Security reports directory
150,193 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,193001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
138,401–138,450 of 150,193
Curiagadea.com
Healthcare · United States
44High
NIS2 0 · GDPR 43
NIS2 0 · GDPR 43
Curia Global is a leading contract development and manufacturing organization (CDMO) with over 30 years of experience in the pharmaceutical and biologics sectors. The company offers comprehensive services spanning small molecule drug discovery, generic APIs, biologics development, sterile drug product manufacturing, and analytical testing. Positioned as a dedicated ally to biopharma companies of all sizes, Curia operates a global network of 23 facilities and 3,500 professionals, emphasizing flexibility, scalability, and scientific expertise. Technically, the website is built on WordPress with a modern tech stack including Google Tag Manager, Marketo, Microsoft Clarity, and HubSpot analytics, reflecting a mature digital marketing and analytics infrastructure. The site is well-optimized for SEO, mobile responsive, and accessible, with professional design and clear navigation. From a security perspective, the site enforces HTTPS and uses reCAPTCHA for form protection, but lacks explicit security headers and published security policies or incident response contacts. Privacy and cookie policies are comprehensive and GDPR compliant, supporting good privacy compliance. No critical vulnerabilities or suspicious content were detected. Overall, Curia Global's website demonstrates a strong business credibility and digital maturity with minor recommendations to enhance security posture and transparency. The domain registration details align well with the business claims, supporting high legitimacy and trustworthiness.
- MMuscat Mizzi Advocates
muscatmizzi.com
Other · Malta
44High
NIS2 35 · GDPR 10
NIS2 35 · GDPR 10
Muscat Mizzi Advocates is a boutique law firm based in Malta, specializing in Compliance, Dispute Resolution, and Transaction Law. The firm targets business sector clients who value creativity and efficiency in legal services. Their market position is that of a reputed boutique firm with a focus on delivering tailored legal solutions. The website reflects a professional and consistent brand image with clear service offerings and active engagement in industry events. Technically, the website is built using modern frameworks such as Nuxt.js and TailwindCSS, hosted behind Cloudflare, and employs Google Analytics for tracking. The site is mobile-optimized and performs moderately well, with good SEO and basic accessibility features. Security measures include HTTPS enforcement and Cloudflare Turnstile captcha to mitigate automated abuse. From a security perspective, the site demonstrates good practices with no visible vulnerabilities or exposed sensitive data. However, it lacks explicit security policies, incident response contacts, and comprehensive privacy documentation, which are areas for improvement. The domain registration details are consistent with the business claims, enhancing trustworthiness. Overall, the website presents a low-risk profile with strong business credibility but would benefit from enhanced privacy and security policy transparency to improve compliance and user trust.
Calamatta Cuschierifinancestack.com
Finance · Malta
63Medium
NIS2 5 · GDPR 55
NIS2 5 · GDPR 55
Calamatta Cuschieri is a leading financial planning and investment services firm based in Malta, with over 50 years of experience and managing assets exceeding €2.3 billion. The company offers a broad range of financial services including investment advice, wealth management, pensions, life insurance, and capital markets services. It targets both individual and corporate clients, providing expert advisory and an award-winning online trading platform. The firm operates multiple offices in Malta and Italy, reinforcing its regional presence. Technically, the website is built on WordPress with a modern tech stack including Yoast SEO, Google Tag Manager, Google Analytics, Facebook Pixel, and reCAPTCHA v3 for security. The site is well-optimized for SEO, mobile responsive, and incorporates GDPR-compliant cookie consent mechanisms. Performance is moderate with good accessibility and navigation. From a security perspective, the site enforces HTTPS, uses reCAPTCHA on forms, and employs a GDPR cookie consent plugin. However, explicit security policies and incident response information are not published, and no vulnerability disclosure or security.txt file is present. The domain registration details are consistent with the business claims, supporting high legitimacy. Overall, the website demonstrates a strong digital maturity and business credibility with minor areas for improvement in security transparency and accessibility compliance.
Contact Verification Suspension Pagebluegarden.se
Other
39High
NIS2 0 · GDPR 0
NIS2 0 · GDPR 0
The website bluegarden.se is currently inaccessible as a functional business site and instead displays a suspension notice due to non-completion of ICANN-mandated email verification for the domain registrant. The page provides detailed information about the reasons for suspension and instructions for domain owners to reactivate their domain by verifying their email address. There is no business content, contact information, or privacy policies present on the site. Technically, the site uses Bootstrap and Font Awesome for styling but lacks HTTPS and security headers, indicating a minimal security posture. No analytics or advertising technologies are detected. Overall, the site is in a suspended state and does not represent an active business presence.
Other
45High
NIS2 5 · GDPR 15
NIS2 5 · GDPR 15
The website ypassociation.org is currently inaccessible beyond a standard HTTP 404 Not Found error page, indicating that the requested resource does not exist or the site is not operational. There is no visible content, metadata, or structured data to analyze, and no business or contact information is provided. The lack of HTTPS and security headers further diminishes the site's security posture. Due to the absence of content and technical details, the website's business model, market position, and services cannot be determined. The technical infrastructure appears minimal or non-existent, with no detectable technologies or frameworks. Security posture is weak, with no policies or protections evident. Overall, the site presents a high risk due to lack of content, security, and compliance measures.
wagerlogic.com domain name is for sale. Inquire now.wagerlogic.com
Other
41High
NIS2 0 · GDPR 10
NIS2 0 · GDPR 10
The website wagerlogic.com serves as a landing page for selling the premium domain name wagerlogic.com, targeting businesses or individuals interested in gambling or betting related domains. The business model is focused on domain sales facilitated securely through Efty Pay, a trusted domain transaction platform. The site content is minimal and primarily promotional, emphasizing the domain's brandability and value appreciation potential. The technical infrastructure employs modern web technologies including Bootstrap, jQuery, Google Fonts, Font Awesome, and Google Analytics for tracking visitor data. Security measures include HTTPS enforcement and Google reCAPTCHA integration, with payment processing securely handled by Efty Pay. However, the site lacks explicit privacy, cookie, and terms of service policies, and does not provide direct contact information or security incident channels, which limits compliance and trust signals. Overall, the site is functional but basic in content and compliance.
- CCTF Technologies
portalctf.com.br
Transportation · Brazil
55Medium
NIS2 0 · GDPR 25
NIS2 0 · GDPR 25
CTF Technologies is a Brazilian company specializing in fleet management and automated payment solutions for businesses. The website reflects the company's rebranding as Sem Parar Empresas, emphasizing its leadership in providing automated toll, fuel, and freight payment services. The site targets companies of various sizes seeking efficient vehicle expense management. Technically, the website uses Bootstrap for responsive design and is protected by Incapsula WAF, indicating a moderate level of security infrastructure. However, there are gaps in privacy compliance and security best practices, such as missing cookie consent mechanisms and incomplete privacy policy links. The absence of visible security headers and incident response information suggests room for improvement in security posture. Overall, the website is functional and professional but would benefit from enhanced privacy and security features to increase trust and compliance.
Real Estate · Libya
60Medium
NIS2 0 · GDPR 43
NIS2 0 · GDPR 43
محفظة ليبيا أفريقيا للاستثمار هي مؤسسة استثمارية ليبية ذات شخصية اعتبارية مستقلة تأسست عام 2006، تركز على إدارة الاستثمارات في شركات متعددة القطاعات داخل ليبيا وأفريقيا وبعض الدول الأوروبية. تتمتع بموقع قوي في السوق الليبي والإفريقي مع تركيز على تنويع الاستثمارات في الطاقة، النقل، العقارات، والضيافة. الموقع الإلكتروني مبني على منصة WordPress مع استخدام تقنيات حديثة مثل UIkit وYoast SEO، ويوفر محتوى غني باللغة العربية مع دعم جيد للتصفح عبر الأجهزة المحمولة. من الناحية الأمنية، يستخدم الموقع HTTPS ويطبق ممارسات أمنية جيدة، لكنه يفتقر إلى بعض السياسات الأمنية المتقدمة مثل سياسة الاستجابة للحوادث أو صفحة الإفصاح عن الثغرات. لا توجد مؤشرات على وجود حواجز أمان تمنع الوصول للمحتوى، مما يعكس شفافية الموقع. التوصيات تشمل تعزيز سياسات الخصوصية والكوكيز، إضافة آليات موافقة على الكوكيز، وتحسين رؤوس الأمان HTTP. بشكل عام، الموقع يعكس مؤسسة ذات مصداقية عالية مع بنية تقنية متينة ومحتوى مهني.
AM Languageamlanguage.com
Education · Malta
45High
NIS2 5 · GDPR 28
NIS2 5 · GDPR 28
AM Language is a small education business specializing in English language courses in Malta. The company offers a variety of courses including general English, TEFL, IELTS preparation, and courses for teens and kids. They also provide accommodation arrangements and leisure activities to enhance the student experience. The website positions AM Language as a reputable and established language school with positive student testimonials and accreditations. Technically, the website is built on WordPress and uses common web technologies such as jQuery and Google Analytics. It is moderately optimized for performance and mobile use, with good SEO practices implemented. Security-wise, the site uses HTTPS with a good SSL configuration and includes basic security headers, but lacks advanced security policies and cookie consent mechanisms. Privacy compliance is basic, with a privacy policy present but no explicit GDPR compliance or cookie consent banner. Overall, the website is professional and trustworthy but could improve in privacy and security transparency.
- Toptal
toptal.com
Technology · United States
61Medium
NIS2 5 · GDPR 58
NIS2 5 · GDPR 58
Toptal is a leading global talent marketplace specializing in connecting businesses with the top 3% of freelance professionals in software development, design, marketing, management consulting, and product/project management. Founded in 2010 and headquartered in the United States, Toptal has established a strong market position with over 25,000 clients worldwide. The platform emphasizes quality by rigorously vetting its talent pool, ensuring high success rates and client satisfaction. Technically, the website leverages modern web technologies including React, JavaScript, and CSS, with integrations for Google Analytics and Tag Manager for performance and marketing insights. The site is well-optimized for mobile devices, accessibility, and SEO, providing a fast and user-friendly experience. The presence of comprehensive privacy and cookie policies with consent mechanisms indicates a mature approach to privacy compliance. From a security perspective, Toptal enforces HTTPS with strong SSL configurations and implements key security headers to protect users. No critical vulnerabilities or exposed sensitive data were detected. However, explicit security policies and incident response contacts are not publicly detailed, representing an area for improvement. Overall, Toptal presents a low-risk profile with a professional, secure, and compliant online presence. Strategic recommendations include enhancing transparency around security policies, adding vulnerability disclosure mechanisms, and maintaining rigorous third-party script audits to sustain trust and security posture.
My Brighton Hotelmyhotels.com
Hospitality · United Kingdom
32High
NIS2 0 · GDPR 25
NIS2 0 · GDPR 25
My Brighton Hotel is a hospitality business operating in the hotel accommodation sector, currently undergoing a major refurbishment with plans to relaunch in summer 2025. The website is professionally designed using WordPress and the Kadence theme, incorporating modern plugins and analytics tools. It demonstrates a moderate level of digital maturity with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enforced and cookie consent implemented, though explicit security headers and policies are lacking. The business maintains a clear communication channel via email and social media, but lacks phone contact and physical address details on the analyzed page. Overall, the website is trustworthy and compliant with GDPR, but could improve transparency with terms of service and security policies.
- Racine St. Catherine's
saintcats.org
Education · United States
40High
NIS2 5 · GDPR 10
NIS2 5 · GDPR 10
Racine St. Catherine's is a well-established Catholic high school located in Racine, Wisconsin, with a history dating back to 1864. The institution focuses on providing quality secondary education grounded in faith, community, and academic excellence. It serves students, parents, alumni, and supporters within the local and regional community, operating as a non-profit educational entity under the Siena Catholic Schools umbrella. The website reflects a consistent brand identity and offers comprehensive information about academics, admissions, athletics, faith, and community services.
- UUNEC
unec.com.mt
Energy · Malta
45High
NIS2 5 · GDPR 0
NIS2 5 · GDPR 0
UNEC is a Malta-based company specializing in the supply and servicing of industrial equipment, commercial vehicles, construction machinery, power generation solutions, and warehousing systems. It acts as the official representative for major brands such as Caterpillar and DAF, positioning itself as a key player in the local industrial and transportation sectors. The company offers a comprehensive range of services including leasing, rentals, and maintenance, targeting industrial and commercial clients in Malta. The website reflects a professional business with consistent branding and clear service offerings. Technically, the site is built on WordPress using Elementor, with modern front-end libraries and moderate performance. However, there is room for improvement in security posture, including the implementation of security headers and HTTPS verification. Privacy compliance is limited, with no visible privacy or cookie policies, which may pose regulatory risks. Overall, UNEC presents a credible and established business with a solid digital presence but should enhance its security and privacy practices to align with best practices and regulatory requirements.
Dragonara Gaming Limiteddragonaracasino.com
Hospitality · Malta
54Medium
NIS2 0 · GDPR 43
NIS2 0 · GDPR 43
Dragonara Casino is Malta's premier and oldest casino, established in 1964, offering a comprehensive range of gaming and hospitality services including live poker, table games, slots, and fine dining. The website reflects a mature business with a strong market position in the hospitality sector, targeting tourists and gaming enthusiasts. The digital infrastructure is built on WordPress with the Avada theme, integrating modern analytics and security tools such as Google reCAPTCHA Enterprise and Microsoft Clarity. The site is well-optimized for mobile and accessibility, providing a professional user experience. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. The business demonstrates compliance with GDPR and responsible gaming standards, supported by Malta Gaming Authority licensing and partnerships with BeGambleAware.org. Overall, the website and business present a trustworthy and professional image with solid technical and security foundations.
- Karkanja Ltd.
karkanja.com
Real Estate · Malta
59Medium
NIS2 5 · GDPR 40
NIS2 5 · GDPR 40
Karkanja Ltd. is a Malta-based property development company specializing in real estate projects in Gozo and Malta. Established in 2000, the company focuses on delivering quality residential and commercial properties directly to buyers. Their website reflects a professional presence with clear navigation, property search functionality, and detailed information about buying processes and government schemes. The company targets property buyers and investors interested in the Maltese real estate market. Technically, the website is built on WordPress with modern JavaScript libraries and tracking tools such as Google Analytics, Facebook Pixel, and AddThis, indicating a mature digital marketing approach. Security-wise, the site uses HTTPS and cookie consent mechanisms, but lacks explicit security policy or incident response information. Overall, the site is trustworthy and well-maintained, with room for improvement in formal security disclosures and contact transparency.
TerraCoreterracoregeo.com
Energy · South Africa
51Medium
NIS2 5 · GDPR 43
NIS2 5 · GDPR 43
TerraCore is a specialized technology company focused on providing advanced hyperspectral imaging solutions for mineral analysis, primarily serving the mining and energy sectors. The company positions itself as a world leader in hyperspectral core imaging, offering a range of services including onsite and in-lab imaging, equipment rental and sales, consulting, and digital core storage. Their technology enables clients to gain detailed mineralogical insights to optimize exploration and production processes. The website reflects a professional and content-rich digital presence with clear navigation and strong branding. Technically, the website is built on WordPress using Elementor and Astra theme, hosted likely on GoDaddy infrastructure. It employs modern web technologies and integrates Google Tag Manager for analytics. The site is mobile-optimized and performs well, with good SEO and accessibility features. Security-wise, HTTPS is enforced and anti-spam measures are in place, but there is room for improvement in security headers and privacy compliance mechanisms. The security posture is solid with no visible vulnerabilities or exposed sensitive data, but the absence of cookie consent and detailed security policies indicates partial compliance with privacy regulations like GDPR. The domain registration details align well with the business claims, supporting the legitimacy of the website. Overall, TerraCore demonstrates a mature digital presence with strong business credibility but could enhance privacy and security transparency. Strategic recommendations include implementing a cookie consent mechanism, publishing comprehensive security and incident response policies, adding terms of service, and enhancing security headers to strengthen trust and compliance.
Aristocrat Interactiveaspireglobal.com
Technology · Australia
56Medium
NIS2 0 · GDPR 58
NIS2 0 · GDPR 58
Aristocrat Interactive is a newly established but enterprise-scale company specializing in regulated Real Money Gaming (RMG) markets. It operates as a subsidiary of Aristocrat Leisure Limited and offers a comprehensive suite of online gaming solutions including iLottery, iGaming, sports betting, content aggregation, and casino management systems. The company targets regulated market operators, government lotteries, and casino operators, positioning itself as a global leader with a strong brand and extensive portfolio of gaming titles. Technically, the website is built on WordPress with Elementor and uses modern JavaScript libraries for enhanced user experience. The site is well-optimized for SEO, mobile-friendly, and includes accessibility features. Security posture is good with HTTPS enforced and consent management implemented, though explicit security headers and a public security policy could improve it further. Overall, the domain registration and business information are consistent and trustworthy, supporting a high legitimacy score.
Kogi Försäljnings ABkogi.se
Hospitality · Sweden
31High
NIS2 0 · GDPR 0
NIS2 0 · GDPR 0
Kogi Försäljnings AB is a well-established Swedish company specializing in professional kitchen equipment for restaurants and large kitchens, with a history dating back to the 1940s. The company operates primarily in the hospitality sector, offering a range of services including project coordination, interior design, visualization, graphic design, inventory management, delivery, financing, and service support. It holds a strong market position as a leading Nordic player and is part of the Hospitio group, which enhances its credibility and reach. Technically, the website is built on WordPress using the Avada theme and WooCommerce for e-commerce capabilities. It employs common web technologies such as jQuery and integrates Google Analytics and Jetpack Stats for tracking and analytics. The site is moderately optimized for performance and mobile devices, with a good user experience and clear navigation. However, accessibility features are basic, and SEO optimization is at a basic level. From a security perspective, the site uses HTTPS but lacks important security headers and does not provide a security.txt or vulnerability disclosure policy. Privacy and cookie policies are missing, which is a compliance gap, especially under GDPR. Contact information is clearly provided, but no incident response or security policy details are available. Overall, the security posture is moderate but could be improved with standard best practices. The overall risk assessment indicates a legitimate and professional business with a solid digital presence but with room for improvement in privacy compliance and security hardening. Strategic recommendations include implementing privacy and cookie policies with consent mechanisms, adding security headers, publishing a security.txt file, and enhancing accessibility and SEO practices.
Camilleri Paris Modecamilleriparismode.com
Retail · Malta
41High
NIS2 0 · GDPR 48
NIS2 0 · GDPR 48
Camilleri Paris Mode is a luxury retail business based in Malta specializing in high-end fabrics, homeware, furniture, and perfumery products. The company operates both physical stores and an e-commerce platform, targeting discerning customers seeking quality and exclusivity. The website is built on WordPress with WooCommerce and uses modern web technologies including Elementor and Slider Revolution to provide a rich user experience. Social media integration and product showcases enhance brand engagement. Security posture is solid with HTTPS and some security best practices, though there is room for improvement in security headers and explicit policies. Privacy compliance is basic with cookie policy present but lacking consent mechanisms. Overall, the site is professional, trustworthy, and well-positioned in its market segment.
- DDefault Web Site Page
smsmt.com
Other
49High
NIS2 0 · GDPR 25
NIS2 0 · GDPR 25
The website smsmt.com currently displays a default cPanel error page indicating server misconfiguration or DNS issues, rendering the site inaccessible for normal users. No business content, contact information, or policies are present, which suggests the site is either inactive or improperly configured. The hosting provider is identified as Efront via a link on the page. The lack of HTTPS and security headers further diminishes the site's security posture. Overall, the website does not provide any meaningful information about the business or services it may represent, resulting in a very low trust and credibility score.
MediaLinkmedialink.com
Media
58Medium
NIS2 0 · GDPR 25
NIS2 0 · GDPR 25
MediaLink is a well-established management consulting firm specializing in media, advertising, investment, and emerging technologies. The company positions itself as a strategic partner helping businesses accelerate change and growth. The website reflects a professional and modern digital presence built on React and Gatsby, optimized for performance, SEO, and mobile responsiveness. Security posture is solid with HTTPS enforced and secure form handling, though explicit security policies and incident response information are not published. Privacy and cookie policies are present and indicate GDPR compliance. Overall, the website demonstrates high professionalism and trustworthiness, with clear business focus and consistent branding.
E&S Groupellulschranz.com
Finance · Malta
39High
NIS2 0 · GDPR 55
NIS2 0 · GDPR 55
E&S Group is a Malta-based professional services firm specializing in corporate, tax, advisory, and regulatory services. Established in 2016, the company serves individuals and businesses both locally and internationally, offering a wide range of services including company formation, tax advisory, gaming licenses, residency and citizenship programs, and blockchain consultancy. The firm positions itself as a trusted partner in the financial and legal sectors, leveraging a strong digital presence and comprehensive service portfolio. Technically, the website is built on WordPress using the Salient theme and WPBakery Page Builder, enhanced with performance optimization tools like WP Rocket. It employs modern web technologies including jQuery, Revolution Slider, and integrates multiple marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and LinkedIn Insight Tag. The site is well-optimized for mobile devices, fast loading, and accessible, with structured data for SEO. From a security perspective, the site enforces HTTPS, uses security headers, and employs best practices like lazy loading and script deferral. No critical vulnerabilities or exposed sensitive data were detected. Privacy and cookie policies are present and GDPR compliant, with clear contact information available. The domain registration details are consistent with the business claims, enhancing trustworthiness. Overall, E&S Group's website demonstrates a high level of professionalism, technical maturity, and security awareness, making it a reliable platform for its target audience. Strategic recommendations include enhancing CSP implementation, adding explicit incident response contacts, and maintaining regular security updates.
- DDAVID GRISCTI & ASSOCIATES
dglawfirm.com.mt
Finance · Malta
46High
NIS2 5 · GDPR 3
NIS2 5 · GDPR 3
DAVID GRISCTI & ASSOCIATES is a small law firm specializing in Financial Services Law based in Malta, targeting clients requiring legal expertise in banking, trust, company, and investment services law. The firm emphasizes personalized and tailored legal services, positioning itself as a reputable player within the EU financial services jurisdiction. The website content is basic but provides a clear overview of the firm's focus areas and affiliations with recognized industry bodies, enhancing its credibility. Technically, the website uses basic JavaScript and static HTML without modern CMS or frameworks. The site lacks HTTPS, security headers, and cookie consent mechanisms, indicating a low level of digital maturity and security posture. Performance and mobile optimization are moderate to poor, with outdated coding practices observed. From a security perspective, the absence of HTTPS and security headers presents significant risks, including data interception and lack of protection against common web attacks. No forms or data collection mechanisms were detected, reducing exposure but also limiting user engagement. Privacy compliance is minimal, with a privacy policy present but no cookie or terms of service policies. No incident response or security policies are disclosed. Overall, the website presents moderate business credibility but requires urgent improvements in security and privacy compliance to reduce risk and enhance trustworthiness. Strategic recommendations include implementing HTTPS, adding security headers, updating technical infrastructure, and enhancing privacy and cookie policies.
Cornerstone Pentecostal Churchcornerstonepentecostal.org.uk
Non-profit · United Kingdom
39High
NIS2 5 · GDPR 60
NIS2 5 · GDPR 60
Cornerstone Pentecostal Church is a small non-profit religious organization based in the United Kingdom, providing Pentecostal Christian services, community outreach, and online media content. Their website serves as a hub for live and on-demand services, children and youth programs, and community engagement through a quarterly e-magazine. The church targets local community members and online viewers interested in Pentecostal teachings. Technically, the website is built on WordPress using the Astra theme and Elementor page builder, with additional plugins for SEO (Rank Math), cookie consent, and media sliders. Hosting appears to be provided by SiteGround. The site demonstrates good mobile optimization, SEO practices, and moderate performance. From a security perspective, the site enforces HTTPS, implements cookie consent mechanisms, and uses standard security headers. No critical vulnerabilities or exposed sensitive data were detected. However, explicit security policies and incident response information are absent, and no vulnerability disclosure or security.txt files are present. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, though it could improve transparency around security policies and incident response. The domain registration details align well with the organization's profile, supporting legitimacy and trustworthiness.
ThinkTalent Ltdthinktalent.com.mt
Education · Malta
37High
NIS2 0 · GDPR 3
NIS2 0 · GDPR 3
ThinkTalent Ltd is a Malta-based professional training and coaching company focused on developing essential skills for local businesses and professionals. With over 16 years of client history and recognized certifications such as OTHM and MFHEA licenses, the company offers a broad range of courses including sales, leadership, customer care, business English, and enforcement training. The website is built on the Odoo CMS platform, featuring a modern, responsive design with embedded multimedia content and clear navigation. Security posture is strong with HTTPS enforcement, CSRF protection on forms, and no exposed sensitive data. However, privacy compliance is limited by the absence of a cookie consent mechanism and a basic privacy policy lacking explicit GDPR statements. Overall, the site demonstrates high business credibility and trustworthiness but could improve privacy and compliance transparency.
- Avantech Limited
avantech.com.mt
Technology · Malta
62Medium
NIS2 0 · GDPR 63
NIS2 0 · GDPR 63
Avantech Limited is a Malta-based technology and retail company specializing in Canon cameras, scanners, copiers, office equipment, and software solutions. The company serves both local and international markets, offering a broad range of products and services including managed print services, equipment rental, and aftersales support. Their market position is that of a reputable and established local leader with a strong brand presence and ISO 9001:2015 certification. Technically, the website is built on a modern WordPress platform with WooCommerce and various plugins for e-commerce, forms, and analytics, demonstrating a mature digital infrastructure. Security measures include HTTPS, anti-spam protections, CAPTCHA on forms, and comprehensive cookie consent mechanisms, reflecting a good security posture. Overall, the site is professional, well-structured, and compliant with GDPR requirements, supporting a high level of trustworthiness.
IDEA Group 2024ideamalta.com
Education · Malta
51Medium
NIS2 5 · GDPR 28
NIS2 5 · GDPR 28
IDEA Group is a Malta-based consultancy and education provider with a 20-year history, offering a broad suite of services including SME support, digital consultancy, education, training, research, business strategy, and care services. The company targets SMEs, family businesses, and professionals seeking tailored business and educational solutions. Their market position is that of an established, trusted local player with a medium-sized operation and a consistent brand presence. Technically, the website is built on WordPress with modern plugins and frameworks such as Elementor and Slider Revolution, hosted likely on GoDaddy infrastructure. The site is moderately performant, mobile-optimized, and SEO-friendly. Security-wise, HTTPS is enforced and Google reCAPTCHA is implemented, but the site lacks explicit security headers and a cookie consent mechanism, which are areas for improvement. Overall, the website is professional, trustworthy, and compliant with GDPR to a basic extent, with clear contact channels and social media presence. The domain age and WHOIS data align well with the company's stated history, supporting legitimacy.
شركة قو للاتصالاتgo.com.sa
Telecommunications · Saudi Arabia
58Medium
NIS2 0 · GDPR 10
NIS2 0 · GDPR 10
GO Telecom is a telecommunications company based in Saudi Arabia, offering high-speed internet services including fiber and fixed wireless internet, along with digital services such as quick payment and order tracking. The company targets individual consumers and businesses within the Saudi market, positioning itself as a competitive local provider with a focus on modern connectivity solutions. Technically, the website is built on a modern Angular framework with Bootstrap for responsive design, integrating Google Tag Manager and Analytics for marketing and tracking purposes. Security-wise, the site enforces HTTPS and uses some security best practices but lacks a fully implemented Content-Security-Policy and does not provide explicit vulnerability disclosure or incident response information. Overall, the website is professional, user-friendly, and trustworthy, though improvements in privacy compliance and security headers are recommended.
Consulting Engineers Group Ltd.cegindia.com
Transportation · India
33High
NIS2 5 · GDPR 10
NIS2 5 · GDPR 10
Consulting Engineers Group Ltd. (CEG) is a well-established international infrastructure engineering consulting firm founded in 1984, specializing in a wide range of sectors including highways, bridges, railways, metros, tunnels, airports, buildings, water resources, and urban development. The company operates globally with over 1300 professionals and has a strong market position supported by ISO 9001:2015 certification and a broad portfolio of engineering and consulting services. The website reflects a professional and content-rich presence targeting government agencies, infrastructure developers, and urban planners. Technically, the website is built on WordPress using common plugins and libraries such as jQuery, Font Awesome, and Contact Form 7. The site shows moderate performance and good mobile optimization but lacks advanced accessibility features. SEO practices are adequately implemented with proper meta tags and structured navigation. From a security perspective, the site lacks visible security headers and vulnerability disclosure mechanisms, and no privacy or cookie policies are present, indicating compliance gaps especially regarding GDPR. The site uses HTTPS as indicated by canonical links but no explicit SSL configuration details are provided. Content protection measures like disabling right-click and keyboard shortcuts are implemented. Overall, the website is trustworthy and professional but would benefit from enhanced security practices, privacy compliance improvements, and explicit incident response information to strengthen its security posture and regulatory adherence.
- EERROR: The request could not be satisfied
e-rewards.com
Other
49High
NIS2 0 · GDPR 25
NIS2 0 · GDPR 25
The website e-rewards.com is currently inaccessible due to a 403 error generated by AWS CloudFront, indicating that requests are blocked likely by a Web Application Firewall or configuration error. As a result, no meaningful content, metadata, or business information is available for analysis. The lack of accessible content prevents assessment of the company's business model, services, or compliance posture. Technically, the site is hosted behind Amazon CloudFront, but no further infrastructure or technology details can be determined. Security posture cannot be evaluated due to absence of accessible data, and no privacy or security policies are found. Overall, the site is effectively blocked from external analysis, resulting in a very low AI score and inability to provide comprehensive insights.
Dingli & Dinglidingli.com.mt
Other · Malta
36High
NIS2 5 · GDPR 18
NIS2 5 · GDPR 18
Dingli & Dingli is a well-established boutique law firm based in Malta, operating in its fourth generation and authorized by the Malta Financial Services Authority to provide Company Service Provider services. The firm specializes in a broad range of legal areas including corporate, shipping, tax, and litigation, supported by subsidiary companies offering fiduciary and accounting services. The website reflects a professional and consistent brand image, targeting clients seeking specialized legal expertise in Malta. Technically, the website employs modern web technologies such as Bootstrap and jQuery, with good mobile optimization and moderate performance. Security posture is adequate with HTTPS enforced and cookie consent implemented, though it lacks explicit security policies and incident response information. Overall, the site demonstrates a high level of business credibility and trustworthiness, with minor areas for improvement in security transparency and compliance documentation.
- Zheta International
zhetainternational.com
Technology · Malta
48High
NIS2 0 · GDPR 25
NIS2 0 · GDPR 25
Zheta International is a boutique digital studio based in Malta specializing in website design, web development, and branding services. Positioned as a leading company in Malta within its niche, it targets businesses and individuals seeking professional digital presence solutions. The website reflects a professional and consistent brand image with clear service offerings and social media presence, although it lacks explicit contact details and formal privacy or cookie policies on the homepage. Technically, the website employs a modern front-end technology stack including Bootstrap, jQuery, Font Awesome, and other libraries to deliver a responsive and visually appealing user experience. SEO optimization is evident through meta tags and structured data, but accessibility features are basic. Performance is moderate with preloading of scripts and use of Google Fonts. From a security perspective, the site uses HTTPS and includes Google site verification, but lacks visible security headers such as CSP or HSTS in the provided data. No forms or input fields are present on the homepage, reducing immediate attack surface, but the absence of privacy and cookie policies and explicit consent mechanisms indicates compliance gaps. Google Analytics is used with a consent attribute, but no visible cookie banner or detailed privacy disclosures were found. Overall, the website is functional and professional but would benefit from enhanced privacy compliance, improved security header implementation, and clearer contact information to increase trust and meet regulatory requirements.
- The University of Sheffield
sheffield.ac.uk
Education · United Kingdom
65Medium
NIS2 5 · GDPR 63
NIS2 5 · GDPR 63
The University of Sheffield is a prestigious higher education institution based in the United Kingdom, recognized globally as a top-100 university and a member of the Russell Group. The website clearly targets prospective students, researchers, and business partners, offering comprehensive information on undergraduate, postgraduate, and research programs. The institution emphasizes its strong market position through awards and rankings, reinforcing its reputation for academic excellence and student experience. Technically, the website is built on Drupal 10, leveraging modern web technologies including FontAwesome for icons and OneTrust for cookie consent management. The site is well-optimized for mobile devices, accessible, and SEO-friendly, with a moderate performance profile. Hosting is managed via the university's own CDN, ensuring reliable delivery. From a security perspective, the site enforces HTTPS, implements cookie consent mechanisms, and includes security headers with nonce values for scripts. No critical vulnerabilities or exposed sensitive data were detected. However, explicit security policies and incident response contacts are not publicly available, representing an area for improvement. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations such as GDPR. The risk profile is low, with recommendations focusing on enhancing transparency around security policies and incident response to further strengthen user trust and compliance.
- HHelmerich & Payne, Inc.
kcadeutag.com
Energy · United States
61Medium
NIS2 5 · GDPR 63
NIS2 5 · GDPR 63
Helmerich & Payne, Inc. is a well-established enterprise in the energy sector specializing in drilling rig contracting and advanced drilling technologies. The company has a strong market position with a history dating back to 1920 and offers a broad range of drilling services including offshore, geothermal, land drilling, and managed pressure drilling. The website reflects a professional corporate presence with comprehensive content, clear navigation, and consistent branding. It also highlights recent acquisitions and subsidiaries such as KCA Deutag and Kenera, expanding its global footprint and service capabilities. Technically, the website employs modern analytics and marketing technologies including Google Tag Manager, LinkedIn Insight, StackAdapt, HubSpot, and OneTrust for cookie consent management. The site is mobile optimized, accessible, and SEO friendly, though the CMS and hosting provider are not explicitly identified. Performance is moderate with good technical implementation overall. From a security perspective, the site uses HTTPS with excellent SSL configuration and integrates cookie consent mechanisms compliant with GDPR. However, explicit security headers like Content-Security-Policy and incident response contacts are not found, indicating room for improvement in security transparency and readiness. No vulnerabilities or exposed sensitive data were detected. Overall, the website is trustworthy, professional, and compliant with privacy regulations, supporting the company's credibility and business operations effectively.
Thomas Smith & Co Ltdtcsmith.com
Transportation · Malta
57Medium
NIS2 0 · GDPR 55
NIS2 0 · GDPR 55
Thomas Smith & Co Ltd is a Malta-based company specializing in maritime-related services including express shipping, port agency, shipping logistics, and insurance brokerage. The company serves a broad range of clients including international brands and various vessel types, positioning itself as a reliable and established player in the transportation and insurance sectors. The website reflects a professional and consistent brand image with clear service offerings and subsidiary domains supporting its business model. Technically, the site is built on WordPress with Elementor and integrates modern tools such as Google Analytics and reCAPTCHA, indicating a moderate to good level of digital maturity. Security posture is adequate with HTTPS and basic protections, though there is room for improvement in security headers and incident response transparency. Privacy compliance is strong with clear policies and consent mechanisms. Overall, the site is trustworthy and well-maintained, supporting the company's market position effectively.
- Teaching Personnel Ltd.
teachingpersonnel.com
Education · United Kingdom
63Medium
NIS2 0 · GDPR 58
NIS2 0 · GDPR 58
Teaching Personnel Ltd. operates a professional recruitment and staffing platform focused on education sector jobs across England and Wales. The website offers job listings for educators and staffing solutions for schools, positioning itself as a flexible workforce partner. The company is part of the Supporting Education Group, reinforcing its market presence. The site is well-branded, with consistent messaging and trust indicators such as accreditations and social media integration. Technically, the website uses a modern JavaScript stack including RequireJS, jQuery, Google Tag Manager, Matomo analytics, and Google reCAPTCHA v3 for security. It is hosted on Azure CDN, ensuring reliable delivery. The site is mobile-optimized and accessible, with good SEO practices and performance considered moderate. Security posture is solid with HTTPS enforced and bot protection via reCAPTCHA. However, security headers are not explicitly detected, and no public security policy or incident response contacts are found. Privacy compliance is good, with clear privacy and cookie policies and consent mechanisms. Overall, the website presents a low-risk profile with strong business credibility and technical maturity. Strategic improvements in security headers and incident response transparency would enhance trust and compliance further.
- Kane County Government
countyofkane.org
Government · United States
53Medium
NIS2 0 · GDPR 10
NIS2 0 · GDPR 10
Kane County Government operates an official county government website serving residents, businesses, and visitors of Kane County, Illinois. The site provides a broad range of public services information including property tax, voter information, recycling, court resources, zoning petitions, and public meeting schedules. It also features media releases, emergency alerts, and social media integration to enhance community engagement. The website targets local citizens and stakeholders seeking government services and transparency. Technically, the website is built on Microsoft SharePoint with modern front-end technologies such as Bootstrap and jQuery. It integrates Google Analytics and Siteimprove for analytics and quality monitoring. The site is mobile responsive with basic accessibility features and moderate performance. However, it lacks advanced security headers and cookie consent mechanisms, which are important for compliance and security. From a security perspective, the site enforces HTTPS and uses form digest tokens to protect forms against CSRF attacks. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of security headers and vulnerability disclosure policies indicates room for improvement in security posture. The domain registration aligns well with the official government entity, supporting high legitimacy and trust. Overall, the website is professional, trustworthy, and functional with good content quality and user experience. Strategic improvements in privacy compliance and security best practices would enhance its security and regulatory posture, further strengthening public trust.
Liaco Limitedliaco.eu
Transportation · Malta
27High
NIS2 0 · GDPR 3
NIS2 0 · GDPR 3
Liaco Limited is a Malta-based vehicle distributor and importer with a long-standing history dating back to 1967. The company specializes in importing new vehicles and distributing them locally, with a focus on Subaru vehicles and related automotive services. Their market position is that of an established local player with over five decades of experience, targeting vehicle buyers and importers primarily in Malta. The website currently displays a maintenance message but provides comprehensive contact details and social media presence, indicating ongoing business operations. Technically, the website employs common tracking and marketing tools such as Google Analytics, Google Tag Manager, CookieYes for cookie consent, and Elfsight widgets. The site lacks advanced CMS or frameworks and shows basic mobile optimization and SEO practices. Performance is moderate, and accessibility features are minimal. No structured data or advanced SEO tags were detected. From a security perspective, the site uses HTTPS (assumed from external scripts loaded via HTTPS), but no explicit security headers were identified in the provided data. There is no published security policy or incident response information, and no vulnerability disclosure or security.txt file was found. Cookie consent is implemented, supporting privacy compliance to a basic degree. The absence of terms of service and limited privacy policy details suggest room for improvement in compliance and transparency. Overall, the website is functional but basic, with moderate trustworthiness and business credibility. The domain uses privacy protection for WHOIS data, which is common and justified for this business type. The AI score reflects moderate content quality, technical implementation, security posture, privacy compliance, and business credibility. Strategic improvements in security policies, compliance documentation, and technical modernization would enhance the site's professionalism and trust.
- Wwebgeardefault
pavilion.com.mt
Technology
30High
NIS2 0 · GDPR 0
NIS2 0 · GDPR 0
pavilion.com.mt is a website operated by 'webgeardefault', offering domain registration and various web hosting services including shared, semi-dedicated, and dedicated hosting solutions. The business targets clients seeking affordable hosting and domain services, positioning itself as a budget provider with nearly a decade of experience. The website content is minimal and primarily serves as a placeholder with basic service descriptions and pricing information. Technically, the site uses older JavaScript libraries such as jQuery 1.6.2 and includes some legacy support scripts like HTML5shiv. There is no evidence of a modern CMS or advanced frameworks. Security posture is weak, with no HTTPS detected in the provided data, absence of security headers, and no privacy or cookie policies, which raises compliance concerns. Contact information and incident response details are missing, limiting trust and transparency. Overall, the site is functional but lacks modern security and privacy best practices, impacting its credibility and user trust.
Ask.Meask.me
Other · United States
56Medium
NIS2 5 · GDPR 28
NIS2 5 · GDPR 28
Ask.Me is a consulting business specializing in growth strategy for remodeling companies with revenues between $5M and $50M. The company focuses on shifting client perception to attract higher quality jobs and clients rather than traditional marketing tactics. The website is built on the Kajabi platform, leveraging modern web technologies and analytics tools such as Google Analytics and RudderStack. The site is professionally designed with clear messaging and calls to action, targeting a niche audience of remodeling business owners seeking to improve their market positioning and client quality. Security posture is basic with HTTPS enabled and CSRF tokens in forms, but lacks advanced security headers and explicit privacy compliance mechanisms such as cookie consent. No direct contact emails or phone numbers are provided, relying on a contact form for lead capture. The domain registration is privacy protected, which is typical for consulting businesses, and no suspicious patterns were detected. Overall, the website is functional, moderately secure, and professionally presented but could improve in privacy compliance and security best practices.
- GGoDaddy.com LLC
omsme.com
Technology · United States
46High
NIS2 0 · GDPR 28
NIS2 0 · GDPR 28
The website omsme.com is a parked domain page managed by GoDaddy.com LLC, serving as a placeholder to advertise domain availability for resale. There is no active business content, contact information, or services offered on this domain. The page includes minimal branding consistent with GoDaddy's domain parking platform and integrates third-party advertising and review widgets such as Google AdSense and Trustpilot. Technically, the site uses modern JavaScript frameworks (likely React) and external scripts but lacks HTTPS and security headers, indicating a basic security posture typical for parked domains. Privacy compliance is minimal with a placeholder privacy policy link and a cookie consent banner implemented via TrustArc/Truste. Overall, the site is low in content quality, business credibility, and security maturity, reflecting its purpose as a parked domain rather than an operational business website.
Government · Italy
56Medium
NIS2 5 · GDPR 43
NIS2 5 · GDPR 43
The Istituto Nazionale di Oceanografia e di Geofisica Sperimentale (OGS) is a medium-sized Italian public research institute specializing in oceanography and experimental geophysics. The website reflects a well-established organization with a clear focus on scientific research, innovation, and public dissemination. It targets researchers, government bodies, and the general public interested in marine and earth sciences. The site is professionally designed with excellent content quality, clear navigation, and multilingual support, enhancing accessibility and user experience. Technically, the website is built on Drupal 9, leveraging modern web technologies such as Bootstrap and Matomo for analytics, indicating a mature digital infrastructure. Performance is moderate with good mobile optimization and accessibility features. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though security headers and explicit incident response policies are lacking. Privacy compliance is strong with a comprehensive privacy and cookie policy, though a cookie consent mechanism is not implemented. Contact information is clearly presented, including a dedicated Data Protection Officer page, reinforcing trust and compliance. The domain registration data aligns with the organization's public profile, supporting legitimacy. Overall, the website demonstrates a solid security and compliance posture with room for improvement in security headers and incident response transparency. The digital maturity and business credibility are high, making it a trustworthy source for its audience.
- GGoDaddy.com LLC
ielsmalta.com
Other · United States
48High
NIS2 0 · GDPR 28
NIS2 0 · GDPR 28
The website ielsmalta.com is currently a parked domain hosted by GoDaddy.com LLC, serving as a placeholder with no active business content or services. The page primarily aims to attract potential domain buyers and investors. The presence of GoDaddy branding and Trustpilot widget indicates a standard domain parking setup without direct commercial activity. Technically, the site uses a minimal React-based frontend with external scripts for advertising and consent management. However, it lacks HTTPS and security headers, which are critical for modern web security standards. Privacy compliance is basic, relying on GoDaddy's privacy policy and TrustArc consent mechanisms. Overall, the site has a low content and business credibility score due to the absence of meaningful content or contact information.
- VValletta Legal
vallettalegal.com
Other · Malta
53Medium
NIS2 0 · GDPR 40
NIS2 0 · GDPR 40
Valletta Legal is a Malta-based law firm offering a broad range of legal services from its headquarters in Valletta, Malta's capital and economic center. The firm targets individuals, businesses, and organizations both locally and internationally, providing expert legal guidance across multiple disciplines including arbitration, commercial law, compliance, and corporate services. The website reflects a professional and consistent brand image with clear navigation and detailed service and team information. Technically, the site is built on WordPress using Elementor and integrates SEO and analytics tools, hosted likely on WPEngine. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response information are absent. Privacy compliance is partially addressed via cookie consent but lacks a visible privacy policy or terms of service. WHOIS data aligns well with the business claims, supporting legitimacy. Overall, the site is professional and trustworthy but could improve privacy and security transparency.
AMRO BALTIC, SIAprintit.lv
Retail · Latvia
54Medium
NIS2 5 · GDPR 63
NIS2 5 · GDPR 63
AMRO BALTIC, SIA is a Latvian-based company specializing in providing retail and business equipment solutions including cash registers, POS systems, label printers, cash handling devices, and customer service technologies. The company targets businesses requiring modern retail and cash management solutions and holds a solid market position supported by certifications such as ISO 9001 and verified credit reports. Their website reflects a mature digital presence built on WordPress with WooCommerce, enhanced by SEO and user experience optimizations. The technical infrastructure leverages modern plugins and Cloudflare for security and performance. Security posture is strong with HTTPS enforcement, comprehensive cookie consent mechanisms, and no visible vulnerabilities. Privacy compliance is well addressed with detailed cookie and privacy policies and GDPR-aligned consent management. Overall, the website demonstrates professionalism, trustworthiness, and a commitment to regulatory compliance.
- Fonicom Limited
fonicom.com
Technology · Malta
40High
NIS2 35 · GDPR 28
NIS2 35 · GDPR 28
Fonicom Limited is an established ICT solutions provider based in Malta, specializing in systems integration, cloud services, data center solutions, and software development. The company partners with major technology vendors such as Dell, Cisco, Microsoft, Google, and Veeam, positioning itself as a trusted provider in the technology sector. Their offerings include managed services, consulting, IT procurement, and training, targeting businesses seeking to modernize and secure their IT infrastructure. The website reflects a medium-sized enterprise with a professional digital presence and a focus on business clients. Technically, the website is built on WordPress with a modern tech stack including jQuery, Slider Revolution, and Google Analytics. It is mobile-optimized and SEO-friendly, though performance is moderate. Security measures include HTTPS and Google reCAPTCHA on forms, but lack of security headers and cookie consent mechanisms indicate room for improvement in compliance and security posture. The security posture is adequate with no visible vulnerabilities or exposed sensitive data. However, the absence of explicit security policies and incident response information suggests limited transparency in security governance. Privacy compliance is basic, with a privacy policy present but no cookie consent banner or GDPR-specific indicators. Overall, the website is trustworthy and professional, suitable for its business audience. Strategic enhancements in security headers, privacy compliance, and incident response disclosures would strengthen its security posture and regulatory adherence.
- martin xuereb & associates
mxa.com.mt
Real Estate · Malta
45High
NIS2 0 · GDPR 0
NIS2 0 · GDPR 0
Martin Xuereb & Associates is a small architecture and interior design firm based in Sliema, Malta. The company offers a diverse range of services including architecture, interior design, restoration, renovations, landscaping, structural design, and large scale projects. Their website reflects a professional presence with a focus on showcasing recent projects and providing a contact form for service requests. The firm targets clients looking for bespoke architectural and design solutions in Malta. Technically, the website is built on the Wix platform using modern web technologies such as React and Webpack, with integrations like Wix Pro Gallery and Wix Chat enhancing user engagement. Performance is moderate with basic mobile optimization and accessibility features. Security posture is good with HTTPS enforced and some security hardening scripts, but lacks explicit security policies or incident response information. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is professional and credible but would benefit from enhanced privacy and security disclosures.
LeoVegas Gaming plcroyalpanda.com
Other · Malta
60Medium
NIS2 5 · GDPR 58
NIS2 5 · GDPR 58
Royal Panda is a well-established online casino operated by LeoVegas Gaming plc, licensed by the Malta Gaming Authority. The platform offers a wide variety of casino games including slots, live casino, and progressive jackpots, targeting adult players seeking a secure and entertaining gambling experience. The website is built on modern technologies such as React and Next.js, ensuring a fast, responsive, and accessible user experience across devices. Security measures are robust, with HTTPS enforced, comprehensive security headers, and no visible vulnerabilities in the content. Privacy compliance is strong, with clear policies and consent mechanisms in place. Overall, Royal Panda demonstrates a mature digital presence with a strong focus on responsible gaming and customer support.
Genthermgentherm.com
Manufacturing · United States
64Medium
NIS2 0 · GDPR 58
NIS2 0 · GDPR 58
Gentherm is a global leader specializing in innovative thermal management and pneumatic comfort technologies primarily serving the automotive industry and medical patient temperature management sectors. The company positions itself as a market leader with a strong focus on health, wellness, comfort, and energy efficiency. Their website reflects a professional and comprehensive digital presence, targeting automotive manufacturers, healthcare providers, investors, and potential employees. Key services include automotive climate control solutions, medical warming and cooling systems, and battery performance technologies. Technically, the website is built on WordPress with modern frameworks such as Bootstrap and utilizes advanced analytics and marketing tools including Google Analytics, Microsoft Clarity, and LinkedIn Insight Tag. The site demonstrates good mobile optimization, accessibility, and SEO practices, supported by a robust cookie consent mechanism ensuring GDPR compliance. From a security perspective, the site enforces HTTPS, employs reCAPTCHA for form protection, and integrates cookie consent with granular user controls. While no critical vulnerabilities or exposed sensitive data were detected, the absence of a dedicated security policy or vulnerability disclosure page suggests room for improvement in transparency and incident response readiness. Overall, Gentherm's website reflects a mature and trustworthy online presence consistent with a large enterprise. Strategic recommendations include publishing explicit security and incident response policies, enhancing vulnerability disclosure transparency, and continuous monitoring of third-party scripts to maintain security posture.
Agence RnDrnd.fr
Technology · France
48High
NIS2 0 · GDPR 0
NIS2 0 · GDPR 0
Agence RnD is an independent French digital agency founded in 2002, specializing in digital strategy, web development, design, and audience acquisition. With a team of approximately 25 employees and offices in Paris and Limoges, the agency positions itself as a connector helping businesses build a comprehensive digital presence. The website reflects a mature digital infrastructure using WordPress CMS, modern JavaScript libraries, and analytics tools such as Google Analytics and Matomo. Privacy and cookie consent are well managed with a comprehensive policy and a consent mechanism implemented via the tarteaucitron plugin. Security posture is solid with HTTPS enforced and reCAPTCHA protecting forms, though additional security headers could enhance protection. Overall, the site is professional, user-friendly, and trustworthy, with clear contact information and active social media presence.