Skip to main content

Security Directory

Explore comprehensive security analyses from websites around the world. Filter by industry, location, risk level, and more.

Live Guard activity

Security teams are checking their sites with Guard right now

Run your domain before the queue fills up

157330
Websites
130
Industries
113
Countries
52
Avg Score
Page 279 of 800|Showing 13901-13950 of 39982
F

Client Challenge

financialtimes.com

60
MediaN/aenterpriseMEDIUM

The website www.ft.com represents the Financial Times, a globally recognized media organization specializing in business and financial news. The site is positioned as a leading international news publisher with a subscription-based business model offering news articles and business analysis. However, the provided HTML content is a security challenge page served by Fastly CDN, blocking access to the full website content and limiting detailed analysis. From a technical perspective, the site uses standard web technologies such as JavaScript, CSS, and HTML5, and is hosted or proxied via Fastly CDN. The presence of a Content-Security-Policy header indicates some security best practices, but the lack of additional security headers and visible SSL configuration details limits the security assessment. No analytics, advertising, or tracking scripts were detected in the provided snippet. Security posture is moderate given the CSP header and HTTPS implied by the domain, but the inability to access full content and lack of WHOIS data reduces confidence. No privacy, cookie, or terms of service policies were found in the provided content, and no contact or incident response information is visible. The domain WHOIS data is unavailable from the .com registry, which is unusual for a major brand and suggests privacy protection or proxy registration. Overall, the site appears legitimate and safe with no adult or explicit content detected. However, the security challenge page and missing WHOIS data limit the depth of analysis. Strategic recommendations include improving transparency of security and privacy policies, ensuring WHOIS data availability or clarity, and enhancing security headers and incident response information.

60
50
17
82
62
85
100
medianewsfinancesecurity-challengefastly
JavaScriptCSSHTML5
2025-10-09T18:52:23.777Z
T

TSO (The Stationery Office)

thegazette.co.uk

65
GovernmentUnited KingdommediumMEDIUM

The Gazette is the UK's official public record publication, established in 1665 and published by TSO under the authority of His Majesty's Stationery Office, part of The National Archives. It serves as a trusted source for official notices including insolvency, wills and probate, company data, and historical archives. The website targets businesses, legal professionals, government entities, and the general public seeking authoritative public records. Its business model includes providing official notices, data services, and archival access with paid options for notice placement and data subscriptions. Technically, the website employs modern JavaScript libraries such as RequireJS and Modernizr, uses Matomo Analytics with consent management, and integrates a live chat widget for customer support. The site is moderately optimized for performance and mobile devices, with good accessibility and SEO practices. The presence of cookie consent banners and privacy policies indicates a mature approach to privacy compliance. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms to manage analytics tracking. However, it lacks explicit security policy pages and incident response information, and security headers are not visibly present in the HTML. No vulnerabilities or exposed sensitive data were detected. Overall, the security posture is solid but could be improved with additional transparency and technical controls. The domain WHOIS data is unavailable due to Nominet UK restrictions, consistent with the domain being government-controlled. This lack of public WHOIS data does not detract from the site's legitimacy given its official status. The site is trustworthy, professionally maintained, and safe for general audiences.

80
83
17
75
-
80
100
officialgovernmentpublicrecordukdataservice+4 more
JavaScriptMatomo AnalyticsRequireJSModernizr+1

Partner Domains:

www.nationalarchives.gov.uk
partner
www.tsoshop.co.uk
partner
2025-10-09T18:52:13.750Z
dasburo.com favicon

Büro am Draht

dasburo.com

42
TechnologyGermanymediumHIGH

Büro am Draht is a German-based digital business solutions provider specializing in developing custom digital platforms that scale with client businesses. Established since 1996, the company leverages over 25 years of experience and a team of 50+ experts to deliver technically excellent and honest digital transformation services. Their offerings include workshops such as Architecture Assessment, Digital Check, and Retrospective, targeting businesses seeking tailored digital solutions. The website content is professional and well-structured, reflecting a medium-sized technology company with a consistent brand presence. Technically, the website uses the Scrivito CMS platform with modern JavaScript and CSS technologies. The site is mobile-optimized and performs moderately well, with good SEO and basic accessibility features. However, there is room for improvement in security configurations, such as enabling DNSSEC and implementing security headers. The site uses HTTPS, ensuring encrypted communications. From a security perspective, the website shows a moderate security posture with HTTPS enabled and domain transfer protection. However, it lacks visible security headers, privacy and cookie policies, and incident response information, which are critical for compliance and trust. No vulnerabilities or suspicious content were detected. The WHOIS data confirms the domain's legitimacy and long-standing registration, supporting the company's credibility. Overall, the website is a credible and professional digital solutions provider with solid technical infrastructure but requires enhancements in privacy compliance and security best practices to improve trust and regulatory adherence.

15
50
2
40
62
75
20
digitaltransformationdigitalplatformsworkshopstechnologyconsultingscrivitocms
JavaScriptScrivito CMSCSSHTML5
2025-10-09T18:50:44.130Z
diva-e.com favicon

diva-e Digital Value Excellence GmbH

diva-e.com

75
TechnologyGermanylargeMEDIUM

diva-e Digital Value Excellence GmbH is a prominent German digital experience partner specializing in end-to-end digital solutions ranging from strategy to implementation. The company positions itself as a market leader in digital experience services, targeting businesses seeking digital transformation and sustainable business success. Their key services include digital consulting, digital experience platforms, digital marketing, application management, and total experience solutions. The website reflects a mature digital presence with professional branding and comprehensive content tailored for a B2B audience. Technically, the website leverages modern JavaScript frameworks such as Vue.js and Nuxt.js, integrates consent management via Usercentrics, and uses HubSpot for marketing and form handling. The site is mobile-optimized, accessible, and SEO-friendly, indicating a high level of digital maturity. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS, employs standard security headers, and integrates privacy compliance tools. However, explicit security policies and incident response information are not prominently published, which could be improved. The absence of WHOIS registration data is a minor concern but does not significantly detract from the overall trustworthiness given the professional web presence and social proof. Overall, diva-e demonstrates a strong digital and business posture with good security hygiene and privacy compliance. Strategic recommendations include publishing detailed security policies, enhancing incident response visibility, and clarifying domain registration details to bolster trust further.

80
53
47
85
95
55
100
digitalexperienceconsultingtechnologydigitalmarketingb2bservices
JavaScriptVue.jsNuxt.jsUsercentrics CMP+1
2025-10-09T18:50:34.041Z
web.dev favicon

web.dev

web.dev

67
TechnologyUnited StatesenterpriseMEDIUM

web.dev is an authoritative web development resource platform operated by Google LLC, providing comprehensive guidance, courses, and best practices for building modern, accessible, performant, and secure web experiences. The site targets web developers and technical professionals, offering content authored by the Chrome team and external experts. It holds a strong market position as a trusted educational resource in the technology sector. Technically, the website is built on modern web standards, leveraging Google's internal Devsite framework, Google Cloud hosting, and integrates Google Fonts, Material Icons, and Google Tag Manager for analytics and tracking. The site demonstrates excellent performance, mobile optimization, accessibility, and SEO practices. Security posture is robust with HTTPS enforcement, security headers, and no visible vulnerabilities. Privacy compliance is strong, linking to Google's comprehensive privacy and terms policies, and employing cookie consent mechanisms. However, direct contact information and explicit security policies or incident response contacts are not publicly available. Overall, the website scores highly in content quality, technical implementation, security, privacy compliance, and business credibility, reflecting its enterprise-level maturity and trustworthiness.

60
73
2
45
75
90
100
webdevelopmenteducationtechnologyperformanceaccessibility+4 more
HTML5CSS3JavaScriptGoogle Fonts+6

Partner Domains:

developer.chrome.com
partner
blog.chromium.org
partner
2025-10-09T18:50:08.580Z
lijit.com favicon

Sovrn Holdings, Inc.

lijit.com

62
TechnologyN/amediumMEDIUM

Lijit.com is an informational website representing an ad serving domain owned by Sovrn Holdings, Inc., a company specializing in advertising technology and publisher monetization. The site serves primarily as a landing page to clarify the domain's purpose and directs users to Sovrn's main website for further information and contact. The business is positioned as a technology provider in the digital advertising space, targeting publishers and advertisers seeking monetization solutions. The domain has a long-established history dating back to 2006, consistent with the company's operational timeline. Technically, the website employs standard web technologies including Bootstrap for responsive design, HTML5, CSS3, and JavaScript. The site is mobile optimized with basic accessibility and SEO features, though it lacks advanced metadata and security headers. DNS is managed via NS1, but DNSSEC is not enabled, representing a potential security enhancement opportunity. The site does not implement privacy or cookie policies, nor does it provide contact information or forms, limiting user engagement and compliance transparency. From a security perspective, the site is accessible without WAF or challenge pages, but it lacks critical security headers and DNSSEC, which could improve its security posture. The WHOIS data is consistent and trustworthy, with domain registration managed by GoDaddy and domain status flags preventing unauthorized changes. No vulnerabilities or exposed sensitive data were detected. However, the absence of privacy and cookie policies and contact information for incident response reduces compliance and trust levels. Overall, the website is functional and consistent with its stated purpose but is minimalistic and lacks comprehensive compliance and security features. Strategic improvements in privacy compliance, security headers, and user contact mechanisms would enhance trust and security posture.

15
40
2
85
100
85
100
advertisingadservingpublishermonetizationsovrntechnology
BootstrapHTML5CSS3JavaScript

Partner Domains:

sovrn.com
parent
2025-10-09T18:49:22.297Z
verkada.com favicon

Verkada

verkada.com

71
TechnologyUnited StatesenterpriseMEDIUM

Verkada is a leading enterprise technology company specializing in modern, cloud-managed physical security systems. Their integrated platform combines video surveillance, access control, alarms, environmental sensors, intercoms, and visitor management into a single cloud-based solution. Trusted by over 33,000 organizations, Verkada targets enterprises and organizations seeking scalable, easy-to-use security solutions. The company emphasizes AI-powered analytics and seamless integration across devices and locations. Technically, the website is built using the Hugo static site generator, leveraging modern JavaScript frameworks, Wistia for video hosting, and Google Tag Manager for analytics. The site is well-optimized for performance, mobile responsiveness, and SEO, with comprehensive privacy and cookie policies in place. Security best practices are evident, including HTTPS enforcement, SOC 2 type 2 compliance, and strong encryption standards. The security posture is robust with no visible vulnerabilities or exposed sensitive data. However, the absence of public incident response contacts and vulnerability disclosure policies suggests areas for improvement. The WHOIS data is missing or unavailable, which slightly reduces domain trustworthiness but does not outweigh the professional presentation and trust signals on the site. Overall, Verkada presents a mature, secure, and professional digital presence aligned with its market position as a top cloud physical security provider. Strategic recommendations include enhancing transparency around incident response and vulnerability disclosures to further strengthen trust and compliance.

75
58
17
85
65
85
100
securitycloudphysicalsecurityvideosurveillanceaccesscontrol+2 more
Hugo static site generatorJavaScriptWistia video embedsGoogle Tag Manager+2
2025-10-09T17:45:50.914Z
independent.ie favicon

Irish Independent

independent.ie

65
MediaIrelandlargeMEDIUM

Irish Independent is a prominent Irish news media organization providing comprehensive coverage of politics, sports, business, lifestyle, and entertainment. The website targets a broad audience interested in Irish current affairs and operates a media publishing business model supported by advertising and subscription services. The site demonstrates a consistent and professional brand presence with high-quality content and a well-structured user experience. Technically, the website employs a modern JavaScript-based infrastructure with integrations for video playback, advertising, and consent management. While the site uses HTTPS and several advanced technologies, some legacy components such as an outdated jQuery version are present. Performance is moderate with good mobile optimization and SEO practices. From a security perspective, the site enforces HTTPS and uses consent management tools to comply with privacy regulations. However, explicit privacy and cookie policies were not found in the provided content, indicating room for improvement in privacy compliance. Security headers are partially implemented, and no critical vulnerabilities were detected. Overall, the website is trustworthy and professionally maintained, but the absence of WHOIS data and explicit privacy documentation slightly reduce the confidence level. Strategic improvements in privacy transparency and updating legacy libraries would enhance the security and compliance posture.

25
85
17
87
57
70
100
newsmediairishpoliticssports+3 more
JavaScriptJSON-LDPrebid.jsGoogle Publisher Tags (GPT)+3
2025-10-09T17:44:04.034Z
S

ServiceNow

service-now.com

66
TechnologyUnited StatesenterpriseMEDIUM

ServiceNow is a leading enterprise technology company specializing in AI-powered workflow automation and IT service management solutions. Their website showcases a comprehensive portfolio of products and services designed to streamline business operations across various industries. The company targets large enterprises and business professionals seeking digital transformation through AI and automation. The website is professionally designed, mobile-optimized, and provides clear navigation and rich content to support user engagement. Technically, the website employs modern web technologies including Adobe Experience Manager CMS, Akamai CDN, Adobe Launch for tag management, and Helix RUM for real user monitoring. The site demonstrates strong performance, accessibility, and SEO practices. Security measures include HTTPS enforcement, robust security headers, and secure form implementations, reflecting a mature security posture. While WHOIS data is unavailable due to registry restrictions, the website's security, privacy policies, and certifications such as ISO 27001 and SOC 2 indicate a trustworthy and compliant enterprise. No critical vulnerabilities or exposed sensitive data were detected. Overall, the site presents a low risk profile with strong business credibility and technical maturity. Strategic recommendations include publishing explicit security policies and incident response information, adding a vulnerability disclosure program, and providing data protection officer contact details to enhance transparency and trust.

-
85
77
85
-
90
100
servicenowaiplatformenterpriseworkflowsitservicemanagementcustomerservice+5 more
JavaScriptAdobe Launch (Tag Manager)Akamai Service WorkerHelix RUM (Adobe Helix Real User Monitoring)+4

Partner Domains:

store.servicenow.com
service
learning.servicenow.com
service

+3 more partners

2025-10-09T17:43:33.877Z
we-are-adot.com favicon

Veepee|ad

we-are-adot.com

58
RetailFrancelargeMEDIUM

Veepee|ad is a newly established retail media advertising company launched in 2023, operating as the advertising arm of the Veepee group, a pioneer in event sales on the internet in Europe. The company offers a comprehensive suite of retail media solutions including display, search, CRM, social retail, programmatic advertising, and couponing services, targeting a large member base of 28 million active users. Their market position is strong within the European retail media landscape, leveraging the parent company's extensive e-commerce platform and brand partnerships. Technically, the website is built on the HubSpot CMS platform, utilizing modern JavaScript libraries and marketing automation tools. The site is mobile optimized, well-structured, and employs standard SEO and accessibility practices, though some improvements in security headers and DNSSEC could be made. The domain is newly registered but consistent with the business launch timeline, with transparent WHOIS data and no privacy protection, enhancing trust. Security posture is good with HTTPS enforced and domain transfer protection, but lacks published security policies or incident response contacts. Privacy compliance is strong with clear privacy and cookie policies and consent mechanisms in place. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website presents a professional, trustworthy, and business-focused digital presence. Recommendations include enabling DNSSEC, publishing explicit security and incident response policies, and enhancing security headers to further strengthen the security posture and trustworthiness.

45
50
2
60
52
75
100
retailmediaadvertisingmarketinghubspotveepee
HubSpot CMSJavaScriptSplide.js (carousel)CSS3+1

Partner Domains:

veepee.fr
parent
linkedin.com
partner

+1 more partners

2025-10-09T17:40:42.413Z
claraandco.co.uk favicon

Clara and Co

claraandco.co.uk

58
RetailN/asmallMEDIUM

Clara and Co is a small retail e-commerce business specializing in luxury women's fashion, emphasizing timeless elegance and contemporary style. The website presents a curated collection aimed at women who appreciate sophisticated and classic fashion. The business model is focused on online retail with features such as newsletter subscriptions and social media engagement, although direct contact details are limited to a contact form. The market position is niche, targeting customers seeking quality and timeless fashion pieces. Technically, the website is built using modern web technologies including Next.js and React, indicating a contemporary and scalable infrastructure. The site is mobile-optimized with good design quality and clear navigation, although some accessibility features could be improved. Performance is moderate, with no major issues detected in the HTML content. SEO practices are adequately implemented with proper meta tags and Open Graph data. From a security perspective, the site uses HTTPS but lacks visible security headers and explicit security policies. There is no cookie consent mechanism, which may impact GDPR compliance. No vulnerabilities or exposed sensitive data were detected in the content. The WHOIS lookup failed due to domain naming rule violations, which raises concerns about domain registration legitimacy but does not necessarily reflect on the website's operational security. Overall, the website is professional and functional with moderate trustworthiness. Strategic improvements in security headers, privacy compliance, and clearer business contact information would enhance the security posture and user trust. The domain registration inconsistency should be investigated to ensure full legitimacy and compliance.

30
53
2
70
72
70
100
luxuryfashionwomenswearecommerceretail
Next.jsReactJavaScriptCSS
2025-10-09T16:38:49.663Z
B

BambooHR

bamboohr.com

69
TechnologyUnited StateslargeMEDIUM

BambooHR is a leading provider of comprehensive HR software solutions designed to streamline and simplify human resource management for businesses globally. Their platform integrates key HR functions including hiring, onboarding, payroll, benefits administration, performance management, and compensation into a single, easy-to-use system. With a strong market position as the #1 rated HR software based on 2024 reviews and serving over 34,000 businesses, BambooHR targets HR professionals and organizations seeking efficient and scalable HR management tools. The company operates on a SaaS subscription model and emphasizes customer satisfaction and security. Technically, BambooHR's website demonstrates a mature digital infrastructure leveraging modern JavaScript libraries, Cloudflare for performance and security, and Adobe Experience Manager as the CMS platform. The site is well-optimized for mobile devices, accessibility, and SEO, reflecting a high level of digital maturity. Security measures include HTTPS enforcement, multi-layered defense, annual penetration testing, SOC II certification, and SAML support for authentication, indicating a robust security posture. While the WHOIS data for the domain is unavailable, which is unusual, the website's professional content, branding consistency, and trust indicators strongly support the legitimacy of the business. The site lacks explicit vulnerability disclosure and incident response contact information, which could be improved to enhance transparency and security readiness. Overall, BambooHR presents a secure, professional, and trustworthy online presence aligned with its market leadership in HR software. Strategically, BambooHR should consider publishing a dedicated vulnerability disclosure policy and incident response contacts to strengthen security transparency. Enhancing data retention policy disclosures and maintaining rigorous security audits will further solidify trust. The company’s digital and security posture positions it well for continued growth and customer confidence in a competitive HR technology market.

30
50
47
100
52
85
100
hrsoftwarepayrollbenefitshiringonboarding+3 more
JavaScriptMD5 libraryCheq.jsCloudflare Insights
2025-10-09T16:37:33.985Z