Security reports directory
150,193 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,193001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
138,951–139,000 of 150,193
Prodege, LLCswagbucks.com
E-commerce · United States
73Medium
NIS2 10 · GDPR 73
NIS2 10 · GDPR 73
Swagbucks, operated by Prodege, LLC, is a well-established online rewards platform that enables users to earn cash and gift cards through paid surveys, cashback shopping, and entertainment activities. The platform targets consumers looking to monetize everyday online activities and has a strong market presence supported by reputable media mentions and a large user base. Technically, the website employs modern web technologies including React, Google Tag Manager, and OneTrust for consent management, ensuring a good user experience with mobile optimization and accessibility features. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response contacts are not publicly disclosed. Overall, the site demonstrates a mature digital infrastructure and compliance with privacy regulations, making it a trustworthy platform for users.
Prodege, LLCprodege.com
Technology · United States
76Low
NIS2 10 · GDPR 83
NIS2 10 · GDPR 83
Prodege, LLC operates a leading consumer marketing and insights platform that empowers marketers, researchers, advertisers, and monetization partners to understand, reach, and grow their customer base. The company leverages innovative technology, consumer-centric insights, and loyalty programs to fuel client success. Positioned as a trusted partner to major global brands and agencies, Prodege offers data-driven solutions with a strong emphasis on quality and speed of insights. The website reflects a mature business with a large-scale operation and a consistent brand presence. Technically, the website is built on WordPress CMS, utilizing modern JavaScript libraries and marketing tools such as HubSpot forms, Google Tag Manager, and Localize.js for multilingual support. The site is mobile-optimized, accessible, and SEO-friendly, with comprehensive metadata and structured data enhancing search visibility. Performance is moderate, with room for optimization. Security-wise, the site enforces HTTPS, includes anti-clickjacking measures, and integrates cookie consent mechanisms compliant with GDPR. However, it lacks explicit security policies, incident response information, and some recommended security headers. No vulnerabilities or exposed sensitive data were detected, indicating a solid security posture but with opportunities for enhancement. Overall, Prodege's website demonstrates high professionalism, trustworthiness, and compliance with privacy regulations. The business appears legitimate and well-established, with strong market positioning and client endorsements. Strategic improvements in security transparency and technical performance could further strengthen its digital maturity and risk management.
- the thinkslack team
thinkslack.com
Technology
72Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
ThinkSlack.com is a niche technology website offering a free Simple Desktop Display Manager (SDDM) theme tailored for ThinkPad laptops running Slackware Linux. The site targets Linux enthusiasts and ThinkPad users seeking a stable and visually appealing login theme. The business model appears to be community-driven with free distribution of the theme, positioning itself as a small-scale project within the open-source ecosystem. The website content is minimal and focused solely on theme distribution without commercial or service offerings. From a technical perspective, the website is a simple static HTML and CSS site with no detected CMS, frameworks, or advanced technologies. The site lacks HTTPS enforcement and security headers, which are critical for protecting user data and ensuring trust. Mobile optimization and accessibility are basic, limiting usability on diverse devices and for users with disabilities. SEO features are minimal, reducing discoverability. Security posture is weak due to the absence of HTTPS, security headers, and any visible security policies or incident response contacts. No privacy or cookie policies are present, indicating non-compliance with GDPR and other privacy regulations. The lack of contact information further reduces trust and limits user engagement or support opportunities. Overall, the website presents a low-risk profile given its limited scope and content but suffers from poor security and privacy practices. Strategic improvements in HTTPS implementation, security headers, privacy compliance, and contact transparency are recommended to enhance trustworthiness and user confidence.
SocialChain Inc.minepi.com
Technology · United States
64Medium
NIS2 10 · GDPR 68
NIS2 10 · GDPR 68
Pi Network, operated by SocialChain Inc., is a technology company focused on providing a mobile-first cryptocurrency mining platform and blockchain ecosystem. The website promotes Pi as a digital currency that can be mined easily on mobile devices without draining battery resources. The platform targets a broad audience including cryptocurrency enthusiasts, mobile users, and developers interested in building Web3 applications. Pi Network positions itself as an accessible and user-friendly entry point into the cryptocurrency space, leveraging innovative technology to lower barriers to entry. Technically, the website is built on WordPress with modern optimization tools such as NitroPack, and integrates various JavaScript libraries and Google services for analytics and marketing. The site is well-optimized for mobile devices and demonstrates good SEO and accessibility practices. Security-wise, the site enforces HTTPS, employs multiple security headers, and provides a comprehensive cookie consent mechanism, reflecting a mature security posture. However, explicit security policies and incident response contacts are not published, representing an area for improvement. Overall, the website is professional, trustworthy, and compliant with privacy regulations, though it could enhance transparency around security and incident handling.
Prodege, LLCinboxpounds.co.uk
Retail · United Kingdom
61Medium
NIS2 10 · GDPR 73
NIS2 10 · GDPR 73
InboxPounds, operated by Prodege, LLC, is a well-established online rewards platform founded in 2012, targeting consumers in the UK and worldwide who want to earn extra money from home. The platform offers multiple earning opportunities including paid surveys, reading emails, web searching, and shopping cashback. It maintains a strong market position with over £2 million paid to members globally and partnerships with trusted brands. The website demonstrates a mature digital infrastructure using modern technologies such as React, Next.js, and Bootstrap, complemented by accessibility tools and cookie consent mechanisms to ensure compliance and user experience. Security posture is robust with HTTPS enforcement, security headers, and secure form handling, although there is room for improvement in publishing dedicated security policies and incident response information. Overall, the site is professional, trustworthy, and compliant with privacy regulations, making it a credible platform for users seeking online rewards.
Digital Advertising Allianceprivacyrights.info
Non-profit · United States
49High
NIS2 25 · GDPR 53
NIS2 25 · GDPR 53
PrivacyRights.info is a website operated by the Digital Advertising Alliance, a recognized non-profit organization focused on providing California consumers with tools to exercise their rights under the California Consumer Privacy Act (CCPA). The site offers opt-out tools for websites and apps, along with educational content about privacy rights and the CCPA. The organization is well positioned in the digital advertising privacy space, providing transparency and control mechanisms to consumers. Technically, the site is built on Drupal 7 with a moderate modern tech stack including jQuery and Google Analytics, delivering a good user experience with responsive design and clear navigation. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though explicit security headers and vulnerability disclosure mechanisms are absent. Privacy compliance is partial, with a privacy policy present but lacking a cookie consent mechanism. Overall, the site demonstrates high business credibility and trustworthiness, though improvements in security best practices and privacy compliance are recommended.
Technology
75Medium
NIS2 10 · GDPR 50
NIS2 10 · GDPR 50
corz.org is an independent technology-focused website operated by a small entity since 2000, offering a variety of software tools, tutorials, and resources primarily targeting developers, webmasters, and tech enthusiasts. The site provides Windows software utilities, web server tools, networking guides, and creative content such as images and mandalas. It operates on a donation-supported model with free access to its resources. Technically, the site is custom-built using PHP, JavaScript, HTML5, and CSS3, with a fast-loading and well-structured design, though mobile optimization and accessibility are basic. Security-wise, HTTPS is enabled and standard tracking tools like Google Analytics are used, but the site lacks advanced security headers and explicit privacy or security policies. Overall, the site is trustworthy with a moderate security posture but would benefit from enhanced compliance and security practices.
- CCheck These
check-these.info
Technology
49High
NIS2 25 · GDPR 50
NIS2 25 · GDPR 50
Check These is a small French-language informational website focused on IT topics such as cloud computing, web hosting, shell scripting, and Apache mod_rewrite. It serves individuals and businesses interested in technology and web infrastructure by providing educational articles. The site is built on WordPress 6.8.1 and uses modern web technologies with good mobile optimization and accessibility. However, it lacks critical privacy and security documentation such as privacy policies, cookie consent mechanisms, and security policies. No contact information or incident response channels are provided, which limits trust and compliance. The site uses HTTPS but does not implement security headers or vulnerability disclosure mechanisms. Overall, the website is functional and informative but requires improvements in privacy, security, and business transparency to enhance trust and compliance.
- SSatura darbnīca TAPT
tapt.lv
Media · Latvia
40High
NIS2 10 · GDPR 10
NIS2 10 · GDPR 10
Satura darbnīca TAPT is a Latvian creative media workshop specializing in producing inspiring content such as TV projects, video advertising, YouTube shows, books, and other creative media. The company positions itself as a niche creative content producer, targeting creative professionals and content consumers interested in media and creative projects. The website is built on WordPress using Elementor and related plugins, with a moderate performance and good mobile optimization. Security posture is basic with HTTPS enforced but lacking security headers and formal policies. Privacy compliance is weak due to absence of privacy and cookie policies. Contact information is limited but includes a phone number and physical address. Social media presence is established on Facebook and Instagram.
AdMaxim Inc.admaxim.com
Technology
60Medium
NIS2 25 · GDPR 53
NIS2 25 · GDPR 53
AdMaxim Inc. operates an integrated digital advertising platform specializing in programmatic mobile campaigns, advanced footfall solutions, cross-channel media amplification, audience data management, creative ad production, native advertising, and programmatic RTB media buying. The company targets advertising agencies and marketers seeking precision-targeted digital advertising solutions. The website is built on WordPress with common plugins and technologies such as LayerSlider and Google Analytics, indicating a moderate level of digital maturity and technical infrastructure. The site is mobile optimized and presents good content quality and branding consistency. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks security headers and explicit incident response contacts. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Overall, the website is professional and trustworthy with room for improvement in privacy and security practices.
Localaasklocala.com
Technology
62Medium
NIS2 25 · GDPR 83
NIS2 25 · GDPR 83
Locala is a technology company specializing in local advertising and consumer insights at scale, targeting leading brands and marketers globally. Their platform offers solutions such as LocalAudience, LocalActivation, and LocalAnalytics to help clients plan, activate, and measure personalized campaigns effectively. The company positions itself as a worldwide leader in driving consumers to stores and proving campaign results. Technically, the website is built on WordPress with Elementor and integrates multiple modern marketing and analytics tools including Google Analytics, HubSpot, Hotjar, and Cookiebot for privacy compliance. The site demonstrates good digital maturity with responsive design, SEO optimization, and comprehensive privacy mechanisms. Security posture is solid with HTTPS enforced and cookie consent management, though explicit security headers could be further verified. Overall, Locala presents a professional and trustworthy online presence with strong compliance and marketing transparency.
Technology
72Medium
NIS2 25 · GDPR 68
NIS2 25 · GDPR 68
Htaccess.com is a specialized educational website dedicated to providing comprehensive guides, tutorials, and example configurations for Apache .htaccess files. The site targets webmasters, developers, and system administrators seeking advanced knowledge to optimize and secure their Apache web servers. With a long history dating back to 2003, the website holds a niche authoritative position in the technology sector, focusing on web server configuration and security best practices. Technically, the website employs a traditional web stack with Apache, enhanced by Google Adsense for monetization, Disqus for comments, and Google Tag Manager for analytics. The site demonstrates moderate performance and basic mobile optimization, with good SEO practices through meta tags and structured content. However, it lacks a modern CMS and advanced accessibility features. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. While some security best practices are observed, such as no vulnerable libraries and secure content delivery, the absence of comprehensive security headers and incident response information indicates room for improvement. Privacy compliance is basic, with privacy and cookie policies present but lacking explicit consent mechanisms. Overall, Htaccess.com presents a trustworthy and professional resource with excellent content quality but could enhance its security posture and privacy compliance to meet modern standards. Strategic improvements in security headers, incident response transparency, and privacy consent would strengthen its risk profile and user trust.
- Wwww.hixie.ch
hixie.ch
Technology · Switzerland
50Medium
NIS2 25 · GDPR 50
NIS2 25 · GDPR 50
The website www.hixie.ch is a personal site primarily focused on sharing web-related materials, weblog entries, and indexes of other related personal sites. It serves as a hub for the site owner’s web content and personal projects, targeting web developers and technology enthusiasts. The site is small in scale, with basic content and minimal interactive features. Technically, the site uses simple HTML and CSS without any detected CMS or advanced frameworks. There is no evidence of modern analytics, advertising, or tracking technologies, indicating a low digital maturity level. Security posture is minimal with no HTTPS or security headers detected in the provided data, and no privacy or cookie policies are present. Overall, the site is accessible and functional but lacks professional security and compliance features, which limits its trustworthiness and business credibility.
AskApacheaskapache.com
Technology
77Low
NIS2 25 · GDPR 80
NIS2 25 · GDPR 80
AskApache is a specialized web development resource focusing on advanced topics such as Apache server configuration, .htaccess rules, Linux administration, PHP programming, and security. The site targets technical audiences including server administrators, WordPress bloggers, programmers, and security enthusiasts. It offers detailed tutorials, code examples, and online tools to support its community. The business model relies on content publishing combined with advertising revenue and providing useful developer utilities. Technically, the site is built on WordPress, uses modern web technologies like jQuery, Google Tag Manager, and Google Adsense for monetization. The site is well-structured, mobile-optimized, and includes comprehensive SEO and accessibility features. Security posture is good with HTTPS enabled and no visible vulnerabilities, though explicit security policies and incident response contacts are not found. Privacy compliance is strong with a detailed cookie consent mechanism and GDPR-aligned privacy policy. Overall, the site is trustworthy and professionally maintained, serving a niche but dedicated technical audience.
eVenture Ltd.hide.me
Technology · Malaysia
74Medium
NIS2 10 · GDPR 53
NIS2 10 · GDPR 53
hide.me VPN, operated by eVenture Ltd., is a privacy-focused VPN service provider based in Malaysia. The company offers a range of VPN applications across multiple platforms including Windows, macOS, Linux, Android, iOS, and smart TVs. Their service emphasizes privacy protection, no-logs policy, and advanced security features such as WireGuard protocol and multihop VPN. The website is professionally designed with clear navigation, strong branding, and positive trust indicators including independent audits and user reviews. Technically, the site employs modern web technologies, is mobile-optimized, and demonstrates good SEO and accessibility practices. Security posture is strong with HTTPS enforcement and security headers, though explicit cookie consent mechanisms and detailed security policies are not prominently found. Overall, hide.me VPN presents a credible and trustworthy service with a mature digital presence.
Perishable Pressperishablepress.com
Technology
55Medium
NIS2 10 · GDPR 35
NIS2 10 · GDPR 35
Perishable Press is a specialized website operated by Jeff Starr, focusing on WordPress development, security, and related web technologies. The site offers a mix of educational content, plugin sales, and books authored by the operator, targeting web developers and WordPress users seeking expert advice and tools. The business model is content-driven with monetization through plugin and book sales, positioning itself as a niche authority in the WordPress security and development space. Technically, the site is built on WordPress with a custom theme and uses modern web technologies including PHP, JavaScript, and CSS. The site is mobile-optimized and SEO-friendly, though some accessibility features could be improved. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks advanced security headers and formal security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism or GDPR-specific statements. Contact is available via a form but no direct emails or phone numbers are published. Overall, the site is professional, trustworthy, and well-maintained, with room for improvement in privacy and security transparency.
ForestRadarforestradar.com
Technology
63Medium
NIS2 25 · GDPR 35
NIS2 25 · GDPR 35
ForestRadar is a technology company specializing in advanced forest intelligence through the use of machine learning and satellite imagery. Their offerings include a suite of products such as Compute Cloud for Earth Observation, forest and agriculture monitoring apps, and specialized services for flood and fire monitoring. The company targets forestry managers, environmental agencies, and enterprises requiring precise environmental monitoring solutions. The website presents a professional and consistent brand image with clear navigation and mobile optimization, supporting a small-sized business profile focused on niche environmental technology services. Technically, the site uses modern web standards with ES modules and CSS, though no CMS or hosting details are evident. Security posture is moderate with HTTPS implied but lacks explicit security headers and published policies. Privacy compliance is weak due to absence of privacy and cookie policies. Contact information is clearly provided, enhancing business credibility.
The Edwin Group Limitededwin.group
Education · United Kingdom
74Medium
NIS2 25 · GDPR 88
NIS2 25 · GDPR 88
The Edwin Group Limited is an education-focused collective providing specialist staffing, safeguarding, training, recruitment, retention, and workload reduction services to schools, trusts, and education professionals primarily in the United Kingdom. The company operates through multiple subsidiaries, each branded distinctly, positioning itself as a growing and trusted player in the education sector. The website leverages modern technologies such as Next.js and Sanity CMS, integrating marketing and analytics tools like Google Tag Manager, Facebook Pixel, and HubSpot to support its digital presence. However, the homepage currently suffers from a client-side application error, which negatively impacts user experience and may affect visitor engagement. Security posture is solid with HTTPS and security headers implemented, but lacks published security policies or incident response information. Privacy compliance is well addressed with comprehensive privacy and cookie policies and an active consent mechanism. Overall, the website demonstrates good business credibility and technical maturity but requires remediation of frontend errors and enhancement of security transparency.
- FHU TELVICOM
telvicom.pl
Technology · Poland
40High
NIS2 10 · GDPR 25
NIS2 10 · GDPR 25
FHU TELVICOM is a small Polish technology service provider specializing in web development, e-commerce platforms, CMS solutions, 3D product photography, panoramic imaging, hosting, and domain registration services. The website targets local businesses and individuals in Poland seeking digital presence and hosting solutions. The site uses basic modern web technologies such as HTML5, CSS, JavaScript, and Modernizr but lacks advanced frameworks or CMS detection. The content is minimal and primarily marketing-oriented with no visible privacy, cookie, or terms of service policies, and no contact information or forms are present on the homepage. Security posture is weak with no detected security headers or HTTPS confirmation in the provided data. No analytics or tracking scripts are present, indicating minimal user tracking. Overall, the website demonstrates a basic digital maturity level with room for improvement in security, privacy compliance, and content richness.
RifleCXriflecx.pl
Retail · Poland
65Medium
NIS2 25 · GDPR 25
NIS2 25 · GDPR 25
RifleCX operates as a specialized e-commerce retailer focused on gun care and firearm maintenance products, targeting hunters, firearm owners, and shooting enthusiasts primarily in Poland. The website offers a range of products including cleaning oils, lubricants, protective sprays, and tactical accessories, with detailed product descriptions and instructional support via QR codes linking to YouTube videos. The business model centers on direct online sales with a clear niche market positioning. Technically, the site is built on the Shoper e-commerce platform, utilizing modern JavaScript libraries, Google Tag Manager, and Facebook Pixel for marketing and analytics. The site is mobile-optimized with good SEO practices and basic accessibility features. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though additional security headers could enhance protection. Privacy compliance is robust, with comprehensive privacy and cookie policies aligned with GDPR requirements. No critical vulnerabilities or blocking mechanisms were detected, indicating a trustworthy and professional online presence.
CX80 Polskacx80.com
Manufacturing · Poland
33High
NIS2 25 · GDPR 35
NIS2 25 · GDPR 35
CX80 Polska is a well-established Polish manufacturer specializing in multifunctional chemical products, including the world's strongest cold welding adhesive 'AUTO WELD' and specialized lubricants. Founded in 1991, the company serves both industrial sectors such as construction, mining, and transportation, as well as the consumer FMCG market through major retail chains. The website reflects a mature digital presence with multilingual support and e-commerce capabilities via WooCommerce. Technically, the site uses modern WordPress technologies and plugins, ensuring good performance and SEO optimization. Security posture is adequate with HTTPS and no exposed sensitive data, though security headers could be improved. Privacy compliance is partially met with a privacy policy but lacks a cookie consent mechanism. Overall, CX80 Polska presents a credible and professional business with clear contact information and trust indicators.
- Enrich Education
enricheducationuk.com
Education · United Kingdom
73Medium
NIS2 10 · GDPR 85
NIS2 10 · GDPR 85
Enrich Education is a UK-based company specializing in creative and innovative educational services and products aimed at schools. Their offerings focus on promoting physical activity through school orienteering, cross-curricular outdoor learning, and Quidditch programs. The company holds several national endorsements and partnerships, positioning it as a recognized leader in youth sport education. Their digital platform provides schools with personalized content and extensive resources, supporting their mission to enhance young people's health and well-being through active learning. Technically, the website is built on a modern WordPress CMS with WooCommerce for e-commerce capabilities. It integrates multiple analytics and marketing tools such as Google Analytics, Google Tag Manager, Facebook Pixel, Twitter Tag, and LinkedIn Insight Tag. The site employs reCAPTCHA v3 for bot protection and uses a GDPR-compliant cookie consent mechanism via the Complianz plugin. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. From a security perspective, the website enforces HTTPS with an excellent SSL configuration and uses reCAPTCHA to protect forms. While explicit security headers like CSP or X-Frame-Options are not visibly confirmed, no vulnerabilities or exposed sensitive data were detected. The site lacks a published security policy or incident response contact, which could be improved to enhance trust and compliance. Overall, Enrich Education presents a professional, trustworthy, and well-maintained online presence with strong business credibility and compliance posture. The domain registration data aligns well with the business claims, supporting legitimacy. Strategic recommendations include enhancing security headers, publishing security policies, and continuous monitoring to maintain a robust security posture.
CX80 Polskacx80.pl
Manufacturing · Poland
34High
NIS2 25 · GDPR 10
NIS2 25 · GDPR 10
CX80 Polska is a well-established Polish manufacturer specializing in multifunctional chemical products, including the world's strongest cold welding adhesive 'AUTO WELD' and specialized lubricants. The company serves diverse sectors such as industry, construction, mining, transportation, and FMCG retail, positioning itself as a leading player in its market with a broad product portfolio and B2B sales channel. The website reflects a mature digital presence with multilingual support, e-commerce integration, and active social media engagement. Technically, the site is built on WordPress with WooCommerce and Elementor, leveraging modern plugins and SEO best practices, though some security headers are missing. The security posture is solid with HTTPS and no exposed sensitive data, but could be improved with explicit security policies and incident response contacts. Overall, the site is professional, trustworthy, and business credible, with room for enhanced privacy compliance and security transparency.
World Orienteering Weekworldorienteeringweek.com
Education
45High
NIS2 25 · GDPR 50
NIS2 25 · GDPR 50
World Orienteering Week is an international sports event initiative managed under the International Orienteering Federation. The website serves as a global platform for promoting orienteering events, enabling organizers worldwide to register activities during the designated week in May 2025. The site targets orienteering enthusiasts, schools, and clubs, providing event information, maps, and social media engagement. Technically, the website is built on WordPress with modern plugins and frameworks, including Bootstrap and Google Maps API, ensuring a responsive and user-friendly experience. Security posture is strong with HTTPS enforced and GDPR compliance actively managed through a cookie consent plugin. No critical vulnerabilities or blocking mechanisms were detected, indicating a mature and secure digital presence. Overall, the website demonstrates good professionalism, trustworthiness, and technical implementation, supporting its role as a key resource in the orienteering community.
Home | International Orienteering Federationorienteering.sport
—
57Medium
NIS2 25 · GDPR 35
NIS2 25 · GDPR 35
- New Element
emit.no
Technology · Norway
46High
NIS2 10 · GDPR 35
NIS2 10 · GDPR 35
Emit AS is a Norwegian company specializing in the development and sales of timing systems for sports such as orienteering, cross-country skiing, and biathlon. Established in 1994, Emit is a market leader in the Nordic region, offering products like the EKT-brikkesystem and online result services. The website reflects a mature business with a clear focus on sports technology and e-commerce. Technically, the site is built on WordPress with WooCommerce, enhanced by modern plugins for SEO and multilingual support. The infrastructure supports secure payment options including Klarna and PayPal, indicating a robust e-commerce setup. Security posture is good with HTTPS enforced and anti-spam measures in place, though explicit security headers could be improved. Privacy compliance is basic with a privacy policy present but lacking a cookie consent mechanism. Overall, the site is professional, trustworthy, and well-maintained, suitable for its target audience of sports clubs and event organizers in the Nordic countries.
SIA «Latvijas Zaļais punkts»zalais.lv
Other · Latvia
47High
NIS2 10 · GDPR 10
NIS2 10 · GDPR 10
Latvijas Zaļais punkts is a well-established Latvian environmental organization focused on promoting waste sorting, recycling, and environmental education. With over 20 years of experience, it serves a broad audience including children, youth, and businesses, aiming to foster a greener Latvia through educational campaigns and responsible business practices. The website reflects this mission with comprehensive content, including sorting location maps, news updates, and educational resources. Technically, the site employs modern web technologies such as React and Next.js, integrates Google Maps for interactive features, and uses standard analytics and tracking tools like Google Analytics and Facebook Pixel. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response contacts are not published. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, supporting the organization's credibility and outreach efforts.
International Orienteering Federationorienteering.org
Non-profit · Sweden
56Medium
NIS2 25 · GDPR 35
NIS2 25 · GDPR 35
The International Orienteering Federation (IOF) operates as the global governing body for orienteering sports, providing comprehensive resources, event information, rankings, and educational materials for multiple orienteering disciplines. The website serves a global audience of athletes, organizers, and enthusiasts, positioning IOF as an authoritative and trusted entity in the orienteering community. The digital infrastructure is built on WordPress with modern performance optimizations and integrates live event coverage and media streaming platforms. Security posture is adequate with HTTPS enforced and no exposed sensitive data, though security headers could be enhanced to improve protection. Privacy policies and cookie consent mechanisms indicate GDPR compliance. Overall, the website reflects a professional, trustworthy, and well-maintained online presence for a medium-sized non-profit sports federation based in Sweden.
- KKāpa
kapa.lv
Other · Latvia
41High
NIS2 25 · GDPR 10
NIS2 25 · GDPR 10
Kāpa is a Latvian orienteering club focused on organizing orienteering and adventure sports events such as the Kāpas Saulkrastu Pavasaris series and rogaining competitions. The website serves as a hub for event information, results, and community engagement, targeting orienteering enthusiasts primarily in Latvia. The site is built on WordPress using the Overlay theme and several plugins including Ghostkit and SimpleLightbox, with Google Tag Manager integrated for analytics. The technical infrastructure is modern and mobile-optimized, providing a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and formal security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is legitimate and consistent with a small sports club's online presence, but could improve in privacy and security transparency.
Other
54Medium
NIS2 10 · GDPR 25
NIS2 10 · GDPR 25
The website magneticlatvia.lv is currently a parked domain page indicating that the domain is for sale. It does not provide any business-related content, contact information, or services. The page is minimalistic, serving primarily as a placeholder with a link to a domain sales service. The target audience appears to be potential domain buyers or investors interested in acquiring the domain name. The business model is domain resale with no active operational business presence or offerings. Technically, the site uses basic HTML, CSS, and JavaScript with an iframe embedding content from an external suspicious domain, which raises security concerns. There is no evidence of modern CMS or frameworks, and the site lacks SEO and accessibility features. Security posture is weak, with no HTTPS enforcement visible in the HTML content, no security headers, and no privacy or cookie policies. The use of an iframe from a suspicious third-party domain further degrades trust and security. Overall, the site has a low trustworthiness score and minimal digital maturity.
- OOK Kāpa
kapaok.lv
Other · Latvia
40High
NIS2 25 · GDPR 10
NIS2 25 · GDPR 10
OK Kāpa is a Latvian orienteering club focused on organizing orienteering competitions, training sessions, and community sports activities. The website serves as an informational hub for event announcements, results, maps, and news primarily targeting local orienteering enthusiasts and athletes. The club maintains a presence through multiple subdomains dedicated to past events and uses Google Analytics for visitor tracking. The site content is mostly static and text-heavy, with limited interactive features or modern web design elements. Technical infrastructure is basic, relying on traditional HTML, CSS, and JavaScript without modern frameworks or CMS. Security posture is moderate with HTTPS usage implied but lacks visible security headers and modern charset encoding. Privacy compliance is weak due to absence of privacy and cookie policies or consent mechanisms. Overall, the website reflects a small, community-focused sports organization with room for technical and compliance improvements.
Biedrība Ādažu uzņēmējiadazuuznemeji.lv
Non-profit · Latvia
39High
NIS2 10 · GDPR 10
NIS2 10 · GDPR 10
Biedrība Ādažu uzņēmēji is a non-profit employer organization focused on fostering collaboration among businesses in the Ādaži region of Latvia. The organization represents business interests and facilitates dialogue with government institutions, municipalities, and international organizations. The website serves as an information hub for members and partners, providing news, events, and contact details. The market position is regional with a focus on local business community support and networking. Technically, the website is built on Joomla CMS using the Helix Ultimate template framework and Bootstrap 5 for responsive design. The site is mobile-optimized and presents a professional design with clear navigation. However, performance is moderate and accessibility features are basic. No advanced analytics or tracking tools are detected, indicating a privacy-conscious approach. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks important security headers such as Content-Security-Policy and X-Frame-Options. There are no visible vulnerabilities or exposed sensitive data, but the absence of privacy and cookie policies, as well as incident response information, indicates compliance gaps. The security posture is moderate but could be improved with standard best practices. Overall, the website is trustworthy and professionally maintained, with clear contact information and legitimate domain registration details. The main risks relate to privacy compliance and security hardening. Strategic improvements in these areas would enhance trust and regulatory adherence.
- Ādaži
adazunovads.lv
Government · Latvia
62Medium
NIS2 25 · GDPR 25
NIS2 25 · GDPR 25
Ādaži is the official municipal government website for Ādaži novads in Latvia, providing comprehensive information about local government structure, services, news, cultural and sports activities, and community engagement. The site targets residents, businesses, and visitors seeking official information and e-services. The website is built on Drupal CMS with modern web technologies and includes accessibility features and mobile optimization. It integrates Google Analytics with privacy-conscious settings and offers a cookie consent mechanism. Contact information is clearly presented with official emails, phone numbers, and physical addresses, enhancing trust and transparency. Security posture is good with HTTPS enforced and no visible vulnerabilities, though explicit security headers could be improved. Overall, the site is professional, trustworthy, and serves as a key digital platform for local government communication.
- BBright
bright.lv
Technology · Latvia
40High
NIS2 25 · GDPR 40
NIS2 25 · GDPR 40
Bright is a Latvian digital agency specializing in web development, graphic design, animations, social media marketing, and e-commerce solutions. Established in 2015, the company has built a solid market position with a portfolio of notable clients and a consistent brand presence. Their website reflects a professional digital maturity with good content quality, clear navigation, and mobile optimization. Technically, the site is built on WordPress with modern tools such as Yoast SEO, Google Analytics, Facebook Pixel, and CookieYes for consent management, indicating a well-rounded digital infrastructure. Security posture is strong with HTTPS enforcement, bot protection via Google reCAPTCHA, and cookie consent mechanisms, although additional security headers and a published security policy would enhance their stance. Overall, Bright demonstrates a trustworthy and credible online presence with good privacy compliance and marketing transparency.
Education · Latvia
44High
NIS2 25 · GDPR 25
NIS2 25 · GDPR 25
The website llkc.lv represents SIA Latvijas Lauku konsultāciju un izglītības centrs, a well-established Latvian organization focused on agricultural consultancy, education, and rural development services. With over 33 years of operation, it serves farmers, rural entrepreneurs, and communities by providing knowledge, consultations, and sector-specific services. The site is professionally designed with clear navigation and multiple service categories including business development, crop farming, animal husbandry, forestry, fisheries, accounting, and education. Contact information is comprehensive, including phone, email, physical address, and multiple interactive forms for user engagement. Technically, the website is built on WordPress using the Breakdance theme and several plugins such as WPForms and WP Grid Builder. It integrates Google Analytics and MailerLite for marketing and analytics purposes. The site is mobile optimized and performs moderately well, with good SEO and accessibility basics. Security posture is strong with HTTPS enforced and some security headers present, though there is room for improvement in header completeness and form security audits. Privacy and cookie policies are present and include consent mechanisms, indicating GDPR compliance. No critical security issues or WAF blocking were detected, allowing full content access and analysis. The domain registration details are consistent with the website's claims, showing a legitimate and trustworthy organization. The site links to multiple partner domains, reinforcing its ecosystem and credibility. Overall, llkc.lv is a credible, professionally maintained website serving an essential role in Latvia's agricultural and rural education sector. Strategic recommendations include enhancing security headers, conducting regular security audits especially for file uploads, and maintaining privacy compliance to uphold trust and security.
adminaurianagency.lv
Other · Latvia
48High
NIS2 25 · GDPR 10
NIS2 25 · GDPR 10
Aurian agency is a Latvian-based digital marketing and design agency specializing in website development, SEO optimization, social media marketing, and visual identity creation. The company positions itself as a professional service provider helping businesses grow and acquire more clients. The website is built on WordPress using Elementor and several plugins to enhance user experience and functionality. The technical infrastructure is modern and includes security features such as HTTPS and Google reCAPTCHA, although some security headers are missing. Privacy and cookie policies are not present, indicating a gap in compliance. Overall, the website is accessible, well-structured, and targets local Latvian businesses seeking digital marketing and design services.
- Valsts Lauku tīkls
laukutikls.lv
Government · Latvia
46High
NIS2 25 · GDPR 10
NIS2 25 · GDPR 10
Valsts Lauku tīkls is a Latvian governmental rural network focused on supporting agriculture, forestry, fisheries, and rural entrepreneurship. The website serves as an information hub providing news, events, educational resources, and sector-specific support primarily targeting Latvian rural communities and stakeholders. It is supported by the Ministry of Agriculture and the European Agricultural Fund for Rural Development, positioning it as a trusted official source in its domain. Technically, the site is built on Drupal 7 with legacy JavaScript libraries, indicating a need for modernization. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enabled and IP anonymization in analytics, but it lacks modern security headers and uses outdated JavaScript libraries, which pose potential risks. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism or GDPR explicit indicators. Overall, the site is professional and trustworthy but would benefit from technical and security updates to enhance compliance and resilience.
- ĀĀdaži
adazi.lv
Government · Latvia
61Medium
NIS2 25 · GDPR 25
NIS2 25 · GDPR 25
Ādaži is the official website of the Ādaži municipality local government in Latvia, providing comprehensive information about municipal services, governance, community events, and public resources. The site serves residents, businesses, and visitors with a broad range of content including e-services, news, cultural and sports activities, and contact details. The website is built on Drupal CMS and integrates modern web technologies, ensuring a responsive and accessible user experience. Privacy and cookie consent mechanisms are robust and GDPR compliant, reflecting a strong commitment to user data protection. Security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. Overall, the site demonstrates a professional and trustworthy digital presence for the local government entity.
Biedrība “Latvijas Lauku forums”laukuforums.lv
Non-profit · Latvia
47High
NIS2 25 · GDPR 10
NIS2 25 · GDPR 10
Latvijas Lauku forums is a national-level non-profit organization in Latvia focused on balanced rural development, civic society strengthening, and supporting local initiatives through projects and strategic priorities such as LEADER/SVVA. The website is built on WordPress with Elementor and several plugins, providing a modern and visually appealing platform showcasing their projects, members, and initiatives. Contact information and social media presence are clearly provided, enhancing business credibility. Security posture is adequate with HTTPS and no exposed sensitive data, but lacks advanced security headers and explicit security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is professional and trustworthy but could improve compliance and security transparency.
- VVidzemes jūrmalas Mūzikas un mākslas skola
vjmmskola.lv
Education · Latvia
44High
NIS2 25 · GDPR 25
NIS2 25 · GDPR 25
Vidzemes jūrmalas Mūzikas un mākslas skola is a small regional educational institution in Latvia focused on music and arts education. The website serves primarily as an informational portal with basic navigation to music and arts programs and exhibitions. The content is minimal and lacks modern interactive features or comprehensive business information. Technically, the site relies on outdated technologies such as Flash and uses a legacy character encoding, indicating a need for modernization. Security posture is weak with no visible HTTPS enforcement or security headers, and no privacy or cookie policies are present, which raises compliance concerns. Overall, the site is functional but basic, with significant room for improvement in security, privacy, and technical modernization.
Other
58Medium
NIS2 10 · GDPR 10
NIS2 10 · GDPR 10
The website skulteport.lv is currently inaccessible due to a Cloudflare Web Application Firewall (WAF) block. The landing page is a standard Cloudflare block page indicating that the visitor has been blocked from accessing the site, likely due to security rules triggered by the request. As a result, no actual business content, contact information, or policies are available for analysis. The site appears to be protected by Cloudflare's security services, but this also prevents assessment of its digital maturity or business operations. The lack of accessible content severely limits the ability to evaluate the website's compliance, security posture, or business credibility.
SIA “Saulkrastu komunālserviss”komunalserviss.lv
Energy · Latvia
51Medium
NIS2 10 · GDPR 10
NIS2 10 · GDPR 10
SIA “Saulkrastu komunālserviss” is a local Latvian company providing communal services including water supply, sewage, heating, and property management primarily in the Saulkrasti region. The company positions itself as a reliable service provider with a focus on quality and timely delivery. Their website reflects a small-sized business with a clear local market focus and a straightforward business model centered on municipal and residential service provision. Technically, the website is built on WordPress using Elementor, with modern web practices such as lazy loading and HTTPS encryption, indicating a moderate level of digital maturity. However, the absence of privacy and cookie policies, as well as security headers, suggests room for improvement in compliance and security posture. The integration with bill.me for online payments shows adoption of modern payment solutions, enhancing customer convenience. Overall, the website is professional and trustworthy but lacks some critical compliance and security features.
Biedrība "Jūras zeme"juraszeme.lv
Non-profit · Latvia
41High
NIS2 25 · GDPR 10
NIS2 25 · GDPR 10
Biedrība "Jūras zeme" is a Latvian non-profit organization dedicated to supporting coastal and rural community development through various projects and cooperation initiatives. The organization targets local communities and project applicants, providing funding and facilitating collaboration to enhance regional development. Their website reflects a professional and consistent brand presence with a focus on project information and community engagement. Technically, the site is built on WordPress with a modern tech stack including accessibility features and responsive design, though some components like WordPress core are slightly outdated. Security posture is moderate with HTTPS enabled but lacking explicit security headers and formal security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is functional and trustworthy but would benefit from enhanced privacy and security measures.
Other
52Medium
NIS2 25 · GDPR 15
NIS2 25 · GDPR 15
The website at saulkrastuslimnica.lv is currently non-functional with an empty HTML body and no accessible content. There are no metadata, scripts, forms, or links to analyze, indicating either a placeholder site or a site under construction. Due to the lack of content, no business information, contact details, or policies are available, which severely limits any meaningful security or compliance assessment. The technical infrastructure appears minimal with no detected CMS, frameworks, or hosting details. Security posture is weak with no HTTPS or security headers detected. Overall, the site presents a high risk due to lack of transparency and security controls.
- Glove Technologies, Inc.
glove.fit
Technology
53Medium
NIS2 25 · GDPR 53
NIS2 25 · GDPR 53
Glove Technologies, Inc. operates the website glove.fit, offering a SaaS platform that converts website visitors into qualified leads through real-time AI-driven personalization and visitor tracking. Their technology focuses on understanding visitor behavior, building visitor signal maps, and dynamically personalizing content to optimize lead conversion for B2B SaaS companies and enterprise clients. The platform emphasizes ease of installation with a single script tag and promises significant improvements in inbound lead generation. Technically, the website leverages modern JavaScript frameworks, likely React, and integrates third-party services such as HubSpot forms and Contentsquare for analytics and tracking. The site is hosted on Amazon Cloudfront CDN, ensuring moderate performance and good mobile optimization. However, accessibility and SEO optimizations are basic and could be improved. From a security perspective, the site uses HTTPS and avoids exposing sensitive data in its HTML. However, it lacks visible security headers, a published security policy, incident response contacts, and vulnerability disclosure mechanisms. Privacy compliance is limited, with a privacy policy present but no cookie consent mechanism or explicit GDPR compliance indicators. Overall, the website presents a professional and functional digital presence with moderate security and privacy maturity. Strategic improvements in privacy compliance, security policy transparency, and accessibility would enhance trust and compliance posture.
- MMACH Alliance
machalliance.org
Technology
70Medium
NIS2 25 · GDPR 73
NIS2 25 · GDPR 73
MACH Alliance is a non-profit organization advocating for modern enterprise technology ecosystems based on MACH principles: Microservices, API-first, Cloud-native SaaS, and Headless architectures. It serves as a certification body and community hub for technology companies and enterprises adopting composable technology. The website reflects a mature digital presence with comprehensive content, including research reports, event information, and community engagement. Technically, the site uses modern frameworks like Next.js and integrates multiple marketing and analytics tools while maintaining good performance and mobile optimization. Security posture is strong with HTTPS and some security headers, though additional headers and a formal security policy could enhance protection. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site is professional, trustworthy, and well-aligned with its business goals.
- Rīgas pieminekļu aģentūra
rigaspieminekli.lv
Government · Latvia
54Medium
NIS2 25 · GDPR 25
NIS2 25 · GDPR 25
Rīgas pieminekļu aģentūra is a government agency responsible for the coordination, planning, management, and execution of activities related to the inventory, maintenance, and restoration of monuments and memorials in Riga, Latvia. The agency focuses on preserving cultural heritage objects including memorials, sculptures, fountains, and environmental installations. The website serves as an informational portal for residents and visitors interested in Riga's monuments and related events. Technically, the website is built using standard HTML5, CSS, and JavaScript with jQuery 1.11.1. It employs Matomo analytics configured to respect user privacy by disabling cookies and honoring DoNotTrack signals. The site includes a cookie consent mechanism via cookiecuttr but lacks explicit privacy and terms of service pages. The design is consistent and professional, though mobile optimization and accessibility are basic. From a security perspective, the site does not expose sensitive data or forms but lacks visible security headers and explicit HTTPS confirmation in the provided data. The Matomo analytics setup shows privacy-conscious configuration. No incident response or security policy information is published, which is a gap for organizational security posture. Overall, the website is functional, trustworthy, and serves its informational purpose well but would benefit from enhanced security headers, explicit privacy and terms policies, and improved mobile and accessibility features to strengthen compliance and user trust.
Government · Latvia
52Medium
NIS2 25 · GDPR 10
NIS2 25 · GDPR 10
Rīgas valstspilsētas pašvaldības Dzīvojamo māju privatizācijas komisija is a municipal government entity responsible for managing housing privatization and related property services in Riga, Latvia. The website provides detailed information about their services, including property ownership transfers, land purchase agreements, and legal consultations. The target audience primarily consists of Riga residents and property owners seeking municipal housing privatization services. The site is built on the DIRcms platform and uses a variety of JavaScript libraries for UI and functionality, including jQuery, Semantic UI, and Google Maps API. Matomo analytics is implemented with privacy-conscious settings, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS enforced and CAPTCHA on forms, but lacks important security headers and cookie consent mechanisms. Overall, the website is functional and trustworthy but could improve in security and privacy compliance to better protect users and meet modern standards.
- Sarka Insights Ltd.
feedfocal.com
Technology · United Kingdom
65Medium
NIS2 25 · GDPR 95
NIS2 25 · GDPR 95
JustFeedback, operated by Sarka Insights Ltd., is a UK-based small technology company specializing in feedback survey software. Their platform offers micro surveys such as NPS®, eNPS, CSAT, and CES to help businesses collect and analyze user feedback efficiently. The company targets businesses seeking to improve customer experience and user satisfaction through data-driven insights. Technically, the website is built on modern frameworks including Next.js and UIkit, with integrations for Google Analytics and cookie consent management. The site is mobile-optimized and provides a professional user experience with clear navigation and relevant content. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms, though explicit security headers and incident response policies are not publicly documented. Overall, the website demonstrates a good security posture with no critical vulnerabilities detected. The domain registration data aligns well with the business claims, supporting legitimacy. Strategic recommendations include enhancing security headers, publishing a security policy, and providing incident response contacts to further strengthen trust and compliance.
- SSarka Insights Ltd.
upify.com
Technology
49High
NIS2 2 · GDPR 95
NIS2 2 · GDPR 95
Upify is a small technology company operating a SaaS behavioral analytics platform that provides comprehensive tools such as heatmaps, session recordings, funnels, surveys, and feedback mechanisms to help businesses understand user behavior and improve conversion rates. The website is professionally designed with clear navigation and mobile optimization, targeting business users and analysts seeking actionable insights. Technically, the site employs modern JavaScript frameworks, integrates with major analytics and marketing platforms like Google Analytics and Facebook Pixel, and uses a cookie consent management system to comply with privacy regulations. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security policies and incident response contacts are not published. Overall, the domain registration data aligns well with the business identity, supporting legitimacy and trustworthiness.