Security reports directory
150,193 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,193001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
137,451–137,500 of 150,193
Greatrvtripxlpromotions.nl
Transportation · Russia
26High
NIS2 0 · GDPR 8
NIS2 0 · GDPR 8
Greatrvtrip is a Russian-based company specializing in the rental of motorhomes (RVs) worldwide, offering services across Russia, the USA, Europe, and other countries. The company provides a comprehensive range of services including RV rentals, booking of campgrounds, personalized travel routes, and full travel support. Their market position is that of a reliable and customer-focused service provider, emphasizing comfort and assistance throughout the travel experience. Technically, the website is built on the Tilda CMS platform, utilizing modern web technologies and integrated with multiple analytics and marketing tools such as Google Tag Manager, Yandex Metrika, Facebook Pixel, and VK Retargeting. The site is mobile-optimized and offers a good user experience with clear navigation and professional design. Security-wise, the website enforces HTTPS, employs standard security headers, and uses secure forms with validation, though it lacks a dedicated security policy or incident response information. Privacy and cookie policies are present and indicate GDPR compliance. Overall, the website is trustworthy and professionally managed, with strong business credibility and a solid technical foundation.
Other
51Medium
NIS2 0 · GDPR 28
NIS2 0 · GDPR 28
The website rowan.com currently serves as a domain parking and sales placeholder, indicating the domain is available for purchase. There is no substantive business content, product or service information, or company branding present. The site primarily displays a message about the domain being for sale and includes advertising scripts from Google. The target audience appears to be potential domain buyers or investors rather than end consumers or clients. From a technical perspective, the site uses basic HTML, CSS, and JavaScript with integration of Google Adsense and syndicated search services. The design is minimal and lacks modern CMS or frameworks. Mobile optimization and accessibility are basic, and SEO optimization is poor due to minimal content and metadata. No CMS or hosting provider details are evident. Security posture is weak with no visible security headers or explicit HTTPS confirmation in the provided data. No privacy or cookie consent mechanisms are implemented, and no contact or incident response information is available. The domain WHOIS data is privacy protected, consistent with a domain sale status, but limits trust and transparency. Overall, the site presents a low-risk profile due to its minimal content and lack of user data collection but scores low on professionalism, security, and compliance. Strategic improvements should focus on adding HTTPS, security headers, privacy and cookie policies with consent, and clear contact information to enhance trust and compliance.
- DDNS resolution error | brighterimagemalta.com | Cloudflare
brighterimagemalta.com
Other
46High
NIS2 0 · GDPR 10
NIS2 0 · GDPR 10
The website brighterimagemalta.com is currently inaccessible due to a DNS resolution error as indicated by the Cloudflare error page. No business content, contact information, or policies are available for analysis. The site appears to be either misconfigured or offline, preventing any meaningful assessment of its business operations or security posture. The only visible technology is Cloudflare's network and performance monitoring scripts. Due to the lack of accessible content and the presence of a Cloudflare DNS error, the website's security posture cannot be evaluated beyond the DNS failure. There are no visible security headers, SSL details, or compliance indicators. Overall, the site is non-functional and provides no trust or business signals.
Jesuit refugee servicejrs.net
Non-profit organization management · Italy
56Medium
NIS2 0 · GDPR 70
NIS2 0 · GDPR 70
- SSalon Services PRO
salonservicesnw.com
Retail · United States
57Medium
NIS2 0 · GDPR 40
NIS2 0 · GDPR 40
Salon Services PRO is a professional beauty industry-focused company providing product distribution, education, and online retail services. The website positions itself as a leader in the beauty sector, offering a wide range of brands and educational content tailored for salon professionals and beauty experts. The company maintains a strong market presence with partnerships and a comprehensive product catalog, supported by educational resources and promotional deals. Technically, the website is built on a custom ASP.NET WebForms platform with integrations for marketing, analytics, and customer support tools such as Google Tag Manager, Facebook Pixel, Klaviyo, and LiveChat. The site demonstrates good mobile optimization and accessibility basics, with a moderate performance profile. Security posture is solid with HTTPS enabled and secure form handling, though it lacks some advanced security headers and explicit cookie consent mechanisms. Privacy policies and terms of service are present and comprehensive, supporting GDPR compliance. Contact information including phone and email is clearly provided, enhancing business credibility. Overall, the website is professional, trustworthy, and well-structured, though improvements in security headers and privacy consent could enhance compliance and user trust.
Companhia Catarinense de Águas e Saneamentocasan.com.br
Energy · Brazil
50Medium
NIS2 5 · GDPR 10
NIS2 5 · GDPR 10
CASAN (Companhia Catarinense de Águas e Saneamento) is a large regional public utility company in Brazil specializing in water supply and sanitation services primarily for the state of Santa Catarina. The company provides a broad range of services including water distribution, sewage treatment, billing, debt management, and social tariff programs. The website serves as a customer portal offering quick access to payment options, service notifications, and customer support channels. CASAN maintains an active social media presence and links to government transparency and regulatory portals, reinforcing its public utility status. Technically, the website uses legacy JavaScript libraries such as jQuery 1.7.1 and jCarousel, indicating some technical debt. The site is moderately optimized for mobile devices and has a clear navigation structure. Hosting appears to be managed internally or via dedicated infrastructure. Google Analytics is used for visitor tracking, but no privacy or cookie policies are present, which is a compliance gap. Security headers are not visible in the HTML source, and the use of outdated libraries may expose the site to vulnerabilities. From a security perspective, the site benefits from HTTPS usage on external service links and no visible sensitive data exposure. However, the lack of modern security headers, outdated JavaScript libraries, and missing privacy compliance elements reduce the overall security posture. Incident response and security policy information are not publicly available. The domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness. Overall, CASAN's website is a functional and professional portal for a major public utility company but would benefit from modernization of its technical stack, enhanced security practices, and improved privacy compliance to reduce risk and improve user trust.
AlphaCorralphacorr.com
Technology
48High
NIS2 5 · GDPR 18
NIS2 5 · GDPR 18
AlphaCorr is a specialized software company offering precision CAD tools for designing point-of-purchase displays, packaging, and steel rule dies, targeting packaging engineers, graphic artists, and die makers. Their product suite includes Rules™, SteelRules™, and AI-powered plugins, supporting Mac and Windows platforms. The website presents a professional and consistent brand image with clear navigation and relevant content focused on their niche market. Technically, the site uses standard web technologies including HTML5, CSS3, JavaScript, and integrates Google Analytics and Tag Manager for tracking. However, there is no evidence of advanced frameworks or CMS usage, and mobile optimization is basic. From a security perspective, the site lacks visible HTTPS confirmation and security headers, and does not provide cookie consent mechanisms or detailed privacy compliance information. No incident response or security policies are published, which limits transparency and preparedness signals. The use of privacy protection in WHOIS is common and justified but reduces registrant transparency. Overall, the security posture is moderate but could be significantly improved by implementing HTTPS, security headers, and compliance mechanisms. The overall risk is moderate with no critical vulnerabilities detected in the provided content. Strategic improvements in security and privacy compliance would enhance trust and reduce potential risks. The business credibility is supported by clear product offerings and customer support channels, though contact details are not explicitly listed in the HTML content analyzed.
- Manuchar
manuchar.com
Manufacturing · Belgium
50Medium
NIS2 5 · GDPR 55
NIS2 5 · GDPR 55
Manuchar is a well-established global chemical distribution company headquartered in Belgium, with over 40 years of experience and a strong presence in more than 180 locations across 40+ emerging market countries. The company offers comprehensive chemical distribution services complemented by international trade in steel, polymers, and pulp & paper, supported by a robust logistics network. Their business model focuses on providing end-to-end supply chain, commercial, and financing solutions tailored to industries such as home care, nutrition, mining, and energy. The website reflects a mature digital infrastructure built on Drupal CMS, integrating modern analytics and mapping technologies, and demonstrates good mobile optimization and accessibility. Security posture is strong with HTTPS, CSP, and secure form handling, though incident response and vulnerability disclosure policies are not explicitly published. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site projects high professionalism, trustworthiness, and business credibility, supported by detailed contact information and social responsibility initiatives.
BOSS Solutionsboss-solutions.com
Technology · United States
58Medium
NIS2 5 · GDPR 48
NIS2 5 · GDPR 48
BOSS Solutions is a US-based technology company specializing in Help Desk ticketing systems, IT Service Management (ITSM), and 811 Damage Prevention software. The company positions itself as a trusted provider with a strong market presence, evidenced by a high customer retention rate and multiple industry certifications including SOC 2 Type II compliance. Their platform offers comprehensive solutions for complex IT issues, workflow automation, incident and asset management, and underground utility damage prevention. The website reflects a mature digital infrastructure built on the Wix platform, integrating modern technologies and marketing tools to enhance user experience and operational efficiency. Security is a key focus, with adherence to recognized frameworks and secure data handling practices. Overall, BOSS Solutions demonstrates a robust security posture and a professional, trustworthy online presence, making it a reliable partner for organizations seeking advanced ITSM and damage prevention solutions.
Malta Philharmonic Orchestramaltaorchestra.com
Media · Malta
33High
NIS2 0 · GDPR 40
NIS2 0 · GDPR 40
The Malta Philharmonic Orchestra website represents Malta's leading musical institution, offering orchestral performances, youth orchestra education, and cultural events. The site targets music enthusiasts, supporters, and young musicians in Malta and beyond. It operates as a non-profit cultural entity with a medium-sized organizational footprint, founded in 2017. The website content is rich, professionally designed, and well-structured, providing event calendars, news, multimedia content, and membership information. Social media integration and mailing list subscription enhance audience engagement. Technically, the site is built on WordPress with a modern tech stack including jQuery, Bootstrap, and various plugins for events management, video embedding, and marketing. Performance is moderate with good mobile optimization and basic accessibility features. SEO practices are well implemented with proper meta tags and structured data. From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA and Facebook Pixel with consent mode. However, it lacks explicit security policies, vulnerability disclosure, and advanced HTTP security headers. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Business credibility is high with clear contact information and consistent WHOIS data. Overall, the website is a trustworthy and professional platform for the Malta Philharmonic Orchestra but would benefit from enhanced security policies, GDPR cookie consent implementation, and vulnerability disclosure to improve compliance and user trust.
Paramount Commerceparamountcommerce.com
Finance · Canada
54Medium
NIS2 5 · GDPR 58
NIS2 5 · GDPR 58
Paramount Commerce is a Canadian-based payment solutions provider specializing in online gaming and remittance sectors. With over 20 years of industry experience, the company offers account-based payment solutions including Interac® and Instant Bank Transfer, complemented by advanced risk management and fraud prevention systems. Recognized by multiple industry awards, Paramount Commerce positions itself as a trusted and innovative player in the finance technology space. The website demonstrates a mature technical infrastructure leveraging HubSpot CMS, Google Tag Manager, and various marketing and analytics tools while maintaining good privacy compliance through cookie consent mechanisms and GDPR-aligned policies. The site is well-optimized for mobile and accessibility, with clear navigation and professional design. Security posture is solid with HTTPS enforced and no exposed sensitive data, though explicit security policies and incident response contacts are not published. The company uses modern tracking technologies responsibly, balancing analytics needs with user privacy. Overall, Paramount Commerce presents a credible, professional, and secure online presence suitable for its target market. Strategic improvements in security transparency and terms of service publication would further enhance trust and compliance.
- Al-Futtaim
al-futtaim.ae
Real Estate · United Arab Emirates
51Medium
NIS2 5 · GDPR 48
NIS2 5 · GDPR 48
Al-Futtaim is a well-established diversified conglomerate headquartered in Dubai, UAE, operating across automotive, retail, real estate, health, financial services, and education sectors. The company partners with over 200 global brands and employs approximately 33,000 people across more than 18 countries in the Middle East, Africa, and Asia. Their website reflects a mature digital presence with comprehensive content, clear navigation, and strong branding consistency. Technically, the site is built on WordPress with Elementor, leveraging modern web technologies and SEO best practices, and is optimized for mobile devices. Security posture is solid with HTTPS enforced, validated forms, and no visible vulnerabilities, though some security headers could be improved. Privacy and cookie policies are present with consent mechanisms, indicating good compliance with GDPR and related regulations. Overall, the website projects high professionalism and trustworthiness, supporting the company's market position as a leading regional conglomerate.
BSL Lifestylesbsl-lifestyles.com
Retail · Malta
57Medium
NIS2 0 · GDPR 33
NIS2 0 · GDPR 33
BSL Lifestyles is a Malta-based company specializing in the retail and supply of office furniture including chairs, desks, acoustic solutions, and storage. Positioned as a leader in the Maltese market, the company targets businesses and individuals seeking high-quality office furniture solutions. Their website reflects a professional e-commerce platform built on WordPress and WooCommerce, enhanced with Visual Composer and Slider Revolution for a rich user experience. The site is well-structured with clear navigation, product features, and business contact information prominently displayed. Technically, the site uses modern web technologies and integrates marketing and analytics tools such as Google Tag Manager and Facebook Pixel. Security posture is adequate with HTTPS enabled and some security best practices observed, though there is room for improvement in security headers and vulnerability disclosure mechanisms. Privacy compliance is basic with a privacy policy present but no explicit cookie consent mechanism. Overall, the website is trustworthy, professional, and serves its business purpose effectively.
SimIS, Inc.simisinc.com
Government · United States
56Medium
NIS2 35 · GDPR 28
NIS2 35 · GDPR 28
SimIS, Inc. is a Veteran Owned Small Business founded in 2007 specializing in modeling and simulation, cybersecurity, autonomous solutions, and government IT services. The company serves primarily U.S. Department of Defense and federal agencies, offering innovative technology solutions including military-grade robotics and autonomous platforms. Their market position is that of a niche, trusted government contractor with a focus on innovation and quality. Technically, the website is built on a proprietary CMS with Foundation framework and uses modern web technologies including JavaScript and Google Analytics. The site is mobile optimized and well-structured, though some accessibility and security header improvements are possible. Security posture is solid with HTTPS usage and no exposed sensitive data, but lacks explicit security policies and incident response information. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Overall, the website reflects a professional and credible business with strong trust indicators and a clear focus on government and defense sectors.
Lazadaworldproracing.com
E-commerce · Indonesia
43High
NIS2 5 · GDPR 33
NIS2 5 · GDPR 33
The website worldproracing.com, branded as Nenekslot and associated with Lazada Indonesia, operates as an e-commerce platform targeting Indonesian consumers with a focus on electronics, fashion, and lottery results. It offers a wide range of product categories and integrates live lottery result streaming, positioning itself as a comprehensive online shopping destination. The platform leverages advanced technologies including React, RequireJS, and various Alibaba Cloud services, indicating a mature and scalable technical infrastructure. The site employs extensive analytics and tracking mechanisms, utilizing Goldlog and Aplus services to monitor user behavior and performance metrics. Security measures such as HTTPS, CSRF tokens, and secure cookie practices are in place, though explicit security and incident response policies are not publicly visible. Privacy compliance is basic, lacking visible cookie consent mechanisms and detailed privacy policies. Overall, the site demonstrates a strong business presence with consistent branding and good technical implementation, but could improve in privacy transparency and user contact accessibility.
- TThe Park Hotels
theparkhotels.com
Hospitality · India
54Medium
NIS2 0 · GDPR 28
NIS2 0 · GDPR 28
The Park Hotels is a prominent luxury boutique hotel chain in India, offering premium hospitality services across major cities and leisure destinations. The brand emphasizes unique guest experiences through design, culture, and culinary excellence. Their digital presence is mature, featuring comprehensive booking systems, loyalty programs, and detailed business information. Technically, the website employs modern JavaScript libraries and integrates security measures such as hCaptcha. Privacy and cookie policies are clearly presented with consent mechanisms, supporting GDPR compliance. The security posture is solid with HTTPS and no evident vulnerabilities, though security headers could be improved. Overall, the website reflects a professional and trustworthy hospitality brand with strong market positioning in India.
- GGoDaddy, LLC
idean.com
Technology · United States
46High
NIS2 0 · GDPR 28
NIS2 0 · GDPR 28
The website idean.com is currently a parked domain page managed by GoDaddy, LLC. It serves primarily as a placeholder indicating the domain is available for purchase. The page contains minimal content, primarily branding and a call to action to acquire the domain. The target audience is domain investors or buyers. The technical infrastructure is basic, relying on GoDaddy's parking platform with embedded third-party scripts such as Google Adsense for advertising and Trustpilot for review widgets. The site lacks HTTPS and security headers, which negatively impacts its security posture. Privacy compliance is minimal with a basic privacy policy link and a cookie consent banner powered by TrustArc. Overall, the site has low business credibility and poor user experience due to its minimal content and lack of contact information.
Other
46High
NIS2 5 · GDPR 15
NIS2 5 · GDPR 15
The website at sc.qa currently presents only a minimal HTML page with no visible content, metadata, or business information. This suggests the site is either under construction, blocked by a security mechanism such as a WAF, or otherwise inaccessible. Due to the lack of content, no meaningful business overview or market positioning can be derived. The technical infrastructure appears minimal with no scripts or technologies detected, indicating low digital maturity. Security posture is weak, with no HTTPS detected and no security headers present. The absence of privacy policies and contact information further reduces trust and compliance standing. Overall, the site poses a high risk due to lack of transparency and security features.
Total Kontroll AStotalkontroll.no
Technology · Norway
59Medium
NIS2 5 · GDPR 10
NIS2 5 · GDPR 10
Total Kontroll AS is a Norwegian company specializing in providing comprehensive HMS (Health, Environment, and Safety) and management system solutions, including consulting services for central approvals, master craftsman certificates, and building applications. The company positions itself as a market leader in Norway with over a decade of experience, serving a broad range of business clients through software products, training courses, and consulting services. Their flagship software suite, JobBox, integrates multiple business management and quality assurance functions, enhancing operational efficiency for their customers. The website reflects a professional and consistent brand image, targeting Norwegian businesses requiring compliance and quality management solutions. Technically, the website is built on the Webflow platform, utilizing modern web technologies such as jQuery and Google Tag Manager for analytics. The site is mobile-optimized and performs moderately well, with good SEO practices and accessibility at a basic level. Hosting is managed via Webflow's CDN, ensuring reliable delivery. However, some security best practices like security headers and cookie consent mechanisms are missing, which could be improved to enhance compliance and security posture. From a security perspective, the site enforces HTTPS and does not expose sensitive data in its HTML content. There is no evidence of security policies or incident response contacts published, and no vulnerability disclosure mechanisms are present. The absence of cookie consent banners indicates partial GDPR compliance. Overall, the security posture is adequate but could benefit from enhancements in headers, policies, and user privacy controls. The domain registration data aligns well with the company's stated history and location, reinforcing legitimacy and trustworthiness. The site links to related domains such as jobbox.app, which is a partner software product. No WAF or blocking mechanisms were detected, allowing full content access and analysis. Strategic recommendations include implementing cookie consent, security headers, publishing security policies, and improving accessibility to strengthen compliance and trust.
CCSaimenterprisesinc.com
Healthcare
45High
NIS2 5 · GDPR 10
NIS2 5 · GDPR 10
Comprehensive Care Services (CCS) is a clinician-owned healthcare organization specializing in cardiac care and advanced clinical solutions. Founded in 2002, CCS offers a broad range of services including perfusion, autotransfusion, ECMO/ECLS, intraoperative neural monitoring, point-of-care testing, consulting, anesthesia technician services, supply chain solutions, and normothermic regional perfusion. The company positions itself as a leader in cardiac care by integrating advanced technology with clinical expertise to improve patient outcomes. The website reflects a professional and well-branded presence targeting healthcare providers and institutions. Technically, the website is built on WordPress using Elementor and several plugins such as LayerSlider and Contact Form 7. It employs modern web technologies and is mobile optimized with good SEO practices. Analytics and tracking are implemented via Google Tag Manager, Jetpack, and Gauges, indicating moderate user tracking. However, no explicit cookie consent mechanism or privacy policy is found, which is a compliance gap. From a security perspective, the site uses HTTPS with good SSL configuration but lacks visible security headers and a formal security or incident response policy. No vulnerabilities or exposed sensitive data were detected in the HTML content. The domain uses privacy protection in WHOIS, which is common but limits transparency. Overall, the security posture is moderate with room for improvement in headers and policy disclosures. The overall risk assessment is moderate with strong business credibility and technical implementation but notable privacy compliance gaps. Strategic recommendations include adding privacy and cookie policies, implementing security headers, and publishing a vulnerability disclosure or incident response page to enhance trust and compliance.
- NN Group N.V.
nn-group.com
Finance · Netherlands
70Medium
NIS2 0 · GDPR 63
NIS2 0 · GDPR 63
NN Group N.V. is a well-established international financial services company operating in 10 countries, serving approximately 19 million customers. Their core offerings include retirement services, pensions, insurance, banking, and investments. The company has a strong market position as a large enterprise with a history dating back to 1845. The website reflects a professional and comprehensive digital presence targeting investors, customers, job seekers, and media professionals. The content is rich, well-organized, and supports transparency through investor relations and sustainability information. Technically, the website employs modern JavaScript libraries such as jQuery and Adobe DTM for tag management and analytics, along with OneTrust for cookie consent management. The site is built on the FreeStyle CMS platform and includes performance monitoring via Boomerang. Mobile optimization and accessibility are well addressed, contributing to a positive user experience. SEO practices are evident through proper meta tags and structured navigation. From a security perspective, the site enforces HTTPS and implements CSRF protection on forms. The cookie consent mechanism is robust and GDPR compliant. However, explicit security headers like CSP and HSTS are not evident in the provided data, and no incident response or vulnerability disclosure information is published. No vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, NN Group's website demonstrates a mature digital infrastructure with strong business credibility and privacy compliance. The risk profile is low, with recommendations to enhance security headers and publish incident response details to further strengthen security posture.
tranScriprealregulatory.com
Healthcare · United Kingdom
46High
NIS2 0 · GDPR 28
NIS2 0 · GDPR 28
tranScrip is a specialist pharmaceutical consultancy based in the United Kingdom, offering strategic expertise and operational excellence across the entire product lifecycle. Their services include early development, regulatory affairs, clinical development, pharmacovigilance, commercialisation, market access, and medical affairs. The company positions itself as a trusted partner expediting drug development worldwide with a strong focus on therapeutic experience and tailored solutions. The website reflects a professional and well-structured digital presence with comprehensive content and clear navigation. Technically, the site is built on WordPress with modern JavaScript libraries and SEO optimizations, ensuring good performance and mobile responsiveness. Security measures include HTTPS, Google reCAPTCHA v3 integration, and cookie consent management, although some security headers could be improved. Overall, the website demonstrates a mature security posture with no critical vulnerabilities detected. The WHOIS data aligns with the business claims, supporting legitimacy and trustworthiness. Strategic recommendations include enhancing security headers, adding a vulnerability disclosure policy, and improving accessibility compliance to further strengthen the security and compliance posture.
Steves&Costevesandco.com
Media · Malta
54Medium
NIS2 0 · GDPR 43
NIS2 0 · GDPR 43
Steves&Co is a Malta-based independent full-service branding and marketing agency with over a decade of experience delivering innovative digital, branding, and marketing solutions globally. Their market position is that of a creative agency serving diverse industries with a strong portfolio of high-profile clients and awards. The website demonstrates a mature technical infrastructure built on WordPress with modern front-end libraries and integrations with major analytics and marketing platforms. Security posture is solid with HTTPS, bot protection, and spam prevention, though explicit security policies and incident response contacts are absent. Privacy compliance is adequate with a clear privacy and cookie policy but lacks a consent mechanism. Overall, the site is professional, trustworthy, and well-optimized, reflecting a credible business entity.
FORWARD ARCHITECTSforward-architects.com
Real Estate
28High
NIS2 5 · GDPR 10
NIS2 5 · GDPR 10
Forward Architects is a small architectural firm showcasing their portfolio of residential, public, and workspace projects. The website is built on WordPress and uses common analytics tools such as Google Analytics and Facebook Pixel for user tracking. The site is accessible, well-structured, and visually consistent with a good user experience and navigation clarity. However, it lacks critical privacy and cookie policies, and no contact information is explicitly provided in the analyzed HTML content. Security posture is moderate with HTTPS enabled but missing security headers and vulnerability disclosures. Overall, the site is functional and professional but could improve compliance and security transparency.
MAP IT Ltd.mapitmalta.com
Technology · Malta
59Medium
NIS2 0 · GDPR 70
NIS2 0 · GDPR 70
MAP IT Ltd. is a Malta-based company specializing in business software solutions, custom software development, and IT consultancy. Established in 2014, the company positions itself as a trusted local provider with a strong focus on SAP Business One and related enterprise solutions. Their offerings include a suite of proprietary software products (MAP.SUITE), SAP integrations, and IT consultancy services tailored to optimize business processes. The website reflects a professional and consistent brand image targeting businesses seeking digital transformation and software optimization. Technically, the website is built on WordPress with modern plugins and demonstrates good SEO and mobile optimization. Security posture is solid with HTTPS enabled and GDPR compliance mechanisms in place, though some security headers could be improved. Overall, the site is trustworthy and well-maintained, supporting the company's market position as a reliable software solutions provider in Malta.
- TTeatru Manoel
teatrumanoel.com.mt
Hospitality · Malta
53Medium
NIS2 0 · GDPR 43
NIS2 0 · GDPR 43
Teatru Manoel is a historic and culturally significant theatre located in Malta, offering event bookings, theatre tours, and cultural performances. The website serves as a booking platform and information portal for upcoming events, targeting the general public interested in theatre and cultural activities. The business model revolves around ticket sales and event management, positioning Teatru Manoel as an established cultural venue within the Maltese hospitality sector. Technically, the website employs modern web technologies including JavaScript, SVG graphics, and lazy loading for images, hosted on Microsoft Azure infrastructure. The site demonstrates good mobile optimization, accessibility, and SEO practices, contributing to a positive user experience. The presence of cookie consent mechanisms and privacy policies indicates a mature approach to privacy compliance. From a security perspective, the site enforces HTTPS and includes anti-clickjacking scripts, though explicit security headers are not detected. No critical vulnerabilities or exposed sensitive data were found. The security posture is solid but could be enhanced by implementing additional HTTP security headers and publishing detailed security policies. Overall, the website is professional, trustworthy, and compliant with GDPR requirements. It effectively supports the business goals of Teatru Manoel while maintaining a secure and user-friendly online presence. Strategic recommendations include enhancing security headers, expanding security and incident response documentation, and continuous monitoring of third-party scripts.
- GGrupo Vernon
grupovernon.com
Energy · Angola
28High
NIS2 0 · GDPR 10
NIS2 0 · GDPR 10
Grupo Vernon is a diversified Angolan business group with operations spanning energy, real estate, hospitality, agriculture, and healthcare sectors. The company positions itself as an innovator transforming commercial opportunities into socially responsible projects. The website reflects a medium-sized enterprise with a broad portfolio of subsidiaries and projects, primarily targeting business clients in Angola and Portuguese-speaking regions. The site is built on WordPress with multilingual support, indicating a moderate level of digital maturity.
Grant Thornton Maltagrantthornton.com.mt
Finance · Malta
48High
NIS2 13 · GDPR 75
NIS2 13 · GDPR 75
Grant Thornton Malta is a prominent member of the global Grant Thornton professional services network, offering a wide range of services including audit, tax, advisory, and outsourcing. The website reflects a strong market position with comprehensive service descriptions targeting privately held businesses, public interest entities, and the public sector in Malta. The digital infrastructure leverages modern technologies such as jQuery, Glide.js, Microsoft Application Insights, and OneTrust for cookie consent, indicating a mature technical setup. Security measures include HTTPS and cookie consent mechanisms, though explicit security headers and incident response policies are not evident. Overall, the site demonstrates a high level of professionalism, compliance, and user experience, supporting its credibility in the professional services sector.
Linguatime Ltdlinguatime.com
Other · United Kingdom
53Medium
NIS2 0 · GDPR 28
NIS2 0 · GDPR 28
Linguatime Ltd is a small UK-based business currently not accepting bookings, as stated on their website. The site provides minimal business information and lacks detailed descriptions of services or target audience. The website is built using GoDaddy Website Builder and hosted on GoDaddy infrastructure, employing modern web fonts and service workers for enhanced user experience. However, the content is basic and navigation is minimal, with no contact details or social media presence visible. Security-wise, the site uses HTTPS and a cookie consent banner, but lacks explicit security headers and detailed security or incident response policies. Privacy compliance is basic, with a privacy policy present but no clear GDPR adherence. Overall, the website presents a low to moderate risk profile but would benefit from improved transparency and security practices.
The Oakleaf Grouptheoakleafgroup.com
Finance · United States
60Medium
NIS2 5 · GDPR 40
NIS2 5 · GDPR 40
The Oakleaf Group is a specialized mortgage consulting firm established in 2018, serving top financial institutions, agencies, GSEs, banks, and mortgage companies primarily in the United States. Their service offerings span operational excellence, regulatory compliance, servicing solutions, data analytics, and litigation support, positioning them as a trusted partner in the mortgage and financial services industry. The website reflects a professional and consistent brand image with clear navigation and relevant content targeting financial sector clients. Technically, the website is built on WordPress using popular plugins such as Yoast SEO, WPBakery Page Builder, and Slider Revolution, hosted likely on GoDaddy infrastructure. The site demonstrates moderate performance and good mobile optimization, with basic accessibility features and solid SEO practices. Analytics and marketing tools like Google Analytics, AdRoll, and Mailchimp are integrated, indicating moderate user tracking and marketing sophistication. From a security perspective, the site uses HTTPS with good SSL configuration but lacks visible advanced security headers and explicit security or incident response policies. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism or GDPR-specific disclosures. Overall, the website is trustworthy and professional with room for improvement in privacy compliance and security transparency. The domain registration details align well with the business claims, supporting legitimacy and trustworthiness.
- St. patrick school
stpatrickkc.com
Religious institutions · United states
52Medium
NIS2 5 · GDPR 10
NIS2 5 · GDPR 10
- Systemato
systemato.com
E-commerce · Malta
56Medium
NIS2 5 · GDPR 70
NIS2 5 · GDPR 70
Systemato is a Malta-based small digital marketing agency specializing in e-commerce, web design, social media marketing, and content writing. With over 10 years of experience, they serve a diverse client base ranging from sole traders to multinational brands. The website reflects a professional and modern digital presence, leveraging WordPress with popular plugins and integrations such as Google Analytics, Facebook Pixel, and CookieYes for consent management. Security posture is strong with HTTPS enforced and reCAPTCHA protecting forms, though formal security policies and incident response contacts are not published. Overall, the site demonstrates good compliance with privacy regulations including GDPR, with clear cookie consent mechanisms and privacy policy documentation. The business is credible, with client testimonials and active social media channels reinforcing trust.
- Mmotion blur Ltd.
motionblur.com.mt
Media · Malta
41High
NIS2 0 · GDPR 18
NIS2 0 · GDPR 18
motion blur Ltd. is a Malta-based visual content studio specializing in producing high-quality video content for social media, television, events, corporate training, and line production services. Established in 2006, the company has a strong local presence and a portfolio that includes commercials, documentaries, and TV series. The website reflects a professional and modern digital presence built on Next.js and React, with good mobile optimization and SEO practices. Security posture is moderate with cookie consent implemented but lacks explicit security headers and incident response information. The company demonstrates good privacy compliance with a clear privacy policy and cookie consent mechanism. Overall, the website is trustworthy and well-positioned in the media production sector in Malta.
Papaya Ltdpapaya.eu
Finance · Malta
48High
NIS2 5 · GDPR 15
NIS2 5 · GDPR 15
Papaya Ltd operates as a licensed Electronic Money Institution based in Malta, providing advanced fintech solutions including digital banking, payment cards, and PSD2 compliant APIs. The company targets businesses seeking customizable and white-label financial services, positioning itself as a modern fintech platform with a strong partner ecosystem. The website demonstrates a professional design and clear navigation, supporting a positive user experience and trustworthiness. Technically, the site is built on Angular 9 with modern web standards, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and Content-Security-Policy headers, though additional security headers and explicit incident response information could enhance protection. Privacy policies are comprehensive but hosted on a partner domain, and no direct contact information is provided on the main site, which may affect user trust. Overall, the site reflects a credible fintech business with room for improvement in transparency and security disclosures.
- Fountayn LLC
datatrak.com
Healthcare · United States
38High
NIS2 5 · GDPR 25
NIS2 5 · GDPR 25
Fountayn LLC operates in the healthcare software sector, providing a comprehensive suite of clinical trial data management solutions including EDC, CTMS, RTSM, eConsent, and more. Their offerings are designed to streamline clinical research data reporting and ensure compliance with regulatory standards such as FDA CFR 21 Part 11, HIPAA, GDPR, and GCP. The company targets clinical research sponsors, sites, and regulatory authorities, positioning itself as a trusted provider of validated and quality-assured software solutions. The website reflects a professional and consistent brand presence with clear navigation and relevant content focused on their key services. Technically, the website is built on the Squarespace platform, leveraging modern web technologies and integrations with marketing and analytics tools such as HubSpot, Hotjar, Google Tag Manager, LinkedIn Insight Tag, and ZoomInfo. The site is mobile optimized with good SEO practices and uses HTTPS with HSTS for secure communications. Forms are protected with Google reCAPTCHA Enterprise, enhancing security against automated abuse. From a security perspective, the site demonstrates strong baseline protections including SSL/TLS encryption, HSTS, and validated form security. However, it lacks explicit privacy and cookie policies, security policy documentation, and incident response contact details, which are important for compliance and user trust. The WHOIS data confirms legitimate ownership consistent with the business identity and location, supporting the site's credibility. Overall, the website presents a solid digital presence with good security fundamentals but would benefit from enhanced privacy compliance documentation and clearer security policies to improve trust and regulatory adherence.
Aspen Pharmacareaspenpharma.com
Healthcare · South Africa
51Medium
NIS2 5 · GDPR 33
NIS2 5 · GDPR 33
Aspen Pharmacare is a well-established global specialty and branded pharmaceutical company with a strong presence in both emerging and developed markets. The company operates multiple manufacturing facilities and offers a broad portfolio of pharmaceutical products including prescription, over-the-counter, and injectables. Their website reflects a mature business with comprehensive investor relations, corporate governance, and sustainability commitments. Technically, the site is built on WordPress with modern frameworks and plugins, optimized for SEO and mobile devices. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though improvements can be made in cookie consent and incident response transparency. Overall, Aspen Pharmacare presents a credible, professional, and trustworthy online presence aligned with its business stature.
Rusticarustica.fr
Media · France
33High
NIS2 5 · GDPR 0
NIS2 5 · GDPR 0
Rustica.fr is a well-established French media website specializing in gardening, cooking, well-being, and lifestyle content. The site offers a rich variety of content including articles, videos, podcasts, and games, supported primarily through advertising and magazine subscriptions. The brand has a strong market presence in France, dating back to 1928, and targets gardening enthusiasts and related audiences. Technically, the site uses modern web technologies such as Bootstrap, lazy loading, and cookie consent management via FastCMP, with integration of Google Tag Manager and advertising networks. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Privacy compliance is strong with clear policies and consent banners. Overall, the site is professional, trustworthy, and user-friendly, with extensive social media engagement and active user interaction through newsletters and subscriptions.
Cubits.comcubits.com
Finance · United Kingdom
49High
NIS2 5 · GDPR 25
NIS2 5 · GDPR 25
Cubits.com is a UK-based small business operating an educational and affiliate marketing website focused on cryptocurrency, primarily Bitcoin. The site provides detailed guides on how to buy Bitcoin, reviews of major exchanges like eToro, Binance, and Coinbase, and general crypto investment information. The business model relies on affiliate commissions from recommended platforms. Technically, the site is built on WordPress with common plugins such as Yoast SEO and uses modern web technologies like jQuery and Google Fonts. The site is mobile-optimized and SEO-friendly but lacks explicit privacy and terms of service pages, which are important for compliance. Security posture is moderate with HTTPS enforced but missing key security headers. No direct company contact emails or phone numbers are provided, which limits user trust and compliance transparency. Overall, the website is professional and content-rich but could improve in privacy, security, and contact transparency.
Larive Internationallarive.com
Other · Netherlands
68Medium
NIS2 5 · GDPR 75
NIS2 5 · GDPR 75
Larive International is a strategic business development consultancy specializing in emerging markets, with over 300 experts across more than 25 countries. The company offers services including market intelligence, strategy development, operational modeling, and post-investment support, targeting businesses aiming to enter or expand in emerging markets. The website is built on a modern WordPress platform using Elementor and optimized for performance and SEO. Security measures include HTTPS, Content Security Policy, and reCAPTCHA on forms, with GDPR-compliant cookie consent managed by Complianz. No critical security issues or blocking mechanisms were detected, indicating a mature and secure digital presence. Overall, the site reflects a professional, trustworthy, and well-maintained business with strong compliance and technical standards.
Valletta Gateway Terminals Ltd.vgt.com.mt
Transportation · Malta
49High
NIS2 0 · GDPR 23
NIS2 0 · GDPR 23
Valletta Gateway Terminals Ltd. is a Malta-based terminal operator specializing in multipurpose cargo handling services including RoRo, container, conventional cargo, and car transhipment. The company operates key port facilities such as the Deep Water Quay and Laboratory Wharf, serving shipping lines and logistics providers. The website reflects a medium-sized enterprise with a clear market position in the Maltese transportation sector, supported by a parent company, Portek International Limited. Technically, the website is built on WordPress with modern plugins like Slider Revolution and Yoast SEO, hosted likely on WP Engine. It demonstrates good mobile optimization, SEO practices, and moderate performance. The site uses Google Analytics for user tracking and implements cookie consent mechanisms, indicating awareness of privacy compliance. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and a published security policy or incident response contacts. No critical vulnerabilities or blocking mechanisms were detected, suggesting a stable security posture but with room for improvement in security best practices. Overall, the website is professional, trustworthy, and compliant with basic privacy regulations. Strategic enhancements in security headers, incident response transparency, and vulnerability disclosure would strengthen its security maturity and trustworthiness further.
Events Club Maltaeventsclubmalta.com
Hospitality · Malta
30High
NIS2 0 · GDPR 10
NIS2 0 · GDPR 10
Events Club Malta is a small-sized destination management company specializing in organizing and managing conferences, meetings, incentive trips, and bespoke events primarily in Malta, with services extending to other European countries. The company targets corporate clients and event planners seeking professional event management solutions. Their website presents a professional and consistent brand image with detailed service offerings, positioning them as a specialist in the hospitality sector focused on Malta. Technically, the website is built on WordPress using Visual Composer and LayerSlider plugins, with jQuery and Google Analytics integrated. The site is moderately optimized for performance and mobile devices but lacks advanced accessibility features. SEO is basic but functional. The hosting provider is not explicitly identified from the HTML content. From a security perspective, the site uses HTTPS but lacks important security headers such as Content-Security-Policy and HSTS, which are recommended to enhance security posture. There are no visible privacy or cookie policies, and no consent mechanisms for tracking, which indicates compliance gaps with GDPR and related privacy regulations. No contact emails or phone numbers are explicitly provided, limiting direct communication channels. No WAF or blocking mechanisms were detected, and the domain registration data aligns well with the business claims, supporting legitimacy. Overall, the website is functional and professional but requires improvements in privacy compliance and security best practices to reduce risk and enhance trustworthiness.
- TThe Plaza Hotel
theplazahotel.ca
Hospitality · Canada
34High
NIS2 0 · GDPR 28
NIS2 0 · GDPR 28
The Plaza Hotel website represents a small hospitality business located in Kamloops, British Columbia, offering heritage accommodations with modern amenities. The site integrates booking services through Wyndham Hotels and promotes wellness and local partnerships. The technical infrastructure relies on common web technologies such as jQuery, Google Analytics, and third-party marketing tools. While the website content is professionally presented with good navigation and relevant information, it lacks visible contact details and comprehensive privacy compliance features. Security posture is moderate with no visible HTTPS enforcement on the main site and absence of security headers, which poses potential risks. Overall, the site is functional and trustworthy but requires improvements in security and privacy compliance to enhance user trust and regulatory adherence.
- VValletta Cruise Port
vallettacruiseport.com
Transportation · Malta
57Medium
NIS2 0 · GDPR 28
NIS2 0 · GDPR 28
Valletta Cruise Port operates as a strategic Mediterranean cruise port located in Malta, serving both cruise passengers and business partners. The website provides comprehensive information about cruise schedules, passenger services, port services, and local attractions, positioning itself as a key player in the cruise tourism and transportation sector. The business is part of Global Ports Holding, indicating a strong market presence and backing. Technically, the website employs a modern technology stack including jQuery, Bootstrap, Swiper.js, and Google Maps API, ensuring a responsive and interactive user experience. The site is mobile-optimized and integrates Google Analytics for user tracking, though accessibility features are basic. Performance is moderate with room for optimization. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks advanced security headers and explicit security policies. Privacy compliance is basic with a privacy policy and cookie consent banner present, but no detailed GDPR compliance indicators or data protection officer information. Contact information is available primarily via address and social media, with no direct emails or phone numbers explicitly provided. Overall, the website is professional, trustworthy, and functional with moderate risk. Strategic improvements in security headers, privacy compliance, and explicit contact channels would enhance trust and compliance.
Other
44High
NIS2 0 · GDPR 0
NIS2 0 · GDPR 0
The website de-stek-houten.nl currently serves only a 404 error page indicating that the requested content is not found. There is no accessible business information, contact details, or any form of content beyond the error message. The site lacks any privacy, cookie, or terms of service policies, and no security or compliance information is available. Technically, the site does not show evidence of HTTPS or security headers, and no scripts or analytics tools are detected. This severely limits the ability to assess the company's digital maturity or security posture. Overall, the site appears inactive or misconfigured, providing no value to visitors or stakeholders. From a technical perspective, the site is minimal and only displays a Google-branded 404 error page. There is no evidence of modern web technologies, CMS platforms, or performance optimizations. The absence of any business or security content suggests the domain may be unused or improperly configured. Security-wise, the lack of HTTPS and security headers, combined with no visible privacy or cookie policies, indicates a very low security posture. No incident response or vulnerability disclosure mechanisms are present. The site does not appear to be protected by any WAF or security challenge, but the lack of content and security features poses risks if the site were to be used for business purposes. Given these findings, the overall risk assessment is high due to the absence of critical security and compliance controls and the lack of any meaningful content or business presence. Strategic recommendations include enabling HTTPS, publishing privacy and cookie policies, adding business and contact information, and improving the website content and security posture to build trust and compliance.
Other · Slovakia
43High
NIS2 5 · GDPR 3
NIS2 5 · GDPR 3
The website ict.sk is currently a parked domain with minimal content and no active business presence. It primarily serves as a landing page with advertising scripts and a link to contact the domain owner via an external site. There is no substantive business description, contact information, or services offered. The site lacks HTTPS, security headers, and privacy compliance mechanisms, indicating a low level of technical and security maturity. The presence of multiple third-party ad and tracking scripts suggests monetization through advertising rather than direct business operations. Overall, the site presents a low trust profile and minimal user engagement features.
- HHinterland Electrification Company Inc.
electricity.gov.gy
Energy · Guyana
28High
NIS2 5 · GDPR 28
NIS2 5 · GDPR 28
The Hinterland Electrification Company Inc., under the Ministry of Public Infrastructure of Guyana, operates the website electricity.gov.gy as an informational portal dedicated to promoting renewable energy and electrification in Guyana's hinterland and coastal regions. The site provides news updates, downloadable technical documents, and links to partner government agencies and international organizations. The business model is government-driven, focusing on sustainable energy access and public awareness rather than commercial services. The target audience includes local communities, government stakeholders, and renewable energy investors. Technically, the website is built on Joomla! CMS and uses jQuery libraries. The design is basic with moderate navigation clarity but lacks advanced mobile optimization and accessibility features. There is no evidence of modern analytics or advertising technologies, indicating a low level of digital marketing maturity. Performance is moderate, and SEO practices are basic. From a security perspective, the site does not explicitly confirm HTTPS usage, lacks security headers, and does not provide visible security or incident response policies. No contact information or data protection officer details are available, and no cookie consent mechanism is implemented, indicating gaps in privacy compliance. However, no obvious vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, the website serves its informational purpose but requires improvements in security posture, privacy compliance, and technical modernization to enhance trustworthiness and user experience.
- Malta GeoSpace Consultants
mgc.com.mt
Technology · Malta
48High
NIS2 0 · GDPR 0
NIS2 0 · GDPR 0
Malta GeoSpace Consultants (MGC) is a specialized gaming and technology consultancy based in Malta, focusing on licensing, compliance, and strategic advisory services for the iGaming and high-value tech sectors. The company positions itself as a trusted partner for global innovators, emphasizing strong industry connections and proactive service delivery. The website reflects a professional and consistent brand image, built on the Wix platform with modern web technologies including React and Sentry for error monitoring. While the technical infrastructure is solid and performance is moderate, there is room for improvement in mobile optimization and accessibility. Security practices include HTTPS and some script-based hardening, but lack explicit security headers and detailed security policies. Privacy compliance is minimal, with no visible privacy or cookie policies, which is a notable gap. Overall, the website is functional and professional but would benefit from enhanced privacy and security disclosures to improve trust and compliance.
Toyota Canadatoyota.ca
Transportation · Canada
63Medium
NIS2 0 · GDPR 58
NIS2 0 · GDPR 58
Toyota Canada operates a comprehensive and professionally designed website offering detailed information about its range of vehicles including cars, SUVs, trucks, hybrids, and electrified models. The site targets Canadian consumers and provides extensive shopping tools, owner resources, and dealer locator services. Technically, the website leverages modern technologies such as Adobe Experience Manager, Google Tag Manager, and OneTrust for privacy compliance, ensuring a robust digital infrastructure. Security posture is strong with HTTPS enforced, proper use of security headers, and no visible vulnerabilities or exposed sensitive data. The website demonstrates good privacy compliance with clear policies and consent mechanisms. Overall, the site reflects a high level of professionalism, trustworthiness, and business credibility, aligned with the established Toyota brand in Canada.
Tektraco Ltd.tektraco.com
Technology · Malta
35High
NIS2 5 · GDPR 33
NIS2 5 · GDPR 33
Tektraco Ltd. is a Malta-based award-winning project engineering company specializing in telecommunications, medical engineering, and laboratory solutions. With over 30 years of experience, the company positions itself as a trusted leader providing tailored, specialized science and technology services to businesses and organizations. The website reflects a professional and consistent brand image, targeting clients in the technology and healthcare sectors. Technically, the site is built on WordPress with modern plugins and frameworks, offering good mobile optimization and SEO practices. Security posture is solid with HTTPS and reCAPTCHA integration, though additional security headers and explicit policies could enhance protection. Privacy compliance is basic, lacking a cookie consent mechanism, which should be addressed to meet GDPR standards. Overall, Tektraco demonstrates strong business credibility and digital maturity, with clear contact information and social media presence supporting trust.
- Noxwin
noxwin.com
Other
49High
NIS2 5 · GDPR 28
NIS2 5 · GDPR 28
Noxwin.com is a comprehensive online platform specializing in reviews and comparisons of gambling sites, including sports betting and casino operators. The site offers detailed insights into bonuses, payment methods, and the latest industry news, positioning itself as a trusted resource for bettors and casino players worldwide. With a focus on both traditional and crypto gambling markets, Noxwin caters to a diverse audience seeking reliable and up-to-date information. Technically, the website leverages modern web technologies such as React and Next.js, hosted on Vercel, ensuring fast performance and excellent mobile optimization. The use of structured data and SEO best practices enhances its visibility and user experience. The platform integrates analytics tools like Google Tag Manager and Vercel Analytics for data-driven insights while maintaining a good level of privacy compliance. From a security perspective, Noxwin enforces HTTPS, employs standard security headers, and avoids exposing sensitive data. Although explicit security policies and incident response information are not present, the overall security posture is strong. The site demonstrates a professional approach to data protection and user trust, supported by transparent business information and verified contact details. Overall, Noxwin.com presents a low-risk profile with a solid foundation for growth and user engagement. Strategic enhancements in privacy consent mechanisms and security policy disclosures could further strengthen its market position and compliance stature.