Security reports directory
150,193 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,193001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
138,251–138,300 of 150,193
HM Viloo Ltdkenyacompanies.com
Other · Kenya
36High
NIS2 0 · GDPR 10
NIS2 0 · GDPR 10
KenyaCompanies.com operates as a leading online business directory focused on Kenyan businesses, providing a platform for verified business listings, enhancing brand visibility, and facilitating business connections. The website targets businesses and customers within Kenya, offering services such as business listings, company registration assistance, event listings, and promotional offers. The platform is positioned as a trusted and human-edited directory, managed by HM Viloo Ltd, with a medium-sized operational scale and consistent branding. Technically, the website is built on Joomla CMS and leverages a modern technology stack including React, jQuery, Google Analytics, and various UI libraries. The site demonstrates moderate performance and good mobile optimization, with a structured navigation and SEO-friendly meta tags. However, accessibility features are basic and could be improved. From a security perspective, the site uses HTTPS and includes CSRF tokens in forms, but lacks explicit security headers and published security policies. No incident response or vulnerability disclosure information is available, and cookie consent mechanisms are absent. Advertising is managed through Google Adsense, with tracking via Google Analytics and Tag Manager, indicating moderate user tracking. Overall, the website presents a moderate risk profile with good business credibility but room for improvement in privacy compliance and security best practices. Strategic recommendations include implementing security headers, publishing privacy and security policies, and adding cookie consent mechanisms to enhance trust and compliance.
Avolta AGdufry.com
Retail · Switzerland
62Medium
NIS2 0 · GDPR 63
NIS2 0 · GDPR 63
Avolta AG operates as a leading global travel retailer with a presence in over 70 countries and more than 5,100 outlets worldwide. The company focuses on uniting retail, convenience, and food & beverage services under one brand to enhance the traveler experience. Their business model includes physical retail locations, a loyalty program (Club Avolta), and digital services such as Reserve & Collect. The website reflects a mature digital infrastructure built on Drupal 10, integrating modern JavaScript libraries and compliance tools like OneTrust for privacy and cookie management. Security posture is strong with HTTPS enforcement, security headers, and no visible vulnerabilities, though explicit security policies and incident response contacts are absent. Overall, the site demonstrates high professionalism, good privacy compliance, and strong business credibility, positioning Avolta as a trustworthy enterprise in the travel retail sector.
- OOddsring
oddsring.com
Other · Malta
51Medium
NIS2 0 · GDPR 25
NIS2 0 · GDPR 25
Oddsring was an online casino platform operating under a Malta Gaming Authority license which was surrendered, leading to cessation of operations on January 18, 2024. The website currently serves only as a notice page informing visitors of this status and provides a contact email for the Malta Gaming Authority for inquiries. The business targeted online casino players and operated in the gambling sector with a medium-sized presence. The website is built using Angular framework and standard web technologies but lacks comprehensive content, policies, or contact information. Technically, the site is accessible and moderately optimized but lacks advanced SEO, accessibility, and security features. Security posture is weak due to absence of security headers and no visible SSL configuration details. Privacy compliance is non-existent as no privacy or cookie policies are present. Overall, the site reflects a ceased business with minimal digital presence and limited trust signals.
- B3 Games
cgibg.com
Other · Bulgaria
57Medium
NIS2 0 · GDPR 25
NIS2 0 · GDPR 25
B3 Games operates an online gaming platform primarily targeting Bulgarian-speaking users, offering a variety of lottery, bingo, slot, and sports betting games. The website presents promotional content, winner announcements, and mobile application downloads, indicating a focus on user engagement and accessibility. The business model centers on online gambling services within a regional niche. Technically, the site uses a modern but common web technology stack including jQuery, Slick Slider, and Fancybox, with moderate performance and good mobile optimization. However, the CMS appears custom or unknown, and no advanced frameworks are detected. Security posture is moderate; HTTPS is implied but no explicit security headers or advanced protections are evident. Privacy compliance is basic with a cookie banner and a privacy policy page, but lacks GDPR-specific indicators or detailed terms of service. Contact information is notably absent, reducing business credibility. Overall, the site is functional and professional but would benefit from enhanced security and compliance measures.
Telecom Electronics Maltatelecom.com.mt
Retail · Malta
41High
NIS2 0 · GDPR 3
NIS2 0 · GDPR 3
Telecom Electronics Limited is a well-established electronics and telecommunications retailer based in Malta, founded in 1998. The company offers a broad range of products including mobile phones, accessories, security systems, and audio-visual equipment, targeting both consumers and businesses within Malta. Their market position is strong locally, supported by a comprehensive e-commerce platform and physical presence. The website demonstrates a moderate to high level of digital maturity, utilizing modern web technologies such as Bootstrap 5, jQuery, and Google reCAPTCHA for security. The integration of Google Analytics and Tag Manager indicates an active approach to user behavior analysis and marketing. Security posture is generally good with HTTPS enforced and form protections in place, though the use of MD5 hashing for passwords is outdated and should be improved. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. Overall, the website and business present a trustworthy and professional image with room for security enhancements.
Trustmooretrustmoore.com
Finance
58Medium
NIS2 13 · GDPR 70
NIS2 13 · GDPR 70
Trustmoore is a boutique corporate services provider specializing in management and administration services for funds, capital markets, corporate clients, and private clients. The company emphasizes tailored, personal attention to deliver long-term value and builds partnerships for sustained success. Their market position is that of an agile, management-owned organization focused on client-specific solutions rather than commoditized services. The website reflects a professional and consistent brand image with comprehensive service offerings and a clear target audience in the finance sector. Technically, the website is built on WordPress with a modern tech stack including Yoast SEO, HubSpot marketing and analytics tools, GSAP animations, and Swiper sliders. The site is mobile-optimized, accessible, and SEO-friendly, with good performance characteristics. The use of HubSpot forms and cookie consent mechanisms indicates a mature digital marketing and privacy compliance posture. From a security perspective, the site enforces HTTPS and employs cookie consent banners, but lacks explicit security headers and published security policies or incident response contacts. No critical vulnerabilities or exposed sensitive data were detected in the HTML content. The domain registration is consistent with the business claims, registered since 2017, and no privacy protection is used, supporting transparency. Overall, the website presents a trustworthy and professional front with good privacy compliance and marketing integration. Security posture is solid but could be improved with additional policies and headers. The absence of direct contact emails or phone numbers suggests reliance on web forms for communication. Strategic recommendations include publishing security policies, adding incident response contacts, and enhancing security headers to further strengthen trust and compliance.
Axapta Mastersaxaptamasters.com
Technology
45High
NIS2 5 · GDPR 43
NIS2 5 · GDPR 43
Axapta Masters is a technology consulting firm specializing in Microsoft Dynamics 365 and cloud innovation solutions. Positioned as a global delivering partner, the company offers a wide range of services including Dynamics 365 Finance & SCM, Customer Engagement, Microsoft 365, Data Analytics, and Power Platform solutions. Their business model focuses on providing professional services such as project recovery, managed support, consulting, and implementation to help businesses harness digital transformation effectively. The company demonstrates strong market positioning with a medium-sized footprint and a founding year of 2022. Technically, the website is built on WordPress using the Avada theme and incorporates modern JavaScript libraries and plugins for enhanced user experience and performance. The site is mobile optimized, SEO friendly, and integrates Google Analytics for user tracking. Privacy compliance is well addressed with clear privacy and cookie policies and a consent mechanism. From a security perspective, the website uses HTTPS with a good SSL configuration and basic security headers. No critical vulnerabilities or exposed sensitive data were detected. However, there is room for improvement by adding more comprehensive security headers and a dedicated security policy page. Overall, the website presents a professional and trustworthy digital presence with strong branding, client case studies, and social media engagement. The risk level is low, but continuous security enhancements and transparency in incident response would further strengthen their posture.
- AArcBest
abf.com
Transportation · United States
63Medium
NIS2 5 · GDPR 58
NIS2 5 · GDPR 58
ArcBest Corporation operates the ABF Freight brand, a leading less-than-truckload (LTL) freight carrier with over 100 years of experience. The company offers extensive logistics and transportation services across North America, supported by a large network of service centers and a commitment to safety, innovation, and sustainability. The website reflects a mature digital presence with comprehensive content, professional design, and clear navigation tailored to business customers seeking freight and supply chain solutions. Technically, the site is built on Drupal 10 and integrates multiple marketing and analytics tools, including Google Analytics, HubSpot, and Facebook Pixel, indicating a sophisticated approach to user engagement and data collection. Security practices are generally good, with HTTPS enforced and reCAPTCHA protecting forms, though some security headers could be more explicitly implemented. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site demonstrates high professionalism and trustworthiness, aligned with the company's enterprise status and market position.
Crossbridge Capital LLPcrossbridgecapital.com
Finance · United Kingdom
54Medium
NIS2 5 · GDPR 55
NIS2 5 · GDPR 55
Crossbridge Capital is a reputable wealth management and family office services provider with a strong presence in key financial centers including London, Singapore, and Malta. Managing over $3 billion in client assets, the company focuses on delivering bespoke investment solutions tailored to global investors, particularly high net worth individuals and families in emerging markets. Their business model emphasizes independent advice without product bias, supported by regulatory authorizations from FCA and MAS. The website reflects a professional and consistent brand image with clear service offerings and global reach. Technically, the website is built on a modern WordPress platform using Elementor and Astra theme, ensuring good mobile responsiveness and SEO optimization. Security measures include HTTPS enforcement and Google reCAPTCHA integration on forms, though explicit security headers and incident response policies are not publicly detailed. Privacy compliance is strong with a comprehensive privacy policy and GDPR adherence, though cookie consent mechanisms could be improved. Overall, the security posture is solid with no visible vulnerabilities or exposed sensitive data. The domain registration data aligns well with the business claims, supporting legitimacy. Recommendations include enhancing security headers, publishing incident response information, and adding cookie consent banners to further strengthen compliance and trust.
- FFPO Nederland B.V.
fairplayonline.com
Other · Netherlands
51Medium
NIS2 0 · GDPR 48
NIS2 0 · GDPR 48
Fair Play Online Casino is a well-established Dutch online gambling platform offering a wide range of casino games including slots, live casino, jackpots, and exclusive titles. The website targets Dutch players and operates under a valid Dutch gambling license, ensuring compliance with local regulations. The platform features a modern, user-friendly interface with extensive game categories and multiple providers, enhancing user engagement and retention. Technically, the site is built on modern frameworks such as React and Next.js, with Builder.io used for content management, resulting in fast performance and excellent mobile optimization. Security measures include HTTPS enforcement and a Content Security Policy, though additional headers could improve the security posture further. Privacy compliance is adequate with clear privacy and cookie policies, though a consent mechanism is not evident. Overall, the site demonstrates high professionalism, trustworthiness, and business credibility, making it a competitive player in the Dutch online casino market.
The Open Universityopen.ac.uk
Education · United Kingdom
58Medium
NIS2 5 · GDPR 63
NIS2 5 · GDPR 63
The Open University is a well-established UK-based distance learning institution offering a wide range of undergraduate and postgraduate courses. It holds a strong market position supported by multiple prestigious awards such as the Teaching Excellence Framework Gold and the Queen's Anniversary Prize. The website reflects a mature digital presence with comprehensive content tailored to adult learners and professionals seeking flexible education options. Technically, the site employs modern JavaScript libraries, consent-based analytics, and a cookie management system that aligns with GDPR requirements. Security posture is robust with HTTPS enforcement and consent mechanisms, although explicit security policies and incident response details are not publicly disclosed. Overall, the site demonstrates high professionalism, accessibility, and trustworthiness, supporting the university's mission to provide open access to higher education.
Nomupaytotalprocessing.com
Finance · Ireland
63Medium
NIS2 5 · GDPR 43
NIS2 5 · GDPR 43
Nomupay is a payment solutions provider offering a comprehensive platform for global payment processing, payouts, and transaction management. The company targets businesses seeking to expand and optimize their payment acceptance worldwide, leveraging local licenses and a broad network of payment methods. The website is professionally designed, mobile-optimized, and rich in content, providing clear navigation and detailed service descriptions. Technically, the site is built on WordPress using Oxygen Builder, with modern analytics and tracking tools integrated. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though formal security and incident response policies are not publicly disclosed. Overall, Nomupay presents a credible and trustworthy business presence with a solid digital infrastructure.
- D
Other
48High
NIS2 0 · GDPR 0
NIS2 0 · GDPR 0
The website proact.com.mt is currently inaccessible due to a Cloudflare error 1000 indicating that the DNS resolves to a prohibited IP address. This prevents any meaningful content or business information from being accessed or analyzed. The site appears to be protected by Cloudflare's network, but misconfiguration of DNS records has caused a complete block. No metadata, business descriptions, contact details, or privacy policies are available. The technical infrastructure relies on Cloudflare services, but no CMS or additional frameworks are detected due to the blocked state. Security posture is poor as the site is unreachable and lacks visible security headers or policies. Overall, the site is non-functional and presents a high risk for users and stakeholders due to lack of transparency and accessibility.
KORE Wirelesskorewireless.com
Technology · United States
63Medium
NIS2 15 · GDPR 48
NIS2 15 · GDPR 48
KORE Wireless is a leading enterprise in the IoT connectivity sector, providing global IoT solutions including eSIM technology, multi-carrier SIMs, and managed services. Positioned as a trusted backbone for IoT connectivity, KORE leverages direct carrier partnerships and a comprehensive service portfolio to simplify IoT deployment and scaling for businesses worldwide. Their website reflects a mature digital presence with extensive resources, case studies, and a focus on customer empowerment. Technically, the website is built on WordPress using the Bricks Builder theme, integrated with HubSpot marketing and analytics tools, Google Analytics, and other modern JavaScript libraries. The site is well optimized for performance, mobile responsiveness, and SEO, indicating a high level of digital maturity. From a security perspective, the site enforces HTTPS, uses secure forms, and implements cookie consent mechanisms. While explicit security policies and incident response contacts are not found, the site shows good security hygiene with no exposed sensitive data or vulnerabilities detected. The WHOIS data confirms the legitimacy and consistency of the domain registration with the business claims. Overall, KORE Wireless presents a professional, trustworthy, and technically sound online presence with strong business credibility and compliance awareness.
- NNOV
nov.com
Energy · United States
61Medium
NIS2 0 · GDPR 28
NIS2 0 · GDPR 28
NOV is a leading global energy services company specializing in oilfield equipment, technologies, and expertise to support the oil and gas industry worldwide. With a history spanning over 150 years, NOV positions itself as a technology-first innovator driving efficiency, safety, and sustainability in energy production. The company targets industry customers seeking advanced solutions to complex energy challenges. Technically, the website leverages modern frameworks such as Next.js and React, hosted on Vercel, ensuring fast performance, mobile optimization, and good SEO practices. Security posture is strong with HTTPS enforcement, security headers, and cookie consent mechanisms, although explicit security policies and incident response contacts are not found. Overall, the site reflects a mature enterprise with professional branding and comprehensive content, supporting a high level of trust and credibility.
- DDNO ASA
dno.no
Energy · Norway
61Medium
NIS2 0 · GDPR 43
NIS2 0 · GDPR 43
DNO ASA is a Norwegian oil and gas operator with active operations in the Middle East and the North Sea, publicly listed on the Oslo Stock Exchange. The company provides comprehensive investor relations information, corporate governance details, and operational insights through a professionally designed and well-structured website. The target audience includes investors, industry professionals, and partners within the energy sector. The business model focuses on exploration, production, and supply chain management in oil and gas. Technically, the website leverages modern analytics tools such as Google Analytics and Google Tag Manager, integrates Google Maps for location visualization, and is built on the Umbraco CMS platform. The site is mobile optimized, accessible, and SEO friendly, providing a good user experience. Performance is moderate with room for optimization. From a security perspective, the site enforces HTTPS, uses cookie consent mechanisms, and avoids exposing sensitive data. However, explicit security headers and a public security policy or incident response contact are not present, representing areas for improvement. No WAF or blocking mechanisms were detected, allowing full content access. Overall, the website demonstrates a strong business credibility and privacy compliance posture, with a high legitimacy score based on WHOIS data consistency. Strategic recommendations include enhancing security headers, publishing security policies, and adding vulnerability disclosure channels to further strengthen trust and compliance.
Dilanti Mediadilantimedia.com
Technology · Malta
54Medium
NIS2 0 · GDPR 10
NIS2 0 · GDPR 10
Dilanti Media is a technology-focused marketing company established in 2018 and based in Malta. The company operates affiliate marketing properties across various technology markets, providing value-adding services to partners and customers on a pay-for-performance basis. Their key services include organic search marketing and social media marketing, leveraging their online properties and social media presence to generate relevant traffic and exposure for their partners. The website reflects a professional and consistent brand image with clear navigation and good mobile optimization. Technically, the website is built on WordPress using the Brooklyn theme by United Themes, incorporating modern plugins such as Slider Revolution, GS Logo Slider, and Contact Form 7. The site uses HTTPS and includes security measures like the Wordfence plugin, indicating a moderate security posture. However, some security headers are missing, and there is no visible privacy or cookie policy, which are compliance gaps. The security posture is adequate with HTTPS and active security plugins, but improvements are needed in security headers and explicit incident response information. No critical vulnerabilities or WAF blocking were detected. Overall, the site is functional, moderately secure, and professionally presented but lacks some compliance and security best practices. Strategically, the company should prioritize adding comprehensive privacy and cookie policies, enhance security headers, and provide clear incident response and vulnerability disclosure channels to improve trust and compliance. These steps will strengthen their security posture and align with GDPR and other regulations.
- Misco Technologies
misco.co.uk
Technology · United Kingdom
54Medium
NIS2 0 · GDPR 63
NIS2 0 · GDPR 63
Misco Technologies is a well-established UK-based IT reseller and solutions provider offering a wide range of products including laptops, desktops, tablets, and IT services tailored for businesses, public sector, and home offices. The company maintains a strong market position with a comprehensive portfolio of services such as lifecycle management, hybrid cloud, networking, software solutions, managed services, cyber security, and IT recycling. Their website reflects a professional and consistent brand image targeting both large and small enterprises with a focus on education and public sector solutions. Technically, the website leverages modern web technologies including Foundation CSS, jQuery, Google Tag Manager, Microsoft Clarity, and Freshchat for customer engagement. The infrastructure is supported by Amazon Cloudfront CDN ensuring reliable content delivery. The site is mobile-optimized with good SEO practices and basic accessibility features, though some improvements could be made in accessibility compliance. From a security perspective, the website enforces HTTPS with strong SSL configuration and implements key security headers. Cookie consent mechanisms and privacy policies are in place, demonstrating compliance with GDPR. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of a dedicated security policy or incident response page suggests room for improvement in transparency and readiness. Overall, Misco.co.uk presents a trustworthy and professional online presence with solid business credibility and security posture. Strategic enhancements in security policy disclosure and accessibility could further strengthen their digital maturity and customer trust.
AX Groupaxholdings.com.mt
Real Estate · Malta
54Medium
NIS2 13 · GDPR 63
NIS2 13 · GDPR 63
AX Group is a well-established diversified corporation based in Malta, operating across multiple sectors including healthcare, energy, hotels, development, real estate, and construction. With nearly five decades of experience, the company holds a leading market position in Malta, offering a broad portfolio of services through various subsidiaries and brands. The website reflects a professional and consistent brand image, targeting investors, clients, and partners in its core industries. Technically, the site is built on WordPress with modern frameworks and plugins, ensuring good SEO, mobile responsiveness, and user experience. Security posture is strong with HTTPS, cookie consent mechanisms, and bot protection via Google reCAPTCHA, though some security headers could be improved. Overall, the site is compliant with GDPR and provides clear contact information and policies. The domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.
Concept to Completion Ltd.conceptstadium.com
Media · Malta
65Medium
NIS2 0 · GDPR 55
NIS2 0 · GDPR 55
Concept Stadium is a Malta-based creative agency and marketing advisory hub established in 2010, specializing in crafting brands that engage real people through digital, web, social media, and communications solutions. The company positions itself as a commercial creative agency with a strong portfolio of brand partners including major international and local clients. The website reflects a mature digital presence with professional design, clear navigation, and multimedia content that supports their brand narrative. Technically, the website is built on WordPress and leverages modern JavaScript libraries such as GSAP and Lenis for animations and smooth scrolling, along with Splide.js for carousels. It uses the Complianz GDPR plugin for cookie consent management and Matomo for privacy-conscious analytics. The site is well-optimized for SEO and accessibility, with structured data enhancing search engine understanding. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks explicit advanced security headers like Content-Security-Policy and X-Frame-Options. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is strong with comprehensive policies and consent management. Overall, the website demonstrates a high level of professionalism, security awareness, and compliance, supporting the company's credibility and trustworthiness in the creative agency market.
Study World Groupgcmalta.com
Education · Malta
39High
NIS2 5 · GDPR 10
NIS2 5 · GDPR 10
Global College Malta, operated by Study World Group, is a reputable private higher education institution based in Malta, offering a broad range of European accredited undergraduate, postgraduate, and doctorate courses. The institution targets students seeking quality education in the Mediterranean region and emphasizes holistic learning experiences supported by strong student services and online facilities. The website reflects a professional and modern digital presence with embedded multimedia and active social media engagement. Technically, the site is built on WordPress with popular plugins for SEO, forms, and analytics, ensuring a robust infrastructure. Security measures include HTTPS enforcement and reCAPTCHA integration, although explicit security and privacy policies are not published, indicating room for improvement in compliance documentation. Overall, the website demonstrates a solid market position with credible trust signals but would benefit from enhanced privacy and security transparency.
MiFinitymifinity.com
Finance · United Kingdom
66Medium
NIS2 5 · GDPR 48
NIS2 5 · GDPR 48
MiFinity is a regulated digital payments and eWallet service provider operating primarily in the finance sector with a strong presence in the UK and Malta. The company offers a comprehensive suite of payment solutions including multi-currency eWallets, eVouchers, and integrated payment methods, targeting both personal and business users globally. Their market position is reinforced by multiple industry awards and regulatory authorizations, establishing them as a trusted player in the fintech space. Technically, the website is built on WordPress with modern frameworks and plugins such as Elementor, Yoast SEO, and WP Rocket, ensuring fast performance, mobile optimization, and good accessibility. The site integrates advanced marketing and analytics tools including Google Analytics, Google Tag Manager, Facebook Pixel, and Taboola, supporting a robust digital marketing strategy. From a security perspective, MiFinity employs HTTPS with strong SSL configuration, uses reCAPTCHA for form protection, and follows best practices to avoid exposing sensitive data. However, explicit security headers like CSP and X-Frame-Options are not visibly declared and could be improved. The company maintains comprehensive privacy, cookie, and security policies aligned with GDPR requirements. Overall, MiFinity demonstrates a high level of business credibility, technical maturity, and security awareness, making it a reliable and professional digital payments provider. Strategic recommendations include enhancing security header implementation, increasing visibility of incident response contacts, and continuous monitoring of third-party libraries for vulnerabilities.
Alter Domusalterdomus.com
Finance
56Medium
NIS2 13 · GDPR 58
NIS2 13 · GDPR 58
Alter Domus is a leading enterprise specializing in asset servicing for alternative investments, offering a broad range of fund administration, middle office, corporate, and technology solutions tailored to private equity, venture capital, real estate, infrastructure, and private debt sectors. The company targets alternative asset managers, asset owners, and financial institutions globally, positioning itself as a trusted partner with extensive expertise and a comprehensive technology suite. The website reflects a mature digital presence with professional design, clear navigation, and strong SEO practices. Technically, the site is built on WordPress with modern plugins and technologies, including a consent management platform and Google Tag Manager, ensuring compliance and user tracking capabilities. Security posture is robust with HTTPS enforced and privacy compliance mechanisms in place, though some security headers could be improved. Overall, the domain registration and WHOIS data align well with the company's public profile, indicating high legitimacy and trustworthiness.
Alert Communicationsalertcommunications.com
Telecommunications · United States
49High
NIS2 5 · GDPR 28
NIS2 5 · GDPR 28
Alert Communications is a well-established company specializing in legal call answering and intake services for law firms across the United States. With a history dating back to 1965, the company offers a comprehensive suite of services including inbound and outbound calling, legal intake, contract and retainer services, live chat and text support, mass tort services, virtual assistants, digital marketing, and AI-powered booking solutions. Their market position is strong, serving thousands of law firms with scalable and customizable solutions. Technically, the website is built on a modern WordPress platform utilizing Elementor, Gravity Forms, and various optimization and analytics tools such as WP Rocket, Google Tag Manager, and Swiper.js. The site demonstrates good performance, mobile optimization, and accessibility features, reflecting a mature digital infrastructure. From a security perspective, the site employs HTTPS, uses Google reCAPTCHA on forms, and has some security best practices in place. However, it lacks explicit security headers and published security or incident response policies. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website presents a professional and trustworthy front with strong business credibility and technical implementation. Privacy compliance is basic, with a privacy policy present but no visible cookie consent mechanism. Strategic recommendations include enhancing security headers, implementing a cookie consent banner, and publishing security and incident response policies to improve compliance and trust.
CloudLabs Ltd.cloudlabs.com.mt
Technology · Malta
54Medium
NIS2 0 · GDPR 20
NIS2 0 · GDPR 20
CloudLabs Ltd. is a Malta-based digital marketing company specializing in mobile advertising, digital marketing, marketing automation, and a branded voucher app called cloudigo. The company targets businesses seeking innovative brand engagement solutions and has a portfolio of notable clients. The website is built on WordPress with WooCommerce integration, featuring a professional design and clear navigation. Technical infrastructure includes modern JavaScript libraries and Google APIs, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS and reCAPTCHA protection, but lacks important security headers and cookie consent mechanisms. Overall, the site demonstrates good business credibility and trustworthiness, though improvements in security and privacy compliance are recommended.
The Hivehive.com.mt
Technology · Malta
51Medium
NIS2 0 · GDPR 58
NIS2 0 · GDPR 58
The Hive is a boutique digital agency based in Malta, specializing in ecommerce and content site development, web design, mobile app development, and digital marketing services. The company targets businesses seeking to establish or enhance their online presence, offering tailored digital solutions. The website reflects a professional and consistent brand image with clear service offerings and a user-friendly interface. Technically, the site is built on WordPress using Elementor, leveraging modern web technologies such as jQuery and GSAP for animations. The site is mobile optimized and demonstrates good SEO practices with proper meta tags and structured data. Security-wise, the website enforces HTTPS and includes a cookie consent mechanism, but lacks explicit security headers and incident response policies. No critical vulnerabilities or exposed sensitive data were detected. Overall, the site is trustworthy and credible, though it could benefit from enhanced security policies and transparency.
EuroGeographics AISBLeurogeographics.org
Government · Belgium
42High
NIS2 5 · GDPR 28
NIS2 5 · GDPR 28
EuroGeographics AISBL is a well-established, independent international non-profit organization representing Europe's National Mapping, Cadastral, and Land Registration Authorities. The organization serves as an authoritative geo-information framework for Europe, providing members with access to official geospatial data, knowledge exchange networks, and policy briefings. Their website reflects a strong market position with comprehensive content tailored to geospatial professionals and governmental bodies across Europe. The technical infrastructure is based on a modern WordPress CMS with integration of popular libraries such as jQuery, Font Awesome Pro, and Bootstrap, ensuring a responsive and accessible user experience. Security posture is good with HTTPS enabled and secure form handling, though explicit security policies and incident response information are not publicly available. Overall, the website demonstrates high professionalism and trustworthiness, with clear contact information and active social media presence. However, the absence of a visible cookie consent mechanism and security policy documentation suggests areas for improvement in privacy compliance and security transparency.
hotsethotset.de
Energy · Germany
51Medium
NIS2 5 · GDPR 3
NIS2 5 · GDPR 3
hotset GmbH is a medium-sized German company specializing in industrial heating and thermal engineering solutions. Established in 1973, it offers a broad portfolio of heating elements, thermosensor technology, and process control systems. The company maintains an international presence with subsidiaries in Malta, Singapore, USA, China, India, and Great Britain, positioning itself as a trusted development partner in the energy sector. The website reflects a mature digital infrastructure built on WordPress with modern plugins and SEO optimizations, providing a professional user experience and comprehensive content. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, although some security headers could be improved. Privacy compliance is well addressed with a detailed privacy policy and cookie management. Overall, hotset demonstrates a high level of business credibility and digital maturity.
Matsmaltats.com
Transportation · Malta
56Medium
NIS2 5 · GDPR 28
NIS2 5 · GDPR 28
MATS Malta operates as the national air traffic service provider for Malta, delivering essential air traffic management and related services. The organization positions itself as a recognized ANSP within the Euro Mediterranean region, emphasizing safety, excellence, and innovation. Their website reflects a medium-sized enterprise with a clear mission and vision, targeting airspace users and stakeholders. The business model focuses on service provision in the transportation sector, with key offerings including AIM, technical services, operations, training, and safety quality services. The company is ISO 9001 certified, reinforcing its commitment to quality standards. Technically, the website is built on WordPress with a modern tech stack including jQuery, Bootstrap, and several plugins such as WPBakery Page Builder and Contact Form 7. The site demonstrates good mobile optimization and SEO practices, though performance is moderate. Analytics tools are present but not fully configured, and accessibility is basic. Security posture is adequate with HTTPS enforced and use of Google reCAPTCHA, but lacks explicit security headers and comprehensive security policies. Overall, the security posture is moderate with no critical vulnerabilities detected, but improvements are recommended in security headers, privacy compliance (notably cookie consent), and analytics configuration. The domain registration data aligns well with the business claims, showing consistency and legitimacy. The website is accessible without WAF or blocking mechanisms, supporting a positive trust assessment. Strategic recommendations include enhancing security headers, implementing GDPR-compliant cookie consent, completing analytics setup, publishing security and incident response policies, and conducting regular security audits to strengthen the security culture and trustworthiness.
- Central Bank
centralbankonline.com
Finance · United States
62Medium
NIS2 5 · GDPR 33
NIS2 5 · GDPR 33
Central Bank is a well-established, family-owned community bank serving Iowa and South Dakota with a broad range of financial services including personal and business banking, mortgages, and insurance. The website reflects a strong regional focus with clear navigation and comprehensive service offerings tailored to local customers. The bank emphasizes local decision-making and customer service, positioning itself as a trusted community financial institution. Technically, the website employs modern web technologies such as jQuery, Slick Slider, and Google Analytics, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS usage and external link warnings, but lacks visible advanced security headers and explicit incident response policies. Privacy compliance is partial with a privacy policy present but no cookie consent mechanism. Overall, the site is professional, trustworthy, and credible, with room for improvement in security and privacy transparency.
Hili Ventures Limitedhiliventures.com
Other · Malta
51Medium
NIS2 0 · GDPR 28
NIS2 0 · GDPR 28
Hili Ventures Limited is a Malta-based, privately-owned holding company with a diversified portfolio spanning food service, real estate, logistics, engineering, technology, and hospitality sectors. Established in 1923, it operates through multiple subsidiaries and partners with global brands such as McDonald's, Apple, and Microsoft. The company has a significant international presence with operations across Europe and North Africa, supported by a workforce exceeding 12,500 employees. The website reflects a mature business with clear market positioning and a professional digital presence. Technically, the website is built on WordPress with modern technologies including Alpine.js and jQuery, optimized for SEO and mobile responsiveness. It employs Google Tag Manager for analytics and CookieYes for cookie consent management, indicating a good level of digital maturity. Performance is moderate with room for improvement in accessibility. From a security perspective, the site uses HTTPS with no visible critical vulnerabilities or exposed sensitive data. However, explicit security headers and published security policies are absent, representing an area for enhancement. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website demonstrates a strong business credibility and trustworthy online presence. Strategic recommendations include implementing comprehensive security headers, publishing security and incident response policies, and enhancing accessibility features to further strengthen compliance and user experience.
Aerrecuadrado Arquitectosaerrecuadrado.cl
Real Estate · Chile
36High
NIS2 0 · GDPR 10
NIS2 0 · GDPR 10
Aerrecuadrado Arquitectos is a Chile-based small architectural firm specializing in design and project management services. The website presents a professional image with consistent branding and clear contact information, targeting clients seeking architectural solutions. The business appears to be niche-focused with a local market presence and was founded around 2019, consistent with domain registration data. Technically, the website is built on WordPress using popular plugins and frameworks such as Bootstrap, WPBakery, and Slider Revolution, providing a moderate performance and good mobile responsiveness. SEO practices are adequately implemented with Yoast SEO and proper meta tags. Security-wise, the site uses HTTPS but lacks important security headers and formal policies such as privacy and cookie policies, which impacts compliance and security posture. Google Analytics and Tag Manager are used for user tracking without visible consent mechanisms, indicating privacy compliance gaps. Overall, the site is functional and professional but requires improvements in privacy compliance and security best practices to enhance trust and regulatory adherence.
Eden Leisure Groupedenleisure.com
Hospitality · Malta
45High
NIS2 0 · GDPR 10
NIS2 0 · GDPR 10
Eden Leisure Group is a prominent Maltese company operating in the entertainment, leisure, and hospitality sectors. Their portfolio includes radio broadcasting, cinemas, fitness clubs, casinos, hotels, esports, and parking services, positioning them as a leader in the local market. The website reflects a well-branded, consistent digital presence with clear navigation and a focus on showcasing their diverse business units. Technically, the site is built on WordPress using Elementor and several modern plugins, providing a good user experience with moderate performance and mobile optimization. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though improvements are needed in security headers and policy disclosures. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security transparency.
Re/max alliancehomesincolorado.com
Real estate · United states
70Medium
NIS2 10 · GDPR 45
NIS2 10 · GDPR 45
Finance · Netherlands
56Medium
NIS2 0 · GDPR 58
NIS2 0 · GDPR 58
The Autoriteit Financiële Markten (AFM) is the Dutch independent regulator overseeing financial markets, ensuring transparency, fairness, and consumer protection. The website serves as an authoritative portal for sector professionals and consumers, providing regulatory information, news, and tools such as provider checks. The AFM holds a strong market position as a government entity with a clear mission to promote sustainable financial wellbeing in the Netherlands. Technically, the website employs modern frameworks like Bootstrap and jQuery, integrates a comprehensive cookie consent mechanism via Cookiebot, and uses CDN-hosted libraries to optimize performance and security. The site is mobile-optimized and accessible, with good SEO practices and structured navigation. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though additional HTTP security headers could enhance protection. Privacy compliance is robust, featuring detailed cookie declarations and GDPR-aligned consent. Overall, the site reflects a professional, trustworthy, and well-maintained digital presence aligned with its regulatory role.
Nabors Industries Ltd.nabors.com
Energy · United States
49High
NIS2 0 · GDPR 28
NIS2 0 · GDPR 28
Nabors Industries Ltd. operates as a leading global provider of advanced drilling rigs, software, wellbore services, and equipment primarily serving the energy sector. With operations spanning approximately 15 countries, the company emphasizes innovation through automation, digital operations platforms such as RigCLOUD, and energy transition initiatives including emissions reporting and rig electrification. The website reflects a mature enterprise with a comprehensive service portfolio targeting operators, contractors, and oilfield service providers. Technically, the website is built on WordPress using the Divi theme and several plugins enhancing user experience and functionality. It employs modern JavaScript libraries and integrates Google Analytics and VisitorQueue for user tracking. The site is mobile optimized and SEO friendly, though some accessibility features could be improved. From a security perspective, the site uses HTTPS with a valid SSL certificate and employs some security best practices. However, it lacks explicit security headers and does not provide visible incident response or vulnerability disclosure policies. Privacy compliance is partially addressed with a comprehensive privacy policy but lacks a cookie consent mechanism. Overall, the website presents a professional and trustworthy digital presence for Nabors Industries, with recommendations to enhance security policies, privacy compliance, and transparency to further strengthen its risk posture.
Non-profit · Italy
58Medium
NIS2 5 · GDPR 55
NIS2 5 · GDPR 55
The website represents the Curia Generalizia della Compagnia di Gesù, the central governing body of the Society of Jesus (Jesuits), a large and historic non-profit religious organization founded in 1540. The site provides extensive information about Jesuit spirituality, ministries, news, and global activities, targeting Jesuit members, Catholic faithful, and interested public audiences. It maintains a professional and consistent brand presence with comprehensive content and active social media integration. Technically, the site is built on WordPress with modern frameworks like Bootstrap and uses common libraries such as jQuery and Swiper.js. It is hosted behind Cloudflare, ensuring good performance and security. The site enforces HTTPS and includes cookie consent mechanisms with anonymized analytics tracking, reflecting good privacy compliance. However, it lacks explicit security policy and incident response information. Overall, the site is secure, well-maintained, and trustworthy, with minor areas for improvement in security transparency and accessibility.
SR Technics Switzerland Ltd.srtechnics.com
Transportation · Switzerland
56Medium
NIS2 0 · GDPR 58
NIS2 0 · GDPR 58
SR Technics Switzerland Ltd. is a globally recognized Maintenance, Repair, and Overhaul (MRO) service provider specializing in aircraft, engines, and components. With over 500 customers worldwide and more than 90 years of operational experience, the company serves airlines, leasing companies, OEMs, and component traders with tailored aviation solutions. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive service information. Technically, the site uses modern technologies including Umbraco CMS, Google Tag Manager, and Cookiebot for privacy compliance. Security posture is strong with HTTPS enforcement, CSRF protection, and cookie consent mechanisms, though explicit security headers and incident response contacts are not evident. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with GDPR and cookie regulations.
Media consulta: world of ideas!mcgroup.com
Public relations and communications · Germany
38High
NIS2 5 · GDPR 60
NIS2 5 · GDPR 60
- EEstee Advisors Pvt. Ltd.
esteeadvisors.com
Finance · India
36High
NIS2 0 · GDPR 10
NIS2 0 · GDPR 10
Estee Advisors Pvt. Ltd. is a financial services firm specializing in low latency brokerage, market making, and market neutral fund management primarily focused on the Indian markets. Their services include algo trading, NSE colocation, and electronic market making. The website targets qualified employment candidates, vendors, and existing clients, providing general company information rather than direct investment offers. The company maintains offices in India and the USA, indicating an international presence. Technically, the website uses legacy technologies such as PHP 5 and an outdated jQuery version, with minimal modern web practices. The site lacks mobile optimization and accessibility features, and no CMS or advanced frameworks are detected. SEO and content quality are basic, with limited navigation and no structured data or metadata beyond basic keywords and description. From a security perspective, the site shows several weaknesses including the absence of HTTPS enforcement in the provided data, lack of security headers, and use of vulnerable JavaScript libraries. No privacy, cookie, or security policies are published, and no incident response contacts are provided. These gaps expose the site to potential risks and reduce trustworthiness. Overall, the website is functional but basic, with moderate business credibility but significant technical and security shortcomings. Strategic improvements in security posture, privacy compliance, and technical modernization are recommended to enhance trust and operational resilience.
Primärprimar.se
Real Estate · Sweden
57Medium
NIS2 0 · GDPR 63
NIS2 0 · GDPR 63
Primär is a large Swedish facility management company specializing in property services, workplace services, and cleaning. They serve a broad customer base across Sweden including property owners, housing associations, and industries. The company emphasizes a balance between comprehensive service offerings and personalized customer relations. Their website reflects a mature digital presence with modern technologies such as Umbraco CMS, Alpine.js, and integration with Google Tag Manager and Cookiebot for analytics and GDPR compliance. Security posture is solid with HTTPS, CSRF protections, and cookie consent mechanisms, though explicit security policies and incident response contacts are not publicly available. Overall, the website is professional, well-structured, and compliant with privacy regulations, supporting a high trust level for visitors and customers.
River Tech Plcriverigaming.com
Technology · Malta
63Medium
NIS2 5 · GDPR 63
NIS2 5 · GDPR 63
River Tech Plc is a Malta-based B2B technology company specializing in high-quality software, platform services, and proprietary products targeting emerging sectors such as iGaming and FinTech. The company positions itself as an innovator with a flexible approach to client requirements and a commitment to futureproofing through technology and partnerships. Their website reflects a professional and modern digital presence, leveraging WordPress with the Divi theme, and includes comprehensive cookie consent mechanisms and privacy policies, indicating strong privacy compliance. Security posture is robust with HTTPS enforced and use of security plugins, though some security headers could be explicitly confirmed. Overall, River Tech demonstrates a mature digital infrastructure and a trustworthy business profile.
Bonnici Groupbonnicigroup.com
Manufacturing · Malta
28High
NIS2 0 · GDPR 10
NIS2 0 · GDPR 10
Bonnici Group is a Malta-based diversified group of companies operating primarily in civil engineering, construction materials production and supply, industrial equipment sales and servicing, and retail furniture through the JYSK Malta franchise. The group maintains a solid market position locally with multiple subsidiaries addressing different sectors of the construction and retail markets. The website reflects a professional business presence with clear branding and service offerings. Technically, the site is built on WordPress using modern plugins and frameworks, offering moderate performance and good mobile optimization. Security posture is adequate with HTTPS and reCAPTCHA implemented, but lacks advanced security headers and incident response disclosures. Privacy compliance is partial, with no cookie consent mechanism or detailed privacy policy evident. Overall, the site is trustworthy and functional but could improve in security and privacy transparency.
KYNETIC A/Skynetic.dk
Technology · Denmark
29High
NIS2 5 · GDPR 0
NIS2 5 · GDPR 0
KYNETIC A/S is a Danish boutique digital marketing agency specializing in performance marketing accelerated by data, automation, and AI. Established in 2018, the company serves ambitious B2B and B2C clients primarily in Denmark and the Nordic region. Their services include SEO, Google Ads, marketing automation, social media advertising, and data science, positioning them as a leading data-driven marketing agency in the region. The website reflects a mature digital infrastructure built on WordPress with modern frameworks like Elementor and Bootstrap, optimized for performance and mobile responsiveness. Security posture is strong with HTTPS enforced and no critical vulnerabilities detected, though some security headers could be improved. Privacy compliance is well addressed with clear cookie and privacy policies and consent mechanisms. Overall, KYNETIC demonstrates a professional, trustworthy, and technically sound online presence aligned with their business claims.
GOLDBROKER LTDgoldbroker.com
Finance · United Kingdom
46High
NIS2 5 · GDPR 28
NIS2 5 · GDPR 28
GoldBroker.com is a specialized online platform offering individuals and companies the ability to invest in physical gold and silver bullion. The company provides secure storage outside the banking system, insured vaults, and a buyback guarantee, positioning itself as a trusted intermediary in precious metals investment. The website is professionally designed with clear navigation, multilingual support, and comprehensive content tailored to investors seeking physical precious metals. Technically, the site uses modern web technologies including Symfony framework, Google Tag Manager, and Axeptio for cookie consent, ensuring a good user experience and compliance with privacy regulations. Security posture is strong with HTTPS, secure forms, and trust signals like Trustpilot reviews, though explicit security policies and vulnerability disclosure mechanisms are absent. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.
- Finland Promotion Board
finland.fi
Government · Finland
58Medium
NIS2 5 · GDPR 58
NIS2 5 · GDPR 58
ThisisFINLAND.fi is an official Finnish government website managed by the Finland Promotion Board under the Ministry for Foreign Affairs. It serves as a comprehensive platform to promote Finnish culture, society, business, innovation, and tourism to a global audience. The site features rich, multilingual content, including articles, news, and resources tailored to diverse audiences such as tourists, investors, and the general public. The website leverages a modern WordPress CMS with a well-implemented technical stack including Yoast SEO, Cookiebot for privacy compliance, and Piwik for analytics, ensuring a balance between user experience and data privacy. Security posture is strong with HTTPS enforced, Cloudflare protection, and cookie consent mechanisms, although explicit security policies and incident response contacts are not publicly available. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with GDPR, making it a reliable source of information about Finland.
Nortalnortal.com
Technology · Estonia
65Medium
NIS2 43 · GDPR 58
NIS2 43 · GDPR 58
Nortal is a well-established digital transformation company with over 25 years of experience, serving governments, healthcare, and enterprise sectors globally. Their website reflects a mature digital presence built on HubSpot CMS, featuring modern technologies and a strong focus on user experience and accessibility. The company demonstrates a solid security posture with HTTPS, cookie consent mechanisms, and secure forms, though explicit security headers and incident response information are not evident. Overall, Nortal presents as a credible and trustworthy enterprise with global reach and recognized certifications.
Other
48High
NIS2 0 · GDPR 25
NIS2 0 · GDPR 25
The website at fedmillsmalta.com presents minimal accessible content, primarily consisting of hidden tracking pixels and an iframe embedding external content from suspicious domains. There is no visible business information, contact details, or user-facing content. The site appears to be either a placeholder or compromised, potentially used for adware or malvertising purposes. Technically, the site lacks HTTPS, security headers, and any privacy or cookie policies, indicating a poor security posture and non-compliance with privacy regulations. Overall, the site is low trust and high risk from a security and compliance perspective.
- CCCBill
ccbill.com
Finance · United States
64Medium
NIS2 5 · GDPR 40
NIS2 5 · GDPR 40
CCBill is a well-established online payment processing company founded in 1998, serving over 30,000 internet businesses globally. The company offers a comprehensive suite of services including payment processing, subscription billing automation, fraud protection, and 24/7 merchant and consumer support. Their market position is strong, supported by industry certifications such as PCI DSS compliance and a BBB A Plus rating. The website reflects a professional and consistent brand image with clear navigation and targeted content for merchants and consumers alike. Technically, the site is built on WordPress with modern frameworks like Bootstrap and performance optimizations via WP Rocket, ensuring fast load times and excellent mobile responsiveness. Security posture is robust with HTTPS enforcement, PCI DSS compliance, and use of security best practices, although explicit security policies and incident response contacts are not publicly detailed. Privacy compliance is addressed through visible privacy and cookie policies with consent mechanisms, leveraging third-party privacy tools like Clym. Overall, the domain registration data aligns well with the business claims, reinforcing the legitimacy and trustworthiness of the company.
Smart Technologies Limitedstl.com.mt
Technology · Malta
44High
NIS2 43 · GDPR 0
NIS2 43 · GDPR 0
Smart Technologies Limited is a Malta-based IT services company established in 2008, offering a broad range of technology solutions including managed IT services, cybersecurity, cloud computing, enterprise software, and specialized hospitality solutions. The company positions itself as a trusted partner for digital transformation, serving a diverse clientele from startups to established businesses. Their market presence is reinforced by partnerships with leading technology providers and certifications such as ISO 9001 and ISO 27001. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to their target audience. Technically, the site is built on WordPress with modern frameworks and plugins, ensuring good performance and mobile optimization. Security posture is strong with HTTPS enforced and basic security headers present, though additional headers could enhance protection. Privacy compliance is addressed through a comprehensive cookie consent mechanism, although explicit privacy and terms of service pages were not found. Overall, the domain registration details align with the business claims, supporting high legitimacy and trustworthiness.