Security reports directory
150,193 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,193001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
138,001–138,050 of 150,193
شركة أكاكوس للعمليات النفطيةakakusoil.com
Energy · Libya
33High
NIS2 0 · GDPR 10
NIS2 0 · GDPR 10
شركة أكاكوس للعمليات النفطية هي شركة رائدة في مجال إنتاج ومعالجة النفط الخام في ليبيا، تأسست عام 1995 وتعمل بشكل رئيسي في حوض مرزق جنوب غرب ليبيا. تتمتع الشركة بموقع قوي في السوق الليبي للنفط وتقدم خدمات متخصصة في استخراج النفط الخام وإدارته. الموقع الإلكتروني يعكس صورة احترافية مع محتوى غني باللغة العربية وروابط لمواقع التواصل الاجتماعي الرسمية، مما يعزز من حضورها الرقمي. من الناحية التقنية، يعتمد الموقع على منصة WordPress مع استخدام إضافات حديثة لتحسين تجربة المستخدم والأداء. من حيث الأمن، الموقع يستخدم HTTPS ويوجد تحقق من صحة البيانات في النماذج، لكن يفتقر إلى سياسات الخصوصية والكوكيز، ولا توجد معلومات واضحة عن سياسات الأمان أو الاستجابة للحوادث. التقييم العام للموقع جيد مع فرص لتحسين الجوانب الأمنية والامتثال للخصوصية.
Other
55Medium
NIS2 5 · GDPR 10
NIS2 5 · GDPR 10
The website smarkets.com is currently inaccessible due to a Cloudflare Web Application Firewall (WAF) security challenge page that requires browser verification via Turnstile captcha. This prevents access to the actual website content, limiting the ability to analyze business, security, and compliance aspects. The visible page is minimal, showing only a security check message and no business or legal information. The site uses New Relic for performance monitoring and Cloudflare for security and DDoS protection. Due to the blocking, no privacy policy, cookie policy, terms of service, or contact information are available for review. The domain WHOIS data is privacy protected, which is common but reduces transparency. Overall, the site’s security posture appears to rely on Cloudflare’s protection, but internal security practices and compliance cannot be assessed at this time.
Host Student Housinghost-students.com
Real Estate · United Kingdom
61Medium
NIS2 5 · GDPR 48
NIS2 5 · GDPR 48
Host Student Housing operates as a reputable provider of student accommodation across the UK and Ireland, offering furnished rooms with all bills included. The company targets students, including international students, providing secure, well-located housing options near campuses and city centers. Their market position is strengthened by multiple awards and certifications, reflecting a commitment to quality and student wellbeing. Technically, the website is built on WordPress with modern marketing and analytics integrations such as HubSpot and Google Tag Manager, ensuring good SEO and user experience. Security posture is solid with HTTPS, reCAPTCHA, and secure access controls, though explicit security policies and incident response details are not publicly visible. Overall, the site demonstrates a mature digital presence with strong business credibility and compliance adherence.
- MMillie's Cookies
milliescookies.com
Retail · United Kingdom
62Medium
NIS2 0 · GDPR 63
NIS2 0 · GDPR 63
Millie's Cookies is a UK-based retail business specializing in freshly baked personalised giant cookies, cookie boxes, and corporate gifting solutions. The company targets consumers looking for unique and customised cookie gifts for various occasions. The website demonstrates a mature e-commerce platform with a modern Angular frontend and Magento backend, supporting a seamless user experience with next day delivery and click & collect options. The site is well-branded and professionally designed, reflecting a consistent and trustworthy market presence. Technically, the website employs contemporary web technologies including Angular 17, Typekit fonts, and integrates third-party services such as Google Tag Manager for analytics and OneTrust for cookie consent management. The site is hosted securely with HTTPS and implements strong security headers, indicating a good security posture. However, some standard business compliance documents like Terms of Service and explicit security policies are not readily found. Security-wise, the site enforces HTTPS, uses cookie consent mechanisms, and does not expose sensitive data in the HTML content. No vulnerabilities or suspicious scripts were detected. Privacy compliance is robust with GDPR-aligned cookie consent and a comprehensive privacy policy. The absence of direct contact information and incident response details suggests room for improvement in transparency. Overall, Millie's Cookies presents a secure, compliant, and user-friendly online retail platform with a solid business model. Strategic recommendations include publishing Terms of Service, enhancing contact transparency, and expanding security and incident response disclosures to further strengthen trust and compliance.
Owners Bestownersbest.com.mt
Real Estate · Malta
46High
NIS2 0 · GDPR 18
NIS2 0 · GDPR 18
Owners Best is a Malta-based real estate network established in 2003, specializing in property sales and listings across Malta. The website serves as a comprehensive platform for property buyers and sellers, offering detailed listings, property guides, and career opportunities. It holds a strong market position as a leading property network in Malta, targeting local and international property seekers. The business model revolves around brokerage and advertising services for real estate, with a focus on user-friendly search and listing capabilities. Technically, the website is built on WordPress using popular plugins such as WPBakery Page Builder and Yoast SEO, ensuring good SEO and content management capabilities. The site uses modern web technologies including Bootstrap for responsive design and FontAwesome for icons. Performance is moderate with good mobile optimization and basic accessibility features. Analytics and marketing tools include Google Tag Manager, Facebook Pixel, and Jetpack Stats, enabling moderate user tracking and marketing insights. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, aligning with GDPR requirements. However, it lacks explicit security headers such as Content-Security-Policy and HSTS, which could enhance protection against common web attacks. No incident response or vulnerability disclosure policies are publicly available, indicating room for improvement in security transparency and readiness. Overall, the website is professional, trustworthy, and well-aligned with its business goals. The domain registration details are consistent with the business claims, supporting legitimacy. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and improving accessibility compliance to strengthen the site's security posture and user trust.
- UUntangled Media Ltd
untangledmedia.com
Technology · Malta
31High
NIS2 5 · GDPR 10
NIS2 5 · GDPR 10
Untangled Media Ltd is a Malta-based digital media company specializing in web design, search engine optimization (SEO), digital marketing, social media management, and e-commerce solutions. The company targets businesses seeking to improve their online presence and profitability through tailored digital strategies. Their market position is that of an established local specialist with a diverse client portfolio both in Malta and internationally. Key services include website development, SEO, digital marketing, social media management, Google G Suite integration, and web publishing. Technically, the website employs modern frontend technologies such as Bootstrap, jQuery, Owl Carousel, and Google reCAPTCHA for form security. The site is mobile-optimized and demonstrates good SEO practices with proper meta tags and structured data. However, no CMS or backend platform is explicitly detected. Performance is moderate with room for improvement in accessibility features. From a security perspective, the site uses HTTPS and integrates Google reCAPTCHA to protect its contact form. However, no HTTP security headers (e.g., CSP, HSTS) are detected, and no published security or incident response policies are found. Privacy compliance is weak, with no visible privacy or cookie policies or consent mechanisms. Contact information is clearly provided, enhancing business credibility. Overall, the website is professional and functional but lacks comprehensive privacy and security policies. Strategic improvements in security headers, privacy compliance, and transparency would enhance trust and reduce risk.
Natura Brasilnatura.com.br
Retail · Brazil
55Medium
NIS2 13 · GDPR 25
NIS2 13 · GDPR 25
Natura Brasil is a leading enterprise-level retail and e-commerce company specializing in perfumery, makeup, and personal care products. The website showcases a comprehensive product catalog with detailed descriptions, pricing, and promotions, targeting consumers interested in beauty and personal care in Brazil. The technical infrastructure leverages modern technologies such as React, Next.js, and Salesforce Commerce Cloud, supported by robust CDN and analytics tools, ensuring fast performance and excellent mobile optimization. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though there is room for improvement in public security policies and incident response transparency. Overall, the site is professional, trustworthy, and compliant with privacy regulations, reflecting a mature digital presence for a well-established brand.
Cashcow Ltdcashcow.media
Technology · Malta
48High
NIS2 0 · GDPR 25
NIS2 0 · GDPR 25
Cashcow Ltd is a small, specialized performance marketing company based in Malta, founded in 2017. They focus on affiliate marketing and SEO to deliver high-quality leads to their partners. The company operates multiple content-rich websites and targets businesses seeking effective digital marketing solutions. Their market position is niche but professional, with a consistent brand presence and clear business information. Technically, the website is built on WordPress 5.8 with modern technologies such as jQuery and Bootstrap. SEO is well implemented using the Yoast SEO plugin, and the site is mobile optimized with good navigation and content quality. Performance is moderate, and accessibility is basic but functional. Hosting details are not explicitly identified. From a security perspective, the site uses HTTPS but lacks advanced security headers and formal security policies. No privacy or cookie policies are present, which impacts GDPR compliance. No incident response or vulnerability disclosure mechanisms are visible. No suspicious or vulnerable scripts were detected, and no exposed sensitive data is present. Overall, the security posture is moderate but could be improved with standard best practices. The overall risk is low to moderate. Strategic recommendations include implementing privacy and cookie policies, adding security headers, publishing a security policy or incident response contact, and enhancing accessibility and compliance features to improve trust and legal adherence.
C. & J. Clark International Limitedclarks.com
Retail · United Kingdom
66Medium
NIS2 5 · GDPR 63
NIS2 5 · GDPR 63
Clarks is a well-established global footwear brand with a rich history dating back to 1825. The company offers a wide range of footwear products for men, women, and children, including various collections such as Originals™, casual, smart, and seasonal styles. Their online presence is supported by a comprehensive e-commerce platform that integrates modern technologies like React and Next.js, ensuring a fast and responsive user experience across devices. The website features clear navigation, detailed product categorization, and multiple payment options, including popular services like Klarna and PayPal. Technically, the site employs a robust infrastructure with performance monitoring via New Relic and marketing tools such as Klaviyo and OneTrust for privacy compliance. The use of HTTPS, security headers, and cookie consent mechanisms reflects a strong security posture. No critical vulnerabilities or exposed sensitive data were detected, indicating adherence to best practices in web security. Overall, the website demonstrates a high level of professionalism, technical maturity, and compliance with privacy regulations such as GDPR. The domain registration details align with the company's claims, reinforcing its legitimacy. Strategic recommendations include implementing a public vulnerability disclosure policy and enhancing transparency around data retention and incident response. This analysis concludes that Clarks maintains a secure, user-friendly, and trustworthy online platform that supports its retail operations effectively.
J Brandjbrand.co.uk
Technology · United Kingdom
39High
NIS2 0 · GDPR 28
NIS2 0 · GDPR 28
J Brand is a UK-based technology and telecommunications service provider specializing in electrical contracting, network infrastructure, security solutions, maintenance, and consultancy services. With over 85 years of experience, the company positions itself as a strategic partner to its clients, offering a broad range of services including electrical and fire alarm services, wireless networks, digital surveillance, hardware deployment, and data destruction. The website reflects a professional and consistent brand image with clear service offerings and client trust indicators such as certifications and client logos. Technically, the website is built on WordPress using Elementor, jQuery, and modern web technologies. It employs HTTPS with a valid SSL certificate, integrates Google reCAPTCHA for bot protection, and uses Tawk.to for live chat support. SEO is supported by structured data and meta tags, and the site is mobile optimized with good performance. However, some accessibility and cookie consent mechanisms could be improved. From a security perspective, the site demonstrates good practices with HTTPS, no exposed sensitive data, and use of security tools like reCAPTCHA. However, security headers are not explicitly detected, and there is no visible incident response or security policy page. Privacy compliance is supported by a comprehensive privacy policy and terms of service, though cookie consent is lacking. Overall, the website is trustworthy and professionally maintained, with a strong business credibility and moderate to good technical and security posture. Strategic recommendations include enhancing security headers, implementing cookie consent mechanisms, and publishing explicit security and incident response policies.
SITAsita.aero
Transportation
60Medium
NIS2 0 · GDPR 63
NIS2 0 · GDPR 63
SITA is a leading global IT provider specializing in air transport communications and information technology. The company offers a broad portfolio of solutions targeting airlines, airports, ground handlers, governments, and air navigation service providers. Their services focus on enabling seamless, safe, and sustainable air travel through innovative digital travel solutions, passenger processing, border management, baggage management, and aircraft communications. The website reflects a mature enterprise with a strong market position and a comprehensive service offering tailored to the air transport industry. Technically, the website employs a modern technology stack including jQuery UI, Matomo analytics, Marketo marketing tools, OneTrust for cookie consent, and Azure Application Insights for monitoring. The site is hosted likely on Azure infrastructure and uses Episerver CMS. Performance and mobile optimization are good, with clear navigation and professional design. SEO and accessibility features are well implemented. From a security perspective, the site enforces HTTPS and integrates cookie consent mechanisms compliant with GDPR. While explicit security headers are not fully confirmed, best practices appear to be followed. No critical vulnerabilities or exposed sensitive data were detected. However, the site lacks a dedicated security policy, incident response information, and vulnerability disclosure mechanisms, which are recommended for enterprise-grade security posture. Overall, the website is professional, trustworthy, and compliant with privacy regulations. The risk profile is low with no blocking or WAF interference detected. Strategic improvements include publishing explicit security policies, incident response contacts, and vulnerability disclosure information to enhance transparency and security maturity.
Other
49High
NIS2 0 · GDPR 28
NIS2 0 · GDPR 28
The website betkey.bet is currently a parked domain with minimal content primarily aimed at advertising the domain for sale. It does not provide any business or service information, and no contact details or social media links are present. The site uses Google Ads and Bodis scripts for monetization, indicating a domain parking business model rather than an active commercial enterprise. Technically, the site uses basic HTML, CSS, and JavaScript with embedded ad scripts but lacks HTTPS and security headers, which negatively impacts its security posture. Privacy and legal pages exist but are basic and do not indicate GDPR compliance or advanced privacy practices. Overall, the site has low trustworthiness and poor user experience, with no clear business credibility or security policies.
Airswiftlinkoilandgas.com
Energy · United States
63Medium
NIS2 5 · GDPR 63
NIS2 5 · GDPR 63
Airswift is a well-established international recruitment and workforce solutions company specializing in technology, engineering, and energy sectors. With over 40 years of experience and a global footprint of 60 offices, Airswift offers comprehensive services including talent acquisition, employer of record, consulting, and managed solutions. The website reflects a mature business with a strong market position and a clear focus on STEM professionals and technical recruitment worldwide. Technically, the site is built on HubSpot CMS, leveraging modern marketing and analytics tools, and demonstrates good mobile optimization and SEO practices. Security posture is solid with HTTPS and secure form handling, though additional security headers and explicit policies could enhance protection. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website presents a professional, trustworthy, and user-friendly experience aligned with the company's business objectives.
- Error
thedistricthotel.com
Other
46High
NIS2 0 · GDPR 10
NIS2 0 · GDPR 10
The website at thedistricthotel.com currently serves only an error page hosted by Wix, indicating that the domain is not connected to any active website. There is no business content, contact information, or policies available, which suggests the site is inactive or under development. The technical infrastructure is based on Wix's platform using AngularJS and jQuery, but no custom or advanced features are present. Security posture is minimal with no visible HTTPS enforcement or security headers. Overall, the site lacks essential elements for trust, compliance, and user engagement, resulting in a very low risk and credibility profile.
Prozone Ltd.betharduniverse.com
Other · Malta
35High
NIS2 0 · GDPR 10
NIS2 0 · GDPR 10
Bethard Universe is a corporate website focused on employer branding and recruitment for Prozone Ltd., operating in Malta. The site highlights company culture, team, and open positions, directing job seekers to an external BambooHR platform for applications. The website uses modern web technologies including React and video backgrounds to create an engaging user experience. Social media presence on LinkedIn, Instagram, and YouTube supports brand visibility. However, the site lacks critical privacy and cookie policies, security headers, and incident response information, which are important for compliance and trust. No direct contact emails or phone numbers are provided, limiting direct communication channels. Overall, the site is professionally designed and functional but could improve in security and privacy compliance.
Ringier One Africa Mediaroam.africa
Media · South Africa
47High
NIS2 5 · GDPR 10
NIS2 5 · GDPR 10
ROAM Africa, operated by Ringier One Africa Media, is a leading online marketplaces company focused on Sub-Saharan Africa. The company operates multiple digital marketplaces across East and West Africa, targeting African consumers and businesses seeking transparent and thriving market platforms. Their market position is strong as a pioneer in the region with a medium-sized business footprint and a clear focus on digital media and marketplaces. The website reflects a professional and consistent brand with good content quality and SEO optimization. Technically, the site is built on WordPress with Elementor and uses modern web technologies, providing a moderate performance and good mobile optimization. Security posture is solid with HTTPS and no exposed sensitive data, but lacks advanced security headers and formal security policies. Privacy compliance is weak due to missing privacy and cookie policies and no consent mechanisms. Overall, the site is credible but could improve in privacy and security transparency.
Blockstream Corporation Inc.blockstream.com
Technology · United States
59Medium
NIS2 0 · GDPR 28
NIS2 0 · GDPR 28
Blockstream Corporation Inc. is a leading global technology company specializing in Bitcoin and blockchain infrastructure. Their website showcases a comprehensive suite of products and services including wallets, hardware devices, blockchain platforms, and investment funds, targeting individuals, enterprises, and developers. The company positions itself as a foundational player in the future financial infrastructure built on Bitcoin technology. Technically, the website employs modern JavaScript libraries, analytics tools, and security features such as HTTPS and reCAPTCHA, reflecting a mature digital infrastructure. However, some areas such as explicit cookie consent and vulnerability disclosure could be improved. The security posture is strong with no evident vulnerabilities, but the absence of published incident response or security policies suggests room for enhancement. Overall, the website is professional, trustworthy, and well-optimized, supporting Blockstream's market leadership and credibility in the blockchain space.
VICSA Safetyvicsasafety.com
Retail · Chile
29High
NIS2 5 · GDPR 10
NIS2 5 · GDPR 10
VICSA Safety is a Chilean company specializing in safety footwear, work clothing, and personal protective equipment, positioning itself as a market leader in Chile. Their website showcases a broad product range under multiple brands and targets industrial and corporate clients seeking quality safety solutions. The business model combines B2B and B2C e-commerce with distribution channels including distributors, retail, exports, and corporate sales. Technically, the website is built on WordPress with WooCommerce and Elementor, leveraging modern web technologies and integrating Google Analytics and Google Tag Manager for marketing and analytics purposes. The site is mobile-optimized and provides a professional user experience with clear navigation and relevant content. Security-wise, the site enforces HTTPS and uses some security best practices but lacks advanced security headers and explicit incident response or vulnerability disclosure policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected, which may pose compliance risks in certain jurisdictions. Overall, the website is professional and credible but could improve in privacy and security transparency.
- TTI International Limited
tti-hr.com
Other · Malta
34High
NIS2 5 · GDPR 28
NIS2 5 · GDPR 28
TTI International Limited is a Malta-based recruitment and manpower solutions provider specializing in customized specialist manpower services across all industrial sectors both locally and internationally. It operates as a 100% subsidiary of the Austrian TTI Group, leveraging a strong international presence and a network of related companies. The website reflects a professional and consistent brand image, targeting job applicants and clients seeking manpower solutions. The business model focuses on recruitment services, career advice, and client-specific recruitment models. Technically, the website is built on TYPO3 CMS with modern frontend technologies such as Bootstrap and FontAwesome, and it integrates Google Tag Manager and Cookiebot for analytics and cookie consent management. The site is mobile-optimized and SEO-friendly, providing a good user experience with clear navigation and relevant content.
- PPraxis
triremepensions.com
Finance · Guernsey
63Medium
NIS2 5 · GDPR 40
NIS2 5 · GDPR 40
Praxis Group is a well-established, owner-managed financial services provider specializing in personal pensions, annuity solutions, employer solutions, corporate services, private wealth, and yacht services. Operating across multiple jurisdictions including Guernsey, Malta, and the UAE, the company leverages its multi-jurisdictional expertise to deliver tailored financial solutions to individual and corporate clients. The website reflects a professional and comprehensive service offering with clear navigation and detailed service descriptions. Technically, the website employs modern web technologies including React and Umbraco CMS, with integrations for analytics (Google Analytics, Hotjar) and marketing tools (Google Tag Manager, CookieScan). The site is mobile-optimized and demonstrates good performance and accessibility standards. Structured data is used effectively to enhance SEO and user experience. From a security perspective, the site uses HTTPS, implements reCAPTCHA v3 for form protection, and includes standard security practices. However, explicit security policies and incident response information are not present, indicating an area for improvement. Privacy compliance is strong, with clear privacy and cookie policies and user consent mechanisms. Overall, Praxis Group's website presents a credible, professional, and secure digital presence aligned with its business operations. Strategic enhancements in security transparency and policy disclosures would further strengthen trust and compliance.
- CountryProfiler Ltd.
countryprofiler.com
Media · Malta
48High
NIS2 5 · GDPR 10
NIS2 5 · GDPR 10
CountryProfiler Ltd. operates as an international media company specializing in publishing country reports, investment guides, and special reports focused on innovative and high-growth markets for trade, foreign investment, and international financial services. The company targets senior executives and corporate leaders seeking independent business insights. The website is professionally designed on the Squarespace platform, featuring clear navigation and multiple office locations in Malta, Ireland, and Canada, reinforcing its international presence. Social media integration and contact forms facilitate engagement with its audience. Technically, the site uses modern web technologies and is hosted on Squarespace, providing a stable and moderately performant infrastructure with good mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal security policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the site presents a credible business front with room for improvement in compliance and security transparency.
- CCore Malta
core.com.mt
Retail · Malta
27High
NIS2 0 · GDPR 0
NIS2 0 · GDPR 0
Core Malta is a small retail and manufacturing business operating primarily in Malta, with an online presence built on WordPress and WooCommerce. The website offers product information and e-commerce capabilities targeting consumers and businesses interested in retail products. The technical infrastructure relies on common web technologies such as Bootstrap, jQuery, and several WordPress plugins, indicating a moderate level of digital maturity. However, the site lacks advanced performance optimizations and accessibility features. Security posture is basic, with no visible security headers or advanced protections, and no active analytics tracking despite plugin presence. Privacy compliance is minimal, with no privacy or cookie policies found, and contact information is limited to a contact form and social media links. Overall, the site is functional but requires improvements in security, privacy, and content completeness to enhance trust and compliance.
Transportation · United States
32High
NIS2 5 · GDPR 10
NIS2 5 · GDPR 10
The International Longshore and Warehouse Union (ILWU) operates a well-structured website primarily serving its members and labor community. The site provides union news, historical archives, leadership information, and contact resources. It holds a strong market position as a large, established non-profit labor union in the transportation sector. Technically, the website is built on WordPress using the Divi theme and incorporates modern web technologies including React and GiveWP for donations. The site is mobile optimized and SEO friendly, though some accessibility features could be improved. Security posture is adequate with HTTPS enforced and no exposed sensitive data, but lacks some security headers and formal security policies. Privacy compliance is weak due to missing explicit privacy and cookie policies. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security disclosures.
Hogg Capital Investments Limitedtier1fx.com
Finance · Malta
52Medium
NIS2 0 · GDPR 43
NIS2 0 · GDPR 43
Tier1FX, operated by Hogg Capital Investments Limited, is a Malta-based regulated brokerage firm offering institutional trading services with a focus on transparency, fairness, and advanced technology. The company provides access to prime liquidity pools and ultra-low latency execution through an agency model, targeting professional and institutional traders. The website is well-designed, mobile-optimized, and uses modern technologies including WordPress, Google Analytics, and LiveChat for customer support. Security measures such as HTTPS, Google reCAPTCHA, and bot detection scripts are implemented, though some security headers could be improved. Privacy and cookie policies are comprehensive and GDPR compliant. Overall, the website reflects a professional and trustworthy financial services provider with strong regulatory adherence.
- Institute of Tourism Studies
its.edu.mt
Education · Malta
28High
NIS2 5 · GDPR 0
NIS2 5 · GDPR 0
The Institute of Tourism Studies (ITS) is a well-established educational institution in Malta specializing in tourism, hospitality, and culinary arts education. Founded in 1987, ITS offers a comprehensive range of accredited study programmes from foundation to master's degree levels, with a strong emphasis on practical experience and international partnerships. The website reflects a professional and consistent brand image, targeting students locally and internationally. Technically, the site employs modern web technologies and frameworks, ensuring good performance, mobile responsiveness, and accessibility. Security posture is adequate with no critical vulnerabilities detected, though improvements in security headers and cookie consent mechanisms are recommended. Overall, the domain registration and WHOIS data align well with the business claims, supporting the legitimacy and trustworthiness of the institution.
- AArcadis
dpsgroupglobal.com
Energy · Netherlands
63Medium
NIS2 0 · GDPR 63
NIS2 0 · GDPR 63
Arcadis is a leading global design and consultancy firm specializing in sustainable solutions for natural and built assets. With over 36,000 employees across more than 30 countries, the company offers services in engineering, consultancy, digital innovation, and project management. The website reflects a strong market position with a focus on improving quality of life through sustainable development. Technically, the site is built on the Sitecore CMS platform, leveraging modern JavaScript libraries, Google Analytics, and consent management tools like Cookiebot. The site is well-optimized for performance, mobile responsiveness, and accessibility. Security posture is strong with HTTPS, reCAPTCHA on forms, and cookie consent mechanisms, although explicit security policies and incident response contacts are not published. WHOIS data confirms the legitimacy of the domain and its alignment with the company's business claims. Overall, the website presents a professional, trustworthy, and compliant digital presence.
RiskCap International Ltdriskcap.com
Finance · Malta
38High
NIS2 0 · GDPR 10
NIS2 0 · GDPR 10
RiskCap International Ltd is a specialized provider of risk management, regulatory compliance, and governance services tailored for the financial services industry. The company emphasizes a strong governance, risk, and compliance (GRC) culture and serves a global clientele across various financial sectors. Their key offerings include risk management, compliance and anti-money laundering (AML), regulatory reporting, and governance solutions. The website reflects a professional and consistent brand image, targeting financial institutions seeking expert advisory and compliance support. Technically, the site is built on WordPress using the Divi theme, indicating a modern but standard CMS infrastructure with moderate performance and good mobile optimization. Security posture is basic with HTTPS enabled but lacks advanced security headers and published security policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the site presents a credible business presence but would benefit from enhanced security and compliance transparency.
Focal Maritime Services Co. Ltdfocalmaritime.com
Transportation · Malta
47High
NIS2 0 · GDPR 25
NIS2 0 · GDPR 25
Focal Maritime Services Co. Ltd is a Malta-based maritime and logistics service provider with a strong market presence and over 25 years of operational history. The company leverages Malta's strategic location to offer a broad range of services including port agency, ship husbanding, freight forwarding, and ship broking, targeting shipowners and international trading companies. The website reflects a professional and consistent brand image with clear service offerings and affiliations to reputable maritime organizations. Technically, the site is built on WordPress using the Avada theme and Slider Revolution plugin, with modern JavaScript libraries and Google Tag Manager for analytics. Security posture is adequate with HTTPS and cookie consent mechanisms, though lacks explicit security policies and some security headers. Privacy compliance is partially met with cookie consent but missing a dedicated privacy policy page. Overall, the site is well-structured, user-friendly, and trustworthy, supporting the company's business credibility.
- HHugeDomains
claymoregroup.com
E-commerce
51Medium
NIS2 0 · GDPR 28
NIS2 0 · GDPR 28
HugeDomains operates as a domain marketplace specializing in premium domain name sales, exemplified by the ClaymoreGroup.com listing. The platform offers flexible purchasing options including outright buy and payment plans, supported by a 30-day money back guarantee and secure transaction methods such as PayPal and Escrow.com. The website is professionally designed with clear navigation and trust signals, targeting individuals and businesses seeking quality domain names. Technically, the site employs modern JavaScript libraries, Google Analytics, and Google reCAPTCHA Enterprise for security and analytics, hosted behind Cloudflare for performance and protection. Security posture is strong with HTTPS enforced, secure forms, and cookie consent mechanisms, though explicit security policies and incident response contacts are absent. Overall, the site is legitimate, trustworthy, and well-positioned in the domain resale market.
Medialogix Limitedmedialogix.co.uk
Technology · United Kingdom
54Medium
NIS2 5 · GDPR 43
NIS2 5 · GDPR 43
Medialogix Limited is a UK-based specialist provider of Digital Asset Management (DAM) solutions, focusing on sectors such as policing, healthcare, and media. They act as a systems integrator and technology partner, notably for FotoWare, delivering consultancy, technical support, and bespoke software development services. The company has a strong market position supported by reputable clients and partnerships with major technology vendors. Their website reflects a professional and consistent brand image with clear messaging targeted at organizations requiring DAM solutions. Technically, the site is built on WordPress using the Divi theme, enhanced with SEO and analytics tools such as Yoast SEO and HubSpot, indicating a mature digital presence. Security posture is solid with HTTPS enforced and cookie consent implemented, though formal security policies and vulnerability disclosures are absent. Overall, the site is trustworthy and well-structured, supporting the company's credibility in its niche market.
Golden Harvest Food Bankgoldenharvest.org
Non-profit · United States
57Medium
NIS2 5 · GDPR 28
NIS2 5 · GDPR 28
Golden Harvest Food Bank is a well-established non-profit organization focused on alleviating hunger in Georgia and South Carolina through various food distribution programs, partnerships, and community engagement. The website reflects a mature digital presence with clear calls to action for donations, volunteering, and partnerships. The technical infrastructure is based on WordPress with a modern theme and utilizes popular plugins and tracking tools, indicating a moderate to high level of digital maturity. Security posture is strong with HTTPS enforced and no visible critical vulnerabilities, though some security headers could be improved. Privacy compliance is basic with a privacy policy present but lacking a cookie consent mechanism. Overall, the site is professional and trustworthy, supporting the organization's mission effectively.
Mindbeatmindbeat.app
Other · Malta
57Medium
NIS2 0 · GDPR 40
NIS2 0 · GDPR 40
Mindbeat is a digital coaching platform founded in 2020, offering personalized and group coaching services focused on mental health, leadership development, and managing organizational transitions. The company targets leaders, HR professionals, and organizations seeking scalable coaching solutions to improve productivity and wellbeing. Their global network of coaches and data-driven approach position them as an accessible and affordable alternative in the coaching market. Technically, the website is built on WordPress with modern plugins and integrates analytics and live chat tools, demonstrating a mature digital infrastructure. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Privacy compliance is well addressed with clear policies and user consent. Overall, the website is professional, trustworthy, and well-optimized for SEO and mobile use.
- YYour domain is expired
opexltd.com
Other
42High
NIS2 0 · GDPR 10
NIS2 0 · GDPR 10
The website opexltd.com is currently inactive and displays a domain expired placeholder page hosted by Hostinger. No business-related content, contact information, or policies are available, indicating the site is not operational. The technical infrastructure relies on legacy Bootstrap 3.3.7 and jQuery 3.2.1 libraries, with Google Analytics and Tag Manager scripts embedded despite the lack of active content. Security posture is weak due to domain expiration, absence of HTTPS enforcement, and missing security headers or policies. Overall, the site presents a high risk for trust and credibility, requiring domain renewal and comprehensive redevelopment to restore functionality and compliance.
- IInterstellar
databyte.nl
Technology · Netherlands
55Medium
NIS2 0 · GDPR 63
NIS2 0 · GDPR 63
Interstellar is a large Dutch IT services company with over 700 employees, specializing in infrastructure, productivity, and security solutions. The company positions itself as a next-level service provider focused on delivering innovative IT solutions to businesses across the Netherlands. Their website reflects a mature digital presence with comprehensive service descriptions, client showcases, and active social media engagement. Technically, the site is built on WordPress with modern JavaScript libraries and includes SEO and accessibility considerations, although some accessibility features could be improved. Security posture is solid with HTTPS and cookie consent mechanisms, but lacks explicit security policies and incident response contacts. Overall, the website is professional, trustworthy, and compliant with GDPR, supporting a strong market position in the technology sector.
Malta Medical Students’ Associationmmsa.org.mt
Healthcare · Malta
34High
NIS2 5 · GDPR 0
NIS2 5 · GDPR 0
The Malta Medical Students’ Association (MMSA) is a well-established non-governmental, non-political student organization founded in 1951, dedicated to enhancing medical education and public health advocacy in Malta. The website reflects a focused mission on supporting medical students through educational resources, international exchanges, and community empowerment. The organization maintains a moderate online presence with integration of social media and event management features. Technically, the website employs a variety of modern JavaScript libraries and frameworks such as jQuery, Bootstrap, and Google services, ensuring a responsive and user-friendly experience. Security measures include HTTPS enforcement and Google reCAPTCHA on login forms, though the absence of explicit security headers and privacy policies indicates room for improvement. Overall, the website is functional and professional but lacks comprehensive privacy compliance and some security best practices.
- Film House
filmhouse.com
Media
48High
NIS2 5 · GDPR 25
NIS2 5 · GDPR 25
Film House is a small media production company specializing in a variety of film and video services including TV commercials, real estate videos, government projects, indie features, corporate films, documentaries, and convention TV. The website serves primarily as a navigational portal to these service categories but lacks detailed content and business information. The technical infrastructure is basic, relying on simple HTML and CSS with no modern frameworks or CMS detected. The site is not secured with HTTPS, which is a significant security concern. No privacy or cookie policies are present, and no contact information is provided on the homepage, limiting user trust and compliance with privacy regulations. Overall, the website demonstrates minimal digital maturity and security posture.
- PPublic Transport Authority of Western Australia
pta.wa.gov.au
Transportation · Australia
55Medium
NIS2 5 · GDPR 28
NIS2 5 · GDPR 28
The Public Transport Authority of Western Australia (PTA) operates as the primary government agency responsible for public transportation services across Western Australia. The website serves as a comprehensive portal providing information about its key services including Transperth, Transwa, Transregional, and School Bus Services. The PTA positions itself as a safe, customer-focused, integrated, and efficient public transport provider, targeting residents and visitors within the region. The site reflects a well-established government entity with a large operational scale and a clear focus on public transport infrastructure and service delivery. Technically, the website is built on the DNN (DotNetNuke) CMS platform using ASP.NET WebForms, enhanced with jQuery, Bootstrap, and various third-party analytics and tracking tools such as Google Tag Manager, Facebook Pixel, and Siteimprove Analytics. The site demonstrates good mobile optimization and accessibility basics, with a moderate performance profile. SEO practices are adequately implemented with proper meta tags and structured navigation. From a security perspective, the site uses HTTPS and includes anti-forgery tokens in forms, indicating some level of security awareness. However, there is a lack of visible security headers and no published vulnerability disclosure or incident response information. Privacy compliance is partially addressed with a comprehensive privacy policy and terms of use, but the absence of a cookie consent mechanism despite tracking scripts is a notable gap. No contact emails or phone numbers are explicitly provided on the homepage, which may affect user trust and support accessibility. Overall, the PTA website is a professional and trustworthy government site with solid business credibility and technical implementation. Security posture is adequate but could be improved with enhanced headers, explicit consent mechanisms, and incident response transparency. Strategic recommendations include implementing cookie consent, publishing security policies, and improving security headers to strengthen compliance and user trust.
Business Leaders Maltabusinessleadersmalta.com
Other · Malta
56Medium
NIS2 0 · GDPR 75
NIS2 0 · GDPR 75
Business Leaders Malta is a well-established conference provider based in Malta, specializing in organizing dynamic business events and conferences that attract over 500 business professionals. The company has a strong market position as a leading event organizer in Malta, focusing on business innovation, leadership, and networking. Their digital presence is built on a modern WordPress infrastructure with a variety of plugins enhancing user experience, analytics, and marketing capabilities. The website is professionally designed, mobile-optimized, and SEO-friendly, reflecting a mature digital strategy. Security posture is strong with HTTPS enforced, reCAPTCHA integration, and cookie consent mechanisms, although explicit security and incident response policies are not publicly available. Overall, the website and business demonstrate high trustworthiness and professionalism, with room for improvement in publishing security policies and direct contact information for incident response.
- RRestaurant Associates
restaurantassociates.com
Hospitality · United States
52Medium
NIS2 5 · GDPR 33
NIS2 5 · GDPR 33
Restaurant Associates (R/A) is a well-established on-site dining management company operating as a member of Compass Group, with over 75 years of experience in culinary innovation, hospitality, and well-being services. The company targets corporate clients and workplace dining markets, positioning itself as a leader in hospitality excellence. Their website reflects a mature digital presence with comprehensive content, clear branding, and active social media engagement. Technically, the site is built on WordPress using modern themes and plugins, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and no exposed sensitive data, though security headers could be enhanced and privacy compliance improved by adding cookie consent mechanisms. Overall, the domain registration and WHOIS data align well with the business claims, indicating a legitimate and trustworthy entity.
- GGEICO
geico.jobs
Finance · United States
55Medium
NIS2 0 · GDPR 25
NIS2 0 · GDPR 25
GEICO is a well-established insurance company specializing in auto insurance and is a wholly owned subsidiary of Berkshire Hathaway. The website analyzed is a careers portal hosted on the Workday platform, designed to provide job seekers with information about employment opportunities at GEICO. The site content is minimal and focused primarily on recruitment, with no visible privacy or cookie policies, contact information, or terms of service on the analyzed page. Technically, the site uses modern JavaScript and Workday's candidate experience framework, with assets served via Workday's CDN, indicating a moderate level of digital maturity. Security posture is moderate but could be improved by adding security headers and explicit HTTPS enforcement. Overall, the site is functional but lacks comprehensive compliance and transparency features.
Association Française du Marketingafm-marketing.org
Education · France
35High
NIS2 10 · GDPR 10
NIS2 10 · GDPR 10
The Association Française du Marketing (AFM) is a French academic non-profit organization founded in 1984, serving a community of approximately 700 members including researchers, doctoral candidates, and marketing practitioners. It focuses on promoting marketing research and disseminating knowledge primarily within the francophone academic and professional marketing community. The website offers comprehensive information on events, publications, membership, and job opportunities, positioning AFM as a leading scientific reference in marketing in France and internationally within the francophone sphere. Technically, the website employs a modern technology stack including jQuery, Google reCAPTCHA, Google Translate, and SEO tools integrated via SeoSamba's Marketing Operating System. The site is mobile-optimized, uses HTTPS, and includes structured data for SEO. Performance is moderate with good navigation and content quality. From a security perspective, the site uses HTTPS and Google reCAPTCHA to protect forms, but lacks explicit security headers and published security or incident response policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism, which is a gap given GDPR requirements. Overall, the website is professional, trustworthy, and well-aligned with its academic mission. Strategic recommendations include enhancing privacy compliance with cookie consent, publishing security policies, and implementing additional security headers to improve security posture and regulatory compliance.
Kyte Globalkyteconsultants.com
Technology · Malta
55Medium
NIS2 55 · GDPR 70
NIS2 55 · GDPR 70
Kyte Global is a well-established cybersecurity and compliance consultancy founded in 2006, serving clients in over 65 countries. The company specializes in providing comprehensive services including AML, GDPR, PCI DSS, ISO 27001, SOC 2, and penetration testing, targeting regulated entities primarily in the fintech, gaming, and technology sectors. Their market position is strong, supported by multiple certifications and a professional digital presence. Technically, the website is built on WordPress with modern tools such as Google Analytics, Microsoft Clarity, and CookieYes for privacy compliance. The site is well-optimized for SEO, mobile-friendly, and incorporates robust consent mechanisms. Security posture is solid with HTTPS enforced, reCAPTCHA protection on forms, and no visible vulnerabilities, though additional security headers could enhance protection. Overall, Kyte Global demonstrates a mature digital infrastructure aligned with its business objectives and compliance requirements.
EDITECeditec.co
Other
50Medium
NIS2 0 · GDPR 10
NIS2 0 · GDPR 10
EDITEC is a leading provider of lottery products and operations across Africa and the Middle-East, offering innovative and high-quality gaming solutions through a vast network of computerized points of sale. The company operates in multiple markets and emphasizes transparency, reliability, and responsible gaming. Their services include lottery, sports betting, gaming activities, and consultancy in various business domains. The website is built on WordPress using modern themes and plugins, providing a professional and responsive user experience. Security posture is moderate with HTTPS enabled and some security best practices observed, but there are concerns such as insecure password input fields and lack of security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the website is credible but could improve in security and compliance aspects.
Sovereign Order of Maltaorderofmalta.int
Non-profit · Italy
67Medium
NIS2 5 · GDPR 63
NIS2 5 · GDPR 63
The Sovereign Order of Malta is a historic lay religious Catholic order recognized as a sovereign subject of international law, with a significant global presence in humanitarian and medical aid across 130 countries. The organization operates with a clear mission focused on medical, social, and humanitarian projects, supported by diplomatic activities and a structured governance system. The website reflects this stature with comprehensive content, clear navigation, and multilingual support, targeting a broad audience including members, humanitarian partners, and the general public. Technically, the website is built on WordPress with a modern tech stack including jQuery, Bootstrap, and Owl Carousel, optimized for SEO and mobile responsiveness. Hosting is inferred to be via Cloudflare, ensuring good performance and security. Privacy compliance is robust, featuring a detailed cookie policy and consent mechanism powered by OneTrust, aligning with GDPR requirements. Security posture is strong with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. However, explicit security headers could be improved to enhance protection. Contact information is clearly presented with official emails, phone numbers, and physical addresses, reinforcing trust and credibility. Overall, the website demonstrates a mature digital presence suitable for a large international non-profit organization, with strong compliance and security practices. Strategic recommendations include enhancing security headers and continuous monitoring of third-party scripts to maintain security integrity.
Nouvtfork.com
Education · Malta
34High
NIS2 0 · GDPR 45
NIS2 0 · GDPR 45
Nouv is a Malta-based professional services and consulting firm with a strong regional presence including offices in Ireland and Saudi Arabia. The company offers a broad range of services including advisory, audit and assurance, tax, corporate services, and a dedicated academy providing accredited and bespoke training programs. Their market position is that of a trusted partner to businesses and individuals seeking professional growth and compliance support. Technically, the website is built on WordPress with WooCommerce and modern frontend frameworks like Bootstrap and Slick Carousel, integrated with Google Analytics, Facebook Pixel, and Zoho SalesIQ for marketing and customer engagement. Security posture is strong with HTTPS, cookie consent mechanisms, and reCAPTCHA, though a dedicated security policy and incident response contacts are not publicly available. Overall, the website is professional, well-branded, and compliant with GDPR, providing clear contact information and trust signals such as affiliations and certifications. The domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.
Other · Finland
45High
NIS2 0 · GDPR 25
NIS2 0 · GDPR 25
The website dinetarragon.com currently serves as a domain parking and resale page with no active business content or services. The primary visible content is a banner advertising the domain for sale and an embedded iframe loading external content from an untrusted third-party domain. The site lacks fundamental elements such as privacy policies, contact information, and HTTPS encryption, which significantly diminishes its credibility and trustworthiness. The domain is registered recently with privacy protection, consistent with a domain resale business model. From a technical perspective, the site uses basic HTML, CSS, and JavaScript with an iframe embedding external content. It is hosted behind AWS Cloudfront CDN but lacks modern security headers and HTTPS, exposing visitors to potential risks. Mobile optimization and accessibility are minimal, and SEO features are poor due to the lack of meaningful content. Security posture is weak, with no HTTPS, no security headers, and the presence of an iframe from a suspicious domain, which could expose users to malicious content. No privacy or cookie policies are present, and no contact or incident response information is available, indicating low compliance with privacy regulations such as GDPR. Overall, the site poses a moderate risk due to lack of security controls and transparency. Strategic recommendations include enabling HTTPS, removing or validating third-party iframe content, adding privacy and cookie policies, and providing clear contact information to improve trust and compliance.
- SSucuri WebSite Firewall - Access Denied
gfddesign.com
Other
51Medium
NIS2 5 · GDPR 28
NIS2 5 · GDPR 28
The website gfddesign.com is currently inaccessible due to a Sucuri Website Firewall block triggered by a country-based IP restriction (Block ID: GEO02). This block prevents any meaningful content from being accessed or analyzed, resulting in a lack of visible business information, contact details, or technical metadata. The page served is a standard Sucuri access denied message with links only to Sucuri resources and Google Fonts. Consequently, the digital maturity and technical infrastructure of the actual business behind the domain cannot be assessed. Security posture evaluation is limited to the presence of the WAF itself, which is actively blocking access from certain geographies, indicating some level of security enforcement but also potential overblocking risks. Overall, the site is currently non-functional for users from the blocked region, and no direct business or compliance information is available from the content.
Belair Propertybelair.com.mt
Real Estate · Malta
52Medium
NIS2 0 · GDPR 18
NIS2 0 · GDPR 18
Belair Property is a Malta-based real estate agency specializing in property sales, rentals, commercial and luxury properties. The website presents a professional and well-structured platform with comprehensive property listings, agent contact details, and exclusive offerings. The company targets property buyers, renters, and sellers primarily in Malta, positioning itself as a trusted and established player in the local real estate market. Technically, the website is built on WordPress with modern plugins and SEO optimizations, offering good mobile responsiveness and user experience. Security posture is solid with HTTPS enabled and secure forms, though some security headers and policies are missing. Privacy compliance is partial, lacking a cookie consent mechanism and explicit GDPR indicators. Overall, the site is trustworthy and professionally maintained, with room for improvement in privacy and security transparency.
The N Word Ltdicandothings.com
Media · Malta
43High
NIS2 0 · GDPR 10
NIS2 0 · GDPR 10
I Can Do Things, operated by The N Word Ltd, is a small Malta-based digital marketing agency specializing in social media marketing, online advertising, and media buying, with a focus on gaming, casino, and event promotion sectors. The company offers services including PPC advertising, digital strategy consulting, social media marketing, online reputation management, and content marketing. Their market position is niche and local, targeting businesses seeking to enhance their online presence and convert visitors into clients. Technically, the website uses a modern front-end stack including Bootstrap, Material Design, jQuery, and Font Awesome, hosted on Cloudflare Pages. While the site has a good design and user experience with clear navigation, mobile optimization and accessibility are basic. SEO optimization is also basic, with proper meta tags but no advanced structured data or rich snippets. From a security perspective, the site lacks HTTPS enforcement, which is a critical vulnerability. No security headers are detected, and there are no visible privacy or cookie policies, indicating poor privacy compliance. The use of Facebook Pixel and Cloudflare Analytics shows moderate user tracking but without transparent consent mechanisms. No incident response or security policies are published, and no certifications or compliance badges are visible. Overall, the website presents a professional but small-scale business with moderate trustworthiness. The lack of HTTPS and privacy policies significantly impacts security and compliance scores, suggesting urgent improvements are needed to protect user data and enhance trust.
Other
45High
NIS2 5 · GDPR 15
NIS2 5 · GDPR 15
The website maleth-aero.com is currently inaccessible, serving a minimal HTTP 403 Forbidden error page via an openresty server. No business content, metadata, or contact information is available for analysis. This lack of accessible content prevents assessment of the company's market position, services, or technical infrastructure. The absence of HTTPS and security headers further indicates a poor security posture. Due to the blocked content, the overall risk assessment is high, and strategic recommendations focus on restoring accessible, secure web presence with proper compliance and security controls.