Low-risk security reports
14,261 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,165001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
13,751–13,800 of 14,261
- LLexisNexis
emailage.com
Technology
83Low
NIS2 30 · GDPR 58
NIS2 30 · GDPR 58
The website emailage.com is associated with LexisNexis Risk Solutions, a well-known enterprise in the technology sector specializing in fraud prevention and risk management services. The site currently displays a 407 error block page indicating that the request has been blocked due to suspected malicious activity or hotlinking, which limits the availability of business and policy information on this page. The technical infrastructure leverages Cloudflare for hosting and security, with a valid SSL certificate issued by GlobalSign, though it lacks support for modern TLS protocols. Security headers are properly configured, but a subdomain takeover vulnerability exists on blog.emailage.com, posing a potential risk. No privacy, cookie, or terms of service policies are present on this page, and no contact information or forms are available, which impacts user trust and compliance visibility.
LexisNexis Risk Solutionsbankersalmanac.com
Finance
84Low
NIS2 25 · GDPR 40
NIS2 25 · GDPR 40
Bankers Almanac is a specialized portal operated by LexisNexis Risk Solutions, providing financial institutions with access to banking data and KYC compliance tools. Positioned as an enterprise-grade service, it supports risk management and regulatory compliance needs for banking professionals. The website serves primarily as a login gateway to these services, integrating modern authentication via Auth0 and linking to corporate LexisNexis resources. Technically, the site employs standard web technologies but lacks modern TLS protocol support and DNSSEC, which are areas for improvement. Security posture is solid with valid SSL and HSTS enabled, but could benefit from enhanced security headers and DNS protections. Overall, the site demonstrates a professional and trustworthy presence aligned with enterprise financial services.
Solarisbank AGsolarisgroup.com
Finance · Germany
80Low
NIS2 25 · GDPR 43
NIS2 25 · GDPR 43
Solarisbank AG operates as a leading embedded finance platform in Europe, providing a comprehensive Banking-as-a-Service solution that enables businesses to integrate digital banking, payments, lending, and identification services via advanced APIs. The company holds a full German banking license, allowing it to operate across the EU with a strong compliance and regulatory framework. Solarisbank's market position is reinforced by partnerships with notable clients such as American Express and Tomorrow, and a clear focus on customer-centric financial product innovation. Technically, Solarisbank employs modern web technologies including React and Gatsby, hosted on AWS infrastructure, with a cloud-based banking platform emphasizing scalability and international expansion. The website demonstrates good performance, mobile optimization, accessibility, and SEO practices, supported by a robust API-driven backend. From a security perspective, Solarisbank maintains a valid SSL certificate, enforces HSTS with preload, and implements SPF DNS records. However, the absence of enabled TLS 1.2 or higher protocols and lack of DNSSEC and CAA records present areas for improvement. The company provides clear privacy policies, cookie consent mechanisms, and incident response contact channels, reflecting a mature security posture. Overall, Solarisbank presents a high-trust, professional digital presence with strong business and technical foundations. Strategic enhancements in security protocols and transparency around vulnerability disclosures would further strengthen its risk profile and customer confidence.
Related:americanexpress.com
- UserTesting
usertesting.com
Technology · United States
81Low
NIS2 25 · GDPR 58
NIS2 25 · GDPR 58
UserTesting is a leading enterprise SaaS provider specializing in human insight platforms that enable businesses to gather UX research, product feedback, and marketing insights. The company holds a strong market position with a comprehensive suite of services including an AI-powered platform, expert consulting, and a vast participant network. Their digital infrastructure is modern, leveraging Drupal CMS, cloud hosting, and advanced analytics tools such as New Relic and Google Analytics. Security measures are robust, featuring HSTS, strong SSL certificates, and no known critical vulnerabilities, though TLS protocols could be updated for enhanced security. The company demonstrates good compliance with GDPR and provides clear privacy and cookie policies. Overall, UserTesting exhibits a mature security posture and a well-optimized, professional web presence.
Related:userzoom.com
Volkswagen Financial Services AGvwfsag.de
Finance · Germany
78Low
NIS2 30 · GDPR 18
NIS2 30 · GDPR 18
Volkswagen Financial Services AG is a major European financial and mobility services provider, operating as a wholly owned subsidiary of Volkswagen AG. The company offers financing, leasing, insurance, and mobility solutions across 17 European markets, positioning itself as a key player within the Volkswagen Group Mobility ecosystem. The website reflects a strong corporate identity with comprehensive content on sustainability, investor relations, and career opportunities. Technically, the site uses Adobe Experience Manager as its CMS and integrates advanced tracking and consent management tools, including Adobe Launch and Civic CookieControl. However, performance issues such as a high load time and disabled modern TLS protocols indicate areas for technical improvement. Security posture is generally good with a valid SSL certificate and HSTS enabled, but gaps exist in DNSSEC and CAA record configurations. The site demonstrates good privacy compliance with GDPR-aligned cookie consent mechanisms and detailed privacy policies. Overall, the digital maturity is solid but could benefit from enhancements in security and performance to maintain trust and operational excellence.
Related:vwfs.comvolkswagenag.com
SuranceBay LLCsurancebay.com
Technology · United States
83Low
NIS2 25 · GDPR 43
NIS2 25 · GDPR 43
SuranceBay LLC operates a leading SaaS platform focused on insurance agent onboarding and compliance, positioning itself as the industry's number one solution in this niche. Their platform, SureLC, streamlines and automates insurance distribution processes, serving carriers, agencies, producers, and third-party administrators. The company demonstrates a solid market presence with a medium-sized operation based in the United States. Technically, the website is well-structured with modern web technologies, good SEO, and mobile optimization. The hosting infrastructure is based on Amazon AWS, and the site employs Google Tag Manager for analytics. Security-wise, the site benefits from a valid SSL certificate issued by Go Daddy and robust HTTP security headers including HSTS with preload, X-Frame-Options, and Content Security Policy. However, the absence of enabled TLS protocols is a critical security gap that should be addressed promptly. The company maintains comprehensive legal documentation including privacy policy and terms of service, but lacks visible cookie consent mechanisms and vulnerability disclosure policies. Overall, SuranceBay presents a professional and trustworthy digital presence with room for security enhancements.
A-OK9a-ok9.com
E-commerce · United Kingdom
78Low
NIS2 25 · GDPR 40
NIS2 25 · GDPR 40
A-OK9 is a UK-based e-commerce business specializing in natural dog health and wellbeing supplements. The company leverages a subscription-based model to offer flexible purchasing options, targeting dog owners who seek vet-formulated, non-sedative, and research-backed products. Their market position is supported by positive customer reviews and a focused product line addressing various dog health issues. Technically, the website is built on the Shopify platform using the Flex theme, integrating multiple marketing and analytics tools such as Klaviyo, Recharge Payments, and Microsoft Clarity. The site demonstrates good performance and mobile optimization, with a consistent brand presence and clear navigation. Security-wise, the site employs strong HTTP headers and a valid SSL certificate, but lacks modern TLS protocol support and DNSSEC, which are areas for improvement. Privacy and cookie policies are present and GDPR compliant, with active consent mechanisms. Overall, the website is professional, trustworthy, and well-positioned in its niche market.
Related:myshopify.com
- UserTesting
userzoom.com
Technology
81Low
NIS2 25 · GDPR 58
NIS2 25 · GDPR 58
UserTesting, through its UserZoom platform, offers a comprehensive SaaS solution for UX research and digital experience testing, targeting enterprise customers globally. The company positions itself as a leader in the UX research market, providing sophisticated tools for user testing, audience targeting, analytics, and professional services. The website reflects a mature digital presence with extensive marketing and analytics integrations, supporting a strong brand and customer trust. Technically, the site is built on Drupal 11 with modern front-end technologies and employs multiple third-party services for marketing, analytics, and user engagement. Security posture is generally strong with proper security headers, valid SSL certificates, and compliance with GDPR, HIPAA, and SOC 2 Type II certifications. However, the absence of enabled TLS protocols and incomplete CAA DNS records indicate areas for improvement. Overall, the site demonstrates high professionalism, good performance, and extensive user tracking aligned with its business model.
Volkswagen Financial Services AGvwfs.com
Finance · Germany
81Low
NIS2 30 · GDPR 43
NIS2 30 · GDPR 43
Volkswagen Financial Services AG operates as the European financial and mobility services provider within the Volkswagen Group, serving customers across 17 markets. The company offers financing, leasing, insurance, and mobility solutions, positioning itself as a market leader in automotive financial services. The website reflects a mature digital presence with strong corporate branding, comprehensive investor relations, and sustainability focus. Technically, the site is built on Adobe Experience Manager with robust security headers and modern content delivery via AWS CloudFront. However, the SSL configuration lacks support for modern TLS protocols, and DNSSEC is not enabled, indicating areas for security enhancement. No explicit security or incident response policies are published, and contact information is not directly visible, which may impact user trust and compliance transparency.
Related:volkswagenbank.de
- Volkswagen Bank
volkswagenbank.de
Finance · Germany
78Low
NIS2 25 · GDPR 18
NIS2 25 · GDPR 18
Volkswagen Bank is a large financial services provider focused on banking and automotive financing solutions primarily for private and business customers in Germany. The website offers comprehensive information about their banking products such as current accounts, credit cards, investments, loans, and insurance. The digital infrastructure is modern, leveraging Adobe Experience Manager CMS, cloud hosting via Amazon CloudFront, and multiple marketing and analytics tools including Adobe Launch, Google Tag Manager, and UserZoom. Security posture is strong with valid SSL certificates, strict security headers, and a comprehensive content security policy, although the lack of modern TLS versions and visible cookie consent mechanisms are areas for improvement. The site demonstrates high professionalism, excellent user experience, and clear navigation, supporting trust and engagement with customers.
Related:vwfs.de
- Bettr
bettrfinancing.com
Finance
77Low
NIS2 25 · GDPR 25
NIS2 25 · GDPR 25
Bettr Financing is a digital lending platform operated by Ant International, focused on providing quick and hassle-free micro-loans to MSMEs across multiple markets including Brazil, Hong Kong, Thailand, and Vietnam. The company leverages technology and innovation to simplify access to financing, positioning itself as a key enabler for small business financial progress. The website reflects a modern technical infrastructure using React and Ant Design frameworks, hosted on Alibaba Cloud services, and incorporates performance and error monitoring tools. Security posture is strong with a valid GlobalSign SSL certificate and multiple security headers, although the lack of modern TLS protocol support and absence of visible privacy and cookie policies indicate areas for improvement. The site collects user contact information via forms but lacks explicit data protection disclosures. Overall, Bettr demonstrates a solid digital presence with room to enhance compliance and security transparency.
- VVolkswagen Financial Services AG
volkswagen-bank.com
Finance · Germany
77Low
NIS2 22 · GDPR 43
NIS2 22 · GDPR 43
Volkswagen Financial Services AG operates as the financial and mobility services provider for the Volkswagen Group across Europe, managing financing, leasing, insurance, and mobility solutions in 17 markets. The company holds a strong market position as a wholly-owned subsidiary of Volkswagen AG, with a large operational footprint and a focus on sustainability and customer mobility. The website reflects a professional and consistent brand presence with comprehensive investor relations and media content. Technically, the site is built on Adobe Experience Manager, leveraging modern content delivery and third-party integrations for analytics and marketing. Security headers and policies are well implemented, though some SSL/TLS configuration anomalies were detected, likely due to scanning artifacts or misconfigurations. Overall, the security posture is solid but could be improved by enabling modern TLS protocols and publishing explicit security policies. The site demonstrates good privacy compliance with a comprehensive privacy policy and consent mechanisms for external data sources. Social media presence and trust indicators support a high level of trustworthiness.
Related:vwfs.comvolkswagenbank.de
- E.Leclerc
e.leclerc
Retail · France
78Low
NIS2 25 · GDPR 25
NIS2 25 · GDPR 25
E.Leclerc operates a large-scale retail e-commerce platform primarily serving consumers in France. The website is built using modern web technologies such as Angular and integrates multiple marketing and tracking tools including Google Tag Manager and Quadran QWATracker. The company maintains a strong security posture with valid SSL certificates issued by a reputable CA, strict transport security headers, and protection against common web vulnerabilities. However, the absence of modern TLS protocols and DNS security extensions like DNSSEC and CAA records indicates areas for improvement. The website lacks visible privacy, cookie, and terms of service policies, which may impact compliance with GDPR and other regulations. No direct contact information or forms are present in the analyzed HTML content, limiting user engagement and support transparency.
—
78Low
NIS2 25 · GDPR 43
NIS2 25 · GDPR 43
Security assessment completed with an overall score of 50/100 (unknown risk). 7 high-priority issues should be addressed promptly. Total of 23 security findings identified across all modules.
6D Helmets6dhelmets.com
Retail · United States
78Low
NIS2 25 · GDPR 43
NIS2 25 · GDPR 43
6D Helmets is a specialized e-commerce retailer focused on advanced helmet safety technology for various sports including moto, bike, street, and youth markets. The company positions itself as an innovator in brain protection with a strong online presence powered by Shopify. Their website integrates multiple customer engagement tools such as forms for registration, inspection, and returns, as well as customer reviews and marketing platforms. Technically, the site is built on a modern Shopify theme with good performance and mobile optimization, hosted on Cloudflare and Google Cloud Platform. Security posture is solid with HTTPS, HSTS, and security headers, though the lack of TLS 1.2+ support and DNSSEC are notable gaps. Privacy and terms policies are present, supporting compliance, but incident response and vulnerability disclosure policies are absent. Overall, the site demonstrates a mature digital infrastructure with room for security enhancements and improved compliance documentation.
Related:myshopify.com
- NEKEN
nk-neken.com
Manufacturing · France
78Low
NIS2 25 · GDPR 25
NIS2 25 · GDPR 25
NEKEN is a French manufacturer specializing in high-quality handlebars, triple clamps, and air clamps for off-road motorcycles, serving both professional and amateur riders. The company has a solid market position supported by endorsements from top motocross riders and a focus on product durability and rider comfort. Their business model centers on manufacturing and aftermarket sales with a medium-sized operation founded in 1990. Technically, the website is built on Drupal 7 with a variety of JavaScript libraries and integrates Google Analytics and reCAPTCHA for user interaction and security. Hosting is provided by OVH, a reputable provider. Security posture is generally good with strong HTTP security headers and a valid SSL certificate, though the lack of modern TLS protocols and some CSP weaknesses suggest room for improvement. The site includes cookie consent mechanisms but lacks explicit privacy and terms of service policies, which are critical for compliance and user trust. Overall, the website is professional and well-branded but could enhance its security and compliance maturity.
ARRI GmbHarri.com
Media · Germany
76Low
NIS2 25 · GDPR 25
NIS2 25 · GDPR 25
ARRI GmbH is a well-established leader in the media industry, specializing in the design and manufacture of professional camera and lighting systems for the film and broadcast sectors. With a history dating back to 1917, ARRI maintains a strong market position supported by a comprehensive product portfolio including camera systems, lenses, lighting, rental services, and virtual production solutions. The company targets industry professionals and production companies worldwide, leveraging a large-scale operational footprint and partnerships such as ARRI Rental and Claypaky. Technically, the website is built on a modern stack including CoreMedia CMS, React, and is hosted on AWS CloudFront, delivering fast performance and good mobile optimization. Security measures include a valid SSL certificate and several HTTP security headers, though the lack of modern TLS protocols and DNSSEC indicates room for improvement. Privacy and cookie policies are present and GDPR compliant, with a consent mechanism implemented via Usercentrics. Overall, ARRI demonstrates a mature digital presence with strong branding, comprehensive content, and good security hygiene, though enhancements in encryption protocols and security disclosures could further strengthen its posture.
American Honda Motor Co., Inc.honda.com
Transportation · United States
77Low
NIS2 25 · GDPR 25
NIS2 25 · GDPR 25
American Honda Motor Co., Inc. is a leading enterprise in the transportation sector, specializing in manufacturing and retailing automobiles, motorcycles, power equipment, and related services. The company operates multiple subsidiaries and brands including Honda Autos, Acura, Powersports, and HondaJet, positioning itself as a major player in the US market with a strong global parent company, Honda Motor Company. The website reflects a high level of professionalism, excellent content quality, and consistent branding aimed at consumers interested in mobility and automotive products. Technically, the website employs a modern tech stack including Bootstrap, jQuery, Slick Carousel, Swiper, and Adobe DTM for tag management, hosted on Akamai CDN. The site is optimized for mobile and SEO, with fast performance and good accessibility. However, some technical improvements are needed such as enabling modern TLS protocols and implementing DNSSEC. From a security perspective, the site uses a valid SSL certificate and implements several security headers including Content Security Policy and X-Frame-Options. Despite this, the lack of TLS 1.2+ support and absence of a public security policy or incident response contact reduces the overall security posture. Privacy and cookie policies are comprehensive and GDPR compliant, with consent mechanisms in place. Overall, the site is trustworthy and professionally managed but would benefit from enhanced security configurations and transparency around incident response and vulnerability disclosures.
Solarisbank AGsolarisbank.com
Finance · Germany
81Low
NIS2 25 · GDPR 43
NIS2 25 · GDPR 43
Solarisbank AG operates as a leading embedded finance platform in Europe, offering a comprehensive Banking-as-a-Service solution that enables businesses to integrate digital banking, payment, lending, and identification services via advanced RESTful APIs. The company holds a full German banking license, allowing it to operate seamlessly across EU countries. Solarisbank targets businesses seeking to embed financial services into their products, positioning itself as a neutral B2B2X partner with a strong market presence and trusted by major innovators such as Samsung and American Express. Technically, Solarisbank's website is built on modern frameworks including React and Gatsby, hosted on Netlify, and leverages Contentful as a CMS. The platform demonstrates excellent performance, mobile optimization, and accessibility, with a well-structured navigation and high-quality content. Analytics are implemented via piwik.pro, reflecting a moderate level of user tracking with good privacy compliance. From a security perspective, Solarisbank employs robust HTTP security headers including HSTS with preload, X-Frame-Options, and Content-Security-Policy, although the absence of enabled TLS protocols is a notable gap. The site lacks a cookie consent mechanism and a public vulnerability disclosure page, but provides clear contact channels for incident reporting and names key compliance officers, including a Money Laundering Reporting Officer. Overall, Solarisbank presents a high level of professionalism, trustworthiness, and technical maturity. Strategic recommendations include enabling modern TLS protocols, refining CSP policies, implementing cookie consent, and publishing a vulnerability disclosure policy to further enhance security posture and regulatory compliance.
- LexisNexis Risk Solutions
accuity.com
Finance · United States
84Low
NIS2 30 · GDPR 40
NIS2 30 · GDPR 40
LexisNexis Risk Solutions is a leading enterprise specializing in financial crime compliance and risk management solutions. The company offers a broad suite of services including anti-money laundering, anti-bribery and corruption, customer due diligence, sanctions screening, and trade compliance. Trusted by 45 of the world's top 50 banks and serving diverse sectors such as financial services, government, healthcare, insurance, and law enforcement, LexisNexis Risk Solutions provides comprehensive global risk intelligence and advanced analytics to help organizations manage complex regulatory requirements and mitigate financial crime risks effectively. The website infrastructure leverages modern technologies including ASP.NET MVC, Bootstrap, Cloudflare CDN, Adobe DTM, and Algolia search, indicating a mature and scalable digital platform. The site is hosted behind Cloudflare, uses a valid SSL certificate issued by GlobalSign, and implements multiple security headers and reCAPTCHA on forms, reflecting a strong security posture. However, the absence of modern TLS protocols (TLS 1.2/1.3) and lack of DNSSEC implementation suggest areas for security enhancement. Security practices are robust with HSTS enabled, secure cookies, and no detected SSL vulnerabilities. The site maintains comprehensive privacy and cookie policies with consent mechanisms, aligning with GDPR and other global privacy regulations. Contact mechanisms include phone and multiple secure contact forms with anti-bot protections. Social media presence and marketing tools are well integrated, supporting extensive user engagement and analytics. Overall, LexisNexis Risk Solutions demonstrates a high level of professionalism, security awareness, and market leadership in financial crime compliance solutions. Strategic improvements in TLS protocol support and DNS security could further strengthen their security posture and trustworthiness.
Amazon Sellers Lawyeramazonsellerslawyer.com
E-commerce · United States
81Low
NIS2 25 · GDPR 43
NIS2 25 · GDPR 43
Amazon Sellers Lawyer is a specialized legal service provider focused on assisting Amazon sellers with account suspensions, listing removals, intellectual property disputes, and related legal challenges. The firm positions itself as a trusted advocate with a strong track record and thousands of satisfied clients, offering comprehensive legal and non-legal support tailored to e-commerce entrepreneurs. Their services include account reinstatement, brand protection, arbitration, litigation, and drafting of cease and desist letters, among others. The website is professionally designed, well-branded, and optimized for user experience and SEO, targeting Amazon sellers primarily in the United States. Technically, the site is built on WordPress with Elementor and uses Cloudflare for hosting and security. It employs modern web technologies and caching for fast performance and good mobile optimization. Security headers are mostly well configured, and the SSL certificate is valid, but the lack of modern TLS protocol support is a notable gap. No explicit security policy or incident response information is publicly available, and cookie consent mechanisms are absent despite the use of tracking tools like Google Tag Manager. Overall, the site demonstrates a mature digital presence with room for security and privacy enhancements.
Essiloressilor.com
Healthcare
86Low
NIS2 25 · GDPR 43
NIS2 25 · GDPR 43
Essilor is a global leader in the healthcare sector specializing in prescription lenses and vision care products. The company offers a wide range of innovative lenses designed to correct, protect, and enhance vision, targeting consumers seeking high-quality vision solutions. Their website demonstrates a strong market position with comprehensive product offerings, digital tools for lens personalization, and a store locator for partnered opticians. Technically, the site is built on modern frameworks such as React and Next.js, hosted likely on Microsoft Azure, and optimized for fast performance and excellent mobile experience. Security posture is strong with robust HTTP security headers and a valid SSL certificate, although the absence of enabled TLS protocols and DNS security features are notable gaps. Privacy policies and terms of service are present and comprehensive, but cookie consent mechanisms and vulnerability disclosure policies are lacking. Overall, the website reflects a mature digital presence with room for security enhancements and improved transparency in user consent.
Angelbird Technologies GmbHangelbird.com
Technology · Austria
78Low
NIS2 25 · GDPR 43
NIS2 25 · GDPR 43
Angelbird Technologies GmbH operates a professional e-commerce platform specializing in high-performance storage media such as memory cards, SSDs, and custom media solutions tailored for camera and audio professionals. The company positions itself as a niche market leader with a focus on quality and innovation, serving a global audience with a strong presence in Austria. The website demonstrates a solid digital infrastructure with modern web technologies, fast performance, and good mobile optimization. Security posture is generally good with valid SSL certificates, secure cookie practices, and HSTS enabled, though the lack of modern TLS protocols and absence of a cookie consent mechanism indicate areas for improvement. The company maintains active social media channels and provides comprehensive privacy and terms of service documentation, supporting trust and compliance. Overall, Angelbird shows a mature digital presence with room to enhance security and privacy transparency further.
AlphaTauri GmbHalphatauri.com
E-commerce · Germany
78Low
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
AlphaTauri GmbH operates a premium fashion e-commerce platform focused on innovative textile technologies and purposeful design. The company targets men and women seeking aspirational styles and premium materials, positioning itself as a technologically advanced fashion brand. The website demonstrates a mature digital infrastructure with modern web technologies, comprehensive navigation, and strong branding consistency. Security measures include a valid SSL certificate with HSTS and secure cookie settings, although TLS protocols are not currently enabled. Privacy and terms policies are clearly linked and GDPR compliant, with cookie consent mechanisms in place. The site integrates marketing and analytics tools such as New Relic, Google Tag Manager, Exponea, and Gigya, reflecting a moderate level of user tracking balanced with privacy compliance. Overall, the website presents a professional, trustworthy, and well-optimized online retail experience.
Related:redbull.com
Ventura Foods, LLClouana.com
Retail · United States
76Low
NIS2 25 · GDPR 43
NIS2 25 · GDPR 43
LouAna.com represents the digital presence of LouAna Oils, a well-established brand under Ventura Foods, LLC, specializing in cooking oils and related recipe content. The website targets consumers interested in cooking and beauty uses of oils, offering product information, recipes, tips, and beauty advice. The business model combines product retail with content marketing to engage and retain customers. Technically, the site is built on WordPress, leveraging common plugins and third-party marketing tools, hosted via WP Engine and protected by Cloudflare. Performance and mobile optimization are good, with SEO practices supported by Yoast SEO plugin. Security posture is moderate with valid SSL certificates and several security headers implemented; however, the lack of modern TLS protocols and disabled X-XSS-Protection header reduce the overall security score. No cookie consent mechanism or explicit GDPR compliance is evident, and no incident response or vulnerability disclosure policies are published. The site integrates multiple marketing and tracking tools including Google Analytics, Facebook and Pinterest pixels, and affiliate marketing via Hopster. Overall, LouAna.com is a professionally maintained retail and content site with room for security and privacy enhancements.
Related:venturafoods.com
Ventura Foods Canadaventurafoods.ca
Retail · Canada
76Low
NIS2 25 · GDPR 58
NIS2 25 · GDPR 58
Ventura Foods Canada operates as a leading food solutions provider specializing in innovative culinary products and services. Established in 1996, the company offers a broad portfolio including ketchup, sauces, and condiments, targeting foodservice and retail sectors. Their digital presence is robust, leveraging WordPress and WooCommerce with multi-language support for Canada, USA, and Mexico markets. The website demonstrates excellent content quality, user experience, and SEO optimization, reflecting a mature digital strategy. Security posture is solid with valid SSL and security headers, though improvements in TLS protocol support and HSTS implementation are recommended. Privacy and cookie policies are comprehensive and GDPR compliant, supported by a consent mechanism. Overall, Ventura Foods Canada presents a professional and trustworthy online presence aligned with its market position.
Related:venturafoods.comventurafoods.mx
- EssilorLuxottica
essilorluxottica.com
Healthcare
85Low
NIS2 25 · GDPR 40
NIS2 25 · GDPR 40
EssilorLuxottica is a global integrated leader in the eyecare and eyewear industry, offering a comprehensive portfolio of products and services including eyewear brands, eyecare solutions, and direct-to-consumer retail. The company targets consumers, investors, and partners with a strong emphasis on innovation, sustainability, and governance. Their digital presence is built on modern technologies such as React and Next.js, hosted on Microsoft Azure, and managed via CoreMedia CMS, reflecting a mature and scalable technical infrastructure. Security posture is strong with multiple security headers and a valid SSL certificate, although the absence of enabled TLS protocols and lack of a public vulnerability disclosure policy indicate areas for improvement. Overall, the website demonstrates high professionalism, excellent user experience, and consistent branding, supporting the company's market position and trustworthiness.
- EssilorLuxottica
luxottica.com
Healthcare
85Low
NIS2 25 · GDPR 40
NIS2 25 · GDPR 40
EssilorLuxottica is a global leader in the eyecare and eyewear industry, integrating manufacturing, retail, and innovation to deliver comprehensive vision care solutions. The company operates a sophisticated digital presence with a modern tech stack including React and Next.js, hosted on Akamai and managed via CoreMedia CMS. The website demonstrates excellent design, user experience, and content quality, targeting consumers, investors, and partners worldwide. Security posture is strong with valid SSL certificates and robust security headers, although the lack of modern TLS protocols and absence of a vulnerability disclosure page indicate areas for improvement. Privacy and compliance policies are comprehensive and GDPR compliant, but cookie consent mechanisms could be enhanced. Overall, the site reflects a mature digital infrastructure supporting a large enterprise with a global footprint.
Xplor Technologiesxplortechnologies.com
Technology
80Low
NIS2 25 · GDPR 43
NIS2 25 · GDPR 43
Xplor Technologies is a large technology company specializing in vertical-specific SaaS software, embedded payments, and growth technologies. They serve small and medium-sized businesses across childcare, fitness, field services, personal services, and payments sectors. The company positions itself as a global leader integrating smart software and seamless payments to accelerate customer growth. Their website demonstrates a mature digital presence with modern technologies such as React, WordPress CMS, and advanced SEO practices including structured data and social media integration. Security-wise, the site employs strong HTTP security headers and a valid SSL certificate, though it lacks support for modern TLS protocols and does not enforce a strict Content Security Policy. Privacy and cookie policies are comprehensive and GDPR compliant, with a consent mechanism in place. However, there is no explicit security policy, incident response information, or vulnerability disclosure program publicly available. Overall, the website is professionally designed, fast, mobile-optimized, and trustworthy, reflecting a company with a strong market position but with room for improvement in security transparency and protocol support.
Related:outlook.com
- Bitly, Inc.
fce.gg
Technology · United States
78Low
NIS2 25 · GDPR 58
NIS2 25 · GDPR 58
Bitly, Inc. operates a leading branded link management platform offering URL shortening, QR codes, analytics, and branded links to businesses and enterprises globally. The company is positioned as a trusted technology provider with a strong brand presence and a comprehensive suite of services aimed at enhancing digital marketing and customer engagement. The website infrastructure leverages WordPress CMS, Cloudflare DNS, AWS Cloudfront CDN, and integrates modern JavaScript libraries and marketing tools such as Optimizely and ProfitWell, indicating a mature digital infrastructure optimized for performance and user experience. Security posture is solid with valid SSL certificates, HSTS enforcement, and secure cookie settings, though the absence of modern TLS protocols and DNSSEC implementation suggests areas for improvement. Privacy and compliance are well addressed with clear policies and consent mechanisms, supporting GDPR compliance. Overall, the site demonstrates high professionalism, accessibility, and trustworthiness, with strategic recommendations focusing on enhancing TLS support, DNS security, and incident response transparency.
Related:profitwell.com
Ventura Foodsventurafoods.com
Manufacturing · United States
77Low
NIS2 25 · GDPR 58
NIS2 25 · GDPR 58
Ventura Foods is a large, established food solutions company specializing in manufacturing and culinary innovation. They offer a broad portfolio of products and services including food innovation, culinary solutions, strategic insights, product development, category management, risk management, and digital eCommerce. The company targets foodservice, retail, and international markets with multiple well-known brands and subsidiaries. Technically, the website is built on WordPress with WooCommerce, leveraging modern web technologies and optimized for performance, mobile, accessibility, and SEO. Security posture is moderate with valid SSL and security headers but lacks modern TLS support and advanced security policies. Privacy compliance is good with GDPR and cookie consent mechanisms in place. Overall, Ventura Foods presents a professional, trustworthy digital presence with room for security enhancements.
- RRE/MAX, LLC (RMAX)
remax.com
Real Estate · United States
82Low
NIS2 17 · GDPR 43
NIS2 17 · GDPR 43
RE/MAX, LLC operates a large-scale real estate brokerage network with a significant global presence, offering comprehensive services including property listings, agent and office searches, and specialized real estate segments such as luxury and commercial properties. The company is recognized as a trusted brand in the U.S. real estate market, supported by a robust agent network and extensive resources. Technically, the website leverages modern web technologies such as Next.js and React, hosted on AWS infrastructure, with good performance and mobile optimization. Security posture is strong in terms of HTTP headers and content security policies, but the lack of modern TLS protocols and absence of DNSSEC indicate areas for improvement. The site integrates multiple marketing and analytics tools, resulting in extensive user tracking but lacks a visible cookie consent mechanism, which may impact privacy compliance. Overall, the website is professional, trustworthy, and well-branded, with clear contact and legal information.
J&H Tacklejandh.com
E-commerce · United States
77Low
NIS2 25 · GDPR 43
NIS2 25 · GDPR 43
J&H Tackle is a specialized e-commerce retailer focused on fishing equipment, offering a broad range of products including rods, reels, lures, lines, and accessories for both freshwater and saltwater fishing enthusiasts. The company has established a strong market presence with a well-designed, user-friendly website built on the Shopify platform, leveraging modern technologies and integrations to enhance customer experience and operational efficiency. Their digital infrastructure includes robust security measures, comprehensive privacy and cookie policies, and active engagement with customers through social media and marketing tools. The security posture is strong with appropriate headers, valid SSL, and no detected vulnerabilities, though there is room for improvement in enabling modern TLS protocols and formalizing security policies. Overall, J&H Tackle demonstrates a mature digital presence with a focus on quality, trust, and customer satisfaction, positioning them well in the competitive online fishing gear market.
Related:myshopify.com
- BBang & Olufsen A/S
bang-olufsen.com
E-commerce · Denmark
81Low
NIS2 25 · GDPR 58
NIS2 25 · GDPR 58
Bang & Olufsen A/S is a renowned Danish company specializing in high-end audio and visual products, including headphones, speakers, and televisions. Established in 1925, the company holds a strong market position as a luxury brand with a focus on superior craftsmanship and innovative design. Their business model integrates e-commerce with rich brand storytelling and digital customization tools, targeting discerning consumers seeking premium sound and design experiences. The website demonstrates a mature digital infrastructure leveraging modern technologies such as React, Next.js, and Azure hosting, ensuring fast performance and excellent mobile optimization. Security measures include robust HTTP headers and a valid SSL certificate, though the absence of modern TLS protocols suggests room for improvement. Privacy and cookie policies are comprehensive and GDPR-compliant, supported by a consent management mechanism. Overall, the company maintains a high level of professionalism and trustworthiness in its online presence.
Absolute Dogsabsolute-dogs.com
E-commerce · United Kingdom
78Low
NIS2 25 · GDPR 43
NIS2 25 · GDPR 43
Absolute Dogs is a UK-based e-commerce and education platform specializing in innovative, game-based online dog training courses and resources. The company has established a strong market position with a large international customer base and a comprehensive offering that includes courses, memberships, podcasts, ebooks, and blog content. Technically, the website is built on the Shopify platform, leveraging modern JavaScript libraries and third-party marketing and analytics tools, hosted behind Cloudflare for performance and security. The security posture is strong with valid SSL, HSTS, and appropriate security headers, though TLS protocols are not enabled, representing an area for improvement. Privacy and terms policies are comprehensive and GDPR compliant, with active consent mechanisms in place. Overall, the site demonstrates a mature digital presence with good user experience and trust indicators, but could enhance security by enabling modern TLS versions and publishing explicit security policies.
Related:zendesk.comdigitalsilk.com
G2 Esportsg2esports.com
E-commerce · Finland
77Low
NIS2 25 · GDPR 43
NIS2 25 · GDPR 43
G2 Esports is a leading global esports and entertainment organization that operates an e-commerce platform selling branded merchandise and managing professional esports teams. The company has a strong market position with a well-established brand and a broad partnership ecosystem including major global brands. Their digital infrastructure is built on Shopify with integrations for marketing, analytics, and customer engagement, reflecting a mature and modern e-commerce setup. Security measures are robust with proper SSL, HSTS, and security headers, though there is room for improvement in protocol support and formal security policies. Overall, G2 Esports demonstrates a high level of professionalism and digital maturity, serving a global audience of esports fans and consumers.
Related:logitechg.commastercard.com
Toolsettoolset.com
Technology
81Low
NIS2 17 · GDPR 43
NIS2 17 · GDPR 43
Toolset is a technology company specializing in providing advanced WordPress development tools that enable professionals to build complex websites without coding. Positioned as an established player with a strong client base exceeding 30,000 clients and over 120,000 sites built, Toolset offers a comprehensive package including custom post types, fields, templates, forms, maps, and access control. The company operates under the parent company OnTheGoSystems Limited and benefits from multilingual capabilities through WPML integration. Technically, the website leverages a mature WordPress infrastructure with WooCommerce for e-commerce, enhanced by modern JavaScript libraries such as React and Alpine.js, and performance optimizations via WP Rocket and CDN services. Security posture is strong with robust SSL configuration, strict security headers, and HSTS enforcement, although some legacy CSP allowances could be tightened. Privacy and cookie policies are comprehensive and GDPR compliant, but explicit terms of service and security policies are not prominently available. Overall, the company demonstrates a high level of digital maturity and professionalism with a focus on user experience and trust.
Related:onthegosystems.comstripe.com
- GGoogle LLC
googlemail.com
Technology · United States
78Low
NIS2 25 · GDPR 25
NIS2 25 · GDPR 25
Google LLC operates the Gmail service, a leading email platform globally recognized for its intuitive, efficient, and secure email experience. The service offers 15 GB of storage, robust spam filtering, and seamless mobile access, catering to a broad audience including individual users and businesses. As part of the larger Alphabet Inc. ecosystem, Gmail benefits from extensive technological resources and integration with other Google services. The website demonstrates a mature digital infrastructure with advanced security measures such as strict content security policies, HSTS, and secure cookie handling. However, the absence of modern TLS protocols indicates an area for improvement in cryptographic standards. The security posture is strong with no detected vulnerabilities or subdomain takeover risks, reflecting Google's commitment to protecting user data and privacy. Overall, the site presents a professional, trustworthy, and user-friendly interface aligned with Google's brand standards.
Related:google.com
Hornetsecurity GmbHantispameurope.com
Technology · Germany
80Low
NIS2 17 · GDPR 43
NIS2 17 · GDPR 43
Hornetsecurity GmbH is a leading cloud security provider specializing in Microsoft 365 security solutions, including email security, backup, compliance, and security awareness services. With a strong market presence supported by over 12,000 partners and 125,000 customers worldwide, the company offers a comprehensive portfolio tailored to businesses and managed service providers. Their website reflects a mature digital infrastructure with modern technologies, excellent SEO, and mobile optimization. Security-wise, Hornetsecurity demonstrates a robust posture with strong SSL configurations, advanced security headers, and no detected vulnerabilities, although enabling modern TLS protocols and DNSSEC would further enhance security. Overall, the company maintains a high level of professionalism and trustworthiness, supported by extensive awards and a transparent privacy and cookie policy.
Related:hornetsecurity.com
- DEKRA Certificación
dekra-certification.es
Other · Spain
80Low
NIS2 25 · GDPR 58
NIS2 25 · GDPR 58
DEKRA Certificación is a leading European certification body accredited by ENAC, specializing in audits and certifications across quality, environmental management, occupational health and safety, sustainability, and cybersecurity sectors. The company offers a broad portfolio of certifications including ISO 9001, ISO 14001, ISO 45001, and industry-specific certifications such as SERMI and TISAX, targeting businesses aiming to improve compliance and operational excellence. Their market position is strong, supported by recognized accreditations and a comprehensive service offering tailored to various industries in Spain and beyond. Technically, the website is built on modern frameworks like Nuxt.js and Vue.js, hosted on Azure, and integrates multiple analytics and marketing tools such as Matomo, Hotjar, and Google Tag Manager. The site demonstrates good performance, mobile optimization, and accessibility, reflecting a mature digital infrastructure. However, the SSL/TLS configuration shows no enabled TLS protocols, which is unusual and should be addressed for secure communications. From a security perspective, the site implements robust HTTP security headers including HSTS, CSP, and X-Frame-Options, but the lack of TLS 1.2 or higher and the disabled X-XSS-Protection header indicate areas for improvement. No explicit security policy or incident response information is publicly available, which could be a gap in transparency and readiness. The site complies with GDPR, featuring comprehensive privacy and cookie policies with consent mechanisms. Overall, DEKRA Certificación presents a professional and trustworthy online presence with strong business credentials and technical maturity. Addressing the TLS configuration and enhancing security transparency would further strengthen their security posture and user trust.
Related:e-spirit.hosting
- DEKRA
dekra-industrial.ma
Energy · Morocco
85Low
NIS2 25 · GDPR 58
NIS2 25 · GDPR 58
DEKRA is a global leader in industrial inspection, safety, and compliance services with a strong presence in Morocco. The company offers a comprehensive range of services including industrial inspection, electrical inspection, non-destructive testing, fire protection, and environmental consulting. Their market position is reinforced by a long history since 1925 and a commitment to regulatory compliance and asset reliability. Technically, the website is built on modern frameworks such as Nuxt.js and Vue.js, hosted on Azure, and employs a robust set of analytics and marketing tools. Security measures are well implemented with strong headers, valid SSL certificates, and no detected vulnerabilities, although enabling modern TLS versions is recommended. Overall, DEKRA demonstrates a mature digital presence with excellent content quality and user experience, supporting its role as a trusted partner in industrial safety and inspection.
Related:e-spirit.hosting
- DEKRA Revisión Técnica
dekraprt.cl
Transportation · Chile
79Low
NIS2 25 · GDPR 58
NIS2 25 · GDPR 58
DEKRA Revisión Técnica is a leading provider of vehicle inspection services in Chile, operating multiple technical review plants across key regions. The company is positioned as a global leader in inspection services, emphasizing safety, environmental responsibility, and customer satisfaction. Their service offerings include vehicle technical inspections, online appointment booking, and customer support, supported by certifications such as ISO 9001 and the Huella Chile environmental seal. Technically, the website is built on modern frameworks like Nuxt.js and Tailwind CSS, hosted on Azure with Cloudflare DNS, and integrates various analytics and marketing tools with a strong privacy and cookie consent mechanism. Security posture is generally good with valid SSL certificates and strong security headers, though TLS protocols are currently disabled, which is a notable risk. Overall, the company demonstrates a mature digital presence with good user experience and trust indicators.
Related:dekra.com
- DEKRA Costa Rica
dekra.cr
Transportation · Costa Rica
82Low
NIS2 25 · GDPR 58
NIS2 25 · GDPR 58
DEKRA Costa Rica operates as a key player in the vehicle inspection sector, providing technical inspection services for various types of vehicles including gasoline, natural gas, LPG, and diesel. The company is part of the global DEKRA group, which is a market leader with a strong international presence. Their website demonstrates a mature digital infrastructure with modern technologies such as Nuxt.js and Tailwind CSS, hosted on Azure, and integrated with multiple analytics and marketing tools. Security posture is strong with valid SSL certificates, strict security headers, and no detected vulnerabilities, although TLS protocols could be updated for enhanced security. Privacy and cookie policies are comprehensive and GDPR compliant, with clear consent mechanisms. Contact is primarily via web forms, with no direct email or phone contacts visible. Overall, DEKRA Costa Rica presents a professional and trustworthy online presence aligned with its global brand.
- DEKRA
dekra.es
Energy · Spain
85Low
NIS2 25 · GDPR 58
NIS2 25 · GDPR 58
DEKRA is a global leader in inspection, testing, and certification services, with a strong emphasis on safety, quality, and sustainability. The company offers a comprehensive range of services including consulting, digital and product solutions, industrial inspection, claims and expertise, training, and certification. DEKRA operates in multiple sectors such as energy, automotive, telecommunications, and manufacturing, serving a broad business audience primarily in Spain and internationally. The website demonstrates a mature digital infrastructure leveraging modern frameworks like Nuxt.js and Vue.js, hosted on Microsoft Azure, with robust performance and mobile optimization. Security measures are well-implemented, including strong HTTP security headers, a valid SSL certificate, and no detected major vulnerabilities. The site integrates multiple analytics and marketing tools with clear privacy and cookie policies, reflecting good compliance with GDPR. Overall, DEKRA's online presence is professional, trustworthy, and aligned with its market position as an enterprise-level service provider.
- DEKRA
dekra.cl
Energy|Transportation|Telecommunications|Manufacturing · Chile
84Low
NIS2 25 · GDPR 58
NIS2 25 · GDPR 58
DEKRA Chile is a large, well-established service provider specializing in inspection, testing, certification, and consulting services across multiple sectors including energy, transportation, telecommunications, and manufacturing. As a subsidiary of the global DEKRA SE group, it leverages a strong international presence and a comprehensive portfolio of services aimed at ensuring safety and sustainability. The website demonstrates a mature digital infrastructure using modern frameworks such as Nuxt.js and Tailwind CSS, hosted on Azure, with robust security configurations including HSTS and a valid SSL certificate. The security posture is strong with no critical vulnerabilities detected, although enabling modern TLS protocols and enhancing CSP policies could further improve security. The site integrates extensive analytics and marketing tools, balancing user tracking with privacy compliance. Overall, DEKRA Chile presents a professional, trustworthy, and user-friendly online presence aligned with its market position and business objectives.
Related:dekra.com
- DEKRA
dekra.ma
Transportation · Morocco
85Low
NIS2 25 · GDPR 58
NIS2 25 · GDPR 58
DEKRA is a multinational leader in vehicle inspection and related services, operating in over 50 countries including Morocco. The company offers a broad range of services including vehicle technical inspections, automotive expertise, claims management, industrial inspections, and human resources services. Their market position is strong with a comprehensive service portfolio targeting both enterprises and individual customers. Technically, the website is built on modern frameworks such as Nuxt.js and Tailwind CSS, hosted on Azure, and integrates multiple analytics and marketing tools. Security posture is good with strong HTTP security headers and a valid SSL certificate, although TLS protocols are not enabled which is a notable gap. The site implements GDPR-compliant cookie consent mechanisms and maintains privacy and terms of service pages. Overall, DEKRA's digital presence reflects a mature, professional organization with a focus on trust and compliance.
Related:dekra.com
- DEKRA Belgium NV
dekra.be
Transportation · Belgium
84Low
NIS2 25 · GDPR 58
NIS2 25 · GDPR 58
DEKRA Belgium NV is a large, well-established independent expertise bureau operating primarily in Belgium with a strong focus on the automotive, insurance, and industrial safety sectors. The company offers a broad range of services including damage expertise, claims management, investigations, projectsourcing, training, consulting, testing, certification, and inspection of critical installations. It is part of the global DEKRA group, a recognized leader in vehicle expertise and safety services since 1925. The website demonstrates a mature digital presence with modern technologies such as Nuxt.js and Vue.js, hosted on Microsoft Azure, and employs comprehensive security headers and SSL configurations. The company maintains good privacy and cookie policies with active consent mechanisms, reflecting compliance with GDPR requirements. However, explicit security policies and incident response information are not publicly available on the site. Overall, DEKRA Belgium NV presents a professional, trustworthy, and technically sound online presence aligned with its market position.
- DEKRA
dekra.lu
Transportation · Luxembourg
77Low
NIS2 25 · GDPR 18
NIS2 25 · GDPR 18
DEKRA is a globally recognized expert organization specializing in safety, inspection, and certification services with a strong presence in Luxembourg. The company operates in the transportation and energy sectors, providing vehicle inspections, online appointment scheduling, and customer satisfaction surveys. Their market position is strong, supported by a large workforce and international reach. Technically, the website is built on modern frameworks such as Nuxt.js and Tailwind CSS, hosted on Microsoft Azure, and integrates multiple analytics and marketing tools. Security posture is robust with comprehensive headers and valid SSL certificates, though TLS protocol support appears misconfigured or disabled. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. Overall, the website reflects a professional and trustworthy digital presence.
- DEKRA
dekra.at
Transportation · Austria
77Low
NIS2 25 · GDPR 18
NIS2 25 · GDPR 18
DEKRA Austria GmbH is a prominent provider of safety and certification services in Austria, operating as part of the global DEKRA group founded in 1925. The company offers a broad range of services including vehicle inspections, damage assessments, digital claims management, environmental stickers, occupational safety, hazardous goods consulting, fire protection, and training. Their market position is strong with a comprehensive service portfolio targeting both private and business customers. Technically, the website is built on modern frameworks such as Nuxt.js and Vue.js, hosted on Azure, and employs advanced security headers and privacy compliance mechanisms. The security posture is robust with valid SSL certificates, HSTS, and strict content security policies, though TLS 1.2/1.3 support could be improved. Overall, DEKRA Austria demonstrates a mature digital presence with good security hygiene and compliance alignment.
- DEKRA
dekra.se
Energy · Sweden
85Low
NIS2 25 · GDPR 58
NIS2 25 · GDPR 58
DEKRA is a large, well-established company founded in 1925, specializing in safety-related services including inspection, testing, certification, and consulting across multiple sectors such as energy, transportation, and manufacturing. The company holds a strong market position as a global leader in safety expertise with a comprehensive service portfolio and a consistent brand presence. Technically, the website is built on modern frameworks like Nuxt.js and Vue.js, hosted on Microsoft Azure, and employs a variety of analytics and marketing tools while maintaining good security practices including HSTS and strong content security policies. The security posture is solid with no critical vulnerabilities detected, though improvements in TLS protocol support and security headers are recommended. Overall, DEKRA demonstrates a mature digital presence with excellent content quality, user experience, and compliance with privacy regulations such as GDPR.
Related:dekra.com