Security reports directory
150,193 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,193001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
138,701–138,750 of 150,193
MeDirect Bank (Malta) plcmedirect.com.mt
Finance · Malta
59Medium
NIS2 5 · GDPR 48
NIS2 5 · GDPR 48
MeDirect Bank (Malta) plc is a regulated financial institution offering a comprehensive suite of online banking, investment, mortgage, and loan services primarily targeting retail and business customers in Malta and the broader EU market. The company positions itself as a market leader in digital banking with a strong emphasis on user control and convenience through its mobile app and online platform. The website reflects a mature digital presence with clear navigation, professional design, and extensive service offerings. Technically, the site is built on WordPress with Elementor and integrates modern analytics and marketing tools such as Matomo and VWO, alongside robust cookie consent mechanisms compliant with GDPR. Security posture is strong with HTTPS enforced and use of reCAPTCHA, though some security headers could be improved. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with regulatory requirements.
ST&R Limitedstarlimited.co.uk
Finance · United Kingdom
46High
NIS2 0 · GDPR 28
NIS2 0 · GDPR 28
ST&R Limited is a UK-based independent insurance broker authorized by the Financial Conduct Authority (FCA). The company offers a range of insurance products including life, home, health, critical illness, income protection, and specialized policies for over 45s. Positioned as a customer-centric broker, ST&R emphasizes personalized advice and competitive insurance solutions. The website reflects a professional and consistent brand image with clear navigation and relevant content targeting individuals and businesses seeking insurance coverage in the UK. Technically, the website is built on WordPress using Elementor, with integrations for SEO (Yoast), analytics (Google Analytics, Facebook Pixel), and customer reviews (Trustpilot). The site is mobile-optimized and performs moderately well, with good SEO practices and basic accessibility features. Security posture is adequate with HTTPS enforced and form validation implemented, though there is room for improvement in security headers and published security policies. Overall, the security posture is solid with no critical vulnerabilities detected. Privacy compliance is supported by a clear privacy policy and cookie consent mechanism, though explicit incident response and vulnerability disclosure policies are absent. The domain WHOIS data aligns with the business claims, indicating legitimacy and consistency. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and improving accessibility compliance to further strengthen trust and compliance.
Lovin Maltalovinmalta.com
Media · Malta
48High
NIS2 0 · GDPR 58
NIS2 0 · GDPR 58
Lovin Malta is a leading digital media platform focused on delivering news, lifestyle, entertainment, and cultural content relevant to Malta and Gozo. Established in 2019, it has positioned itself as a prominent local media outlet with a strong online presence and active engagement across multiple social media channels. The website offers a broad range of content including news, opinion pieces, food, music, and video series, catering to residents and visitors interested in Maltese affairs and culture. Technically, the site is built on WordPress with modern web technologies and integrates various advertising and analytics tools to support its business model. Security-wise, the site enforces HTTPS, employs security headers, and provides clear privacy and cookie policies with consent mechanisms, reflecting a mature approach to user privacy and data protection. No critical vulnerabilities or blocking mechanisms were detected, indicating a stable and secure platform. Overall, Lovin Malta demonstrates a strong digital maturity with good content quality, technical implementation, and business credibility, making it a trustworthy source of information and advertising in the Maltese market.
MCASTmcast.edu.mt
Education · Malta
55Medium
NIS2 35 · GDPR 55
NIS2 35 · GDPR 55
MCAST (Malta College of Arts, Science & Technology) is a prominent public vocational and higher education institution in Malta, offering a broad spectrum of academic and professional courses including full-time, part-time, online learning, and research programs. The institution targets students locally and internationally, providing comprehensive educational services and student support. The website reflects a mature digital presence with structured navigation, detailed course information, and active event promotion. Technically, the website is built on WordPress with modern plugins and technologies such as WPBakery Page Builder, Google Analytics, and Facebook Pixel for tracking. It demonstrates good mobile optimization and accessibility features, alongside a cookie consent mechanism compliant with GDPR. The site uses HTTPS with a good SSL configuration, though some security headers could be improved. From a security perspective, the site shows a solid posture with no critical vulnerabilities detected. Privacy policies and cookie management are implemented effectively, supporting compliance with data protection regulations. The WHOIS data aligns with the website's claims, confirming legitimacy and consistent registration details. Overall, MCAST's website is professional, secure, and user-friendly, supporting its role as a leading educational institution in Malta. Strategic improvements in security headers and incident response visibility could further enhance its security maturity.
- MMalta Stock Exchange
borzamalta.com.mt
Finance · Malta
59Medium
NIS2 27 · GDPR 20
NIS2 27 · GDPR 20
Malta Stock Exchange (MSE) is the primary financial market operator in Malta, providing regulated markets for equities, corporate bonds, government stocks, and other securities. The website offers comprehensive market data, latest news, training courses, and official announcements, positioning MSE as a key player in the Maltese financial sector. The platform targets investors, issuers, and financial professionals seeking detailed and timely market information. Technically, the website employs modern technologies such as Alpine.js, Axios, Highcharts, and Tailwind CSS, ensuring a responsive and interactive user experience across devices. Security measures include HTTPS, appropriate security headers, and no visible vulnerabilities, reflecting a strong security posture. However, the absence of an explicit cookie consent mechanism indicates a potential compliance gap with privacy regulations. Overall, the website is professional, content-rich, and trustworthy, supporting MSE's market position and service offerings.
Verdala International Schoolverdala.org
Education · Malta
62Medium
NIS2 5 · GDPR 58
NIS2 5 · GDPR 58
Verdala International School is a well-established international educational institution based in Malta, offering a range of IB programmes from elementary through high school. The school emphasizes inclusivity, diversity, and academic excellence, targeting families seeking quality international education. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content relevant to its audience. Technically, the site uses Mason CMS with modern web technologies such as jQuery, FontAwesome, and Swiper.js, providing good mobile optimization and accessibility. Security posture is solid with HTTPS enforced and cookie consent mechanisms implemented, though there is room for improvement in security headers and incident response transparency. Overall, the domain registration and WHOIS data align well with the school's identity, supporting legitimacy and trustworthiness.
England Insuranceengland.com.mt
Finance · Malta
32High
NIS2 5 · GDPR 0
NIS2 5 · GDPR 0
England Insurance is a Malta-based insurance agency specializing in home, car, health, business, travel, and contractor insurance products. The company acts as an agent for MAPFRE Middlesea p.l.c., a regulated insurance provider authorized by the Malta Financial Services Authority. The website presents a professional image with clear navigation and a focus on customer engagement through quotes, callbacks, and online payments. Technically, the site is built on WordPress using the Divi theme, enhanced with SEO and analytics tools such as Yoast SEO, Google Analytics, and Google Tag Manager. Security measures include HTTPS enforcement, Google reCAPTCHA integration, and form security tokens, though some security headers are missing. Privacy and cookie policies are not explicitly found, indicating room for compliance improvement. Overall, the site is trustworthy and well-positioned in the Maltese insurance market but should enhance privacy transparency and security headers to strengthen its security posture.
Screen Maltamaltafilmcommission.com.mt
Media · Malta
53Medium
NIS2 0 · GDPR 0
NIS2 0 · GDPR 0
Screen Malta serves as the central hub for Malta's film industry, offering information on productions, incentives, and Malta's cinematic heritage. The website positions itself as a key promotional platform targeting film professionals and stakeholders interested in filming in Malta. The business model focuses on industry support and promotion rather than direct commercial transactions. Technically, the site is built on WordPress with modern plugins and frameworks, ensuring good mobile responsiveness and SEO optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though some improvements in security headers and plugin configurations are recommended. Overall, the site is professional and trustworthy with moderate risk exposure.
Other
29High
NIS2 5 · GDPR 0
NIS2 5 · GDPR 0
The website reflexpromotions.nl currently serves only a default Apache server page with the message 'Apache is functioning normally'. There is no active website content, metadata, or business information available. This indicates that the domain is either not yet developed or the website is down. The lack of HTTPS and security headers suggests a minimal security posture. No privacy or cookie policies are present, and no contact information is provided, which severely limits trust and compliance. Overall, the site is not operational as a business-facing website at this time. From a technical perspective, the site is hosted on an Apache server but lacks any detectable CMS, frameworks, or modern web technologies. Performance and accessibility cannot be properly assessed due to the absence of content. Security posture is weak due to missing HTTPS and security headers. There are no signs of analytics or advertising technologies. Security evaluation highlights critical issues including the absence of HTTPS, no privacy or cookie policies, and no contact or business information. These factors contribute to a very low security and compliance score. The domain's WHOIS data was not provided, preventing further legitimacy analysis. Given the current state, the website poses a high risk for users due to lack of encryption and transparency. Strategic recommendations include deploying a proper website with HTTPS, adding privacy and cookie policies, publishing contact information, and implementing security best practices to improve trust and compliance.
Other
38High
NIS2 0 · GDPR 15
NIS2 0 · GDPR 15
The website for bostonpropertymanagementinc.net is currently inaccessible, displaying only a minimal placeholder message indicating the site is temporarily unavailable. Due to the lack of accessible content, no meaningful business information, metadata, or technical details can be extracted. The absence of privacy policies, contact information, or security features suggests the site is either offline or under maintenance. The technical infrastructure cannot be assessed, and no security posture can be established from the provided data. Overall, the site presents a high risk due to lack of transparency and security controls.
VIMCORvimcor.com
Finance · United States
41High
NIS2 5 · GDPR 28
NIS2 5 · GDPR 28
VIMCOR is a small, Pennsylvania-based registered investment advisor providing discretionary investment management, tax preparation, and payroll/bookkeeping services primarily targeting individuals and small businesses. The website is built on WordPress using the Customizr theme and Nimble Builder plugin, featuring a professional design and clear navigation. The technical infrastructure is modern but lacks advanced security headers and cookie consent mechanisms. Security posture is moderate with HTTPS enabled but missing some best practices. The domain uses privacy protection, which is common for small financial firms but reduces transparency. Overall, the website presents a credible business with room for improvement in privacy compliance and security hardening.
Cottey Collegecottey.edu
Education · United States
54Medium
NIS2 5 · GDPR 33
NIS2 5 · GDPR 33
Cottey College is a well-established independent women's liberal arts college located in Nevada, Missouri, with a history dating back to 1884. The institution offers a variety of bachelor's degree programs focused on personalized learning and leadership development. The website reflects a strong market position within the niche of women's education, supported by a large philanthropic organization, P.E.O. International. The site is professionally designed with excellent content quality, clear navigation, and strong branding consistency, targeting young women seeking a comprehensive liberal arts education. Technically, the website is built on WordPress with modern technologies such as React and integrates multiple analytics and user feedback tools, indicating a mature digital infrastructure. Security measures are robust, including HTTPS enforcement and appropriate security headers, though explicit security policies and incident response information are not present. Overall, the website demonstrates a high level of professionalism and trustworthiness, with room for improvement in security policy transparency and vulnerability disclosure.
- SSimboy Solutions
simboy.com
Other
31High
NIS2 0 · GDPR 10
NIS2 0 · GDPR 10
Simboy Solutions presents a minimalistic website with very limited publicly available information. The site primarily displays a company name and a single contact email address. There is no detailed business description, no privacy or cookie policies, and no terms of service. The technical infrastructure relies on older JavaScript libraries such as jQuery 2.1.1 and includes Google Analytics and Google Tag Manager for tracking. The website is served over HTTP, lacking HTTPS encryption, which significantly impacts its security posture. No security headers or certifications are evident, and no forms or interactive elements are present to assess data handling practices. Overall, the site appears to be a basic informational page with minimal digital maturity and security controls.
DAB Electronicadabelec.com
Media · Malta
52Medium
NIS2 5 · GDPR 55
NIS2 5 · GDPR 55
DAB Electronica is a Malta-based company specializing in audiovisual and broadcasting solutions, with a strong market position as a leading supplier and service provider in the Maltese broadcasting sector. Their services encompass AV equipment installation, LED screen sales, system integration, web streaming, and consultancy, targeting broadcasting companies, educational institutions, and corporate clients. The website reflects a mature digital presence built on WordPress with Divi theme, featuring modern UI elements and good mobile optimization. Security posture is adequate with HTTPS enforced and cookie consent implemented, though some security headers are missing and Google Analytics is not fully configured. Overall, the site is professional and trustworthy, with clear contact information and client testimonials enhancing credibility.
Betagy Ltdbetagy.com
Technology · Malta
33High
NIS2 0 · GDPR 10
NIS2 0 · GDPR 10
Betagy Ltd is a technology company specializing in scalable cloud-based software solutions and business intelligence for online and retail business operations. The company offers a comprehensive suite of services including omnichannel digital offerings, CRM, third-party integrations, and localization, targeting diverse sectors such as hospitality, entertainment, and finance. With offices in Malta and Serbia, Betagy leverages international talent to deliver customizable and integrated software platforms. Technically, the website uses modern web technologies including Bootstrap and jQuery, with a focus on responsive design and modular architecture. However, the site lacks visible security headers and published privacy or cookie policies, indicating areas for improvement in security and compliance. Overall, the website is professional and informative but would benefit from enhanced security practices and privacy compliance to strengthen trust and regulatory adherence.
DFK Maltadfkmalta.com
Finance · Malta
61Medium
NIS2 5 · GDPR 43
NIS2 5 · GDPR 43
DFK Malta is a well-established financial and business consultancy firm based in Malta, offering a comprehensive range of services including accounting, auditing, tax, business advisory, payroll, corporate, residence advisory, liquidation, HR consultancy, media advisory, and recruitment services. The company is part of the global DFK International network, enhancing its market position and expertise. The website reflects a professional and consistent brand image with clear navigation and relevant content targeting businesses in Malta. Technically, the site is built on WordPress with modern plugins and tools, providing moderate performance and good mobile optimization. Security posture is solid with HTTPS and cookie consent implemented, though it lacks explicit security policies and vulnerability disclosure mechanisms. WHOIS data confirms the legitimacy and consistency of the domain registration with the business claims. Overall, the website demonstrates a good balance of business credibility, technical implementation, and privacy compliance.
GasanMamo Insurance Ltdgasanmamo.com
Other · Malta
57Medium
NIS2 0 · GDPR 43
NIS2 0 · GDPR 43
GasanMamo Insurance Ltd is Malta's leading insurance company, offering a broad portfolio of insurance products including motor, home, travel, health, boat, landlord, multi dwelling, business, and group health insurance. The company positions itself as a trusted provider with a strong local presence and a commitment to customer support and corporate social responsibility. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content tailored to individuals and businesses in Malta. Technically, the site is built on WordPress with modern analytics and marketing tools such as Google Analytics, Facebook Pixel, Hotjar, and an AI chatbot, indicating a high level of digital maturity and user engagement capabilities. Security posture is strong with HTTPS enforced and no visible vulnerabilities or exposed sensitive data, although explicit security policies and incident response information are not published. Privacy compliance is good with a comprehensive privacy policy and cookie policy present, but lacks an explicit cookie consent mechanism. Overall, the website and business demonstrate high professionalism and trustworthiness, supported by consistent WHOIS data and regulatory compliance.
Grand Hotel Excelsior Maltaexcelsior.com.mt
Hospitality · Malta
36High
NIS2 5 · GDPR 23
NIS2 5 · GDPR 23
Grand Hotel Excelsior Malta is a luxury 5-star hotel located in Floriana, Malta, near the capital Valletta. The hotel offers a wide range of services including accommodation, dining, spa and gym facilities, meetings and events, weddings, and curated excursions. The website reflects a strong market position with a focus on elegance, comfort, and personalized guest experiences. Technically, the site is built on WordPress with modern frameworks and plugins, optimized for SEO, accessibility, and mobile responsiveness. Security posture is good with HTTPS, reCAPTCHA, and cookie consent mechanisms, though some security headers could be improved. The site integrates multiple marketing and analytics tools while maintaining privacy compliance. Overall, the website is professional, trustworthy, and well-maintained, supporting the hotel's brand and business objectives.
Truevo Payments Ltdtruevo.com
Finance · Malta
51Medium
NIS2 35 · GDPR 43
NIS2 35 · GDPR 43
Truevo Payments Ltd is a licensed financial institution based in Malta, providing comprehensive payment processing solutions including online payments, card payouts, acquiring, and subscription billing. The company positions itself as a secure and efficient payment provider with a strong presence in the EU market and a focus on diverse industries such as retail, gaming, and insurance. The website demonstrates a mature technical infrastructure built on WordPress with modern plugins and optimization tools, ensuring fast performance and mobile responsiveness. Security measures include PCI DSS compliance, SCA and 3D Secure protocols, and real-time fraud monitoring, reflecting a robust security posture. Overall, the site is professional, trustworthy, and compliant with privacy regulations, though it could benefit from explicit security policy and incident response disclosures.
OpenPayd Ltdopenpayd.com
Finance · United Kingdom
59Medium
NIS2 5 · GDPR 28
NIS2 5 · GDPR 28
OpenPayd Ltd operates as a regulated financial services infrastructure provider specializing in Banking-as-a-Service. The company offers a comprehensive API-driven platform enabling businesses to embed payments, accounts, and trading solutions globally. With regulatory authorizations from the UK FCA, Malta Financial Services Authority, and Canadian FIN-TRAC, OpenPayd positions itself as a trusted partner in the digital economy. Their client base includes notable fintech and digital asset companies, underscoring their market relevance and operational scale. Technically, the website is built on WordPress with modern SEO and analytics integrations, providing a professional and responsive user experience. Security practices are robust, including HTTPS, security headers, and CAPTCHA protections, though a dedicated security policy page and incident response contacts are absent. Overall, OpenPayd demonstrates a mature digital presence with strong business credibility and compliance posture.
EC English Holdings Ltdecenglish.com
Education · Malta
57Medium
NIS2 5 · GDPR 70
NIS2 5 · GDPR 70
EC English Holdings Ltd is a well-established global English language education provider founded in 1991 in Malta. The company operates 25 schools across 7 countries, offering a wide range of English and French language courses for diverse audiences including young learners, adults, and professionals. Their market position is strong, supported by multiple accreditations and a large international student base. The website is professionally designed, mobile-optimized, and provides comprehensive information about courses, destinations, and support services. Technically, the site is built on WordPress with modern libraries and analytics tools, ensuring good performance and SEO optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be more explicitly implemented. The domain registration details align well with the business claims, indicating high legitimacy and trustworthiness.
Branded Juicebrandedjuice.com
Other · Malta
24Critical
NIS2 0 · GDPR 10
NIS2 0 · GDPR 10
Branded Juice is a small creative agency based in Malta specializing in branding, identity, print, signage, vehicle wrapping, and web design services. The website showcases a diverse portfolio of projects, targeting businesses seeking comprehensive branding and promotional solutions. The company maintains an active social media presence and provides clear contact information, including a phone number and company email. Technically, the website is built on WordPress using the Enfold theme and Avia framework, incorporating common tracking tools such as Google Analytics and Facebook SDK. While the site is mobile optimized and presents content professionally, it lacks critical privacy and cookie policies, as well as security headers, which impacts its overall security posture. No forms are present on the homepage, reducing immediate data collection risks but also limiting user engagement options. The domain uses privacy protection for WHOIS data, which is typical for small agencies and does not raise immediate concerns. Overall, the website is functional and professional but would benefit from enhanced privacy compliance and security hardening.
Finance · Pakistan
29High
NIS2 5 · GDPR 10
NIS2 5 · GDPR 10
Jahangir Siddiqui & Co. Ltd. (JSCL) is a well-established Pakistani investment company specializing in financial services including banking, brokerage, asset management, and insurance. The company has a strong market position as a premier investment firm with a history dating back to 1991 and a notable Wall Street pedigree. The website reflects a professional and consistent brand presence targeting investors and financial clients in Pakistan. Technically, the site is built on WordPress with common industry-standard plugins and libraries, offering moderate performance and good mobile optimization. Security measures include HTTPS and Google reCAPTCHA, but lack advanced security headers and explicit privacy or cookie policies, indicating room for improvement in compliance and security posture. Overall, the site is trustworthy and credible with clear contact information and business transparency.
Alistair Floral Designalistairfloraldesign.com
Retail · Malta
48High
NIS2 5 · GDPR 60
NIS2 5 · GDPR 60
Alistair Floral Design is a well-established floral design and retail business based in Malta, offering a wide range of floral products and bespoke services including weddings, events, and corporate floral arrangements. The company positions itself as Malta's leading florist with over 20 years of experience, targeting consumers in Malta and Gozo who seek quality floral products and personalized service. The website is professionally designed using WordPress and WooCommerce, integrating modern plugins and marketing tools to support e-commerce and customer engagement. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Privacy compliance is good, with clear policies and GDPR adherence. Overall, the site reflects a mature digital presence with strong business credibility and customer trust.
Aage Hempel Groupaagehempel.com
Transportation · Spain
34High
NIS2 0 · GDPR 70
NIS2 0 · GDPR 70
Aage Hempel Group is a specialized maritime service provider offering installation, maintenance, surveys, and spare parts supply for marine electronics worldwide. With a strong global presence through 31 offices in 11 countries and a network of certified technicians, the company ensures high-quality service for vessels on major maritime routes. Their partnerships with leading brands and classification societies position them as a trusted player in the maritime electronics sector. Technically, the website is built on WordPress using modern plugins and themes, optimized for SEO and mobile responsiveness. Security measures include HTTPS, Google reCAPTCHA, and GDPR-compliant cookie consent mechanisms, reflecting a mature security posture. No critical vulnerabilities or security issues were detected. Overall, the website and business demonstrate professionalism, compliance, and a solid market position.
Hero Gaming Sweden ABherogaming.com
Technology · Sweden
48High
NIS2 0 · GDPR 10
NIS2 0 · GDPR 10
Hero Gaming is a Swedish-based online casino operator founded in 2013, known for pioneering gamified casino experiences with its flagship brand Casino Heroes. The company operates a multi-brand portfolio targeting online casino players seeking immersive and engaging gaming experiences. The website reflects a mature business with professional design, clear branding, and employee testimonials that enhance trust. Technically, the site is built on WordPress using common libraries such as jQuery, Bootstrap, and Slick Carousel, delivering moderate performance and good mobile optimization. Security posture is basic with HTTPS enabled but lacks important security headers and explicit security policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the domain registration aligns well with the business claims, supporting legitimacy.
- BBenjamin Curtis Dean Productions, LLC
hdvideovillage.com
Media · United States
31High
NIS2 5 · GDPR 10
NIS2 5 · GDPR 10
Benjamin Curtis Dean Productions, LLC operates the 8K Video Village website, providing specialized technical services in live television and event video production. With over three decades of experience, the company serves high-profile clients including celebrities, Fortune 500 companies, and major broadcast productions. Their key offerings include screens technical direction, media server programming, video playback operation, and equipment rentals. The website showcases a strong portfolio with embedded videos and detailed project descriptions, positioning the company as a niche expert in the media production industry. Technically, the website is built on WordPress using the Bricks theme, incorporating modern web technologies such as Google Fonts, Flatpickr for date selection, and embedded YouTube and Vimeo videos. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. However, performance is moderate and accessibility features are basic. From a security perspective, the site uses HTTPS and does not expose sensitive data in the HTML. However, no explicit security headers were detected, and there is a lack of published privacy, cookie, or security policies, which are important for compliance and user trust. No vulnerability disclosure or incident response information is provided, indicating room for improvement in security posture. Overall, the website is professional and credible but would benefit from enhanced privacy compliance and security best practices to reduce risk and improve trustworthiness. Strategic recommendations include publishing privacy and cookie policies, implementing security headers, and adding vulnerability disclosure information.
Mecanizados Ekimenekimen.net
Manufacturing · Spain
43High
NIS2 0 · GDPR 25
NIS2 0 · GDPR 25
Mecanizados Ekimen is a small, family-owned manufacturing company specializing in complex multiaxis machining services including prototyping, unique pieces, short series, and tooling for production lines. The company targets industrial sectors such as automotive, agricultural, aerospace, and food production, offering high-quality, efficient machining solutions with ISO 9001 certification as a trust indicator. The website is built on WordPress with Elementor and includes modern features such as Google reCAPTCHA for form security and social sharing tools. Security posture is good with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy and cookie policies are present and GDPR compliant, enhancing trust and compliance. Overall, the digital infrastructure supports the business well, providing a professional and user-friendly experience.
- CCentral Bank of Malta
centralbankmalta.org
Finance · Malta
62Medium
NIS2 5 · GDPR 58
NIS2 5 · GDPR 58
The Central Bank of Malta operates as the national central bank responsible for implementing monetary policy, ensuring financial stability, overseeing payment systems, issuing currency, and conducting economic research. The website reflects its authoritative position with comprehensive content targeting the general public, financial institutions, and government entities. It offers a range of services including publications, market data, and regulatory information, positioning itself as a key financial institution in Malta. Technically, the website is built on an ASP.NET WebForms platform with modern JavaScript libraries such as jQuery 3.6. It integrates third-party services like Cookiebot for cookie consent management, Google Analytics, and Hotjar for analytics and user behavior tracking. The site demonstrates moderate performance and basic mobile optimization, with room for improvement in accessibility and security headers. From a security perspective, the site enforces HTTPS and employs a robust cookie consent mechanism with blocking mode to comply with GDPR. No critical vulnerabilities or exposed sensitive data were detected. However, additional security headers could enhance protection. Privacy compliance is strong, with clear policies and user consent management. Overall, the Central Bank of Malta's website is a professional, trustworthy, and compliant digital presence that effectively supports its institutional role. Strategic improvements in security headers, mobile optimization, and accessibility would further strengthen its posture.
- NNM Group
nmgroup.com
Energy · United Kingdom
62Medium
NIS2 5 · GDPR 58
NIS2 5 · GDPR 58
NM Group is a UK-based company specializing in optimizing the performance of electricity networks through advanced remote sensing technologies and software solutions such as Caydence AAR. The company positions itself as a leading global specialist serving utility network operators and energy companies with services including 3D asset management, vegetation management, thermal rating, and LiDAR mapping. Their website reflects a professional and consistent brand image with comprehensive service descriptions and global reach. Technically, the site employs modern web technologies including jQuery, Google Tag Manager, and OneTrust for cookie consent, ensuring a good user experience and compliance with privacy regulations. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security policies and incident response contacts are absent. Overall, NM Group demonstrates a mature digital presence aligned with its business objectives and regulatory requirements.
ARQarqgroup.com
Finance · Malta
45High
NIS2 5 · GDPR 40
NIS2 5 · GDPR 40
ARQ Group is a Malta-based professional services organization specializing in corporate advisory, tax, compliance, licensing, accounting, and investment migration services. With over 20 years of experience, ARQ positions itself as a comprehensive partner for businesses seeking to establish and grow in Malta, particularly in sectors such as financial services and iGaming. The website reflects a mature business with a clear market position and a broad service offering tailored to local and international clients. Technically, the website is built on WordPress using the Divi theme, incorporating modern JavaScript libraries and Google Tag Manager for analytics. The site demonstrates good SEO practices, mobile optimization, and a professional design, although accessibility features could be enhanced. Performance is moderate, with no critical technical issues detected. From a security perspective, the site enforces HTTPS and includes some security headers, with no exposed sensitive data or vulnerable libraries identified. However, it lacks a visible cookie consent mechanism and published security or incident response policies, which are recommended for compliance and trust. The domain registration data aligns well with the business claims, indicating a legitimate and established entity. Overall, ARQ Group's website presents a professional and trustworthy digital presence with minor areas for improvement in privacy compliance and security transparency.
- MMansa Gaming
mansagaming.com
Other
48High
NIS2 5 · GDPR 15
NIS2 5 · GDPR 15
The website mansagaming.com currently presents an extremely minimal online presence, displaying only the domain name text without any additional content, metadata, or interactive elements. This lack of substantive content and absence of business information makes it difficult to ascertain the company's market position, services, or target audience. The site appears to be either a placeholder or under construction, lacking essential elements such as privacy policies, contact details, or security features. From a technical perspective, the website does not utilize any detectable technologies, frameworks, or content management systems. There is no evidence of HTTPS encryption or security headers, which are critical for protecting user data and establishing trust. The site also lacks SEO optimization, accessibility features, and mobile responsiveness, indicating a low level of digital maturity. Security posture is weak due to the absence of HTTPS and security best practices. No privacy or cookie policies are present, and no contact or incident response information is available. These gaps pose compliance risks and reduce user trust. Overall, the website's current state represents a high-risk profile with significant vulnerabilities and compliance deficiencies. Strategically, the business should prioritize establishing a secure, content-rich website with clear policies and contact information to improve credibility and compliance. Implementing HTTPS and security headers is essential to protect visitors and enhance trust. Developing comprehensive privacy and cookie policies aligned with GDPR and other regulations will mitigate legal risks. Enhancing technical infrastructure and content quality will support better user experience and market positioning.
Other
42High
NIS2 5 · GDPR 0
NIS2 5 · GDPR 0
The website we.com.mt currently serves an HTTP 404 error page indicating that the requested page cannot be found. The content is minimal and includes a default offline dinosaur game from Chromium authors, suggesting the site content is inaccessible or missing. There is no visible business or contact information, privacy or cookie policies, or security disclosures. The lack of accessible content and privacy-protected WHOIS data limit the ability to assess the company's legitimacy or market position. Technically, the site uses standard HTML, CSS, and JavaScript with no advanced frameworks or CMS detected. Security posture is weak due to missing HTTPS and security headers. Overall, the site appears to be either down, misconfigured, or abandoned, posing a risk for users seeking legitimate business information.
Megabytemegabyte.be
Technology · Belgium
34High
NIS2 0 · GDPR 0
NIS2 0 · GDPR 0
Megabyte is a Belgian technology company specializing in software solutions such as accounting and management software, ERP, CRM, cloud, and VOIP services. They are an official Sage Partner targeting accountants, SMEs, and non-profit organizations. Additionally, they provide IT consulting and infrastructure management services including network, servers, security, and telephony. The website reflects a professional business model focused on B2B services with a consistent brand presence and clear service segmentation. Technically, the website uses modern web technologies including Three.js and Vanta.js for visual effects and Adobe Typekit for fonts. The site is structured with SEO best practices in mind, including meta tags and Open Graph data. However, mobile optimization and accessibility are basic, and no CMS or hosting provider information is evident. Performance is moderate with no critical errors detected. From a security perspective, the site lacks visible security headers and no HTTPS status was confirmed from the data provided. There are no forms or data collection points to analyze for input security. Privacy and cookie policies are absent, indicating potential GDPR compliance gaps. No incident response or vulnerability disclosure information is provided, limiting transparency and security readiness. Overall, the website is functional and professional but requires improvements in privacy compliance, security posture, and contact transparency to enhance trust and regulatory adherence.
Papendalpapendal.nl
Hospitality · Netherlands
41High
NIS2 0 · GDPR 63
NIS2 0 · GDPR 63
Papendal is a well-established Dutch sports and hospitality venue located near Arnhem, combining top sports facilities with business and event hosting services. The website reflects a mature digital presence with comprehensive content, clear navigation, and professional branding. Technically, it leverages WordPress with modern libraries and integrates multiple analytics and marketing tools while maintaining GDPR compliance through Cookiebot. Security posture is strong with HTTPS and consent management, though some HTTP security headers could be improved. Overall, the site is trustworthy and serves a diverse audience including sports professionals, business clients, and tourists.
- CCardinal Health
cardinalhealth.com
Healthcare · United States
67Medium
NIS2 5 · GDPR 63
NIS2 5 · GDPR 63
Cardinal Health is a large, enterprise-level healthcare services and distribution company focused on improving the cost-effectiveness of healthcare. Their website presents comprehensive information about their healthcare services, medical and pharmaceutical products, supply chain logistics, and specialty distribution services. The company targets healthcare providers, hospitals, pharmacies, manufacturers, and specialty physician practices. The website is professionally designed, well-structured, and optimized for both desktop and mobile users. Technically, the site leverages modern technologies including Adobe Experience Manager as the CMS, jQuery, Adobe Dynamic Media, Coveo Search, Google Tag Manager, and OneTrust for cookie consent management. The site uses HTTPS with strong SSL configuration and integrates reCAPTCHA for form security. Analytics are implemented via Adobe Analytics, Google Analytics, and LinkedIn Insight Tag, indicating a mature digital marketing and data collection strategy. From a security perspective, the website demonstrates good practices such as HTTPS enforcement, use of reCAPTCHA, and cookie consent mechanisms. However, some security headers like Content-Security-Policy and X-Frame-Options are not detected and could be added to enhance security. No critical vulnerabilities or exposed sensitive data were found. Overall, the website is trustworthy, compliant with privacy regulations including GDPR, and reflects a mature business with strong digital presence. The domain WHOIS data aligns with the company's identity and history, supporting legitimacy. Strategic recommendations include enhancing security headers, publishing a dedicated security policy, and adding a vulnerability disclosure mechanism to further strengthen security posture.
Other
53Medium
NIS2 0 · GDPR 0
NIS2 0 · GDPR 0
The website altern.com.mt is currently inaccessible due to a Cloudflare Turnstile security challenge page that blocks direct content access. As a result, no business information, contact details, or policies are visible. The site appears to be protected by Cloudflare's security mechanisms, indicating an intent to prevent automated access or attacks. The technical infrastructure relies on Cloudflare services, but no CMS or additional technologies are detectable from the provided data. Due to the lack of accessible content, the security posture cannot be fully assessed, and no privacy or compliance information is available. Overall, the site is effectively blocked for analysis, resulting in a low AI score and limited insights.
- Steadfast Companies
steadfastcompanies.com
Real Estate · United States
60Medium
NIS2 0 · GDPR 28
NIS2 0 · GDPR 28
Steadfast Companies is a well-established real estate investment, development, and management firm with over 30 years of history. The company positions itself as an integrated and multifaceted real estate entity focused on delivering measurable results to investors, partners, residents, and associates. Their website reflects a professional and consistent brand image, targeting stakeholders in the real estate sector, including institutional investors and residents. Key services include real estate investment, property management, development, and investment management. The company operates primarily in the United States, with a medium-sized organizational footprint. Technically, the website is built on WordPress with modern SEO and accessibility tools such as Yoast SEO and UserWay. It uses Google Analytics for tracking and is mobile-optimized with good performance. The site employs HTTPS with a good SSL configuration, though some security headers are missing. There is no visible cookie consent mechanism or explicit cookie policy, which is a privacy compliance gap. No forms collecting personal data were detected on the homepage, reducing immediate privacy risks. From a security perspective, the site demonstrates a solid baseline with HTTPS and no exposed sensitive data. However, it lacks published security policies, incident response contacts, and vulnerability disclosure mechanisms, which are recommended for enhanced trust and compliance. The domain registration data aligns well with the business claims, showing a consistent and legitimate entity with no suspicious patterns. Overall, the website is professional, trustworthy, and well-maintained but would benefit from improved privacy compliance measures and enhanced security transparency to further strengthen stakeholder confidence.
- Core Lab
corelab.com
Energy · United States
52Medium
NIS2 5 · GDPR 58
NIS2 5 · GDPR 58
Core Laboratories operates as a leading global provider of proprietary reservoir description and production enhancement services primarily serving the oil and gas industry. With a presence in over 70 offices across more than 50 countries, the company offers specialized laboratory and field services that enable clients to optimize reservoir performance and maximize hydrocarbon recovery. Their service portfolio includes advanced diagnostics, AI-driven data analysis, and carbon capture subsurface characterization, positioning them as a key player in energy sector innovation. Technically, the website is built on a modern WordPress CMS platform utilizing a variety of plugins and frameworks such as Elementor, Visual Composer, and GeneratePress. The infrastructure is hosted on WPEngine, ensuring reliable performance and scalability. The site demonstrates good mobile optimization, SEO practices, and accessibility features, supported by comprehensive metadata and structured data for enhanced search engine visibility. From a security perspective, the site enforces HTTPS with strong SSL configuration and implements several security headers. Client portals incorporate two-factor authentication, and cookie consent mechanisms are in place, reflecting a mature security posture. No critical vulnerabilities or exposed sensitive data were detected, though explicit security policies and vulnerability disclosure mechanisms could be improved. Overall, the website reflects a professional, trustworthy, and technically sound digital presence aligned with the company's market position. Strategic recommendations include enhancing security transparency, expanding incident response contact information, and further improving accessibility compliance to maintain leadership in digital maturity.
- Maltalingua Ltd.
maltalingua.com
Education · Malta
36High
NIS2 0 · GDPR 10
NIS2 0 · GDPR 10
Maltalingua Ltd. operates a well-established English language school in Malta, offering a range of courses for adults, juniors, and families. The school is internationally accredited and recognized with multiple awards, positioning it as a leading education provider in the Maltese market. Their services include language courses, accommodation arrangements, and cultural activities, targeting students worldwide seeking English language education in a Mediterranean setting. Technically, the website is built on Drupal 9, leveraging modern web technologies such as jQuery, Owl Carousel, and lazy loading for images. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Integration with Google Tag Manager and Tawk.to live chat indicates a moderate level of digital maturity and customer engagement. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks certain security headers and a formal security policy or incident response information, which are areas for improvement. Privacy compliance is partial, with a privacy policy present but no visible cookie consent mechanism, which may pose GDPR compliance risks. Overall, Maltalingua presents a credible and professional online presence with strong business credibility and good technical implementation. Strategic enhancements in privacy compliance and security practices would further strengthen their security posture and regulatory adherence.
- Maltapost
maltapost.com
Logistics and supply chain
53Medium
NIS2 0 · GDPR 33
NIS2 0 · GDPR 33
- Konnekt Search & Selection Ltd.
konnekt.com
Other · Malta
35High
NIS2 5 · GDPR 28
NIS2 5 · GDPR 28
Konnekt Search & Selection Ltd. operates as a leading recruitment agency in Malta, specializing in connecting employers with jobseekers across various sectors. The company offers a broad range of services including talent search, recruitment training, payroll, and salary benchmarking, positioning itself as a comprehensive recruitment partner in the Maltese market. The website reflects a professional and user-friendly platform with extensive job search capabilities and resources for candidates and employers alike. Technically, the site employs a modern tech stack with popular JavaScript libraries and frameworks, integrates multiple analytics and marketing tools, and demonstrates good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and no visible sensitive data exposure, though there is room for improvement in security headers and formal security policies. Privacy compliance is addressed with a clear privacy policy and cookie consent mechanism, aligning with GDPR requirements. Overall, the website and business present a trustworthy and credible front with clear contact information and regulatory licensing.
Enemalta plcenemalta.com.mt
Energy · Malta
65Medium
NIS2 5 · GDPR 60
NIS2 5 · GDPR 60
Enemalta plc is the leading electricity services provider and network operator in Malta, established in 1977. The company offers a comprehensive range of energy services including electricity distribution, network upgrades, and customer support. It maintains a strong market position as the primary utility provider in the Maltese Islands, serving both residential and business customers. Subsidiaries such as Energiva and partnerships like ARMS extend its service offerings into power engineering and utility retail optimization. The website reflects a mature digital presence with modern WordPress infrastructure, SEO optimization, and customer engagement features such as outage maps and contact forms. Privacy and cookie compliance are well implemented, demonstrating adherence to GDPR requirements. Security posture is solid with HTTPS enforcement and reCAPTCHA integration, though formal security policies and incident response contacts are not publicly disclosed. Overall, the site is professional, trustworthy, and aligned with the company's business objectives.
MIB Insurance Brokersmib.com.mt
Finance · Malta
56Medium
NIS2 5 · GDPR 15
NIS2 5 · GDPR 15
MIB Insurance Brokers is Malta’s largest insurance broker and risk management services firm with over 40 years of experience. The company offers a wide range of insurance products for personal and business clients, including health, home, travel, motor, boat, personal accident, life, and various business insurance solutions. Their market position as a pioneer and leader in Malta's insurance sector is supported by a professional and well-structured website that clearly targets both individual and corporate customers. The website demonstrates a mature digital presence with integrated SEO, analytics, and GDPR-compliant data collection mechanisms. Technically, the site is built on WordPress with modern plugins and frameworks, ensuring good performance and mobile optimization. Security posture is strong with HTTPS, reCAPTCHA, and cookie consent mechanisms, although some security headers could be improved. Overall, the domain registration data aligns well with the business claims, reinforcing legitimacy and trustworthiness.
Little Oneslittleones.co
E-commerce · New Zealand
68Medium
NIS2 0 · GDPR 75
NIS2 0 · GDPR 75
Little Ones is a New Zealand-based e-commerce business specializing in baby and toddler sleep programs and a mobile sleep app. The company has a strong market presence with over 800,000 families helped worldwide and multiple industry awards. Their offerings include downloadable sleep programs tailored by age group, a comprehensive mobile app with tracking and notifications, and access to certified sleep consultants. The website is built on Shopify, leveraging several third-party integrations for reviews, marketing, and analytics, demonstrating a mature digital infrastructure. Security posture is strong with HTTPS, secure forms, and no visible vulnerabilities, although explicit security policies and incident response contacts are not published. Privacy compliance is well addressed with clear privacy and cookie policies and active consent mechanisms. Overall, the business appears legitimate, professional, and trustworthy with a high-quality user experience.
Falzon Group of Companiesfalzongroup.com
Energy · Malta
31High
NIS2 0 · GDPR 10
NIS2 0 · GDPR 10
Falzon Group of Companies is a Malta-based bespoke fuel energy provider specializing in supplying fuel and environmental solutions to local and international industries, including marine fuels and lubricants. The company positions itself as a leading supplier in the Mediterranean region, offering a comprehensive range of services such as fuel for industry, bunker supplies, household heating fuels, environmental services, and lubricants. Their business model focuses on a supply chain and logistics operation that delivers fuel where and when customers need it. Technically, the website is built on WordPress using the Salient theme and several plugins including WPBakery Page Builder and Contact Form 7. The site demonstrates moderate performance with good mobile optimization and basic accessibility features. SEO practices are adequately implemented with proper meta tags and structured navigation. From a security perspective, the site uses HTTPS with excellent SSL configuration but lacks security headers and explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is weak due to the absence of privacy and cookie policies and consent mechanisms. Contact information is clearly provided, enhancing business credibility. Overall, the website is professional and trustworthy with a solid business presence but would benefit from improved privacy compliance and enhanced security practices to reduce risk and increase user trust.
GOgo.com.mt
Telecommunications · Malta
71Medium
NIS2 35 · GDPR 58
NIS2 35 · GDPR 58
GO is a leading Maltese telecommunications and energy services provider offering a comprehensive range of products including fibre internet, mobile plans, TV services, and energy solutions. The company targets personal, business, and wholesale customers within Malta, positioning itself as a market leader with a strong brand presence and extensive service portfolio. The website reflects a mature digital infrastructure leveraging modern technologies such as Next.js and React, integrated with WordPress backend and enhanced SEO via Yoast. Security posture is robust with HTTPS enforcement, security headers, and privacy compliance mechanisms including cookie consent and GDPR-aligned policies. However, incident response contact details and vulnerability disclosure mechanisms could be improved to enhance transparency and trust. Overall, GO demonstrates a high level of professionalism, technical maturity, and market credibility.
- BBuyDomains.com
gonetworks.com
E-commerce · United States
55Medium
NIS2 0 · GDPR 60
NIS2 0 · GDPR 60
BuyDomains.com operates as a premium domain marketplace offering domain sales, brokerage, and lead capture services. The website targets businesses and individuals seeking memorable and brandable domain names, positioning itself as a trusted and established player in the domain sales industry. The platform integrates multiple marketing and analytics tools, including Google Analytics, Eloqua, and Google Tag Manager, to optimize user engagement and conversion tracking. Technically, the site is built on AngularJS 1.8.2, leveraging modern web technologies such as service workers for offline capabilities and Google reCAPTCHA for bot mitigation. The integration of Genesys chat enhances customer support capabilities. The website demonstrates good mobile optimization and basic accessibility features, with a moderate performance profile. From a security perspective, the site enforces HTTPS and employs a Content-Security-Policy, although the policy permits 'unsafe-inline' and 'unsafe-eval' scripts, which could be improved. The use of reCAPTCHA and secure form handling indicates a focus on preventing automated abuse. However, explicit security policies and incident response information are not present. Overall, the website presents a professional and trustworthy front with comprehensive privacy and cookie policies, GDPR compliance mechanisms, and clear contact information. The domain registration data aligns with the business claims, supporting legitimacy. Strategic recommendations include tightening security headers, adding vulnerability disclosure information, and enhancing accessibility.
Other
53Medium
NIS2 0 · GDPR 10
NIS2 0 · GDPR 10
The website www.bov.com is currently inaccessible beyond a Cloudflare security challenge page that requires human verification via Turnstile captcha. Due to this, no actual business content, metadata, or contact information is available for analysis. The site appears to be protected by Cloudflare's WAF, indicating an intent to mitigate automated access or attacks. Without access to substantive content, it is not possible to assess the company's market position, services, or technical infrastructure in detail. The security posture cannot be fully evaluated, but the presence of Cloudflare protection suggests some level of security awareness. Overall, the site currently presents a low trust profile due to lack of accessible information and transparency.
Other
45High
NIS2 5 · GDPR 28
NIS2 5 · GDPR 28
The website desgas.com is a parked domain primarily serving advertising content with minimal original or business-related content. It lacks any clear business identity, contact information, or user engagement features. The site relies on third-party advertising networks such as Google Adsense and Bodis for monetization. Technically, the site uses basic HTML, CSS, and JavaScript with no detected CMS or advanced frameworks. The site is not optimized for mobile or accessibility beyond basic standards and lacks SEO best practices. Security posture is weak with no HTTPS detected and no security headers present. Privacy compliance is minimal with no cookie consent or GDPR indicators. Overall, the site represents a low-trust, low-value web presence with significant risks if used for business purposes.