Security reports directory
150,193 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,193001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
137,301–137,350 of 150,193
KDM POP Solutions Groupkdmpop.com
Retail · United States
60Medium
NIS2 0 · GDPR 10
NIS2 0 · GDPR 10
KDM POP Solutions Group is a well-established retail signage and marketing solutions provider with over 50 years of experience. The company operates facilities in Cincinnati, Ohio, and Atlanta, Georgia, offering a comprehensive suite of services including print, branding, retail displays, interior design, fulfillment, and promotional products. Their market position is strong, supported by a consistent brand presence and recognition as a top workplace. Technically, the website is built on WordPress using the Divi theme, leveraging modern web technologies and multiple analytics and marketing tools to support business growth. Security posture is solid with HTTPS and no visible vulnerabilities, though there is room for improvement in security headers and privacy compliance. Overall, the website presents a professional and trustworthy image, though it lacks explicit privacy and cookie policies which are important for regulatory compliance.
Thinkthink.mt
Technology · Malta
48High
NIS2 0 · GDPR 0
NIS2 0 · GDPR 0
Think is a leading digital product agency based in Malta, specializing in web development, mobile app development, branding, and digital marketing services. The company positions itself as a top digital agency in Malta, targeting businesses seeking comprehensive digital transformation and marketing solutions. Their website showcases a professional design with clear navigation and extensive service offerings, reflecting a mature digital presence. Technically, the site is built on WordPress with modern frameworks such as Bootstrap 5 and integrates advanced animation and tracking technologies. Security-wise, the site enforces HTTPS and uses Google reCAPTCHA v3, but lacks explicit security headers and formal security policies. Privacy compliance is limited due to the absence of privacy and cookie policies. Overall, the website demonstrates a strong business credibility and technical foundation but would benefit from enhanced privacy and security disclosures.
Other
54Medium
NIS2 5 · GDPR 15
NIS2 5 · GDPR 15
The website crobo.com is currently inaccessible, returning a 403 Forbidden error with minimal HTML content. Due to this, no meaningful business, technical, or security information can be extracted or analyzed. The lack of accessible content prevents assessment of the company's market position, services, or compliance posture. Technically, the site lacks visible security headers, metadata, or scripts, indicating a minimal or blocked deployment. The WHOIS data shows privacy protection, which combined with the inaccessible website, reduces trustworthiness and raises concerns about transparency. Overall, the site scores very low on content quality, technical implementation, security posture, privacy compliance, and business credibility. Strategic recommendations focus on enabling secure and accessible website content, implementing security best practices, and publishing compliance policies to improve trust and user experience.
TVG Media Ltdthepixel.com
Technology · United Kingdom
65Medium
NIS2 0 · GDPR 58
NIS2 0 · GDPR 58
The Pixel, operated by TVG Media Ltd, is a well-established digital commerce agency founded in 2001, specializing in Adobe Commerce and Adobe Digital Experience solutions. The company serves a broad range of clients, managing billions in sales globally, and offers a comprehensive suite of services including strategy, design, development, marketing, analytics, and support. Their market position is strong, supported by their Adobe Gold Solution Partner certification and a portfolio featuring reputable clients such as Farrow & Ball and ScrewFix. Technically, the website is built on Webflow CMS with modern JavaScript libraries and integrates Google Tag Manager for analytics. The site is fast, mobile-optimized, and accessible, reflecting a mature digital infrastructure. Security-wise, the site enforces HTTPS and employs a robust cookie consent mechanism with opt-in preferences, though it lacks explicit published security policies or incident response contacts. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations.
RCI Insurance Ltd and RCI Life Ltdrci-insurance.eu
Finance · Malta
56Medium
NIS2 5 · GDPR 75
NIS2 5 · GDPR 75
RCI Insurance Ltd and RCI Life Ltd are Malta-based insurance companies providing tailored insurance solutions primarily to customers of Mobilize Financial Services’s automobile financing business. As subsidiaries of Mobilize Financial Services, they operate under the regulation of the Malta Financial Services Authority, offering both long term and general insurance products across European markets. The website reflects a professional and consistent brand presence, with clear navigation and multilingual support, targeting European customers in the automotive finance sector. Technically, the site is built on WordPress with modern SEO and cookie consent tools, ensuring compliance with GDPR and providing a user-friendly experience across devices. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though additional security headers and explicit security policies could enhance trust further. Overall, the site demonstrates a mature digital presence aligned with its business objectives and regulatory requirements.
Community Nursing Servicescns-cares.org
Healthcare · United States
57Medium
NIS2 0 · GDPR 43
NIS2 0 · GDPR 43
Community Nursing Services is a well-established non-profit healthcare provider specializing in home health care, hospice, and related medical services across Utah. With nearly 100 years of experience, the organization serves patients and families seeking compassionate, high-quality care in their homes. The website reflects a mature business with a clear market position and a comprehensive range of services including home medical equipment, infusion pharmacy, and immunizations. Their target audience primarily includes elderly and chronically ill patients and their caregivers within Utah. Technically, the website is built on Joomla CMS using the Astroid template framework and incorporates modern web technologies such as jQuery, Bootstrap, and Smart Slider 3. The site is mobile-optimized with good navigation and SEO practices, though accessibility could be improved. Security posture is strong with HTTPS, security headers, and CSRF protections, but lacks some privacy compliance features such as cookie consent mechanisms and terms of service documentation. Overall, the security posture is solid with no critical vulnerabilities detected. The site demonstrates compliance with HIPAA privacy requirements and includes a privacy policy. However, it would benefit from enhanced privacy compliance features and a formal vulnerability disclosure policy. The WHOIS data aligns well with the website's claims, indicating a legitimate and trustworthy organization. Strategically, CNS should focus on improving privacy compliance and transparency to strengthen user trust and regulatory adherence. Enhancing accessibility and publishing incident response contacts would further improve their security culture and user confidence.
- Poker Loco
pokerloco.com
Other
51Medium
NIS2 5 · GDPR 40
NIS2 5 · GDPR 40
Poker Loco is a specialized online platform dedicated to providing comprehensive information, reviews, and resources related to online poker. The website targets poker players of all skill levels, offering detailed guides, strategy tips, and curated lists of reputable poker sites and bonuses. Its business model is primarily affiliate marketing, leveraging expert content to drive traffic to partner poker platforms. The site maintains a consistent brand presence and offers a good user experience with clear navigation and relevant content. Technically, Poker Loco is built on WordPress with modern SEO and analytics tools integrated, ensuring good performance and mobile optimization. Security-wise, the site uses HTTPS and basic best practices but could enhance its security headers and policies. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, Poker Loco presents a trustworthy and professional online presence with a solid foundation for growth in the online poker niche.
- GGraeme Jenkinson
graemejenkinson.co.uk
Technology · United Kingdom
28High
NIS2 0 · GDPR 25
NIS2 0 · GDPR 25
Graeme Jenkinson's website presents a specialized service focused on creating responsive and well-coded HTML email campaigns aimed at improving customer engagement and brand reputation. The site targets businesses and marketers looking for expert email marketing solutions, positioning itself as a niche provider with a strong emphasis on quality email design and coding. The business model is service-oriented, primarily catering to small business clients or individual professionals. Technically, the website uses standard HTML5 and CSS3 with jQuery and Fancybox libraries for interactive elements. The presence of a cookie consent banner from WebsitePolicies.io indicates some attention to privacy compliance, though no formal privacy or terms of service pages are found. The site appears moderately optimized for mobile devices and has a clear, structured layout, but lacks advanced SEO and accessibility features. From a security perspective, the site lacks visible HTTPS enforcement and security headers, which are critical for protecting user data and establishing trust. No incident response or security policy information is provided, and the use of outdated JavaScript libraries could expose the site to vulnerabilities. The absence of direct contact information such as email or phone numbers limits user trust and engagement potential. Overall, the website is functional and professionally presented but requires significant improvements in security posture, privacy compliance, and contact transparency to enhance trustworthiness and reduce risk. Strategic recommendations include implementing HTTPS, adding comprehensive privacy and security policies, updating technical components, and providing clear contact channels.
- HHugeDomains
conligus.com
E-commerce · United States
50Medium
NIS2 0 · GDPR 28
NIS2 0 · GDPR 28
HugeDomains operates as a specialized e-commerce platform focused on the sale of premium domain names, including Conligus.com. The website provides clear purchase options including immediate buy and payment plans, supported by trust signals such as a 30-day money back guarantee and customer testimonials. The platform targets individuals and businesses seeking valuable domain assets, positioning itself as a reliable domain reseller with a history dating back to 2005. Technically, the site employs modern web technologies including jQuery, Google Analytics, Google reCAPTCHA Enterprise, and CookieYes for consent management. The site is mobile optimized with good SEO and basic accessibility features. Performance is moderate, with room for improvement in accessibility and security headers. Hosting details are not explicitly disclosed. From a security perspective, the website uses HTTPS with strong SSL configuration and implements bot protection and cookie consent mechanisms. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure information. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is well addressed with clear privacy and cookie policies. Overall, the website demonstrates a solid business credibility and security posture suitable for its e-commerce domain sales model. Strategic improvements in security policy transparency, accessibility, and security headers would enhance trust and compliance further.
- MMoody's Corporation
rms.com
Finance · United States
60Medium
NIS2 13 · GDPR 48
NIS2 13 · GDPR 48
Moody's Corporation operates a comprehensive insurance risk solutions platform serving insurers, reinsurers, brokers, and related professionals. The company leverages over 30 years of expertise in catastrophe risk modeling, actuarial systems, underwriting, and risk management, integrating advanced data, AI, and cloud-native technologies to deliver scalable, accurate, and efficient solutions. Moody's holds a strong market position as an industry leader with a broad portfolio of services and a global enterprise footprint. Technically, the website is built on modern frameworks including React and Adobe Experience Manager, with robust performance, mobile optimization, and accessibility features. Security posture is strong with HTTPS enforcement, content security policies, CAPTCHA-protected forms, and cookie consent mechanisms, though additional security headers and a published security.txt file would enhance defenses. Overall, Moody's website demonstrates high professionalism, trustworthiness, and compliance with privacy regulations, supporting its credibility and business objectives.
- DDavid Padworny
padworny.com
Other
32High
NIS2 0 · GDPR 10
NIS2 0 · GDPR 10
The website padworny.com serves as an online portfolio for artist David Padworny, showcasing various art forms including painting, drawing, photography, sculpture, and assemblage. The site provides links to different series of artworks, photo journals, exhibitions, and an Etsy shop for online sales. The target audience includes art enthusiasts, collectors, and galleries interested in contemporary art. The business model is primarily an artist portfolio with online sales through third-party platforms. Technically, the website is built with basic HTML and CSS without modern frameworks or CMS, and lacks mobile optimization and advanced SEO features. Security posture is weak, with no HTTPS detected in the provided content, absence of security headers, and no privacy or cookie policies, which exposes the site to risks and compliance issues. Contact information is limited to a contact page link without explicit emails or phone numbers. Overall, the site is functional but basic, with significant room for improvement in security, privacy compliance, and technical modernization.
iLab Photoilabphoto.com
Retail · Malta
60Medium
NIS2 5 · GDPR 28
NIS2 5 · GDPR 28
iLab Photo is a well-established professional photographic lab based in Qormi, Malta, with a legacy dating back to 1964. The company offers a broad range of photographic printing services, photo gifts, fine art printing, photo books, interior decor, and camera equipment sales. Their target audience includes photographers and photo enthusiasts seeking high-quality printing and photographic products. The website reflects a solid market position as a trusted local provider with a comprehensive product and service portfolio. Technically, the site is built on the Dakis CMS platform, leveraging modern web technologies such as jQuery, FontAwesome, Google Fonts, and analytics tools like Google Analytics, Hotjar, and Snowplow. The site is responsive and performs well across devices, with good SEO and basic accessibility features. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security headers and policies are lacking. Privacy compliance is partial, with no cookie consent mechanism detected. Overall, the website demonstrates good business credibility and digital maturity, though improvements in privacy and security transparency are recommended.
TBH Globaltbh.com.au
Other · Australia
39High
NIS2 0 · GDPR 43
NIS2 0 · GDPR 43
TBH Global is a well-established Australian consultancy specializing in project delivery advisory services, with a market position as the largest privately owned independent consultancy in Australia. Their key services include specialist planning and management for both public and private sectors. The website reflects a mature business with consistent branding, comprehensive content, and a professional digital presence. Technically, the site is built on WordPress with modern frameworks like Bootstrap and integrates multiple marketing and analytics tools, including Google Tag Manager, LeadFeeder, and Marketo. The site is mobile-optimized and SEO-friendly, though performance is moderate. Security posture is solid with HTTPS enforced and ISO certifications (45001, 9001, 14001) prominently displayed, but lacks some advanced security headers and explicit incident response information. Privacy compliance is well addressed with cookie consent and a comprehensive privacy policy. Overall, the site is trustworthy and professional, supporting the company's credibility and market standing.
Librologiclibrologic.com
Media
50Medium
NIS2 0 · GDPR 28
NIS2 0 · GDPR 28
Librologic is a specialized company blending data analytics and visualization to serve the entertainment industry. Their website presents a professional image focused on transforming raw data into engaging experiences for entertainment audiences. The company targets media professionals and data users within the entertainment sector, positioning itself as a forward-thinking niche player. Technically, the website is built on WordPress using Visual Composer, with modern libraries like jQuery and FontAwesome. The site is mobile-optimized and performs moderately well, though accessibility and SEO could be improved. Security posture is adequate with HTTPS enabled but lacks important security headers and formal security policies. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism or GDPR-specific details. Contact information is limited to emails without phone or physical address details. Overall, the site is functional and professional but would benefit from enhanced security and privacy practices.
Other
48High
NIS2 5 · GDPR 25
NIS2 5 · GDPR 25
The website enrichmedium.com is currently inaccessible due to an HTTP 403 Forbidden error indicating that access to the site is denied. The page content is minimal and primarily consists of an error message and a Chrome Dinosaur offline game script, suggesting this is a default error or offline page rather than the actual website content. No business, contact, or policy information is available for analysis. The technical infrastructure appears to be minimal with no HTTPS enforcement or security headers visible. Overall, the site lacks content and compliance features, resulting in a low trust and security posture assessment.
- HHugeDomains.com
redexecutive.com
E-commerce · United States
50Medium
NIS2 0 · GDPR 28
NIS2 0 · GDPR 28
HugeDomains.com operates as a reputable domain marketplace specializing in premium domain sales, exemplified by the RedExecutive.com listing. The business targets individuals and companies seeking valuable domain names, offering flexible payment plans and secure purchasing options. The website is professionally designed with clear navigation and trust signals such as a 30-day money back guarantee and customer testimonials. Technically, the site employs modern web technologies including jQuery, Google Analytics, and Google reCAPTCHA Enterprise, ensuring a secure and user-friendly experience. Security posture is strong with HTTPS enforced, secure forms, and cookie consent mechanisms, though explicit security policies and vulnerability disclosures are absent. Overall, the domain and website demonstrate legitimacy and consistency with the business model, supported by partner integrations with NameBright.com and Escrow.com.
Car Cliniccarclinic.it
Transportation · Italy
59Medium
NIS2 5 · GDPR 43
NIS2 5 · GDPR 43
Car Clinic is a leading Italian company specializing in car body repairs, operating a large network of over 50 owned centers and 60 partner centers nationwide. The company offers high-quality repair services, insurance claim management, and customer convenience features such as online appointment booking and home pickup and delivery. Their digital infrastructure is modern, leveraging React and Next.js frameworks, integrated with Google Maps API and advanced consent management tools. Security posture is strong with HTTPS enforcement and cookie consent mechanisms, although explicit security policies and incident response details are not publicly available. Overall, Car Clinic presents a professional, trustworthy, and user-friendly online presence, well-aligned with its business operations and market position.
- Salesians of Don Bosco Australia-Pacific Province
salesians.org.au
Non-profit · Australia
36High
NIS2 5 · GDPR 10
NIS2 5 · GDPR 10
The Salesians of Don Bosco Australia-Pacific Province is a well-established non-profit religious organization dedicated to youth ministry and community service across Australia and the Pacific region. Their website reflects a medium-sized organization with a consistent brand and a clear mission to serve young people through spiritual and educational programs. The site offers resources, news, and event information targeting youth and supporters of the Salesian mission. Technically, the website is built on Joomla CMS using the Gridbox builder and Bootstrap framework, providing a moderate performance and good mobile responsiveness. Security posture is adequate with HTTPS enforced but lacks advanced security headers and formal policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the website is professional and trustworthy but would benefit from enhanced compliance and security measures.
Caruana & Cini Co. Ltd.caruanacini.com
Retail · Malta
55Medium
NIS2 5 · GDPR 63
NIS2 5 · GDPR 63
Caruana & Cini Co. Ltd. is a well-established retail company based in Malta, specializing in home furniture and interior design products. Their website showcases a comprehensive range of products including bathrooms, kitchens, coverings, furniture, outdoor items, and decor, supported by a multi-floor showroom in Gozo. The company targets homeowners, architects, and designers seeking quality and stylish home furnishings. Technically, the website is built on the Wix platform utilizing modern technologies such as React and various Wix apps, ensuring a fast and functional user experience with basic mobile optimization. Security-wise, the site enforces HTTPS, includes privacy and cookie policies with consent mechanisms, and follows good security practices typical of the Wix platform. However, explicit security policies and incident response information are absent. Overall, the website demonstrates a solid digital presence with good business credibility and technical implementation, though there is room for enhanced security transparency and mobile responsiveness.
Groupe Partouchegroupepartouche.com
Hospitality · France
57Medium
NIS2 0 · GDPR 25
NIS2 0 · GDPR 25
Groupe Partouche is a leading European casino operator established in 1973, managing 44 casinos across France, Switzerland, Belgium, and Tunisia. The company also offers complementary hospitality services including hotels, restaurants, thermal centers, golf courses, spas, and beaches, positioning itself as a comprehensive leisure group. The website reflects a professional and consistent brand image with good content quality and clear navigation, targeting customers and partners in the hospitality and gaming sectors. Technically, the site uses the modern Astro framework and includes multimedia integration such as Vimeo, indicating a contemporary digital infrastructure. However, there is room for improvement in security posture, particularly in implementing security headers and explicit incident response policies. Privacy compliance is partially met with a privacy policy present but lacks a cookie consent mechanism. Overall, the site is trustworthy and well-positioned but would benefit from enhanced security and privacy features.
Signature Private Officethesignatureselection.com
Finance · Malta
32High
NIS2 5 · GDPR 55
NIS2 5 · GDPR 55
Signature Private Office is a Malta-based global provider specializing in corporate services, company formations, business aviation, superyachts registration, and citizenship and residency programs. Positioned as a trusted adviser in Mediterranean and international markets, the company offers tailored solutions for individuals and businesses seeking corporate and asset management services. Their portfolio includes company formation in multiple jurisdictions, citizenship by investment, residency by investment, and banking solutions. The website reflects a professional and consistent brand image with clear navigation and comprehensive service descriptions. Technically, the site is built on WordPress with modern plugins such as Elementor and Yoast SEO, ensuring good performance, mobile optimization, and SEO readiness. Security measures include HTTPS, Google reCAPTCHA on forms, and a cookie consent mechanism, although explicit security policies and incident response information are not found. Overall, the website demonstrates a solid security posture with no visible vulnerabilities or exposed sensitive data. The domain registration data aligns well with the business claims, enhancing trustworthiness. Strategic recommendations include implementing security headers, publishing a security policy, and enhancing incident response visibility to further strengthen security and compliance.
- Charles de Giorgio Ltd
charlesdegiorgio.com
Healthcare · Malta
38High
NIS2 5 · GDPR 58
NIS2 5 · GDPR 58
Charles de Giorgio Ltd is a Malta-based distribution company specializing in healthcare, household, and beauty products. The company holds a strong market position as a leading distributor in Malta, partnering with global brands such as Sanofi, Eli Lilly, and Reckitt Benckiser. Their business model focuses on comprehensive distribution services including logistics, warehousing compliant with EU standards, sales and marketing, relabelling licensed by the Malta Medicines Authority, servicing, and regulatory affairs. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the website is built on WordPress using common plugins such as WPBakery Page Builder and LayerSlider. It employs modern web technologies including JavaScript, jQuery, and Google Analytics for tracking. The site is mobile optimized and performs moderately well, with good SEO practices implemented via Yoast SEO. However, some accessibility features are basic and could be improved. From a security perspective, the site uses HTTPS with excellent SSL configuration and no visible exposed sensitive data. Cookie consent is implemented, but explicit security policies and incident response information are absent. No critical vulnerabilities or suspicious domains were detected. The domain registration details align well with the business claims, supporting legitimacy and trustworthiness. Overall, the website demonstrates a solid business presence with moderate technical maturity and a good security posture. Privacy compliance could be enhanced by providing more comprehensive GDPR-related disclosures and policies. Strategic improvements in security headers and incident response transparency would further strengthen the site’s security and trust profile.
IDA Insurance Limitedvinginsurance.com
Other · Malta
55Medium
NIS2 0 · GDPR 43
NIS2 0 · GDPR 43
IDA Insurance Limited operates as a specialized insurance provider focusing on diving-related insurance products, serving primarily DAN Europe members. The company is regulated by the Malta Financial Services Authority, ensuring compliance with European insurance regulations. The website reflects a professional and consistent brand presence, offering clear information about their services including medical evacuation, emergency treatment, and search and rescue coverage for diving incidents. Technically, the website is built on WordPress with modern plugins and technologies such as Google reCAPTCHA and Iubenda for cookie management, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced and anti-spam measures in place, though formal security policies and incident response contacts are absent. Overall, the site demonstrates good privacy compliance and business credibility, with room for improvement in security transparency and accessibility.
Other
49High
NIS2 0 · GDPR 15
NIS2 0 · GDPR 15
The website at adjarabet.com currently serves as a minimal container page embedding content from restriction.adjarabet.com via an iframe. There is no visible content, metadata, or business information directly on the page. This limits the ability to assess the company's market position, services, or audience. The technical infrastructure appears minimal with no detected scripts or frameworks, and no CMS or hosting details are available from the provided data. Security posture is weak due to lack of HTTPS confirmation, absence of security headers, and no visible privacy or cookie policies. Overall, the site lacks essential elements for trust and compliance, posing risks for user experience and regulatory adherence. Strategic improvements are needed to enhance content richness, security, and transparency.
iLink Digital, Inc.ilink-systems.com
Technology · United States
60Medium
NIS2 5 · GDPR 43
NIS2 5 · GDPR 43
iLink Digital, Inc. is a large, established technology company specializing in digital transformation services and solutions. Their website showcases a comprehensive range of services including AI, data analytics, cloud services, security, and conversational AI, targeting enterprise clients globally. The company maintains strong partnerships with major technology providers such as Microsoft, AWS, Salesforce, and others, reinforcing their market position as a trusted digital transformation partner. The website is professionally designed with clear navigation and rich content including case studies and client testimonials, reflecting a mature digital presence. Technically, the website is built on WordPress using modern frameworks and plugins such as Elementor, Smart Slider 3, and various security and performance optimization tools. The site is mobile-optimized and implements good SEO and accessibility practices. Security posture is strong with HTTPS enforced, security headers present, and use of reCAPTCHA and security hardening plugins. No critical vulnerabilities or exposed sensitive data were detected. Overall, the site demonstrates a high level of digital maturity and security awareness, supporting the company's credibility and trustworthiness. However, there is room for improvement in explicitly publishing security policies, incident response procedures, and vulnerability disclosure mechanisms to enhance transparency and compliance. The risk assessment is low with no critical issues found. Strategic recommendations include adding dedicated security and incident response information, ensuring all resources load correctly, and maintaining up-to-date software to mitigate potential vulnerabilities.
Dreemz Plannersdreemzplanners.com
Hospitality · Malta
44High
NIS2 0 · GDPR 10
NIS2 0 · GDPR 10
Dreemz Planners is a specialized wedding planning service operating in Malta, focusing on destination weddings including Indian, same-sex, garden, and beach weddings. The company offers customized packages tailored to client budgets and needs, positioning itself as a niche service provider in the hospitality sector. The website reflects a small business with a clear target audience of couples seeking wedding planning services in Malta. Technically, the site is built on WordPress using Elementor and the Sydney theme, incorporating modern web technologies such as Bootstrap and Google reCAPTCHA v3 for spam protection. The site is mobile-optimized and includes embedded YouTube videos in privacy-enhanced mode. Security posture is moderate with HTTPS enabled and reCAPTCHA implemented, but lacks security headers and explicit security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Contact information is clearly presented, enhancing business credibility. Overall, the website is functional and professional but could improve in privacy and security transparency.
Aromatherapy Associatesaromatherapyassociates.com
Retail · United Kingdom
66Medium
NIS2 5 · GDPR 48
NIS2 5 · GDPR 48
Aromatherapy Associates is a well-established global brand specializing in aromatherapy, wellness, skincare, and home fragrance products. The company operates a professional e-commerce platform hosted on Shopify, offering a wide range of products including bath and body oils, home fragrance kits, skincare, and subscription services. The website demonstrates a strong market position with consistent branding, comprehensive content, and a clear focus on customer wellness and experience. The technical infrastructure leverages modern technologies and integrations such as Klevu Search, Yotpo for reviews, Klaviyo for marketing, and Global-e for cross-border e-commerce, indicating a mature digital presence. Security measures are robust with HTTPS enforcement, appropriate security headers, and secure form implementations, although there is room for improvement in publishing explicit security policies and incident response information. Overall, the website is professional, secure, and compliant with privacy regulations, reflecting a trustworthy and credible business entity.
Energy
23Critical
NIS2 0 · GDPR 10
NIS2 0 · GDPR 10
RECC Group is a small consultancy specializing in renewable energy and cleantech projects, focusing on structuring public-private partnerships to enable governmental agencies and investors to deploy energy efficiency and infrastructure projects. The website is built on WordPress using the Genesis framework and Expose theme, with basic technical implementation and moderate performance. Security posture is weak due to lack of HTTPS, absence of security headers, and missing privacy and cookie policies. Contact information is limited to an email address and LinkedIn profile, with no phone or physical address provided. Overall, the site provides basic business information but lacks critical security and compliance features, which poses risks to trust and user data protection.
- EENI
eni.be
Energy · Italy
42High
NIS2 5 · GDPR 43
NIS2 5 · GDPR 43
ENI is a large, established integrated energy company headquartered in Italy, with a strong global presence and commitment to energy transition and sustainability. The website reflects a mature digital infrastructure using modern technologies such as Bootstrap, jQuery, and Adobe Experience Manager, ensuring a fast, mobile-optimized, and accessible user experience. Security posture is strong with HTTPS, security headers, and secure login portals, though there is room for improvement in public vulnerability disclosure and incident response transparency. Overall, the site is professional, trustworthy, and well-aligned with corporate governance and investor relations best practices.
Other
49High
NIS2 0 · GDPR 25
NIS2 0 · GDPR 25
The website highpulse.com is currently a parked domain with minimal content, primarily displaying a domain sale advertisement and an embedded iframe loading advertising content from an unrelated domain. There is no active business presence, no privacy or cookie policies, no contact information, and no security best practices implemented. The domain uses HTTP only, lacking HTTPS encryption, and no security headers are present. The technical infrastructure is basic, relying on standard HTML, CSS, and JavaScript with content delivery via AWS Cloudfront. Overall, the site lacks professionalism and trustworthiness, serving only as a domain resale placeholder.
Oney bankoney.com
Finance · France
55Medium
NIS2 5 · GDPR 25
NIS2 5 · GDPR 25
Oney bank is a well-established financial services company based in France, specializing in payment solutions, credit, and insurance services. With over 35 years of experience and a strong presence in multiple European countries, Oney positions itself as a partner of commerce, focusing on innovation, responsibility, and human-centric financial services. The company is majority-owned by BPCE and ELO (ex-Auchan Holding), reinforcing its credibility and market position. The website reflects a professional corporate identity with comprehensive information about the company, its governance, and its services. Technically, the website is built on WordPress with modern web technologies including Yoast SEO, jQuery, GSAP, and others, ensuring good performance, SEO, and accessibility. The site is mobile-optimized and uses HTTPS with no visible security issues. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Security posture is solid with HTTPS enforcement and no exposed sensitive data, although explicit security policies and incident response contacts are not found. The site uses Tealium for analytics and tracking, indicating moderate user tracking with privacy considerations. Overall, the website is trustworthy, professional, and compliant with relevant regulations. Recommendations include adding explicit security and incident response policies, enhancing security headers, and maintaining regular audits of third-party scripts to further strengthen security and compliance.
Luna BVluna.be
Media · Belgium
33High
NIS2 0 · GDPR 58
NIS2 0 · GDPR 58
Luna BV is a medium-sized Belgian communication agency specializing in PR, content marketing, copywriting, business development, and employer branding. The company positions itself as a proactive and creative partner offering a comprehensive range of communication services to a select client base. The website reflects a professional and consistent brand image, supported by client testimonials and industry memberships such as the International Public Relations Network. Technically, the site is built on WordPress with modern themes and plugins, including Kadence and CleanTalk for spam protection, and employs Google Analytics and CookieYes for analytics and cookie consent management. Security posture is strong with HTTPS enforced and anti-spam measures in place, though explicit security headers could be improved. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, Luna demonstrates a mature digital presence with good security and privacy practices, suitable for its business model and market niche.
Other
45High
NIS2 0 · GDPR 0
NIS2 0 · GDPR 0
The website scommesseitalia.it is currently inaccessible due to a Cloudflare security block page preventing access to any actual content. As a result, no business information, contact details, or policy documents are available for analysis. The site appears to be protected by Cloudflare's Web Application Firewall (WAF), which has triggered a block likely due to perceived suspicious activity or security rules. This limits the ability to assess the company's market position, services, or technical infrastructure beyond the presence of Cloudflare protection. The security posture cannot be fully evaluated, but the presence of a WAF indicates some level of security awareness. However, the lack of accessible content and policies results in a low overall trust and compliance score.
Francis J. Vassallo & Associates Ltdfjvassallo.com
Finance · Malta
33High
NIS2 35 · GDPR 28
NIS2 35 · GDPR 28
Francis J. Vassallo & Associates Ltd (FJVA) is a Malta-based professional services firm specializing in corporate, financial, regulatory, and fiduciary services. The company offers a broad range of tailored solutions including corporate services, restructuring, family business support, financial advisory, and migration solutions. Their market position is solid within the Maltese financial services sector, supported by regulatory authorizations from the Malta Financial Services Authority. The website reflects a professional and consistent brand image targeting businesses and individuals seeking expert advisory and fiduciary services in Malta and Luxembourg. Technically, the site is built on WordPress using modern plugins and themes, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks explicit security headers and cookie consent mechanisms, which are recommended for compliance and enhanced security. Analytics usage is moderate, employing Google Analytics and Tag Manager for user tracking. Overall, the site is trustworthy and professionally maintained, with clear contact information and social media presence.
Innovantinnovant.com
Manufacturing · United States
43High
NIS2 5 · GDPR 43
NIS2 5 · GDPR 43
Innovant is a medium-sized company specializing in custom workspace design and manufacturing, delivering award-winning office furniture solutions that emphasize collaboration and performance. Their website reflects a mature digital presence built on WordPress, integrating modern technologies such as Gravity Forms for data collection and HubSpot for analytics and marketing. The site is well-structured, mobile-optimized, and compliant with privacy regulations including GDPR, featuring clear privacy and cookie policies with consent mechanisms. Security posture is solid with HTTPS and secure form handling, though there is room for improvement in implementing security headers and publishing explicit security policies. Overall, Innovant presents a trustworthy and professional online presence aligned with its business claims and domain registration data.
Grimaldi Commercial Realty Corp.grimaldicommercialrealty.com
Real Estate · United States
32High
NIS2 0 · GDPR 10
NIS2 0 · GDPR 10
Grimaldi Commercial Realty Corp. is a well-established commercial real estate brokerage firm based in Tampa Bay, Florida, with over 40 years of experience since its founding in 1975. The company specializes in a broad range of commercial real estate services including sales, leasing, property management, valuation, and investment analysis. Their target audience includes commercial property buyers, sellers, investors, landlords, tenants, and financial institutions primarily in the Tampa Bay area. The firm holds a reputable market position supported by industry awards and a strong local presence. Technically, the website employs a traditional tech stack with jQuery, Bootstrap, and various plugins to deliver a functional and moderately optimized user experience. While the site is accessible and well-structured with good navigation and content relevance, mobile optimization and accessibility are basic. The site integrates Google Analytics and Google Tag Manager for tracking but lacks advanced privacy compliance features such as cookie consent banners or privacy policies. From a security perspective, the website lacks visible HTTPS enforcement and security headers, and uses outdated JavaScript libraries that may expose it to vulnerabilities. There is no evidence of formal security policies or incident response contacts. These gaps present moderate security risks that should be addressed to protect user data and enhance trust. Overall, the website is professional and credible from a business standpoint but requires significant improvements in security posture and privacy compliance to meet modern standards and regulatory requirements.
PortXmodusbox.com
Finance · United States
58Medium
NIS2 5 · GDPR 60
NIS2 5 · GDPR 60
PortX is a specialized AI-powered integration platform provider serving banks, credit unions, fintechs, and core banking systems. Their flagship product, Fintech Hub, offers a comprehensive integration-platform-as-a-service (iPaaS) that enables seamless connectivity, payment automation, and intelligent data management. The company positions itself as a leader in financial infrastructure technology with a strong focus on AI-driven solutions and an open, modular architecture. Their market presence is supported by partnerships with major financial institutions and fintechs, as well as participation in key industry events. Technically, the website is built on WordPress using modern frameworks like Bootstrap and incorporates advanced features such as Lottie animations and HubSpot marketing tools. The site is mobile-optimized, accessible, and demonstrates good SEO practices. The use of HubSpot forms and Google Analytics indicates a mature digital marketing and analytics infrastructure. From a security perspective, PortX maintains a strong posture with HTTPS enforced, multiple security headers, and no visible vulnerabilities or exposed sensitive data. They hold ISO 27001 and SOC2 certifications, reinforcing their commitment to security and compliance. However, the absence of a public vulnerability disclosure policy and incident response contact details suggests areas for improvement. Overall, PortX presents a professional, trustworthy, and well-secured digital presence aligned with its business objectives. The company is well-positioned in the financial technology sector, with a clear focus on AI-powered integration solutions. Strategic recommendations include enhancing transparency around security incident response and vulnerability disclosures to further strengthen trust and compliance.
Iglyoiglyo.com
Non-profit organization management · Belgium
49High
NIS2 10 · GDPR 63
NIS2 10 · GDPR 63
Knockout Gamingknockoutgaming.com
Technology
48High
NIS2 0 · GDPR 10
NIS2 0 · GDPR 10
Knockout Gaming is a technology company specializing in providing turnkey white label gaming platforms to operators worldwide. Their offerings include a broad portfolio of over 300 games such as casino games, sportsbook, poker, eSports, live dealers, lotto, and bingo. The company positions itself as a leading provider in the online gaming technology sector, targeting gaming operators seeking fully licensed and regulated solutions. The website content is professionally designed with good navigation and mobile optimization, though it lacks critical compliance documentation such as privacy and cookie policies. Technically, the site uses a modern tech stack with popular libraries and frameworks but lacks visible HTTPS enforcement and security headers, which impacts its security posture. No forms or direct contact information are provided on the homepage, limiting user engagement and trust signals. Licensing badges are prominently displayed, indicating regulatory compliance in various jurisdictions.
Rhino Entertainmentrhino.com
Media
60Medium
NIS2 0 · GDPR 63
NIS2 0 · GDPR 63
Rhino Entertainment operates a comprehensive music entertainment website offering news, artist features, podcasts, playlists, and an e-commerce store for music products. The site is well-branded and targets music fans and collectors with a focus on classic and exclusive releases. Technically, the site is built on Drupal 10 with modern JavaScript libraries and integrates multiple analytics and marketing tools, demonstrating a mature digital infrastructure. Security-wise, the site uses HTTPS and implements cookie consent mechanisms, though there is room for improvement in security headers and explicit security policies. Overall, the website presents a professional and trustworthy front with extensive user tracking balanced by privacy compliance measures.
Salted Stone Inc.thebrandmanager.com.au
Technology · Australia
52Medium
NIS2 5 · GDPR 25
NIS2 5 · GDPR 25
Salted Stone Inc. is a well-established digital marketing and consulting agency based in Australia, specializing in end-to-end marketing, sales, support, and customer success services. The company holds a strong market position as a HubSpot Elite-tier partner and digital growth accelerator, serving businesses seeking strategic and tactical digital solutions. Their service portfolio is comprehensive, covering strategy, marketing, integrations, sales, branding, web development, customer success, and HubSpot-specific solutions. Technically, the website is built on the HubSpot CMS platform, leveraging modern JavaScript libraries and marketing analytics tools such as Hotjar and Google Tag Manager. The site demonstrates good performance, mobile optimization, and SEO practices. Security-wise, the website enforces HTTPS and avoids exposing sensitive data but lacks explicit security headers and formal security policies. Privacy compliance is partial, with cookie consent mechanisms present but no visible privacy or terms of service pages. Overall, the website projects high professionalism and trustworthiness, supported by client logos and endorsements. Recommendations include publishing clear privacy and security policies, enhancing security headers, and improving accessibility features.
- WWintershall Dea GmbH
wintershall.com
Energy · Germany
53Medium
NIS2 0 · GDPR 25
NIS2 0 · GDPR 25
Wintershall Dea GmbH is a leading independent gas and oil company in Europe, with a strong market position in the energy sector. The company focuses on exploration and production of gas and oil, targeting investors, partners, and customers within the energy industry. The website reflects a professional corporate presence with comprehensive content about the company's history, management, and responsibility. The digital infrastructure is built on Drupal CMS, enhanced with Matomo analytics for user tracking under GDPR-compliant cookie consent mechanisms. The site is mobile-optimized and accessible, with clear navigation and consistent branding. From a security perspective, the website enforces HTTPS and employs cookie consent categories, but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. The site integrates multiple marketing and tracking tools including LinkedIn Insight, Google Ads, Meta Pixel, and Twitter tracking, all gated behind user consent. Overall, the security posture is solid but could be improved by adding formal security policies and headers. The domain registration details align well with the company's identity, showing consistency and legitimacy. No WAF or blocking mechanisms interfere with content access, allowing full analysis. The website demonstrates a high level of professionalism and trustworthiness, suitable for its corporate audience and business model.
St. Thomas Health Carestthomashospital.org
Healthcare · United States
46High
NIS2 5 · GDPR 25
NIS2 5 · GDPR 25
St. Thomas Health Care operates a network of urgent care clinics across the United States, focusing on providing fast, efficient, and patient-centered non-emergency medical care. Founded in 2002, the organization has grown to over 50 locations, offering services such as urgent care, physical therapy, occupational health, vaccinations, and telemedicine. The website targets patients, families, employers, and healthcare professionals, positioning itself as a leading provider in the urgent care sector. Technically, the website uses basic web technologies including jQuery and FlexSlider, with some optimization via mod_pagespeed. However, it lacks modern CMS integration, advanced frameworks, and comprehensive SEO or accessibility features. The site is moderately performant but shows signs of outdated content and limited mobile optimization. From a security perspective, the site lacks HTTPS enforcement, security headers, and visible privacy or cookie policies, which are critical for healthcare websites handling sensitive information. No incident response or vulnerability disclosure mechanisms are present. These gaps expose the site to potential risks and reduce user trust. Overall, the website demonstrates a basic online presence with moderate business credibility but significant security and compliance shortcomings. Strategic improvements in security posture, privacy compliance, and technical modernization are recommended to enhance trustworthiness and regulatory adherence.
- MOAS
moas.eu
Non-profit · Malta
47High
NIS2 13 · GDPR 20
NIS2 13 · GDPR 20
MOAS is a well-established international humanitarian NGO focused on rapid response to crises, providing aid such as disaster risk reduction, medical evacuations, educational projects, and nutritional support. The organization operates globally with registrations in multiple countries and a strong digital presence. The website is built on WordPress with modern plugins for SEO, donations, and user engagement, reflecting a mature technical infrastructure. Security measures include HTTPS, reCAPTCHA, and cookie consent mechanisms, indicating a good security posture. However, explicit security policies and incident response contacts are not present, which could be improved. Overall, the site is professional, trustworthy, and compliant with privacy regulations, supporting MOAS's mission and donor engagement effectively.
SEACOR Holdings Inc.seacorholdings.com
Transportation · United States
49High
NIS2 0 · GDPR 25
NIS2 0 · GDPR 25
SEACOR Holdings Inc. operates as a holding company with a portfolio of subsidiaries focused primarily on transportation, logistics, and energy sectors. The company emphasizes safety, service, and success, with a strong commitment to a safe work environment and high performance culture. Their business model revolves around investing in quality assets, technology, and people to deliver outstanding service and create value. The website reflects an established market position with multiple legacy and current holdings, targeting business clients in maritime and logistics industries. Technically, the website is built on a modern stack including Craft CMS, Bootstrap, jQuery, and integrates analytics and tracking tools such as Google Analytics, Google Tag Manager, and Hotjar. The site is mobile optimized and demonstrates good SEO and accessibility basics. Security measures include HTTPS enforcement, CSRF protection on forms, and Google reCAPTCHA integration, although some security headers are missing and no explicit security policy or incident response information is published. The security posture is solid with no visible vulnerabilities or exposed sensitive data, but improvements are recommended in cookie consent mechanisms and publishing vulnerability disclosure policies to enhance compliance and trust. Overall, the website is professional, trustworthy, and reflects a mature business entity with a good digital presence. Strategic recommendations include implementing comprehensive security headers, adding explicit cookie consent for GDPR compliance, publishing a security policy and incident response contacts, and establishing a vulnerability disclosure program to further strengthen security and compliance posture.
Transport for Londontfl.gov.uk
Transportation · United Kingdom
60Medium
NIS2 5 · GDPR 75
NIS2 5 · GDPR 75
Transport for London (TfL) is the official public transport authority for London, providing comprehensive information and services related to various modes of transportation including tube, bus, and cycle hire. The website serves a broad audience including residents, commuters, and tourists, offering real-time updates, route planning, and ticket sales. TfL holds a strong market position as the primary transportation provider in London with a large enterprise scale and a consistent, professional brand presence. Technically, the website employs a modern tech stack including jQuery, Knockout.js, SignalR, and integrates with Cookiebot for consent management and Adobe DTM for marketing analytics. The site is well-optimized for mobile devices and includes accessibility features, though performance is moderate and could benefit from further optimization. Security posture is robust with HTTPS enforced, comprehensive security headers, and no detected vulnerabilities or exposed sensitive data. The organization follows recognized security frameworks such as ISO 27001 and maintains an incident response process with dedicated contact channels. Overall, the website demonstrates a high level of professionalism, security, and privacy compliance, with clear business information and trust indicators. Recommendations include enhancing performance, maintaining up-to-date third-party libraries, and establishing a public vulnerability disclosure policy to further strengthen security and trust.
- AAir CM Global
aircm.aero
Transportation · Malta
38High
NIS2 0 · GDPR 58
NIS2 0 · GDPR 58
Air CM Global is a Malta-based private aviation service provider specializing in private jet charter, aircraft management, sales and acquisitions, and special missions. The company targets high net worth individuals and corporate clients globally, positioning itself as a niche player with a personalized approach and EASA AOC management expertise. The website content is professionally presented with clear navigation and relevant service descriptions, supporting the company's market positioning. Technically, the site is built on WordPress with common web technologies including jQuery and Google Analytics, and it demonstrates good mobile optimization and SEO practices. However, the absence of HTTPS and security headers represents a significant security weakness. Privacy compliance is basic, with cookie consent implemented but no explicit GDPR statements or data protection officer information. Contact information is present but email links are disabled, which may hinder user communication. Overall, the website is functional and credible but requires security and privacy improvements to enhance trust and compliance.
Paperless Europepaperlesseurope.com
Technology · United Kingdom
49High
NIS2 0 · GDPR 58
NIS2 0 · GDPR 58
Paperless Europe Ltd is a UK-based technology company specializing in accounts payable automation and document management software tailored for accounting platforms such as Sage, Xero, and SAP Business One. The company positions itself as a leading provider in the UK market, offering AI-powered invoice recognition, online invoice approval, purchase order matching, and budgeting management solutions. Their target audience primarily includes accountants and finance professionals seeking to streamline financial documentation processes. Technically, the website is built on WordPress with modern front-end technologies including Google Fonts, Google Tag Manager, Microsoft Ads, LinkedIn Insight Tag, and Olark live chat integration. The site is well-optimized for SEO and mobile responsiveness, featuring a comprehensive cookie consent mechanism aligned with GDPR requirements. Hosting appears to leverage Cloudflare services, enhancing performance and security. From a security perspective, the site enforces HTTPS and employs Google reCAPTCHA to mitigate spam. While explicit security headers are not fully confirmed, no critical vulnerabilities or exposed sensitive data were detected. The privacy and cookie policies are comprehensive and include user consent management. However, the site lacks a published security policy or incident response information. Overall, the website demonstrates a mature digital presence with strong business credibility and compliance posture. The absence of direct contact emails and terms of service pages are minor gaps. Strategic recommendations include enhancing security header implementation, publishing a security policy, and adding vulnerability disclosure information to further strengthen trust and compliance.
- MRR SAP CRM
mrr.es
Technology
31High
NIS2 5 · GDPR 0
NIS2 5 · GDPR 0
The website mrr.es presents a small business specializing in SAP CRM and SAP CX consulting services, targeting professionals and companies interested in SAP solutions. The site is minimalistic, providing basic information about expertise in SAP CRM and a single contact email. The technical infrastructure is simple, relying on basic HTML and CSS without advanced frameworks or CMS. There is no evidence of HTTPS or security headers, which poses a significant security risk. Privacy and cookie policies are absent, indicating low compliance with data protection regulations. Overall, the website's digital maturity is low, with limited content and minimal technical sophistication.
Hospitality · United States
24Critical
NIS2 0 · GDPR 10
NIS2 0 · GDPR 10
Brewhausbar.com represents a small hospitality business specializing in German American pub cuisine and craft brews, operating since 2011 in Chattanooga, Tennessee. The website effectively communicates the business's offerings, including food and drink menus, customer testimonials, and social media presence, positioning it as a local niche pub with a casual dining experience. Technically, the site is built on WordPress with Elementor and Yoast SEO, providing a modern and SEO-friendly infrastructure with moderate performance and good mobile optimization. Security posture is basic with HTTPS enabled but lacking advanced security headers and formal security policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the site is functional and professional but would benefit from enhanced security and compliance features.