Security reports directory
150,193 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,193001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
137,401–137,450 of 150,193
- Friendly Persuasion
friendlypersuasion.net
Other · Australia
48High
NIS2 0 · GDPR 25
NIS2 0 · GDPR 25
Friendly Persuasion is a small Australian-based service provider specializing in correspondence rewriting, copywriting, coaching, and consulting to improve customer experience through clear and human communication. The website presents a professional image with consistent branding and client testimonials, positioning itself as a niche player focused on enhancing brand voice and customer correspondence. Technically, the site is built on the Wix platform using modern JavaScript frameworks such as React and Webpack, ensuring good performance and basic mobile optimization. Security posture is adequate with HTTPS enforced and some JavaScript security hardening, but lacks comprehensive security headers and published security policies. Privacy compliance is weak due to the absence of privacy and cookie policies or consent mechanisms. Overall, the site is trustworthy and professional but would benefit from enhanced privacy and security disclosures.
- FFjeld Shipping AS
igglimited.com
Transportation · Norway
64Medium
NIS2 5 · GDPR 58
NIS2 5 · GDPR 58
Fjeld Shipping AS is a Norwegian maritime logistics and transportation company specializing in comprehensive shipping solutions for a global clientele. The company positions itself as a trusted partner in the maritime industry, offering services that cater to diverse client needs worldwide. The website reflects a professional image with clear branding and a focus on maritime excellence and global reach. Technically, the website employs modern technologies such as Bootstrap 5, jQuery, and Font Awesome 6 Pro, ensuring a responsive and visually appealing user experience. The presence of a cookie consent mechanism and a privacy policy indicates attention to privacy compliance, particularly GDPR. However, explicit security policies and incident response information are absent, suggesting areas for improvement in security transparency. Overall, the website is functional, well-structured, and provides essential business and contact information, supporting its credibility in the maritime sector.
- American Bureau of Shipping
eagle.org
Energy · United States
66Medium
NIS2 43 · GDPR 63
NIS2 43 · GDPR 63
The American Bureau of Shipping (ABS) is a globally recognized ship classification organization committed to safety, excellence, and innovation in the marine and offshore industries. Their website reflects a mature, enterprise-grade digital presence built on Adobe Experience Manager, integrating modern technologies such as MSAL for authentication and multiple analytics and marketing tools. The site offers comprehensive content covering classification services, regulatory updates, sustainability initiatives, and cybersecurity programs, targeting marine industry professionals, governments, and manufacturers. Security practices are robust with HTTPS, load balancing, bot detection, and a detailed cookie consent mechanism, though explicit security and incident response policies are not publicly detailed. Overall, the website demonstrates high professionalism, trustworthiness, and compliance with privacy regulations, supporting ABS's market position as a leading classification society.
- HHangar
madebyhangar.com
Technology · Malta
34High
NIS2 5 · GDPR 40
NIS2 5 · GDPR 40
Hangar is a Malta-based branding and design studio specializing in creating humanly relatable brands and products for startups and scaleups in technology sectors such as fintech, health tech, edtech, AI, VR, and blockchain. The company positions itself as a trusted partner for ambitious entrepreneurs, supported by notable venture capital firms. Their key services include brand identities, web design and development, and product and UX design. The website demonstrates a professional and consistent brand presence with a strong portfolio and client testimonials. Technically, the website uses Craft CMS and integrates modern technologies such as Google Tag Manager and Vimeo Player API for analytics and media delivery. The site is mobile optimized with good SEO practices and moderate performance. However, some accessibility features could be improved. From a security perspective, the site uses HTTPS and implements CSRF protection via cookies. It also provides a cookie consent mechanism compliant with GDPR principles. However, it lacks visible security headers, a published security policy, incident response information, and vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website is trustworthy and professional but would benefit from enhanced security policies and privacy documentation to improve compliance and user trust.
Other
44High
NIS2 0 · GDPR 15
NIS2 0 · GDPR 15
The website at tubes.net.au currently presents an extremely minimal HTML page with no substantive content, metadata, or business information. The only active element is a JavaScript fetch call to 'tubes.php', which is not further detailed. This suggests the site is either under development or serves as a placeholder. There is no visible branding, contact information, or user engagement features. The lack of HTTPS and security headers indicates a poor security posture. No privacy or cookie policies are present, indicating non-compliance with common data protection regulations. Overall, the site lacks maturity and does not provide sufficient information to assess business operations or credibility.
- EEuropearl Studios
europearl.net
Other
37High
NIS2 5 · GDPR 25
NIS2 5 · GDPR 25
Europearl Studios currently maintains a minimal web presence consisting solely of an under construction placeholder page. The site lacks substantive content, metadata, or any business-related information, indicating that the company’s digital footprint is not yet established. There is no indication of the company's market position, services, or target audience from the website content. Technically, the site is very basic with no detected CMS, frameworks, or modern technologies. There is no evidence of HTTPS or security best practices implemented, which poses a risk to visitors and undermines trust. The absence of privacy, cookie, or terms of service policies further highlights a lack of compliance with data protection regulations. Overall, the website is not currently suitable for business operations or customer engagement.
- CCybergaming Consultants
cybergamingconsultants.com
Technology · Malta
32High
NIS2 0 · GDPR 10
NIS2 0 · GDPR 10
Cybergaming Consultants is a specialized consultancy focused on regulatory compliance and legal advisory services for the remote gaming industry, particularly in Malta. The company leverages deep expertise in Malta's Remote Gaming Regulations and offers strategic guidance to operators seeking to establish or consolidate gaming operations. The website reflects a professional consultancy with clear contact information and a focus on regulatory excellence. Technically, the website is built on WordPress using Elementor and related plugins, with a moderate performance profile and good mobile optimization. However, there is a lack of visible security headers and no explicit HTTPS confirmation in the provided data, which suggests potential security improvements are needed. Privacy compliance is minimal, with no explicit cookie consent mechanisms or detailed privacy policies. Security posture is moderate but could be enhanced by implementing standard security headers, HTTPS enforcement, and incident response policies. The absence of analytics and advertising scripts indicates minimal user tracking, which is positive for privacy but also limits marketing insights. Overall, the website is functional and professional but would benefit from enhanced security and privacy compliance measures to improve trust and regulatory adherence.
- Retail Marketing Group
retailmarketing.com
Retail · United Kingdom
53Medium
NIS2 0 · GDPR 10
NIS2 0 · GDPR 10
Retail Marketing Group is a UK-based retail marketing agency specializing in omni-channel solutions including field marketing, brand experience, data services, and live video shopping. The company serves brands and retailers aiming to enhance in-store and online sales through skilled brand ambassadors and innovative marketing strategies. Their market position is solidified by partnerships with well-known brands and a parent company, Retail Innovation Group. The website is built on WordPress with modern SEO and analytics tools, reflecting a moderate to good level of digital maturity. Security posture is strong with HTTPS and no visible vulnerabilities, though the absence of security policies and cookie consent mechanisms indicates room for improvement in compliance. Overall, the website is professional and trustworthy, with clear contact information and consistent branding.
Alignedalignedenergy.com
Technology · United States
73Medium
NIS2 5 · GDPR 70
NIS2 5 · GDPR 70
Aligned is a leading data center infrastructure technology company specializing in scalable colocation and build-to-scale data center solutions tailored for cloud providers, enterprises, and service providers. The company emphasizes innovation through next-generation liquid cooling technologies and sustainability initiatives, positioning itself as a market leader with extensive capacity and a strong capital base. Their offerings include scale-ready data centers, federal solutions, and comprehensive services such as connectivity, migration, and remote hands support. The website reflects a mature digital presence with excellent design, clear navigation, and comprehensive content targeting a professional audience. Technically, the website is built on WordPress with modern plugins like Gravity Forms and Yoast SEO, supported by advanced analytics and marketing tools including Google Analytics, Hotjar, and Facebook Pixel. The site is optimized for performance, mobile responsiveness, and accessibility, hosted behind Cloudflare for enhanced security and performance. Security practices are robust, with HTTPS enforced, nonce-based CSP usage, and a comprehensive cookie consent mechanism ensuring GDPR compliance. Certifications such as ISO 27001, HIPAA, and PCI DSS further reinforce their commitment to security and compliance. While the security posture is strong, the site lacks a dedicated security policy or incident response page and does not publish a vulnerability disclosure or security.txt file. Contact information is complete and clearly presented, supporting customer engagement and trust. Overall, the website demonstrates a high level of professionalism, trustworthiness, and technical maturity, suitable for a large enterprise in the technology and energy sectors.
Id-Dar tal-Providenzadartalprovidenza.org
Non-profit · Malta
35High
NIS2 5 · GDPR 25
NIS2 5 · GDPR 25
Id-Dar tal-Providenza is a Maltese non-profit organization founded in 1965, dedicated to providing residential and supportive services for persons with disabilities who cannot live with their families. The organization relies heavily on public donations and benefactors to sustain its mission. The website is built on WordPress using the Enfold theme and integrates donation management via the GiveWP plugin. It features multilingual support, accessibility tools, and cookie consent mechanisms, reflecting a moderate level of digital maturity. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security policies and incident response information are absent. Overall, the site presents a professional and trustworthy image consistent with a small non-profit entity in Malta.
- Booming Games (Malta) Limited
booming-games.com
Technology · Malta
55Medium
NIS2 5 · GDPR 43
NIS2 5 · GDPR 43
Booming Games (Malta) Limited is a well-established B2B provider of online casino games, specializing in innovative video slot games designed to enhance player engagement and casino performance. The company holds multiple international gaming licenses and certifications, underscoring its commitment to regulatory compliance and responsible gambling. Their business model focuses on delivering high-quality gaming content and seamless integration solutions to casino operators worldwide, positioning them as a leading player in the iGaming industry. Technically, the website leverages modern web technologies including Next.js, React, and Material-UI, supported by a headless CMS (Strapi) and hosted on Cloudflare infrastructure. The site is optimized for mobile devices, offers fast performance, and integrates analytics and marketing tools such as Google Analytics and Tag Manager. The technical implementation reflects a mature digital infrastructure suitable for a global gaming provider. From a security perspective, the site enforces HTTPS, displays multiple regulatory licenses, and incorporates responsible gambling measures such as age verification. While no explicit security policy or incident response information is published, the overall posture is strong with no visible vulnerabilities or exposed sensitive data. The company could improve transparency by publishing a dedicated security policy and vulnerability disclosure mechanism. Overall, Booming Games presents a professional, trustworthy, and compliant online presence with strong business credibility and technical maturity. The site supports their market position as a reputable provider in the regulated online gaming sector.
eldeld.be
Real Estate · Belgium
37High
NIS2 0 · GDPR 15
NIS2 0 · GDPR 15
eld is a European independent multi-disciplinary firm specializing in architecture, engineering, consultancy, project management, and cost consulting. The company operates primarily in Antwerp and surrounding regions, offering a broad range of professional services in construction and related activities. Their market position is that of an established medium-sized firm with strong partnerships across Europe, focusing on sustainable and innovative architectural design. The website reflects a professional and comprehensive portfolio showcasing their projects and collaborations. Technically, the website is built on WordPress with modern technologies such as jQuery, Slick Slider, and FontAwesome. It employs GDPR-compliant cookie consent mechanisms and SEO best practices, indicating a mature digital presence. The site is mobile-optimized and provides a good user experience with clear navigation and rich content. From a security perspective, the site uses HTTPS and cookie consent plugins to comply with privacy regulations. However, some security headers are not explicitly detected in the HTML, suggesting room for improvement. No critical vulnerabilities or exposed sensitive data were found. The domain registration details align well with the business claims, supporting the site's legitimacy. Overall, eld's website demonstrates a strong business and technical foundation with good privacy compliance and security posture. Strategic improvements in security headers and incident response documentation could further enhance trust and resilience.
Nameshift.complus5.nl
Technology · Netherlands
47High
NIS2 0 · GDPR 0
NIS2 0 · GDPR 0
Nameshift.com operates a domain marketplace service specializing in secure and efficient domain name transfers using an escrow model. The website plus5.nl appears to be a landing or sales page for domain purchases via Nameshift.com, emphasizing safety, speed, and no fees for buyers. The business targets individuals and companies seeking hassle-free domain acquisitions. Technically, the site uses modern web technologies including SvelteKit and CDN-hosted assets, delivering moderate performance and basic mobile optimization. However, the content is largely placeholder or loading animations, indicating incomplete content or a loading state. Security posture is moderate with HTTPS implied but lacking explicit security headers and policies. Privacy and cookie policies are absent, reducing compliance confidence. Business credibility is supported by clear company registration and VAT information, but no direct contact emails or phone numbers are provided. Overall, the site is legitimate but would benefit from enhanced content completeness, security policies, and privacy compliance to improve trust and user experience.
BP Group Ltdxlbet.com
E-commerce · Malta
58Medium
NIS2 0 · GDPR 58
NIS2 0 · GDPR 58
XLBet.com is an online gambling platform operated by BP Group Ltd, licensed in Malta by the MGA. The website offers a wide range of casino games, live casino options, and betting services primarily targeting Finnish-speaking users but supports multiple languages. The platform features a modern Angular-based SPA architecture with integration of various analytics and marketing tools, ensuring a responsive and user-friendly experience. Security measures include HTTPS enforcement, comprehensive security headers, and no visible vulnerabilities in the source code. Privacy compliance is well addressed with clear privacy and cookie policies, including consent mechanisms. Overall, the site demonstrates a mature digital presence with a strong focus on regulatory compliance and user trust.
SALFO & Associates SAsalfo.gr
Other · Greece
44High
NIS2 5 · GDPR 0
NIS2 5 · GDPR 0
SALFO & Associates SA is an established international engineering and management consulting firm based in Greece, with over 25 years of experience. The company offers a broad range of services across multiple sectors including energy, transportation, real estate, and government projects. Their market position is strong, supported by involvement in large-scale projects financed by governments and international donors. The website reflects a professional business model focused on engineering consultancy and project management services. Technically, the website is built on WordPress using modern plugins such as Yoast SEO and MonsterInsights for analytics. It employs Google reCAPTCHA v3 for form security and uses a responsive design framework ensuring good mobile optimization. SEO practices are well implemented with structured data and meta tags. Performance is moderate with room for improvement in accessibility. From a security perspective, the site uses HTTPS with good SSL configuration and includes reCAPTCHA to protect forms. However, it lacks explicit privacy and cookie policies, security headers, and incident response contact information, which are important for compliance and trust. No WAF or blocking mechanisms were detected, and no exposed sensitive data was found. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance and security transparency to improve user trust and regulatory adherence.
Healthcare · Georgia
27High
NIS2 5 · GDPR 10
NIS2 5 · GDPR 10
International Medical Support Services (IMSS) Ltd Georgia is a healthcare provider specializing in 24/7 medical support, emergency services, and occupational health with over 15 years of experience. The company targets individuals and organizations in Georgia, offering a broad range of medical services supported by Western-trained physicians and international insurance partnerships. The website presents a professional image with clear service descriptions and contact information but lacks critical privacy and security features such as HTTPS and privacy policies. Technically, the website uses legacy JavaScript libraries like jQuery 1.8.3 and Google Analytics for tracking, with basic mobile and accessibility support. The absence of HTTPS and security headers, along with outdated libraries, poses security risks. No forms or sensitive data collection points were detected on the homepage, reducing immediate exposure but highlighting the need for improved security practices. From a security perspective, the site lacks visible security policies, incident response contacts, and vulnerability disclosure mechanisms. The use of HTTP instead of HTTPS is a significant vulnerability. The website does not provide GDPR or cookie consent mechanisms, which may impact compliance. The presence of reputable insurance partners adds trust, but overall security posture requires enhancement. Overall, the website is functional and informative but requires urgent improvements in security, privacy compliance, and technical modernization to better protect users and align with best practices.
- Dr. Seth Isaiah Rubin
sirseth.net
Healthcare · United States
47High
NIS2 5 · GDPR 28
NIS2 5 · GDPR 28
The website sirseth.net represents a private clinical psychology practice led by Dr. Seth Isaiah Rubin, a licensed clinical psychologist and Jungian analyst based in San Francisco. The practice targets professionals such as health care providers, lawyers, scientists, and academics, offering specialized counseling services including Jungian teletherapy. The site is well-structured with clear navigation, professional branding, and content that highlights the practitioner's credentials, experience, and therapeutic focus. The business model is a small, specialized private practice with a strong emphasis on personalized care and natural therapeutic approaches.
Education · United Kingdom
47High
NIS2 5 · GDPR 75
NIS2 5 · GDPR 75
The Chartered Institute of Personnel and Development (CIPD) is a well-established professional body focused on HR and people development. It serves a global community of 160,000 members, offering qualifications, learning resources, research, and events to support people professionals, managers, employers, and policy makers. The organization is incorporated by Royal Charter and operates as a registered charity in multiple jurisdictions, reinforcing its credibility and trustworthiness. Technically, the website is built on the EPiServer CMS platform with integration of modern JavaScript libraries and tracking tools such as Google Tag Manager and Microsoft Application Insights. The site demonstrates good mobile optimization, accessibility, and SEO practices, with comprehensive privacy and cookie policies supported by a consent management platform (OneTrust). From a security perspective, the site enforces HTTPS and uses monitoring tools but lacks explicit HTTP security headers and a public security policy or vulnerability disclosure program. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns with the organization's identity, supporting a high legitimacy score. Overall, the website presents a professional, secure, and privacy-compliant digital presence suitable for its educational and non-profit business model. Strategic improvements in security headers and transparency around incident response would further enhance trust and security posture.
Helio Gaming Limitedheliogaming.com
Technology · Malta
42High
NIS2 0 · GDPR 10
NIS2 0 · GDPR 10
Helio Gaming Limited is a Malta-based technology company specializing in innovative lottery gaming solutions. Their website presents a professional and modern platform targeting B2B clients in the gaming industry, offering RNG-based games, bespoke branded lottery games, and betting on international lotteries. The company holds a Malta Gaming Authority license, reinforcing its legitimacy and regulatory compliance within the gaming sector. The website is well-structured with clear navigation and mobile optimization, reflecting a mature digital presence. Technically, the site is built on WordPress with modern libraries such as jQuery and Swiper, and integrates Google Tag Manager for analytics. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though security headers and incident response policies are absent. Privacy compliance is weak due to missing privacy and cookie policies, which should be addressed to meet GDPR requirements. Overall, the site is trustworthy and professional, with clear contact information and regulatory transparency.
- MMedialive Ltd
medialivecasino.com
Technology
34High
NIS2 0 · GDPR 25
NIS2 0 · GDPR 25
Medialive Ltd operates as a specialized live casino software provider offering real dealer games such as Live Roulette, Live Blackjack, and Live Baccarat. The company targets online casino operators and land-based casinos, providing customized gaming solutions including platform integration, dedicated tables, and live TV gaming. With over 14 years of experience and European certifications, Medialive holds a solid market position in the gaming technology sector. Technically, the website is built on WordPress with a modern tech stack including JW Player and FontAwesome, though it uses an outdated WordPress version which may pose security risks. The site is moderately optimized for performance and mobile devices, with good SEO practices and structured data implementation. Security posture is adequate with HTTPS and cookie consent mechanisms but lacks explicit security headers and uses outdated software versions. Overall, the website is professional and credible but would benefit from enhanced security measures and explicit privacy and terms policies.
- FFilletti & Filletti Advocates
fillettiadvocates.com
Other · Malta
48High
NIS2 0 · GDPR 25
NIS2 0 · GDPR 25
Filletti & Filletti Advocates is a Malta-based law firm specializing in a broad range of legal services including criminal, family, corporate, commercial, maritime law, and financial services. The firm positions itself as a leading legal service provider in Malta, targeting individuals and businesses requiring expert legal advice and litigation support. The website reflects a professional business model focused on consultancy and legal representation. Technically, the website is built using GoDaddy Website Builder and incorporates jQuery and Starfield Technologies scripts. The site loads external resources primarily from GoDaddy's content delivery network and Calendly for appointment scheduling, indicating a moderate level of digital maturity. Security posture is basic; while HTTPS is implied by external HTTPS resources, no explicit security headers or policies are present, and no privacy or cookie policies are published. The absence of GDPR compliance indicators and security policies suggests room for improvement in regulatory adherence and user trust. Overall, the website is functional and professional but lacks advanced security and privacy features, which are critical for legal service providers handling sensitive client information.
Ungdommens Røde Korsurk.dk
Non-profit · Denmark
61Medium
NIS2 5 · GDPR 58
NIS2 5 · GDPR 58
Ungdommens Røde Kors is Denmark's largest humanitarian youth organization, operating as a non-profit social entity focused on supporting children and young people both domestically and internationally. The organization relies heavily on volunteers and donations to deliver a wide range of services including mentoring, camps, workshops, and social support activities. Their website reflects a strong market position with clear messaging, comprehensive content, and a consistent brand identity targeting youth, volunteers, donors, and partners. Technically, the website is built on Drupal 10, leveraging modern web technologies such as jQuery and Google Tag Manager, and integrates a robust cookie consent mechanism via Cookie Information. The site is well-optimized for mobile devices and accessibility, with good SEO practices and a moderate performance profile. External integrations include analytics and marketing tools from Piwik Pro, Google, Facebook, and Youtube. From a security perspective, the site enforces HTTPS and employs a detailed cookie consent banner, but lacks explicit security headers and a published security or incident response policy. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with GDPR-aligned cookie management and clear privacy policy documentation. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance suitable for a large non-profit organization. Strategic improvements could include enhancing security headers, publishing incident response contacts, and adding a vulnerability disclosure policy to further strengthen security posture and transparency.
MEXXmexx.com
E-commerce · Netherlands
51Medium
NIS2 0 · GDPR 58
NIS2 0 · GDPR 58
MEXX.com is the official online shop for the MEXX brand, offering a broad assortment of shoes, clothing, and accessories for men, women, and children primarily targeting the Dutch market. The website demonstrates a mature e-commerce business model with a strong market position as an official retailer, supported by comprehensive product categories and seasonal collections. The platform integrates multiple marketing and analytics tools, including Google Tag Manager, Google Analytics, Hotjar, and various social media pixels, reflecting a sophisticated digital marketing strategy. Technically, the site is built on Magento 2 with modern frontend technologies and includes performance optimizations and mobile responsiveness. Security posture is solid with HTTPS enforced, reCAPTCHA on forms, and cookie consent mechanisms, though explicit security policies and incident response information are not publicly available. Overall, the site is professional, trustworthy, and compliant with GDPR, but could enhance transparency around security and incident response.
Cosci-tuning Oycoscituning.com
Real Estate · Finland
52Medium
NIS2 0 · GDPR 40
NIS2 0 · GDPR 40
Cosci-tuning Oy is a Finnish property maintenance company established in 1997, serving the Itä-Helsinki area with a focus on reliable and professional real estate services. The company offers a range of services including tenant support, fault reporting, installation services, and tailored offerings for housing companies. Their website reflects a well-established local business with clear service descriptions and contact information. Technically, the site is built on WordPress using the Kadence theme and includes modern web technologies such as jQuery and FontAwesome. The site is optimized moderately for performance and mobile responsiveness. Security-wise, the site uses HTTPS and implements GDPR-compliant cookie consent mechanisms, but lacks visible advanced security headers and explicit security policies. Overall, the website presents a trustworthy and professional image consistent with the company's long-standing market presence.
Falcotrans Ltdfalcotrans.com
Transportation · Malta
51Medium
NIS2 5 · GDPR 48
NIS2 5 · GDPR 48
Falcotrans Ltd is a well-established transportation and logistics company based in Malta, with a history dating back to 1986. The company specializes in providing tailored supply chain solutions across various sectors including pharmaceuticals, healthcare, perishable foods, general cargo, container services, customs clearance, and local distribution networks. Their market position as one of Malta's pioneers in logistics is supported by a professional and comprehensive online presence. The website reflects a mature digital infrastructure built on WordPress with Elementor, integrating modern tracking and analytics tools such as Google Tag Manager, Microsoft Clarity, and LinkedIn Insight Tag. Security measures are robust with HTTPS enforcement and appropriate security headers, though there is room for improvement in privacy compliance, particularly regarding cookie consent mechanisms. Overall, the site demonstrates high professionalism, clear business information, and strong trust indicators including ISO 9001 certification.
crueltyfreemalta (a.k.a. Fiona Henschel)crueltyfreemalta.com
Retail · Malta
35High
NIS2 5 · GDPR 45
NIS2 5 · GDPR 45
CrueltyFreeMalta.com is a niche lifestyle blog operated by Fiona Henschel, focusing on cruelty-free and vegan products with a primary audience in Europe, especially Malta and Germany. The site offers product reviews, lifestyle content, and affiliate marketing opportunities. Technically, the website is built on WordPress with a modern tech stack including Bootstrap and various plugins for SEO, donations, and social media integration. The site is well-optimized for mobile and SEO, with good performance and accessibility features. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities. Privacy compliance is robust, featuring a comprehensive cookie consent mechanism and a clear privacy policy. The domain registration is consistent with the business claims, enhancing trustworthiness. Overall, the site scores well on content quality, technical implementation, security, privacy, and business credibility, making it a reliable and professional resource in its niche.
Metro-Goldwyn-Mayer (MGM)mgm.com
Media · United States
52Medium
NIS2 13 · GDPR 28
NIS2 13 · GDPR 28
Metro-Goldwyn-Mayer (MGM) is a prominent entertainment company specializing in the production and global distribution of film and television content across various platforms. The website reflects a strong market position with a comprehensive showcase of featured movies, scripted and alternative television series, and latest news, indicating a robust content portfolio. The affiliation with Amazon is evident through branding and external links, enhancing its distribution capabilities and market reach. Technically, the site employs modern frameworks such as Angular and integrates advanced media players and analytics tools, demonstrating a mature digital infrastructure. Security measures are well-implemented with HTTPS, security headers, and no visible vulnerabilities, though improvements in privacy compliance mechanisms like cookie consent could be made. Overall, the site presents a professional, trustworthy, and user-friendly experience aligned with industry standards.
Other
45High
NIS2 0 · GDPR 28
NIS2 0 · GDPR 28
The website flairforevents.com is currently a parked domain with minimal content, primarily serving as a placeholder to offer the domain for sale through GoDaddy. There is no active business presence or detailed information about services, target audience, or company background. The technical infrastructure relies on basic HTML, CSS, and JavaScript with monetization through Google Adsense and Bodis domain parking scripts. The site lacks advanced frameworks or CMS platforms and shows only basic mobile optimization and accessibility features. Security posture is weak, with no visible security headers or incident response policies, and no HTTPS enforcement detected. Privacy compliance is minimal, with a basic privacy policy page but no cookie consent mechanisms or GDPR indicators. Overall, the site scores low on content quality, business credibility, and privacy compliance, reflecting its status as a parked domain rather than an active business website.
Other
28High
NIS2 0 · GDPR 0
NIS2 0 · GDPR 0
The website at superma.at currently serves a 404 error page indicating that the requested content is not found. There is no accessible business information, contact details, or privacy and security policies present on this page. The technical infrastructure appears minimal, relying on static HTML, CSS, and Google Fonts, with no detected CMS or advanced frameworks. Security posture is weak due to the absence of HTTPS and security headers, and no incident response or vulnerability disclosure information is available. Overall, the site lacks essential elements for trust, compliance, and user engagement, resulting in a low risk and credibility profile.
Newtechnewtechmalta.com
Technology · Malta
59Medium
NIS2 35 · GDPR 70
NIS2 35 · GDPR 70
Newtech Malta Limited is a well-established IT company specializing in hardware distribution, software licensing, cybersecurity solutions, IT consultancy, and repair services primarily serving Malta and Gozo. As a subsidiary of the M. Demajo Group, it holds a strong market position with a focus on building trust-based relationships with enterprise clients and IT resellers. The website reflects a professional and modern digital presence with comprehensive service offerings and a clear business model centered on technology solutions and support. Technically, the website is built on WordPress with a modern tech stack including Google Tag Manager, Google Analytics, Facebook Pixel, and GDPR compliance plugins. The site is mobile-optimized, SEO-friendly, and employs security best practices such as HTTPS and reCAPTCHA on forms. However, explicit security headers and vulnerability disclosure mechanisms are absent, representing areas for improvement. From a security perspective, the site demonstrates a solid baseline with encrypted communications and privacy compliance, but lacks published incident response or security policies. No critical vulnerabilities or exposed sensitive data were detected. The domain registration is consistent with the business claims, enhancing trustworthiness. Overall, Newtech Malta Limited presents a credible and professional online presence with good privacy and security practices. Strategic enhancements in security policy transparency and technical headers would further strengthen its posture.
- UUnderwater world - mooloolaba
underwaterworld.com.au
Entertainment · Australia
57Medium
NIS2 5 · GDPR 33
NIS2 5 · GDPR 33
- SSocialpoint
socialpoint.es
Technology · Spain
63Medium
NIS2 0 · GDPR 63
NIS2 0 · GDPR 63
Socialpoint is a well-established mobile game developer and publisher based in Spain, known for popular titles such as Dragon City and Monster Legends. As a member of Take-Two Interactive and Zynga, it holds a strong market position in the free-to-play mobile gaming sector. The website reflects a mature digital presence with modern technologies like React and Gatsby, optimized for performance and mobile devices. Security measures include HTTPS, security headers, and a comprehensive cookie consent mechanism, although explicit security and incident response policies are not publicly available. Overall, the site demonstrates a high level of professionalism and compliance with privacy regulations.
Other
23Critical
NIS2 5 · GDPR 3
NIS2 5 · GDPR 3
The website hoteltropicana.es is a parked domain landing page primarily serving advertising content and affiliate links. There is no substantive business information, contact details, or service descriptions present. The site appears to be monetizing traffic through third-party ad networks such as Google Adsense and Youseasky. The technical infrastructure relies on common JavaScript libraries and Amazon Cloudfront CDN for asset delivery, but lacks modern security and privacy features such as HTTPS, security headers, and cookie consent mechanisms. The WHOIS data is privacy protected, which combined with the lack of business content, suggests the domain is not actively used by a legitimate hospitality business. Overall, the site has poor content quality, minimal technical sophistication, and a weak security posture.
ADZUNA LTDadzuna.co.uk
Technology · United Kingdom
56Medium
NIS2 5 · GDPR 40
NIS2 5 · GDPR 40
Adzuna Ltd operates a comprehensive job search engine primarily targeting the UK market but with international reach through multiple country-specific domains. The platform aggregates job listings from thousands of sources, providing users with a centralized search experience enhanced by additional services such as CV valuation and automated job applications. The website demonstrates a mature digital presence with a professional design, clear navigation, and mobile optimization. Technically, it leverages modern JavaScript libraries, CDN hosting, and integrates multiple analytics and advertising tools to support its business model. Security-wise, the site enforces HTTPS and employs secure form practices but lacks explicit security headers and a dedicated security policy page. Privacy compliance is well addressed with clear privacy and cookie policies, including GDPR considerations. Overall, the site is trustworthy and professionally maintained, with no signs of blocking or WAF interference.
Meridon Fundsmeridon.com
Finance · Malta
25Critical
NIS2 0 · GDPR 10
NIS2 0 · GDPR 10
Meridon Funds operates as a collective investment scheme focused on capital markets and private equity investments. The company is structured as a multi-fund limited liability company under Maltese law and is licensed by the Malta Financial Services Authority, positioning it as a regulated financial entity. The website presents a professional and consistent brand image with clear fund offerings targeting investors interested in alternative assets and long-term capital preservation. Technically, the website is built on Drupal 7 CMS and uses jQuery 1.9.1 along with Google Analytics for visitor tracking. The site is mobile optimized and has a moderate performance profile. However, the use of an outdated jQuery version and lack of visible security headers indicate technical debt and potential security risks. SEO and accessibility features are basic but functional. From a security perspective, the site lacks explicit privacy, cookie, and terms of service policies, which impacts compliance posture. No incident response or vulnerability disclosure information is provided. Google Analytics is configured with IP anonymization, which is a positive privacy measure. The absence of direct contact emails or phone numbers limits user trust and transparency. The domain uses privacy protection in WHOIS, which is common but reduces transparency. Overall, the website is functional and professional but requires improvements in privacy compliance, security hardening, and transparency to enhance trustworthiness and regulatory adherence.
English for Businessenglishforbusiness.com.br
Education · Brazil
47High
NIS2 5 · GDPR 10
NIS2 5 · GDPR 10
English for Business is a Brazilian company specializing in corporate English language training, targeting businesses and professionals seeking to improve their English communication skills in business contexts. Established in 2006, it has positioned itself as a trusted partner for companies requiring tailored English programs, workshops, and consulting services. The company emphasizes performance-driven learning with support for human resources departments and leadership development. Technically, the website is built on WordPress using Elementor and LiteSpeed Cache, integrating modern web technologies and analytics tools such as Google Analytics and Google Tag Manager. The site demonstrates good mobile optimization, SEO practices, and a moderate performance profile, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS, includes standard security headers, and avoids exposing sensitive data. However, it lacks visible cookie consent mechanisms and published security or incident response policies, which are areas for improvement to enhance privacy compliance and user trust. Overall, the website presents a professional and trustworthy digital presence with strong business credibility, though it should address privacy compliance gaps and enhance transparency around security policies to further strengthen its risk posture.
- PPrickly Pear Works
pricklypearworks.com
Other · Malta
61Medium
NIS2 13 · GDPR 63
NIS2 13 · GDPR 63
Prickly Pear Works is a small local business based in Malta specializing in branding, web design, and print services. The business maintains a professional presence primarily through its Facebook page, which serves as its main digital platform. The page showcases their services and recent projects, targeting local clients seeking creative and print solutions. The company appears to have a consistent brand identity and a moderate follower base, indicating a stable market position within its niche. Technically, the business leverages the Facebook platform for hosting and content delivery, utilizing modern web technologies such as React and GraphQL. The site benefits from Facebook's robust infrastructure, ensuring fast loading times and mobile optimization. However, the reliance on a third-party platform limits direct control over certain technical aspects like SEO and accessibility. From a security perspective, the page benefits from Facebook's comprehensive security measures, including HTTPS enforcement and standard security headers. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is managed through Facebook's policies, with clear cookie consent mechanisms and privacy policy links. However, the business itself does not provide dedicated security or incident response information. Overall, Prickly Pear Works presents a trustworthy and professional online presence suitable for its business scale. The strategic use of Facebook as a platform offers advantages in performance and security but also imposes limitations in customization and direct control. Enhancing direct business information and security policies on a dedicated website could further improve credibility and compliance.
Playson Limitedplayson.com
Technology · Malta
46High
NIS2 5 · GDPR 58
NIS2 5 · GDPR 58
Playson Limited is a well-established B2B technology company specializing in the development and supply of digital slot games and promotional tools for online casinos. Founded in 2012 and based in Malta, Playson holds multiple licenses across 26 regulated jurisdictions, demonstrating a strong commitment to compliance and responsible gaming. Their product portfolio includes 93 games and advanced business tools such as network campaigns and the xEYE Viewboard analytical platform, targeting online casino operators and partners globally. Technically, the website employs modern web technologies including JavaScript frameworks, Webpack, and integrates Google Analytics for user behavior tracking. The site is mobile-optimized, responsive, and features a comprehensive cookie consent mechanism powered by CookieYes, ensuring GDPR compliance. Security measures include CSRF tokens and Cloudflare Turnstile for bot protection, although explicit security headers are not detected. The security posture is strong with no visible vulnerabilities or exposed sensitive data. The company displays multiple certifications from reputable testing labs and regulatory bodies, enhancing trustworthiness. Contact information is clearly provided with multiple communication channels including email, phone, and a secure contact form with CAPTCHA. Overall, Playson presents a professional, secure, and compliant digital presence with a high level of business credibility and technical maturity. Strategic recommendations include enhancing security headers, publishing a security policy, and adding a vulnerability disclosure mechanism to further strengthen their security and compliance posture.
Merit Malta Ltdmeritmalta.com
Manufacturing · Malta
31High
NIS2 5 · GDPR 10
NIS2 5 · GDPR 10
Merit Malta Ltd is a Malta-based manufacturer specializing in automotive aftermarket parts, particularly switches and electrical accessories. The company positions itself as a leading European manufacturer with a strong focus on quality, reliability, and global partnerships. Their business model centers on manufacturing and B2B distribution, targeting commercial automotive sectors worldwide. The website reflects a medium-sized enterprise with a professional digital presence built on WordPress and WooCommerce, enhanced by Elementor for design and user experience. Technically, the site employs modern web technologies and maintains good mobile responsiveness and SEO practices. Security posture is solid with HTTPS enforced and secure form handling, though lacking in advanced security headers and published security policies. Privacy compliance is basic, with a privacy policy not explicitly found and no cookie consent mechanism implemented. Overall, the website is professional and trustworthy, with room for improvement in privacy and security transparency.
Miliarslot77petroplusholdings.com
Other · Indonesia
41High
NIS2 0 · GDPR 10
NIS2 0 · GDPR 10
Miliarslot77 is an Indonesian online gambling platform specializing in slot games, positioning itself as a trusted site offering easy wins and a variety of games from well-known providers. The website is built on the Squarespace platform, leveraging standard web technologies and providing a moderate level of mobile optimization and performance. However, the site lacks critical compliance and security features such as privacy policies, cookie consent mechanisms, and security headers, which diminishes its overall trustworthiness. The absence of clear business contact information and the use of privacy protection in domain registration further reduce transparency and credibility. Strategic improvements in security posture, compliance documentation, and business transparency are recommended to enhance user trust and regulatory adherence.
Other
42High
NIS2 0 · GDPR 15
NIS2 0 · GDPR 15
The website for mibtree.com is currently inactive and displays only a domain expiration notice, indicating that the domain is pending renewal or has expired. There is no accessible business content, no contact information, and no privacy or security policies available. The site is parked by SedoParking, a domain parking service, and does not provide any indication of the company's operations, services, or market position. Technically, the site uses minimal JavaScript for parking scripts and lacks modern web technologies or CMS platforms. Security posture is poor due to the absence of HTTPS and security headers. Overall, the site presents a high risk for visitors and lacks credibility or trust indicators.
- GGPWORKS
gpborg.com
Other
27High
NIS2 0 · GDPR 10
NIS2 0 · GDPR 10
The website for gpborg.com currently serves as a minimal coming soon or maintenance placeholder page branded as GPWORKS. The content is extremely limited, with no descriptive business information, contact details, or policies. The site references a different domain (gpworks.mt) in metadata and resource links, indicating possible domain transition or misconfiguration. The technical infrastructure is based on WordPress with a coming soon plugin, using external resources such as Font Awesome and Google Fonts. However, the site lacks HTTPS on referenced resources and does not implement visible security headers or privacy compliance mechanisms. The subscription form is basic and lacks advanced security features like CAPTCHA. Overall, the site exhibits low digital maturity and minimal business presence online.
MacIntyre Hudson Advisory Services LLPmhasllp.com
Other · United Kingdom
43High
NIS2 5 · GDPR 55
NIS2 5 · GDPR 55
MacIntyre Hudson Advisory Services LLP is a UK-based professional services firm specializing in providing practical accounting and financial training tailored specifically for lawyers. Their market position is niche, focusing on equipping legal professionals with the knowledge to negotiate and draft accounting clauses effectively, thereby managing client risks. The website reflects a small-sized business with a clear focus on legal and financial education services. Technically, the website is built on WordPress using the Neve theme and associated plugins, leveraging modern JavaScript libraries such as jQuery and Slick Carousel for enhanced user experience. The site is mobile-optimized and demonstrates good SEO and accessibility practices. Security-wise, the website enforces HTTPS, includes a Content Security Policy header, and implements cookie consent mechanisms compliant with GDPR. However, there is room for improvement by adding more comprehensive security headers and publishing explicit security policies. Overall, the website is professional, trustworthy, and well-aligned with the business's stated objectives.
The Electoral Office for Northern Irelandeoni.org.uk
Government · United Kingdom
65Medium
NIS2 0 · GDPR 58
NIS2 0 · GDPR 58
The Electoral Office for Northern Ireland operates as an independent, non-partisan government body responsible for assisting the Chief Electoral Officer in managing elections and maintaining the electoral register. The website serves residents and voters in Northern Ireland, providing comprehensive information and services related to voter registration, election results, and electoral processes. It holds a strong market position as the official electoral authority in the region. Technically, the website is built on the Umbraco CMS platform, leveraging modern web technologies including jQuery, Cookiebot for consent management, Google Tag Manager, and FontAwesome for icons. The site is hosted behind Cloudflare, ensuring reliable performance and security. The design is responsive and accessible, with good SEO practices and clear navigation. From a security perspective, the site enforces HTTPS and employs a robust cookie consent mechanism. While explicit security headers are not visibly declared in the HTML, the overall security posture is strong with no exposed sensitive data or vulnerable libraries detected. Privacy compliance is well addressed with clear privacy and cookie policies, and GDPR compliance is evident. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance suitable for a government entity. Strategic recommendations include enhancing security headers, publishing a formal security policy, and providing incident response contact details to further strengthen trust and security posture.
Academy Plaza Hotelacademyplazahotel.ie
Hospitality · Ireland
55Medium
NIS2 0 · GDPR 58
NIS2 0 · GDPR 58
Academy Plaza Hotel is a well-established 3-star hospitality business located in the heart of Dublin city center, offering accommodation, dining, and event services. The website reflects a strong market position with clear direct booking incentives and a focus on customer experience, supported by active social media and review integrations. Technically, the site uses a modern tech stack including Bootstrap, jQuery, and Google services, hosted on a reliable CDN, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and consent mechanisms, though there is room for improvement in HTTP security headers and library updates. Overall, the website is professional, trustworthy, and compliant with privacy regulations, supporting the business's credibility and customer engagement.
- Scuola IMT Alti Studi Lucca
imtlucca.it
Education · Italy
41High
NIS2 5 · GDPR 3
NIS2 5 · GDPR 3
Scuola IMT Alti Studi Lucca is an Italian advanced studies institution specializing in doctoral and master-level education, research, and academic events. The website presents a well-structured academic institution with multiple research units, educational programs, and international student services. The institution targets prospective students, researchers, and academic collaborators, positioning itself as a specialized education provider in Italy. Technically, the website is built on Drupal CMS with a traditional but functional tech stack including jQuery, Bootstrap, and Matomo analytics. The site is mobile-optimized and offers good navigation and content relevance. Security posture is moderate with HTTPS enforced and privacy-aware analytics, but lacks some security headers and a cookie consent mechanism. WHOIS data confirms legitimacy and consistency with the institution's identity. Overall, the website is professional and trustworthy but could improve in privacy compliance and security best practices.
- RC International
rcint.com
Real Estate · Malta
43High
NIS2 5 · GDPR 10
NIS2 5 · GDPR 10
RC International is a consultancy firm specializing in citizenship and residence by investment programs, primarily focusing on Malta. The company targets high net worth individuals and families seeking to obtain second citizenship or residence for business, education, or lifestyle purposes. Their services include handling documentation and liaising with immigration authorities to facilitate smooth application processes. The website reflects a professional and consistent brand image with clear service offerings and contact channels. Technically, the site uses modern JavaScript frameworks such as Vue.js and Nuxt.js, along with Bootstrap for styling, and integrates Google Analytics for visitor tracking. The site is mobile-optimized and provides a good user experience with clear navigation. Security-wise, HTTPS is enabled, and a cookie consent banner is present, but there is a lack of explicit security policies, incident response information, and advanced security headers. WHOIS data aligns well with the business claims, showing consistent registrant information without privacy protection, supporting the site's legitimacy. Overall, the site is functional and professional but could improve in privacy and security transparency.
- MMicrosoft Azure Web App - Error 404
waldontelecom.com
Other
49High
NIS2 0 · GDPR 25
NIS2 0 · GDPR 25
The website waldontelecom.com currently serves only a Microsoft Azure 404 error page indicating that the custom domain has not been configured properly within Azure App Services. There is no active business content, contact information, or policies available on the site. The lack of content and configuration suggests the website is either inactive or under development. From a technical perspective, the site is hosted on Microsoft Azure but lacks any visible CMS, frameworks, or additional technologies. The page is minimal and does not provide any SEO or accessibility features. No analytics or marketing tools are detected. Security posture is weak due to the absence of HTTPS confirmation, security headers, and privacy policies. No incident response or vulnerability disclosure information is present. The site does not collect user data or provide any forms, reducing immediate data protection concerns but also indicating a lack of business readiness. Overall, the site is not operational as a business website, resulting in a very low risk profile but also very low trust and credibility. Strategic recommendations include completing domain configuration, deploying HTTPS, adding business and compliance information, and improving technical and security implementations.
- İİGA İstanbul Havalimanı
igairport.com
Transportation · Turkey
49High
NIS2 5 · GDPR 10
NIS2 5 · GDPR 10
İGA İstanbul Havalimanı operates one of the world's largest and busiest airports, providing comprehensive airport management, cargo logistics, commercial leasing, and career development services. The website reflects a mature enterprise with a strong market position in the transportation sector, targeting passengers, business partners, and job seekers. Technically, the site uses modern web technologies including Google Tag Manager, YouTube API, and cookie consent tools, delivering a responsive and well-structured user experience. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. No critical vulnerabilities or exposed sensitive data were found. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with privacy regulations, though explicit terms of service and security policy pages are absent.
- SSeQura
sequra.es
E-commerce · Spain
53Medium
NIS2 5 · GDPR 0
NIS2 5 · GDPR 0
SeQura is a Spanish fintech company specializing in flexible payment solutions for e-commerce businesses, enabling customers to pay in installments or defer payments. The website demonstrates a mature digital presence with multi-language support, extensive FAQs, and integration with major analytics and marketing platforms. Security measures such as HTTPS, security headers, and CAPTCHA protections are implemented, reflecting a strong security posture. The company maintains clear contact and legal information, supporting GDPR compliance and customer trust. Overall, the site is professional, user-friendly, and well-optimized for performance and mobile devices.