marketing and tracking tools. The site is well-branded and targets party enthusiasts and consumers seeking party-related products. While the technical infrastructure is solid with HTTPS and Shopify Payments integration, the site lacks explicit privacy and terms of service pages, and minimal security headers are present. No direct contact information or security incident response details are available, which could impact user trust and compliance. Overall, the website is functional and professionally designed but could improve in privacy compliance and security transparency.
ffn-mediengruppeffn-mediengruppe.de
Media · Germany
53Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
The ffn-mediengruppe is a prominent media company in northern Germany, operating multiple radio stations including radio ffn, ENERGY Bremen, RADIO ROLAND, and RADIO BOLLERWAGEN. It is recognized as one of the largest employers in the regional radio industry, offering a broad portfolio of broadcast and online audio programs. The company also provides comprehensive audiocampaign marketing services through a dedicated partner site. The website reflects a professional and consistent brand presence with clear business information and active news updates. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and Pojo Accessibility, ensuring good SEO and accessibility standards. The site is mobile-optimized and performs moderately well, though no explicit hosting provider information is available. The technical stack is standard for media companies and supports a positive user experience. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks visible security headers and explicit security or incident response policies. No cookie consent mechanism was detected, which may present a GDPR compliance gap. No vulnerabilities or exposed sensitive data were found in the HTML content. Overall, the security posture is adequate but could be improved with additional policies and headers. The overall risk assessment is low, with the website demonstrating high trustworthiness and business credibility. Strategic recommendations include implementing cookie consent, publishing security policies, and adding security headers to enhance compliance and protection.
Mein LIEBLINGS Event GmbHmeinlieblingsevent.de
Hospitality · Germany
56Medium
NIS2 2 · GDPR 33
NIS2 2 · GDPR 33
Mein LIEBLINGS Event GmbH operates a professional event promotion website focused on concerts and events in Germany. The company targets event attendees seeking memorable experiences and offers services including event organization and venue rental. The website demonstrates a consistent brand presence with active social media integration and sponsor visibility, positioning it as a regional player in the hospitality and media sectors. Technically, the website employs modern JavaScript frameworks such as Livewire, Alpine.js, GSAP, and Swiper.js, indicating a moderate level of digital maturity. Hosting is provided by Schlund Technologies, a reputable German hosting provider. The site is moderately optimized for performance and mobile devices, with basic SEO and accessibility features. From a security perspective, the site lacks visible security headers and formal privacy or cookie policies, which are critical for GDPR compliance and user trust. The absence of a security.txt or vulnerability disclosure page further indicates limited formal security governance. However, no critical vulnerabilities or exposed sensitive data were detected in the content provided. Overall, the website is functional and professional but would benefit from enhanced privacy compliance and security best practices to improve trust and regulatory adherence.
- Landwirtschaftliche Rentenbank
rentenbank.de
Finance · Germany
70Medium
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Landwirtschaftliche Rentenbank operates as the central refinancing institution for the German agricultural and food industry sectors, providing specialized loans and refinancing services. The website reflects a professional and consistent brand presence targeting stakeholders in the German agribusiness sector. The business model focuses on supporting agriculture through financial products and promotional banking services, positioning Rentenbank as a key player in this niche market. Technically, the website employs modern web technologies including JavaScript, CSS, and HTML5, with integrations such as etracker for analytics and Cognigy for chatbot services. Hosting is managed via Ecotel nameservers, indicating a stable infrastructure. The site demonstrates good mobile optimization and SEO practices, although accessibility features are basic. From a security perspective, the site uses HTTPS and includes scripts to disable cookies for analytics, showing some privacy awareness. However, explicit privacy and cookie policies, security headers, and incident response information are absent, representing areas for improvement. No vulnerabilities or suspicious domains were detected, and no WAF or blocking mechanisms interfere with content access. Overall, the website is trustworthy and professionally maintained but would benefit from enhanced privacy compliance and clearer contact and security policy disclosures to improve user trust and regulatory adherence.
- Erzbistum Bamberg
kirche-bamberg.de
Government · Germany
59Medium
NIS2 17 · GDPR 28
NIS2 17 · GDPR 28
Erzbistum Bamberg is a large, well-established religious institution serving northern Bavaria, Germany. The website provides comprehensive information about the archdiocese's services, events, and community outreach, targeting Catholic faithful and church employees. The site is professionally designed with good navigation and mobile optimization, reflecting a mature digital presence. Technically, it employs modern web technologies including Bootstrap, jQuery, and JW Player, hosted on a church-specific infrastructure. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is strong with a detailed privacy policy and cookie management. Overall, the site is trustworthy and aligns well with the organization's mission and audience.
- Ev. Landeskirche in Baden
kirchenrecht-ekiba.de
Government · Germany
69Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
The website kirchenrecht-ekiba.de serves as an authoritative online legal reference platform for the Evangelical Church in Baden, providing systematic access to church laws, ordinances, and related legal documents. It targets church officials, legal professionals, and theologians within the Baden region, positioning itself as a trusted source for ecclesiastical legal information. The platform offers search functionality and downloadable e-book formats, enhancing accessibility and usability. Technically, the site employs a modern responsive design using Bootstrap and Font Awesome, hosted on SchlundTech infrastructure. It integrates privacy-conscious analytics via Matomo and implements a cookie consent mechanism, reflecting GDPR awareness. While the site uses HTTPS and has a consistent branding approach, it lacks explicit privacy policies, terms of service, and direct contact information, which are areas for improvement. From a security perspective, the site benefits from HTTPS encryption and absence of visible vulnerabilities or exposed sensitive data. However, it does not implement advanced security headers, and lacks published security policies or incident response contacts. The WHOIS data aligns well with the church entity, indicating legitimacy and consistent domain registration. Overall, the website is professionally designed, content-rich, and trustworthy for its intended audience, but could enhance privacy compliance and security posture by adding explicit policies and security headers. No adult or questionable content is present, making it safe for general audiences.
- Evangelische Landeskirche in Baden
kirchenrecht-baden.de
Government · Germany
69Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
The website kirchenrecht-baden.de serves as an official online legal reference system for the Evangelical Church in Baden, providing comprehensive access to church laws, ordinances, and related legal documents. It targets church officials, legal professionals, and researchers within the Baden region, offering a structured and searchable database of current and archived church regulations. The site is positioned as an authoritative source within the government/non-profit sector, supporting the church's legal transparency and accessibility. Technically, the website employs a modern tech stack including Bootstrap for responsive design, Font Awesome for icons, and Piwik/Matomo for analytics, hosted by Schlund Technologies. The site demonstrates good mobile optimization and basic accessibility features, with moderate performance. It uses HTTPS and includes a cookie consent mechanism, reflecting a baseline of privacy compliance. From a security perspective, the site benefits from HTTPS and secure analytics integration but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or suspicious content were detected. The WHOIS data aligns well with the website's official nature, indicating a consistent and legitimate domain registration. Overall, the website presents a professional, trustworthy, and content-rich platform with room for improvement in privacy policy publication, security header implementation, and contact information transparency. These enhancements would strengthen its compliance posture and user trust.
Stiftung der Evangelischen Landeskirche in Badengutes-stiften.org
Non-profit · Germany
60Medium
NIS2 2 · GDPR 70
NIS2 2 · GDPR 70
The Stiftung der Evangelischen Landeskirche in Baden is a non-profit foundation focused on supporting charitable giving and foundation establishment within the Baden region of Germany. The organization provides advisory services for donors and foundations, including inheritance and precautionary initiatives, targeting individuals and entities with a Christian values orientation. The website reflects a professional and consistent brand presence, with clear contact information and relevant content tailored to its audience. Technically, the website is built on Edith CMS and utilizes common web technologies such as jQuery and Matomo analytics, with a moderate performance profile and good mobile optimization. The use of HTTPS and clientTransferProhibited domain status indicates a secure baseline, though DNSSEC is not enabled and security headers are absent, representing areas for improvement. From a security perspective, the site demonstrates privacy-conscious tracking by disabling cookies in Matomo and provides a comprehensive privacy policy compliant with GDPR. However, the absence of a cookie consent mechanism and explicit security policies limits full compliance. No incident response or vulnerability disclosure information is published. Overall, the website is trustworthy and professionally maintained, with minor technical and compliance gaps. Strategic improvements in DNS security, cookie consent, and security headers would enhance the security posture and regulatory compliance.
Evangelische Landeskirche in Badenekiba-leicht.de
Government · Germany
54Medium
NIS2 2 · GDPR 45
NIS2 2 · GDPR 45
The website ekiba-leicht.de is operated by the Evangelische Landeskirche in Baden, a regional religious institution in Germany focused on providing accessible information in easy German language. The site targets individuals with language or cognitive challenges, promoting inclusion and accessibility in church-related content and community work. The business model is non-profit and government-related, with a medium organizational size and a clear focus on accessibility services. Technically, the website uses Edith CMS hosted on w-commerce.de infrastructure, leveraging jQuery, Matomo analytics, and Bootstrap-like responsive design. The site is moderately performant, mobile-optimized, and accessible, with good SEO practices. However, it lacks explicit cookie consent mechanisms and some security headers, which are areas for improvement. Security posture is solid with HTTPS enforced and email obfuscation implemented, but the absence of security policies and incident response contacts limits transparency. No critical vulnerabilities or suspicious patterns were detected. The domain WHOIS data aligns well with the organization's identity, supporting legitimacy. Overall, the website is professional, trustworthy, and serves its target audience effectively. Strategic improvements in privacy compliance and security transparency would enhance its posture and user trust.
- VVerlag Eugen Ulmer
ulmer-akademie.de
Education · Germany
61Medium
NIS2 2 · GDPR 43
NIS2 2 · GDPR 43
Ulmer Akademie, operated by Verlag Eugen Ulmer, is a specialized online education platform focused on digital continuing education in agriculture, horticulture, and related sectors. The website offers live seminars, recorded sessions, and online courses tailored to professionals in these industries, positioning itself as a niche leader in Germany. The platform targets a broad audience interested in advancing their knowledge and skills remotely. Technically, the website employs a modern technology stack including jQuery, Tailwind CSS, AlpineJS, and uses Matomo and Google Tag Manager for analytics. It features responsive design and accessibility enhancements such as skip links and an accessibility settings menu. The site is hosted securely over HTTPS and implements a comprehensive cookie consent mechanism via Klaro, reflecting good privacy compliance. From a security perspective, the site enforces HTTPS and disables tracking on certain paths and hosts. However, it lacks explicit security headers and does not publish a dedicated security policy or incident response contact. No vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, the security posture is solid but could be improved by adding security headers and formalizing incident response information. The website is fully accessible without WAF or security challenge blocks. It maintains high content quality, professional design, and clear navigation. No adult or questionable content is present, making it safe for general audiences. The domain registration data is consistent with the business, supporting legitimacy and trustworthiness. Strategic recommendations include enhancing security headers, publishing a security policy, and maintaining regular audits of third-party libraries to sustain a strong security and compliance posture.