Security reports directory
150,193 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,193001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
138,901–138,950 of 150,193
- Precio Fishbone
preciofishbone.com
Technology · Sweden
80Low
NIS2 55 · GDPR 83
NIS2 55 · GDPR 83
Precio Fishbone is a Swedish technology company specializing in tailored IT solutions including software development, system integration, and cloud services. The company positions itself as a key partner for digital transformation and innovation, serving businesses seeking modern IT solutions. The website demonstrates a mature digital presence with comprehensive content, including a knowledge hub, case studies, and blog posts, reflecting active engagement and expertise. Technically, the site uses modern frameworks such as Next.js and integrates with Microsoft Azure, Google Tag Manager, and Cookiebot for analytics and compliance. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms in place. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website reflects a professional, trustworthy, and compliant business entity with a solid market position in the technology sector.
PwC Norgepwc.no
—
72Medium
NIS2 10 · GDPR 65
NIS2 10 · GDPR 65
OSM Maritime Grouposmthome.com
Transportation · Cyprus
49High
NIS2 65 · GDPR 68
NIS2 65 · GDPR 68
OSM Thome is a globally recognized leader in ship management, crew management, and marine services, managing a diverse fleet of approximately 1,000 vessels. The company emphasizes sustainability, digital innovation, and crew welfare, positioning itself as a progressive maritime services provider. Their market position is strong, supported by a solid financial foundation and a comprehensive service portfolio including green initiatives like EVIGO. Technically, the website is built on WordPress with the Divi theme, leveraging modern analytics and marketing tools, and hosted likely on SiteGround. Security posture is robust with HTTPS and no visible vulnerabilities, though explicit security headers could be improved. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the company demonstrates high professionalism and trustworthiness, supported by consistent WHOIS data and multiple trust indicators.
Cadmiumconferenceharvester.com
Technology · United States
75Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
Cadmium is a well-established technology provider specializing in event management and continuing education solutions, serving associations, healthcare professionals, and educational institutions. With over 25 years of experience, the company offers a suite of integrated products including Eventscribe, EthosCE, Elevate, and Warpwire, positioning itself as a premier player in its niche market. The website reflects a mature business with a clear focus on B2B SaaS offerings tailored to professional and educational sectors. Technically, the site leverages modern web technologies such as Webflow CMS, HubSpot forms, Google Tag Manager, and advanced analytics tools, ensuring a robust digital presence with good performance and mobile optimization. Security measures include HTTPS enforcement and use of Google reCAPTCHA Enterprise, although explicit security policies and headers could be enhanced. Privacy compliance is well addressed with comprehensive policies and consent mechanisms. Overall, the site demonstrates high professionalism, trustworthiness, and a strong market position.
- Nagoya International Exhibition Hall
portmesse.com
Hospitality · Japan
51Medium
NIS2 25 · GDPR 53
NIS2 25 · GDPR 53
Nagoya International Exhibition Hall (ポートメッセなごや) operates as a major international exhibition and event venue located in Nagoya, Japan. The facility caters to a broad range of events including seminars, business meetings, exhibitions, ceremonies, parties, incentives, concerts, and other communication spaces. It serves event organizers and visitors primarily in the hospitality and government sectors, positioning itself as a key regional player in event hosting and venue services. Technically, the website is built on WordPress 4.9.9 with a variety of plugins such as Contact Form 7 for forms, Smart Slider 3 for visual content, and FooBox for image lightbox functionality. The site uses jQuery and jQuery UI libraries and integrates Google Tag Manager for analytics and marketing. The site is mobile optimized and includes accessibility features, but the WordPress version is outdated, which may pose security risks. From a security perspective, the site enforces HTTPS and uses Google Tag Manager and reCAPTCHA on forms, but lacks comprehensive security headers and runs an outdated CMS version. No explicit security or incident response policies are published. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism detected. Overall, the website is professional and trustworthy with good business credibility and content quality. However, security and privacy compliance could be improved by updating software, adding security headers, and implementing cookie consent mechanisms.
インテックス大阪intex-osaka.com
Hospitality · Japan
71Medium
NIS2 25 · GDPR 53
NIS2 25 · GDPR 53
インテックス大阪は日本最大級の国際展示場として、多様なイベントや展示会を開催し、国内外のビジネスや文化交流の場を提供しています。ウェブサイトは日本語を主体に来場者と主催者双方に向けた情報を豊富に掲載し、イベント情報や施設案内、交通アクセスなどを詳細に案内しています。親会社である一般財団法人 大阪国際経済振興センターの管理下にあり、信頼性の高い運営が伺えます。技術的にはjQueryやGoogle Analytics、Slick Carouselなどの一般的なウェブ技術を利用し、モバイル対応も良好です。セキュリティ面ではHTTPSが適切に導入されているものの、セキュリティヘッダーの不足やプライバシー関連のポリシーが限定的である点が改善余地として挙げられます。全体として高品質で信頼性の高いサイトですが、GDPR対応やクッキー同意の実装強化が望まれます。
Bizzabobizzabo.com
Technology · United States
89Low
NIS2 25 · GDPR 100
NIS2 25 · GDPR 100
Bizzabo is a leading enterprise-level event management software provider specializing in B2B conferences and events. Their Event Experience OS platform offers a comprehensive suite of tools including event registration, marketing, networking, onsite management, and analytics. The company holds a strong market position as evidenced by multiple industry recognitions such as Forrester Wave Leader and Gartner Magic Quadrant Leader. Technically, the website is built on WordPress with Oxygen Builder, leveraging modern JavaScript libraries and integrations with HubSpot, Cookiebot, and Cloudflare for performance and security. Security posture is robust with HTTPS enforcement, security headers, and consent management, though explicit incident response and vulnerability disclosure policies are not publicly found. Overall, the site demonstrates high professionalism, excellent content quality, and strong compliance with privacy regulations including GDPR. The business is credible with consistent WHOIS data and a clear focus on enterprise customers. Strategic recommendations include enhancing transparency on security incident response and adding a vulnerability disclosure mechanism to further strengthen trust.
Hexagon ABhxgnsecurity.com
Technology
78Low
NIS2 10 · GDPR 95
NIS2 10 · GDPR 95
Hexagon physical security, a division of Hexagon AB, offers advanced video management software (VMS) and physical security information management (PSIM) solutions designed to safeguard people and assets globally. Their enterprise-focused products serve critical sectors including airports, transportation, retail, logistics, critical infrastructure, education, and financial institutions. The company maintains a strong market position with thousands of deployments worldwide and a comprehensive portfolio of security solutions, professional services, and training offerings. The website reflects a mature digital presence with professional design, clear navigation, and multilingual support.
- Wrike, Inc.
wrike.com
Technology · United States
81Low
NIS2 25 · GDPR 73
NIS2 25 · GDPR 73
Wrike, Inc. is a leading provider of versatile and robust project management software designed to streamline workflows for teams of all sizes across various industries. The company offers a comprehensive work management platform that enables full visibility and control over tasks and projects, integrating AI-powered features and extensive third-party integrations to enhance productivity and collaboration. Wrike's market position is strong, with over 20,000 organizations worldwide relying on its solutions. Technically, the website leverages modern frameworks like Angular, employs advanced analytics and tracking tools, and is optimized for performance and accessibility. Security practices are robust, with HTTPS enforcement, security headers, and secure form handling, although explicit incident response and vulnerability disclosure policies are not prominently published. Overall, Wrike demonstrates a mature digital presence with a high level of professionalism, trustworthiness, and compliance with privacy regulations such as GDPR.
Government · Spain
69Medium
NIS2 25 · GDPR 25
NIS2 25 · GDPR 25
TECNOSEC is a specialized event platform focused on high technologies in security, intelligence, drones, and anti-drones, primarily targeting Spanish government security institutions, critical infrastructure, and technology providers. The event is positioned as a national and international meeting point for key stakeholders in security and intelligence sectors, held at Madrid Arena. The website reflects a professional and consistent branding approach, with clear navigation and relevant content for exhibitors and visitors. Technically, the site is built on WordPress with modern plugins and integrates Google Analytics for visitor insights. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response contacts are absent. Overall, the site demonstrates good digital maturity and compliance with privacy regulations, supporting its role as a trusted event platform in the government and technology sectors.
- AAPCO International
apco2025.org
Government · United States
58Medium
NIS2 10 · GDPR 35
NIS2 10 · GDPR 35
APCO International operates the APCO 2025 Annual Conference & Expo, a key event for public safety communications professionals in the United States. The website serves as an information and registration portal for the event, targeting emergency communications officials, government agencies, and industry vendors. The site is built on WordPress with a modern tech stack including jQuery, FontAwesome, and Google Fonts, and uses Matomo and Google Tag Manager for analytics. The design is professional and mobile-optimized, providing a good user experience with clear navigation and relevant content. However, the site lacks explicit privacy and cookie policies, as well as contact information, which impacts privacy compliance and user trust. Security posture is generally good with HTTPS enforced, but the absence of security headers and vulnerability disclosure reduces the overall security maturity. WHOIS data aligns well with the business, indicating legitimacy and consistent domain registration.
Hexagon ABhexagonlive.com
Technology · Sweden
67Medium
NIS2 75 · GDPR 88
NIS2 75 · GDPR 88
Hexagon AB operates a professional and content-rich website promoting its Hexagon LIVE Global Digital Experience 2025 event, showcasing its leadership in precision measurement, autonomy, and innovation technologies. The company targets industry professionals and global business leaders across manufacturing, energy, and transportation sectors. The website is built on modern technologies including React, Next.js, and Sitecore CMS, with strong mobile optimization and accessibility features. Security posture is robust with HTTPS, security headers, and cookie consent mechanisms, though explicit security policies and incident response contacts are not found. Overall, the site reflects a mature digital presence aligned with Hexagon's enterprise stature and global market position.
Atrium Ljungbergnobelberget.se
Real Estate · Sweden
43High
NIS2 25 · GDPR 83
NIS2 25 · GDPR 83
Nobelberget is a real estate development project by Atrium Ljungberg, focusing on sustainable urban living in the Stockholm area. The website presents detailed information about residential offerings, community features, and ongoing projects, targeting prospective residents and investors. The company holds a strong market position as a leading sustainable urban developer in Sweden. Technically, the website employs modern technologies including Google Tag Manager, Facebook Pixel, HubSpot, and Microsoft Azure services, ensuring robust analytics and marketing capabilities. The site is hosted on Microsoft Azure and uses Episerver CMS, with good mobile optimization and SEO practices. Security posture is strong with HTTPS, CSRF protections, and cookie consent management via Cookiebot, although some security headers could be more explicitly implemented. Privacy compliance is well addressed through Cookiebot and linked privacy policies, supporting GDPR adherence. Overall, the website is professional, trustworthy, and well-structured, with clear contact information and active social media presence.
Atrium Ljungbergal.se
Real Estate · Sweden
49High
NIS2 25 · GDPR 95
NIS2 25 · GDPR 95
Atrium Ljungberg is a leading Swedish real estate company specializing in the development and management of vibrant urban environments across major cities such as Stockholm, Göteborg, Malmö, and Uppsala. The company focuses on creating mixed-use districts that combine office spaces, residential units, retail, and cultural offerings, emphasizing sustainability and innovation. Their market position as one of Sweden's largest publicly listed real estate firms is supported by comprehensive investor relations and a strong brand presence. Technically, the website employs a modern technology stack including jQuery, Google Tag Manager, Facebook Pixel, LinkedIn Insight Tag, Cookiebot for consent management, HubSpot for forms and analytics, Microsoft Application Insights for telemetry, and Google reCAPTCHA for form security. Hosting is provided by Microsoft Azure, ensuring robust infrastructure and performance. The site demonstrates good mobile optimization, accessibility, and SEO practices. From a security perspective, the website enforces HTTPS, uses security tokens in forms, and manages cookie consent effectively. No critical vulnerabilities or exposed sensitive data were detected. However, explicit security policies and incident response information are not publicly available, suggesting areas for improvement. Overall, the website presents a professional, trustworthy, and compliant digital presence aligned with the company's business objectives. Strategic recommendations include enhancing security transparency, maintaining up-to-date third-party scripts, and expanding privacy disclosures to further strengthen user trust and regulatory compliance.
Geo Controllerwpgeocontroller.com
Technology · Finland
53Medium
NIS2 10 · GDPR 85
NIS2 10 · GDPR 85
Geo Controller is a specialized WordPress plugin provider focused on geolocation and geo marketing solutions. The company offers a comprehensive suite of features including content control based on visitor location, currency conversion, GDPR and tax compliance, and integration with WooCommerce and Google Maps. Positioned as a niche player in the WordPress ecosystem, Geo Controller targets website owners and developers seeking enhanced geo-targeted marketing and SEO capabilities. The business operates primarily through plugin sales and licensing, with a small company size and a founding date around 2018. Technically, the website is built on WordPress with WooCommerce and Elementor, leveraging modern web technologies such as PHP, JavaScript, and Google reCAPTCHA for security. Hosting is provided by Hetzner Online GmbH, a reputable provider. The site demonstrates moderate performance with good mobile optimization and basic accessibility features. SEO is well addressed through meta tags, structured data, and clear navigation. From a security perspective, the site enforces HTTPS and employs Google reCAPTCHA on critical forms to mitigate spam and abuse. Cookie consent mechanisms and privacy policies indicate good GDPR compliance. Historical vulnerabilities have been addressed promptly, reflecting a proactive security posture. However, some security headers could be improved to enhance protection further. Overall, Geo Controller presents a trustworthy and professional online presence with solid technical and security foundations. Strategic recommendations include enhancing security headers, publishing a security.txt file, and improving accessibility compliance to further strengthen the site's security and user experience.
- VVisit Östersund
longstayostersund.se
Hospitality · Sweden
68Medium
NIS2 10 · GDPR 10
NIS2 10 · GDPR 10
Long Stay Östersund is a regional information platform focused on promoting extended stays in Östersund, Sweden, targeting remote workers, students, and new residents. The website offers curated information on coworking spaces, housing options, local lifestyle, and guest testimonials to facilitate long-term visits. It partners with regional tourism and government entities to provide comprehensive local insights. Technically, the site is built on WordPress using the Salient theme and WPBakery page builder, with standard web technologies like jQuery and Google Tag Manager for analytics. The site is mobile-optimized with good design and navigation but lacks advanced accessibility features. Security posture is moderate with HTTPS enabled but missing key security headers and policies. Privacy compliance is weak due to absence of privacy and cookie policies and no consent mechanism. Overall, the site is legitimate and professionally presented but requires improvements in privacy and security practices to meet modern standards.
Leva i Östersundlevaiostersund.se
Government · Sweden
44High
NIS2 25 · GDPR 40
NIS2 25 · GDPR 40
Leva i Östersund is a regional informational website focused on promoting living, working, and moving to Östersund, Sweden. It serves as a portal providing job listings, local event information, and resources for new residents. The site is supported by local government entities and partners, positioning itself as a trusted source for regional information. The content is primarily in Swedish with translation options, targeting individuals interested in relocating or engaging with the Östersund community. Technically, the website is built on WordPress using popular plugins such as Yoast SEO for search optimization, WPBakery Page Builder for layout management, and Complianz for GDPR cookie compliance. It integrates Google reCAPTCHA for form security and uses Vizzit Analytics for visitor tracking. The site is mobile-optimized with good navigation and SEO practices, though accessibility features are basic. From a security perspective, the website enforces HTTPS and employs reCAPTCHA to protect forms. However, it lacks some recommended security headers like Content-Security-Policy and X-Frame-Options. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with clear cookie consent mechanisms and a comprehensive privacy policy linked to an official municipal domain. Overall, the website presents a low-risk profile with a good balance of content quality, technical implementation, and privacy compliance. Strategic improvements could include enhancing security headers, adding explicit security policies, and improving accessibility to further strengthen trust and compliance.
- Bharat Forge
bharatforge.eu
Manufacturing · Germany
71Medium
NIS2 10 · GDPR 43
NIS2 10 · GDPR 43
Bharat Forge is a globally recognized leader in metal forming and forging parts manufacturing, serving key sectors such as automotive, rail transport, and machinery. The company operates multiple sites in Germany and offers specialized lightweight and forged components. The website reflects a mature digital presence built on WordPress with Elementor, featuring comprehensive content, career opportunities, and sustainability initiatives. Security posture is strong with HTTPS and cookie consent mechanisms, though some security headers could be improved. Overall, the site demonstrates professionalism, trustworthiness, and compliance with GDPR. The domain registration aligns well with the business claims, reinforcing legitimacy.
Other
58Medium
NIS2 10 · GDPR 50
NIS2 10 · GDPR 50
The website at cdn-sitegainer.com is currently inaccessible due to an Access Denied error, indicating that the content is blocked or restricted. This prevents any meaningful extraction of business, technical, or security information. The domain appears to be a content delivery network (CDN) or a restricted resource rather than a public-facing business website. Due to the lack of accessible content, no metadata, contact information, or policies are available for analysis. From a technical perspective, the site does not expose any detectable technologies, scripts, or frameworks. The security posture cannot be assessed due to the absence of accessible content and headers. The domain's WHOIS data is privacy protected, limiting the ability to verify registrant legitimacy or domain age. Overall, the site scores very low on content quality, technical implementation, security posture, privacy compliance, and business credibility. The primary risk is the lack of transparency and accessibility, which hinders trust and usability. Strategic recommendations include resolving access issues, publishing clear business and privacy information, and implementing standard security practices.
Office&Printofficeandprint.se
Retail · Sweden
43High
NIS2 5 · GDPR 75
NIS2 5 · GDPR 75
Office&Print is a Swedish e-commerce retailer specializing in office products and supplies, serving both businesses and private customers. The website offers a broad product range with a focus on customer service, fast delivery, and price guarantees. The company emphasizes a personalized approach with dedicated contact persons for clients. Technically, the website is built on WordPress with WooCommerce and uses modern tools like WPBakery, Font Awesome, and integrates marketing and analytics services such as Klaviyo and Clerk.io. Security is well-managed with HTTPS, cookie consent mechanisms, and no visible vulnerabilities or exposed sensitive data. The site is accessible, mobile-optimized, and SEO-friendly, reflecting a mature digital presence. Overall, the risk profile is low with recommendations to enhance security headers and maintain regular updates.
TwentyThree23video.com
Technology · Denmark
69Medium
NIS2 10 · GDPR 95
NIS2 10 · GDPR 95
TwentyThree is a leading European video marketing platform provider, offering an all-in-one SaaS solution for enterprises to manage video content, webinars, and personal video communications. The company positions itself as a pioneer in the video marketing space, with a strong market presence supported by large enterprise clients and a comprehensive suite of video-related services. Their digital infrastructure leverages modern web technologies including Alpine.js, HubSpot CMS and forms, and Amazon Cloudfront CDN, ensuring a fast, mobile-optimized, and accessible user experience. Security posture is strong with HTTPS enforcement, cookie consent mechanisms, and no visible vulnerabilities, although explicit security policies and incident response documentation are not found. Overall, the website demonstrates high professionalism, GDPR compliance, and business credibility, making it a trustworthy platform for video marketing solutions.
Veikals.lvveikals.lv
Retail · Latvia
40High
NIS2 25 · GDPR 10
NIS2 25 · GDPR 10
Veikals.lv is a Latvian e-commerce retailer specializing in office supplies, computer equipment, packaging materials, cartridges, and related services such as printer repair and cartridge refilling. The website offers a broad product catalog with multiple language options (Latvian, Russian, English), targeting both business and individual customers in Latvia. The platform is built on OpenCart CMS with modern web technologies including Bootstrap, jQuery, and Swiper.js, providing a good user experience and mobile optimization. Security posture is adequate with HTTPS enabled and no visible sensitive data exposure, though the absence of security headers and explicit security policies suggests room for improvement. Privacy compliance is basic, with a privacy policy present but no visible cookie consent mechanism. Overall, the site appears legitimate and professional, with clear contact information and consistent branding.
Attentive | AI-Powered SMS and Email Marketing Platformattentivemobile.com
—
70Medium
NIS2 60 · GDPR 88
NIS2 60 · GDPR 88
Rechargegetrecharge.com
E-commerce · United States
77Low
NIS2 25 · GDPR 88
NIS2 25 · GDPR 88
Recharge is a leading subscription management platform specializing in powering ecommerce businesses with recurring payment solutions. Serving over 20,000 brands and managing more than 100 million subscribers, Recharge offers a comprehensive suite of tools including subscription management, revenue optimization, customer intelligence, and retention services. The company positions itself as a trusted partner for brands seeking to build lasting buyer routines and grow subscription revenue. Technically, the website is built on WordPress with a modern tech stack including HubSpot forms, Google Tag Manager, and various analytics and marketing integrations. The site is well-optimized for SEO, mobile responsiveness, and accessibility, reflecting a mature digital presence. Security posture is strong with HTTPS enforced, client-side URL sanitization, and cookie consent managed via OneTrust, though explicit security headers could be improved. No critical vulnerabilities or blocking mechanisms were detected. WHOIS data confirms domain legitimacy and consistency with the business profile. Overall, Recharge demonstrates a professional, secure, and privacy-conscious online presence aligned with its enterprise-scale business model.
- Mintt Studio
minttstudio.com
E-commerce · Portugal
65Medium
NIS2 10 · GDPR 53
NIS2 10 · GDPR 53
Mintt Studio is a technology company specializing in developing enterprise-grade Shopify apps designed to enhance engagement, social proof, and sales for Shopify merchants. With over 300,000 merchants trusting their solutions, Mintt Studio positions itself as a leading provider in the e-commerce app market, offering seamless integrations and expert support. Their key products include Instafeed - Instagram Feed and Juniper - TikTok Feed, which enable merchants to showcase social media content directly on their stores. The website is built on Squarespace 7.1, reflecting a modern and professional digital presence optimized for performance and mobile devices. Security measures such as HTTPS and HSTS are properly implemented, ensuring secure user interactions. However, the site lacks explicit terms of service and detailed security or incident response policies, which could be improved to enhance trust and compliance. Overall, Mintt Studio demonstrates a strong market position with good technical infrastructure and a solid security posture, though privacy compliance and contact transparency could be enhanced.
Shhhowercapshhhowercap.com
E-commerce · United States
77Low
NIS2 25 · GDPR 100
NIS2 25 · GDPR 100
Shhhowercap is a specialized e-commerce business focused on innovative and patented shower cap products, targeting women who seek stylish and functional haircare solutions. The company positions itself as a market leader with a unique product offering that combines waterproof, antibacterial, and chic design features. Their business model is primarily direct-to-consumer via their Shopify-powered online store, supported by strong customer validation and press coverage. The website demonstrates a mature digital infrastructure with modern technologies, including Shopify's Broadcast theme, integrated marketing tools like Klaviyo and Okendo, and security services such as NoFraud and Route for shipping protection. The security posture is robust with HTTPS enforcement, secure forms, and privacy compliance mechanisms including cookie consent and a comprehensive privacy policy. No critical vulnerabilities or WAF blocks were detected, indicating a secure and accessible platform. Overall, the website reflects a professional, trustworthy, and well-maintained online presence suitable for its business scope.
Energy
60Medium
NIS2 10 · GDPR 53
NIS2 10 · GDPR 53
Zero-waste-club.com is a niche WordPress blog dedicated to educating readers on waste management, zero waste practices, pollution, and dumpster rentals. The site targets environmentally conscious individuals and professionals interested in sustainability. The content is well structured and updated with recent posts, indicating active maintenance. Technically, the site uses WordPress with common libraries like jQuery and Bootstrap, providing a moderate performance and good mobile optimization. Security posture is basic with HTTPS enabled but lacks advanced security headers and explicit security policies. Privacy compliance is limited, with no cookie consent mechanism or GDPR indicators. Overall, the site is functional and moderately trustworthy but would benefit from enhanced security and privacy features.
—
70Medium
NIS2 25 · GDPR 68
NIS2 25 · GDPR 68
- TTaylor Jay Collection
taylorjaycollection.com
Retail · United States
72Medium
NIS2 10 · GDPR 58
NIS2 10 · GDPR 58
Taylor Jay Collection is a small US-based e-commerce retailer specializing in sustainable, inclusive women's fashion basics. The brand emphasizes elevated comfort, inclusivity, and sustainability, targeting women seeking eco-friendly and adaptable clothing. The website is built on Shopify using the Impulse theme and integrates multiple marketing and analytics tools such as Klaviyo, Smile.io, and Facebook Pixel. Security posture is strong with HTTPS and security headers properly configured, though privacy compliance could be improved by adding a cookie consent mechanism and publishing a security policy. The site is professionally designed with good content quality and navigation, supporting a positive user experience and trustworthiness.
- Taylor Made Cuisine
taylormadecuisineinc.com
Hospitality · United States
66Medium
NIS2 25 · GDPR 73
NIS2 25 · GDPR 73
Taylor Made Cuisine is a specialized catering and meal prep delivery company serving Orange County and Los Angeles County. The company offers a range of services including full-service event catering, corporate catering, wedding catering, and meal prep delivery with a focus on quality, convenience, and customer satisfaction. Their market position is that of a growing local caterer with a strong emphasis on flavor and service excellence. Technically, the website is built on Squarespace, leveraging modern marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and CallRail. The site is mobile-optimized and provides a professional user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enabled and basic security headers, but could be improved by adding advanced headers and visible cookie consent mechanisms. Privacy compliance is basic, with a privacy policy present but lacking explicit GDPR compliance indicators. Overall, the domain registration details align well with the business claims, supporting legitimacy and trustworthiness.
- GGLASSHOUSE ACADEMY OF BEAUTY & AESTHETICS
glasshouseacademy.co.uk
Retail · United Kingdom
59Medium
NIS2 10 · GDPR 35
NIS2 10 · GDPR 35
Glasshouse Academy of Beauty & Aesthetics is a UK-based small business specializing in scientific skincare solutions and professional training focused on chemical peel treatments. The company targets skincare professionals and individuals seeking effective treatments for acne, anti-aging, and pigmentation. Their business model combines retail sales of skincare products with educational services. The website is built on the Squarespace platform, featuring a modern design, good SEO, and mobile optimization. Contact information and social media links are clearly provided, enhancing business credibility. Security posture is strong with HTTPS and HSTS enabled, though explicit privacy and security policies are absent. Payment processing is securely handled via Stripe, and booking services are integrated through a third-party platform.
- Nathaniel Drew
nathanieldrew.com
Media · United States
61Medium
NIS2 18 · GDPR 35
NIS2 18 · GDPR 35
Nathaniel Drew's website serves as a personal brand platform showcasing his work as a content creator specializing in storytelling, writing, music, and online courses. The site is positioned as an independent media creator targeting a general audience interested in creative content and self-improvement. The business model revolves around multimedia content distribution and educational offerings. Technically, the site is built on Squarespace, leveraging standard web technologies such as JavaScript, CSS, and web fonts, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal policies, indicating room for improvement in compliance and security best practices. Overall, the website is professional and functional but would benefit from enhanced privacy and security measures to improve trust and compliance.
—
68Medium
NIS2 25 · GDPR 53
NIS2 25 · GDPR 53
Peach’speachs.co
Technology
68Medium
NIS2 10 · GDPR 53
NIS2 10 · GDPR 53
Peach’s is a specialized SaaS provider offering referral and affiliate marketing plugins tailored exclusively for Squarespace eCommerce stores. Positioned as a market leader in this niche, the company targets small to medium-sized online retailers and marketers seeking to leverage word-of-mouth marketing to boost sales. Their product suite includes referral programs, affiliate programs, and additional tools such as sales social proof pop-ups and website speed tests, all integrated seamlessly with Squarespace. The website demonstrates strong branding, professional design, and clear navigation, enhancing user experience and trust. Technically, the site employs modern web technologies including Google Fonts, FontAwesome, Google Tag Manager, Facebook Pixel, and Stripe for payment processing. The integration with Squarespace is smooth, and the site is mobile optimized with good SEO practices. However, some accessibility features are basic, and performance is moderate. Security posture is solid with HTTPS enforced and no exposed sensitive data, but lacks certain security headers and explicit security policies. Privacy compliance is partial, with privacy and terms policies present but no cookie consent mechanism despite tracking scripts. Overall, Peach’s website reflects a mature digital presence with a strong focus on user experience and marketing effectiveness. Security practices are adequate but could be improved by adding security headers and incident response information. Privacy compliance should be enhanced by implementing cookie consent mechanisms. The domain uses privacy protection, which is reasonable for a small SaaS business, and no suspicious indicators were found. The site is trustworthy and professionally maintained, suitable for its target audience.
TeamAIteamai.com
Technology
59Medium
NIS2 25 · GDPR 58
NIS2 25 · GDPR 58
TeamAI is a technology company providing a unified platform that integrates multiple AI models such as Gemini, DeepSeek, and OpenAI. The platform targets businesses and teams seeking to reduce costs and improve collaboration by offering shared AI workspaces, custom AI agents, and prompt libraries. Their market position emphasizes cost savings and flexibility compared to individual AI subscriptions. Technically, the website is built on WordPress with modern JavaScript libraries and SEO optimizations, delivering a good user experience across devices. Security posture is strong with HTTPS, cookie consent, and no visible vulnerabilities, though some security headers could be improved. Overall, TeamAI demonstrates a mature digital presence with effective marketing and analytics integration.
- AAbility, Inc.
onlineada.com
Technology · United States
63Medium
NIS2 25 · GDPR 70
NIS2 25 · GDPR 70
Ability, Inc. is a specialized provider of digital accessibility compliance tools and certification services, focusing on ensuring websites and digital assets meet WCAG and other accessibility standards. The company leverages advanced AI-powered solutions, notably Max Access, to automate accessibility issue detection and remediation, positioning itself as a leader in the accessibility technology space. Their client base includes both small businesses and industry leaders, supported by a comprehensive suite of services including auditing, ongoing compliance management, and document remediation. Technically, the website is built on a modern WordPress platform with Elementor, employing best practices in web development, accessibility, and security. The security posture is strong with HTTPS, appropriate security headers, and secure forms, although explicit security policies and incident response information are not publicly detailed. Overall, the site demonstrates a high level of professionalism, compliance, and trustworthiness, with clear business credibility and a solid technical foundation.
- Square Refresh
squarerefresh.xyz
Technology · United States
66Medium
NIS2 55 · GDPR 68
NIS2 55 · GDPR 68
Square Refresh is a specialized e-commerce business focused on providing premium Squarespace plugins and templates to enhance website functionality and design. Positioned as a niche provider within the Squarespace ecosystem, it offers a curated catalog of digital products alongside an affiliate program to expand its market reach. The website demonstrates a solid technical infrastructure leveraging the Squarespace platform, integrated with modern web technologies such as Google Analytics, Google Tag Manager, and Google reCAPTCHA Enterprise for security and analytics. The presence of custom JavaScript plugins and third-party services indicates a mature digital setup aimed at improving user experience and engagement. Security posture is strong with HTTPS enforcement, HSTS, and secure form handling, although explicit security policies and vulnerability disclosure mechanisms are absent. Privacy compliance is well addressed with comprehensive policies and cookie consent mechanisms, reflecting a commitment to user data protection. Overall, the website presents a professional and trustworthy front with good content quality, technical implementation, and business credibility, suitable for its target audience of Squarespace users seeking advanced site enhancements.
WebFXwebfx.com
Technology · United States
74Medium
NIS2 25 · GDPR 73
NIS2 25 · GDPR 73
WebFX is a well-established digital marketing agency with a strong market position, offering a comprehensive suite of services including SEO, PPC, content marketing, social media management, and proprietary technology platforms like RevenueCloudFX and Nutshell CRM. The website demonstrates a high level of digital maturity with modern technologies, responsive design, and extensive content that supports user engagement and conversion. Security posture is robust with HTTPS, security headers, and no visible vulnerabilities, although explicit security policies and incident response contacts are not found. Overall, the site reflects a professional, trustworthy, and technically sound business with strong compliance and marketing practices.
- Dubsado
dubsado.com
Other · United States
70Medium
NIS2 10 · GDPR 53
NIS2 10 · GDPR 53
Dubsado is a well-established SaaS company providing comprehensive business management software tailored for creative service businesses. With a strong market presence since 2015 and over 150,000 business owners worldwide using its platform, Dubsado offers tools for invoicing, payments, scheduling, contracts, proposals, workflows, and client management. The website reflects a professional and consistent brand image, targeting entrepreneurs and small to medium-sized businesses in the creative sector. Technically, the site is built on Squarespace, leveraging modern web technologies and analytics tools such as Google Analytics, Hotjar, and Intercom, ensuring good performance and user experience across devices. Security-wise, the site enforces HTTPS with HSTS and includes a vulnerability disclosure policy, indicating a mature security posture. However, the absence of a visible cookie consent mechanism suggests room for improvement in privacy compliance. Overall, the website is trustworthy, well-designed, and functionally rich, supporting Dubsado's position as a reliable business management solution provider.
Nutshellnutshell.com
Technology · United States
63Medium
NIS2 10 · GDPR 80
NIS2 10 · GDPR 80
Nutshell is a well-established technology company specializing in CRM, sales, marketing, and engagement software designed to help sales teams close more deals. The company has a strong market position supported by multiple industry awards and a comprehensive suite of services including sales automation, marketing automation, pipeline management, and customer engagement tools. Their platform is targeted primarily at small to medium-sized businesses and sales/marketing professionals seeking an integrated growth software solution. Technically, the website is built on a modern WordPress infrastructure with advanced plugins and integrations such as UberMenu, Weglot for multilingual support, and Google Analytics for tracking. The site demonstrates excellent performance, mobile optimization, and SEO practices. Security posture is strong with HTTPS enforced, security headers present, and use of hCaptcha for form protection. Privacy compliance is robust with clear privacy and cookie policies, including GDPR compliance and consent mechanisms. Overall, the website reflects a professional, trustworthy, and mature digital presence with no critical security issues detected.
SPITFIREGIRL, LLCspitfiregirldesign.com
Hospitality
61Medium
NIS2 10 · GDPR 35
NIS2 10 · GDPR 35
Spitfiregirl is a specialized creative agency offering modern branding, web design, and digital marketing services primarily targeting fashion, hospitality, lifestyle brands, authors, and female founders. Established since 2000, the company positions itself as a premium partner for changemakers and go-getters, emphasizing strategic branding and custom web solutions. The website reflects a high level of professionalism with excellent design quality and consistent branding. Technically, the site leverages the Showit platform with modern JavaScript libraries and analytics tools such as Google Analytics, Google Tag Manager, and Hotjar, indicating a mature digital infrastructure. Security posture is good with HTTPS enforced and no exposed sensitive data, though some security headers are missing and no explicit incident response contacts are provided. Privacy compliance is weak due to the absence of privacy and cookie policies or consent mechanisms, which could pose regulatory risks. Overall, the site is trustworthy and well-positioned in its market segment but should improve privacy and security disclosures to enhance compliance and user trust.
PI LIVE – Performance & Affiliate Marketing Conferencesperformancein.live
—
63Medium
NIS2 10 · GDPR 65
NIS2 10 · GDPR 65
Opera Norway ASopr.as
Technology · Norway
76Low
NIS2 10 · GDPR 83
NIS2 10 · GDPR 83
Opera Norway AS operates the official website for the Opera web browser, a globally recognized software product offering a faster, safer, and smarter browsing experience. The company targets general internet users who prioritize privacy, security, and innovative browsing features such as built-in VPN, AI chat, and integrated messengers. Opera holds a strong market position as an established browser vendor with a large user base and a history dating back to 1995. Technically, the website is built on modern web standards using JavaScript, CSS, and HTML5, supported by a robust CDN infrastructure for fast performance and excellent mobile optimization. The site employs Google Tag Manager and Google Analytics with privacy-conscious default consent settings. The design is professional, accessible, and SEO optimized, reflecting a mature digital presence. From a security perspective, the website enforces HTTPS and provides clear privacy and cookie policies with consent mechanisms. While explicit security headers and vulnerability disclosure pages are not evident, the overall security posture is strong with no visible vulnerabilities or exposed sensitive data. The domain registration details align well with the company's claims, reinforcing trustworthiness. Overall, Opera's website demonstrates high professionalism, strong privacy compliance, and a secure environment suitable for its large user base. Strategic recommendations include enhancing security headers, publishing a vulnerability disclosure policy, and providing incident response contacts to further strengthen security and trust.
Boltive Incboltive.com
Technology · United States
70Medium
NIS2 55 · GDPR 53
NIS2 55 · GDPR 53
Boltive Inc is a technology company specializing in digital compliance and ad security software solutions. Their offerings focus on protecting digital user experiences by ensuring privacy compliance and mitigating risks from malicious advertising. The company targets brands, publishers, and enterprises requiring advanced compliance tools and ad security management. The website demonstrates a solid market position with trusted clients and certifications, reflecting a reputable presence in the technology sector. Technically, the site is built on Webflow with modern JavaScript libraries and integrates marketing and analytics tools such as HubSpot and Google Tag Manager. The site is performant, mobile-optimized, and includes a comprehensive cookie consent mechanism, indicating good digital maturity. Security posture is strong with HTTPS and no visible vulnerabilities, though explicit security policies and headers could be enhanced. Overall, Boltive presents a professional and trustworthy digital presence aligned with its business objectives.
Rocky Mountain Briderockymountainbride.com
Media · United States
49High
NIS2 25 · GDPR 58
NIS2 25 · GDPR 58
Rocky Mountain Bride is a specialized media company focused on providing wedding inspiration, vendor directories, event information, and print/digital magazines for couples planning weddings in the Rocky Mountains and Mountain West regions. The website serves as a comprehensive platform connecting brides and grooms with local vendors and venues, supported by rich editorial content and active social media engagement. Technically, the site is built on WordPress with a modern tech stack including Google Analytics, Facebook Pixel, and Flodesk for marketing automation. The site is well-optimized for SEO and mobile devices, offering a professional user experience. Security posture is solid with HTTPS and some security best practices, though improvements such as CSP headers and cookie consent mechanisms are recommended. Overall, the domain registration and business information are consistent and trustworthy, supporting a high legitimacy score.
- PrettyLead
prettylead.co
Technology
76Low
NIS2 10 · GDPR 83
NIS2 10 · GDPR 83
PrettyLead is a SaaS company specializing in marketing conversion tools such as popups, notification bars, and embedded forms designed to boost website engagement and sales. The platform targets online marketers, bloggers, and eCommerce businesses, offering a drag-and-drop campaign builder with over 50 templates to simplify campaign creation. The website is professionally designed, mobile-optimized, and provides clear navigation and content relevant to its audience. Technically, the site is built using modern frameworks like Next.js and React, with integrations for analytics and user engagement tools such as Google Analytics, Hotjar, and Crisp Chat. The hosting appears to be on a modern platform optimized for performance and responsiveness. Security-wise, the site enforces HTTPS and avoids exposing sensitive data, but lacks some security headers and published security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism or GDPR compliance indicators. Overall, the site demonstrates a moderate to good security posture and business credibility, though improvements in privacy compliance and security transparency are recommended.
- ZG Gaming Solutions
zggamingsolutions.com
Technology · United States
67Medium
NIS2 10 · GDPR 53
NIS2 10 · GDPR 53
ZG Gaming Solutions is a specialized service provider focused on managing the complexities of gaming licensing for operators, executives, service providers, and investors. The company positions itself as a trusted partner for both major players and startups, offering scalable, confidential, and cost-effective licensing solutions. Their website reflects a professional and consistent brand image, targeting a niche market within the gaming technology sector. The business model centers on service provision with a clear emphasis on regulatory compliance and operational support. Technically, the website is built on the Squarespace platform, leveraging modern web technologies and Google Tag Manager for analytics. The site demonstrates good mobile optimization and SEO practices, with moderate performance and basic accessibility features. The presence of HTTPS and HSTS indicates a strong baseline for secure communications. From a security perspective, the site enforces HTTPS with excellent SSL configuration and includes security headers such as HSTS. However, it lacks explicit security policy documentation, incident response information, and cookie consent mechanisms, which are important for compliance and user trust. No vulnerabilities or exposed sensitive data were detected in the content. Overall, the website presents a low-risk profile with a solid business credibility and technical foundation. Strategic improvements in privacy compliance and security transparency would enhance trust and regulatory alignment.
Prodege, LLCtada.com
Retail · United States
71Medium
NIS2 10 · GDPR 58
NIS2 10 · GDPR 58
Tada.com is a cashback and coupon rewards platform owned by Prodege, LLC, established since 1986. The website targets consumers seeking savings on groceries, essentials, and online shopping by offering cashback, coupons, and receipt scanning services. It maintains a strong market position with partnerships including Swagbucks and MyPoints, and operates a business model centered on affiliate marketing and user rewards. The site is well-branded and consistent, with a professional design and clear navigation. Technically, the website uses a modern tech stack including Bootstrap, jQuery, Handlebars, and Google Tag Manager, with accessibility features powered by EqualWeb. The site is mobile-optimized and performs moderately well. Privacy compliance is robust, featuring a comprehensive privacy policy, cookie consent via OneTrust, and GDPR adherence. However, direct contact emails and phone numbers are not publicly displayed, relying instead on support pages and forms. From a security perspective, the site enforces HTTPS, employs standard security headers, and avoids exposing sensitive data. No critical vulnerabilities or WAF blocking were detected. The domain registration details align well with the business claims, enhancing trustworthiness. Overall, the site demonstrates a mature security posture and good privacy practices. Strategically, Tada.com should consider publishing a dedicated security policy and incident response contacts to further enhance transparency and trust. Regular audits of third-party scripts and adding direct contact information would improve user confidence and compliance. The site is a credible and professional platform in the retail cashback and coupon industry.
Technology · United Kingdom
85Low
NIS2 25 · GDPR 80
NIS2 25 · GDPR 80
Campaign and Digital Intelligence Limited, operating under the brand CANDDi, is a UK-based technology company founded in 2009 specializing in website visitor tracking software. Their platform enables businesses to identify and analyze visitors to their websites, converting anonymous traffic into actionable leads for sales and marketing teams. The company positions itself as a mature player in the visitor analytics market, offering integrations with CRM systems and marketing tools to enhance lead generation and attribution. Technically, the website employs modern JavaScript frameworks, integrates third-party services such as Google Tag Manager, Calendly, and Wistia for analytics, scheduling, and video content respectively. The site is mobile-optimized with good SEO practices and a professional design, although accessibility features could be improved. Performance is moderate, with asynchronous loading of scripts and optimized assets. From a security perspective, the site enforces HTTPS with a strong SSL configuration and avoids exposing sensitive data in its HTML. However, explicit security policies and incident response contacts are not published, and security headers are not evident. The use of third-party tracking and marketing scripts is extensive but appears managed responsibly with privacy compliance in mind, including GDPR adherence and cookie consent mechanisms. Overall, the website demonstrates a high level of professionalism, trustworthiness, and business credibility. The domain registration details align well with the company's claims, reinforcing legitimacy. Strategic recommendations include enhancing security transparency, improving accessibility, and maintaining vigilance on third-party script security to sustain trust and compliance.
Prodege, LLCmypoints.com
E-commerce · United States
71Medium
NIS2 10 · GDPR 58
NIS2 10 · GDPR 58
MyPoints, operated by Prodege, LLC, is a well-established rewards platform founded in 1996 that enables users to earn points through online and in-store shopping, paid surveys, dining, and content discovery. The platform offers redemption options including gift cards and cash rewards, targeting consumers interested in maximizing value from their purchases. The website demonstrates a mature technical infrastructure leveraging modern JavaScript frameworks such as React and Bootstrap, with integrations for accessibility (EqualWeb) and privacy compliance (OneTrust). The site is mobile optimized and provides a good user experience with clear navigation and professional design. Security posture is strong with HTTPS enforcement and cookie consent mechanisms, though explicit security policies and incident response contacts are not published. Overall, the domain registration and business information align well, indicating a trustworthy and legitimate operation.