Security reports directory
150,190 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,190001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
140,101–140,150 of 150,190
- Cognizant Technology Solutions Corp
cognizant.com
Technology · United States
69Medium
NIS2 43 · GDPR 63
NIS2 43 · GDPR 63
Cognizant Technology Solutions Corp is a large, established enterprise specializing in technology services and consulting, with a strong focus on AI, digital transformation, cloud, and industry-specific solutions. The company serves a broad range of sectors including healthcare, finance, manufacturing, retail, and more. Their website demonstrates a mature digital infrastructure leveraging Adobe Experience Manager, Adobe Analytics, and other modern technologies, ensuring a professional and user-friendly experience. Security measures such as reCAPTCHA and OneTrust cookie consent are implemented, reflecting a good security posture. Overall, the site is well-structured, compliant with privacy regulations, and presents a trustworthy and authoritative business presence.
- Zeekr Technology Europe AB
cevt.se
Transportation · Sweden
62Medium
NIS2 35 · GDPR 60
NIS2 35 · GDPR 60
Zeekr Technology Europe AB, formerly known as CEVT, is a leading technology company specializing in electric mobility solutions. Based in Gothenburg, Sweden, the company employs over 900 researchers and engineers focused on developing intelligent, sustainable, and user-centric automotive technologies. Their offerings include advanced in-car experiences, smart driving systems, future mobility platforms, and energy efficiency optimizations, positioning them as a key player in the electric vehicle technology sector within the Geely Group ecosystem. The website reflects a mature digital presence with comprehensive content, modern technology stack, and strong compliance with privacy regulations including GDPR. Security posture is robust with HTTPS enforcement, security headers, and consent management mechanisms in place. However, explicit security policy and incident response contacts are not prominently published, suggesting room for improvement. Overall, the company demonstrates high professionalism, trustworthiness, and alignment between their digital footprint and business identity.
Örebro universitetoru.se
Education · Sweden
54Medium
NIS2 0 · GDPR 15
NIS2 0 · GDPR 15
Örebro universitet is a well-established public university in Sweden, offering a broad range of educational programs and conducting research with a focus on modernity and quality. The website reflects a strong institutional presence with clear branding, comprehensive content for students and researchers, and active engagement through multiple official social media channels. The university positions itself as a highly ranked institution with a commitment to innovation and collaboration. Technically, the website employs modern web technologies including Bootstrap, FontAwesome, and JSON-LD structured data, likely running on a CMS such as Episerver. The site is mobile-optimized, accessible, and SEO-friendly, providing a good user experience. Performance is moderate with room for optimization. From a security perspective, the site uses HTTPS and implements a cookie consent mechanism compliant with GDPR. However, it lacks visible security policies, incident response contacts, and vulnerability disclosure information. Security headers and advanced security practices are not evident in the provided data, suggesting areas for improvement. Overall, the website is trustworthy and professional, with no signs of blocking or WAF interference. The domain registration details align well with the university's identity, supporting legitimacy. Strategic recommendations include enhancing security transparency, publishing incident response and vulnerability disclosure information, and improving security header implementation to strengthen the security posture.
- Modulsystem Sweden AB
modulsystem.se
Transportation · Sweden
36High
NIS2 0 · GDPR 15
NIS2 0 · GDPR 15
Modulsystem Sweden AB is a well-established company specializing in payment and ticketing systems primarily for parking and public transportation sectors in Sweden. With over 30 years of experience, the company offers a range of services including payment solutions, card terminals with proprietary transaction handling, system management, and software development. Their business model focuses on B2B engagements, targeting organizations requiring innovative and reliable payment infrastructure. The company maintains partnerships with leading manufacturers and has secured framework agreements with notable partners such as Securitas Sverige AB. Technically, the website employs a modern technology stack including jQuery, Bootstrap 4, and Google Maps API, ensuring a responsive and user-friendly experience. The site is moderately optimized for performance and SEO, with good mobile responsiveness and clear navigation. However, some accessibility features could be improved. From a security perspective, the site uses HTTPS and implements a cookie consent mechanism compliant with GDPR principles. Google Analytics is used for user tracking with transparent cookie information. However, the absence of explicit privacy policies, security headers, and incident response contacts indicates room for improvement in security maturity. Overall, the website presents a professional and credible business front with moderate risk. Strategic enhancements in privacy documentation, security headers, and incident response readiness would strengthen trust and compliance.
Other
28High
NIS2 5 · GDPR 0
NIS2 5 · GDPR 0
The website crmportalen.se is currently inaccessible, returning an HTTP 404 Not Found error page with no meaningful content or metadata available. Due to the lack of accessible content, no business information, contact details, or security policies can be identified. The technical infrastructure cannot be assessed beyond the absence of HTTPS or security headers. This severely limits the ability to evaluate the website's security posture, privacy compliance, or business credibility. The site appears to be either offline, misconfigured, or the requested resource is missing, resulting in a critical failure to provide any user or business value.
- Ggallerikristineberg.se
pfevent.se
Other · Sweden
41High
NIS2 0 · GDPR 0
NIS2 0 · GDPR 0
The website pfevent.se, titled 'gallerikristineberg.se', represents a small art platform named Showroom Kristineberg based in Sweden. It focuses on promoting and supporting art and artists by providing a creative space for both established and emerging talents. The platform targets art enthusiasts and the general public interested in art exhibitions and creative expression. The business model is centered around art exhibition and promotion, positioning itself as a niche player in the art community. The website content is primarily in Swedish and offers limited contact information, mainly an email address for art-related inquiries.
Teledyne FLIR LLCflir.com
Technology · United States
41High
NIS2 17 · GDPR 43
NIS2 17 · GDPR 43
Teledyne FLIR LLC operates a comprehensive and professionally designed website focused on thermal imaging, night vision, and infrared camera systems. The company is positioned as a world leader in these technologies, serving diverse sectors including government, defense, industrial, automotive, and public safety. Their business model includes direct product sales, OEM components, and integrated solutions, supported by training and customer service. The website reflects a mature digital infrastructure with modern analytics, marketing tools, and cookie consent mechanisms, indicating a high level of digital maturity and compliance with privacy regulations. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response contacts are not publicly detailed. Overall, the site demonstrates high professionalism, trustworthiness, and a strong market presence.
Gunnebo ABgunnebo.com
Transportation · Sweden
43High
NIS2 5 · GDPR 63
NIS2 5 · GDPR 63
Gunnebo AB is a global leader in security solutions, specializing in entrance control and safe storage systems designed to protect valuables and control people flow in various sectors including public transport, banking, retail, and industrial sites. The company operates in over 100 markets and is owned by Altor and Stena Adactum. Their website reflects a mature digital presence with comprehensive content, clear branding, and a focus on customer engagement through testimonials and detailed business unit information. Technically, the site is built on WordPress with modern technologies such as React and integrates marketing and analytics tools like HubSpot and Google Tag Manager, supported by a robust cookie consent mechanism via OneTrust.
- RRiverty Group GmbH
gothiagroup.com
Finance · Germany
63Medium
NIS2 0 · GDPR 48
NIS2 0 · GDPR 48
Riverty Group GmbH operates a professional and comprehensive financial services website focused on receivables management, debt collection, and payment solutions such as Buy Now Pay Later. The company holds reputable industry certifications and memberships, reinforcing its market position as a leading European receivables management firm. The website offers multiple self-service portals and a mobile app to facilitate consumer interactions and payments, targeting primarily business clients. Technically, the site employs modern analytics and marketing technologies, including Microsoft Application Insights, Google Analytics, Matomo, and Usercentrics for GDPR-compliant consent management. The site is well-optimized for mobile and accessibility, with a professional design and clear navigation. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. Privacy policies and terms of service are comprehensive and clearly linked. Overall, the domain registration data aligns well with the website content, supporting legitimacy and trustworthiness.
- CCPAC Systems
cpacsystems.se
Technology · Sweden
41High
NIS2 0 · GDPR 15
NIS2 0 · GDPR 15
CPAC Systems AB is a Swedish technology company specializing in embedded systems and vehicle automation solutions across multiple industries including marine, offroad machinery, commercial vehicles, agriculture, and construction. As a member of the Volvo Group with over 25 years of experience, CPAC Systems holds a strong market position as an innovator in embedded control and electromobility systems. Their website reflects a professional and consistent brand image, targeting industrial clients and vehicle manufacturers with a B2B business model. The company offers key services such as embedded systems development, vehicle automation, situational awareness, and electromobility control systems. Technically, the website is built on WordPress with Elementor, leveraging modern web technologies and integrating Google Analytics and Usercentrics for privacy compliance. The site is mobile-optimized and performs moderately well.
Photowall (Nordic E Trade AB)photowall.com
Retail · Sweden
58Medium
NIS2 5 · GDPR 63
NIS2 5 · GDPR 63
Photowall is a Sweden-based e-commerce retailer specializing in customizable wall decor products including wallpapers, canvases, posters, and paints. The company operates multiple localized websites targeting Nordic and European markets, offering personalized products and influencer collections. The website demonstrates a mature digital infrastructure leveraging modern technologies such as React, New Relic monitoring, and comprehensive marketing and analytics integrations. Security posture is strong with HTTPS enforcement, cookie consent mechanisms, and no visible vulnerabilities. However, explicit security and incident response policies are not publicly available. Overall, Photowall presents a professional, trustworthy, and privacy-compliant online presence suitable for its retail business model.
Alfa Neon ABalfaneon.se
Manufacturing · Sweden
47High
NIS2 0 · GDPR 15
NIS2 0 · GDPR 15
Alfa Neon AB is a well-established Swedish company specializing in signage and profiling solutions, serving primarily the Scandinavian market with over 50 years of industry experience. The company positions itself as a leading supplier of sustainable visual communication solutions, targeting B2B customers who require comprehensive signage and facade systems to enhance their brand visibility. Their website reflects a professional and consistent brand image, supported by customer case studies and industry partnerships such as PIBE. Technically, the website is built on WordPress with modern frameworks like Bootstrap and uses popular libraries such as jQuery and Flickity for enhanced user experience. The site is mobile-optimized and SEO-friendly, leveraging Yoast SEO and Google Analytics for performance monitoring. Security-wise, the site enforces HTTPS and integrates Google reCAPTCHA for form protection, though it lacks explicit security headers and published security policies, which are recommended for further hardening. Privacy compliance is addressed with a cookie banner and a privacy policy, indicating awareness of GDPR requirements. Overall, the site is trustworthy, well-maintained, and suitable for its business purpose.
Vy flygbussarnaflygbussarna.se
Transportation · Sweden
55Medium
NIS2 0 · GDPR 58
NIS2 0 · GDPR 58
Vy flygbussarna is a well-established transportation company specializing in airport shuttle services across Sweden. With a history dating back to 1989, the company offers reliable, sustainable, and affordable travel options to six major Swedish airports. Their digital presence is robust, featuring a modern, responsive website built on Next.js and Chakra UI, integrated with Google Maps and advanced analytics via Piwik PRO. The site demonstrates strong privacy compliance with comprehensive cookie consent mechanisms and clear privacy and terms of service documentation. Security posture is solid, with HTTPS enforced and appropriate security headers in place, though there is room for improvement in publishing dedicated security policies and incident response contacts. Overall, Vy flygbussarna presents a professional, trustworthy, and user-friendly online platform that supports their market position as a leading airport shuttle provider in Sweden.
- TTDC Erhverv
tdc.com
Telecommunications · Denmark
66Medium
NIS2 40 · GDPR 58
NIS2 40 · GDPR 58
TDC Erhverv is a leading Danish telecommunications provider specializing in integrated communication and IT solutions for businesses of all sizes. Their offerings include mobile subscriptions, internet services, IT security, and collaboration tools, targeting small and medium-sized enterprises as well as larger organizations and public institutions. The website reflects a strong market position with a professional and modern design, clear navigation, and comprehensive content tailored to their business audience. Technically, the site is built using modern frameworks such as React and Gatsby, with integrations to major analytics and marketing platforms like Adobe Experience Cloud and Google Analytics. Security posture is robust with HTTPS enforcement and a detailed cookie consent mechanism ensuring GDPR compliance. However, explicit security policies and incident response contacts are not prominently available, representing an area for improvement. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with privacy regulations.
MAG Interactive ABmaginteractive.com
Technology · Sweden
58Medium
NIS2 5 · GDPR 40
NIS2 5 · GDPR 40
MAG Interactive AB is a Swedish mobile gaming company specializing in the development and publishing of engaging mobile games. The company positions itself as a creative and passionate game developer with a portfolio of popular titles targeting mobile game players globally. The website reflects a medium-sized enterprise with a clear focus on mobile gaming and investor relations, indicating a publicly listed status. The business model centers on creating quality gaming experiences that encourage player retention and engagement. From a technical perspective, the website employs standard web technologies including HTML5, CSS3, JavaScript, and Font Awesome icons. Google Tag Manager is used for analytics and marketing tracking. The site is moderately optimized for performance and mobile devices, with basic accessibility and SEO features. However, there is room for improvement in security headers and metadata completeness. Security posture is adequate with HTTPS enforced and a cookie consent mechanism in place, but lacks advanced security headers and explicit security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with a cookie notice present but no explicit privacy policy found on the main page. Business credibility is strong, supported by clear contact information, investor relations transparency, and consistent branding. Overall, the website is professional and trustworthy but would benefit from enhanced privacy disclosures, security policies, and technical security improvements to strengthen compliance and user trust.
Ciceron Groupcicerongroup.com
Media · Sweden
36High
NIS2 0 · GDPR 58
NIS2 0 · GDPR 58
Ciceron Group is a well-established event and experience agency based in Stockholm, Sweden, with a strong market position as Sweden’s leading experience agency since 2006. The company specializes in creating memorable events, conferences, corporate travel, and brand activations, serving a diverse clientele with a focus on brand-human connections. Their website reflects a professional and modern digital presence, leveraging WordPress with advanced plugins and frameworks such as Yoast SEO, UIkit, and FullPage.js to deliver a rich user experience. The site is mobile-optimized, SEO-friendly, and incorporates comprehensive cookie consent mechanisms aligned with GDPR requirements. Security posture is robust, with HTTPS enforced, bot management via Cloudflare, and no visible vulnerabilities or exposed sensitive data. The company demonstrates strong privacy compliance and transparent data collection practices through detailed cookie categorization and consent management. Overall, the website and business exhibit high professionalism, trustworthiness, and digital maturity.
UpTime Worlduptimeworld.com
Technology
40High
NIS2 0 · GDPR 28
NIS2 0 · GDPR 28
UpTime World is a small SaaS company specializing in uptime monitoring services for websites and SSL certificates. Their platform offers detailed analytics, customizable status pages, and incident management features, targeting website owners and administrators who require reliable uptime tracking. The website is professionally designed with clear navigation and mobile optimization, reflecting a moderate level of digital maturity. Technically, the site uses modern web technologies including JavaScript, CSS, and likely the Laravel framework, with deferred script loading to enhance performance. Security posture is adequate with HTTPS enforced and CSRF protection in forms; however, the absence of key security headers and lack of published security policies indicate room for improvement. Privacy compliance is limited due to missing cookie consent mechanisms and only basic privacy policy coverage. Overall, the site is functional and trustworthy but could benefit from enhanced security and privacy practices to strengthen user trust and regulatory compliance.
Coop Sverigecoop.se
Retail · Sweden
53Medium
NIS2 0 · GDPR 0
NIS2 0 · GDPR 0
Coop Sverige AB operates a comprehensive retail and e-commerce platform focused on grocery shopping, recipe inspiration, and membership benefits primarily targeting Swedish consumers and businesses. The website coop.se serves as a digital storefront offering online shopping, banking services, and personalized member offers, positioning Coop as a leading cooperative retailer in Sweden. The platform integrates modern technologies such as React, Dynamic Yield for personalization, and Google Tag Manager for analytics, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforcement, consent management, and standard security headers, although explicit security policies and incident response details are not publicly disclosed. Overall, the website demonstrates high professionalism, trustworthiness, and compliance with GDPR, supported by clear privacy and cookie policies. The domain registration aligns well with the business identity, reinforcing legitimacy. Strategic recommendations include publishing detailed security policies, vulnerability disclosure mechanisms, and enhancing transparency on data retention and DPO contact information.
Profoto ABprofoto.com
Retail · Finland
41High
NIS2 0 · GDPR 58
NIS2 0 · GDPR 58
Profoto AB operates a professional e-commerce platform specializing in high-end lighting equipment for photographers and videographers. The website showcases a broad range of products including monolights, on-camera flashes, LED panels, and various light shaping tools. The company targets professional creatives demanding premium lighting solutions, positioning itself as a market leader in this niche. The site features comprehensive product information, multimedia content, and a well-structured navigation system, enhancing user engagement and conversion potential. Technically, the website employs modern web technologies such as React, jQuery, and Slick Carousel, with integrations for Vimeo video content and multiple third-party analytics and marketing tools including Google Analytics, Microsoft Clarity, Facebook Pixel, and LinkedIn Insight. The presence of Cookiebot ensures robust cookie consent management, aligning with GDPR requirements. The site is hosted securely with HTTPS and includes anti-forgery tokens in forms, indicating a mature digital infrastructure. From a security perspective, the website demonstrates strong practices including encrypted connections, consent mechanisms, and no visible exposure of sensitive data. While explicit security headers are not fully enumerated, the overall posture is solid with no detected vulnerabilities or WAF interference. The domain registration details are consistent with the business identity, reinforcing trustworthiness. Overall, Profoto.com presents a secure, professional, and user-friendly platform that effectively supports its business objectives. Strategic recommendations include enhancing explicit security header implementations, continuous monitoring of third-party scripts, and maintaining transparency in privacy and data protection practices to sustain compliance and user trust.
- iLOQ
iloq.com
Technology · Finland
68Medium
NIS2 5 · GDPR 63
NIS2 5 · GDPR 63
iLOQ Ltd. is a Finland-based company specializing in battery-free smart locking and access management solutions. The company offers a comprehensive ecosystem including smart keys, mobile access products, and cloud-based management software designed for residential, commercial, and critical infrastructure sectors globally. Their market position is strong with over 10 million locks and keys in use and a wide dealer network. The website demonstrates a mature digital presence with multi-language support, modern technology stack, and extensive use of analytics and marketing tools. Security posture is solid with HTTPS, cookie consent mechanisms, and penetration-tested cloud infrastructure, though explicit security policies and incident response information are not publicly detailed. Overall, the site is professional, trustworthy, and compliant with GDPR and cookie regulations.
- Ctc ferrofil as
ctc.no
Mechanical or industrial engineering · Norway
58Medium
NIS2 5 · GDPR 75
NIS2 5 · GDPR 75
Surahammars kommunsurahammar.se
Government · Sweden
47High
NIS2 5 · GDPR 15
NIS2 5 · GDPR 15
Surahammars kommun is the official municipal government website for Surahammar, Sweden, providing comprehensive information and services related to education, social care, culture, environment, business, and local governance. The site targets residents, businesses, and visitors, offering a broad range of municipal services and resources. It holds a strong position as a local government authority with a medium-sized operational scope. Technically, the website is built on the SiteVision CMS platform, utilizing modern technologies such as React and Vue.js, and includes accessibility features like ReadSpeaker. The site demonstrates good performance and mobile optimization, with clear navigation and professional design. Security-wise, the site enforces HTTPS, uses cookie consent mechanisms compliant with GDPR, and employs best practices such as script nonces and no visible sensitive data. However, explicit security headers and a dedicated security policy page are absent. Overall, the website is trustworthy, legitimate, and well-maintained, reflecting the official nature of the municipal entity.
CGI Inc.cgi.com
Technology · Canada
74Medium
NIS2 43 · GDPR 75
NIS2 43 · GDPR 75
CGI Inc. is a leading global IT and business consulting services firm founded in 1976, headquartered in Canada. The company offers a broad range of end-to-end services including business consulting, systems integration, managed IT services, application and infrastructure services, and business process services. CGI positions itself as an insights-driven and outcomes-focused organization serving a diverse clientele across industries such as technology, government, energy, manufacturing, retail, healthcare, finance, and transportation. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content tailored to business and government audiences. Technically, the website is built on Drupal 9 CMS, leveraging modern web technologies including Google Tag Manager for analytics, New Relic for performance monitoring, and TrustArc for privacy compliance. The use of Akamai CDN and service workers indicates a focus on performance and security. The site is mobile-optimized and accessible, with good SEO practices evident from meta tags and structured data. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms aligned with GDPR compliance. While explicit security policies and incident response contacts are not found, the site follows best practices in avoiding exposed sensitive data and uses reputable third-party services. No vulnerabilities or suspicious activities were detected in the content. Overall, CGI.com demonstrates a strong business credibility and digital maturity with a high level of professionalism and trustworthiness. The domain registration data aligns well with the company’s identity and history, supporting legitimacy. Strategic recommendations include publishing explicit security policies, incident response information, and security.txt files to enhance transparency and security posture.
Nordic Technology Group ABnortech.se
Technology · Sweden
41High
NIS2 5 · GDPR 0
NIS2 5 · GDPR 0
Nortech Gruppen is a Swedish business group founded in 2001, specializing in building companies with a focus on digitalization and digital marketing in niche markets. The group has successfully launched and managed multiple subsidiaries across diverse sectors including technology, real estate, and administrative services. Their market position is strengthened by multiple DI-gasell awards and a clear focus on underserved industries with low internet presence. Technically, the website is built on Webflow CMS, leveraging modern web technologies such as Google Fonts and jQuery, providing a good user experience and mobile optimization. However, performance is moderate and accessibility features are basic. Security posture is adequate with HTTPS assumed, but lacks important security headers and formal security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Contact information is clearly provided, enhancing business credibility. Overall, the website is professional and trustworthy but would benefit from improved privacy and security practices.
- Dorite AB
dorite.se
Technology · Sweden
43High
NIS2 0 · GDPR 0
NIS2 0 · GDPR 0
Dorite AB is a Swedish technology consulting company specializing in maximizing the value of Microsoft 365 investments by creating modern, efficient, and user-friendly digital workplaces. Positioned as experts in Microsoft 365 and AI-driven collaboration, they offer services including digital workplace solutions, information management, AI innovation, security and compliance, consulting, training, and lifecycle management. Their target audience primarily consists of organizations seeking to enhance productivity and engagement through modern digital tools. The company presents a professional and consistent brand image with clear contact information and active social media presence. Technically, the website is built on modern frameworks such as React and Tailwind CSS, hosted likely behind Cloudflare, and optimized for performance and mobile devices. Analytics are implemented via Google Tag Manager and Cloudflare Insights, with a cookie consent mechanism in place, indicating good privacy compliance. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security headers and policies are not published. WHOIS data is privacy protected but consistent with a legitimate small business. Overall, the website demonstrates a high level of professionalism, technical maturity, and business credibility.
ClearPointclearpoint.se
Technology · Sweden
41High
NIS2 5 · GDPR 0
NIS2 5 · GDPR 0
ClearPoint is a Swedish IT management consultancy founded in 2013, specializing in providing senior consulting services in IT strategy, project management, design and architecture, procurement, workforce management, and strategic planning. The company positions itself as an independent and experienced partner with a focus on delivering practical and cost-effective IT solutions, primarily targeting businesses and organizations in telecom, mobility, aviation, and workforce management sectors. Their website reflects a professional and consistent brand image with clear service offerings and client references. Technically, the website is built on WordPress using modern plugins such as Yoast SEO, Bootstrap framework, and integrates external services like Google Fonts, Google Maps API, and AddThis for social sharing. The site is mobile-optimized with good SEO practices and moderate performance. Security-wise, the site enforces HTTPS and implements a cookie consent mechanism, but lacks visible security headers and published security policies or incident response information. Overall, the security posture is solid but could be improved by adding explicit privacy policies, security headers, and vulnerability disclosure information. The domain registration data is consistent with the business claims, supporting the legitimacy of the website. The site provides clear contact information and social media presence, enhancing trustworthiness. The risk assessment indicates a low risk with recommendations to enhance privacy compliance and security transparency to further strengthen user trust and regulatory adherence.
- OOnitio Norge AS
infocare.se
Technology · Norway
57Medium
NIS2 0 · GDPR 58
NIS2 0 · GDPR 58
Onitio Norge AS is a medium-sized IT services company operating across the Nordics, specializing in sustainable IT solutions, consulting, and technology services for sectors including retail, pharmacy, transport, and logistics. The company positions itself as a trusted partner enabling customers to focus on their core business by managing IT needs comprehensively. The website reflects a mature digital presence with modern technologies such as React, Next.js, and integrations with HubSpot and Google Tag Manager, indicating a well-developed technical infrastructure. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms in place, though explicit security policies and incident response contacts are not publicly available. Overall, the site is professional, GDPR compliant, and trustworthy, with room for improvement in transparency around security and vulnerability disclosures.
Ingridingrid.com
Logistics and supply chain · Sweden
68Medium
NIS2 10 · GDPR 75
NIS2 10 · GDPR 75
Inplastor abinplastor.se
Printing · Spain
43High
NIS2 5 · GDPR 0
NIS2 5 · GDPR 0
Eltel Networkseltelnetworks.com
Energy
60Medium
NIS2 5 · GDPR 63
NIS2 5 · GDPR 63
Eltel Networks is a large international company specializing in energy and telecommunications infrastructure services. The company operates multiple country-specific websites and is part of the larger Eltel Group, indicating a strong multinational presence. Their business model focuses on enabling sustainable and connected infrastructure solutions. The website content is professionally presented with a clear focus on their services and market sectors. Technically, the site leverages modern cloud infrastructure on Microsoft Azure, uses Google Tag Manager, Microsoft Application Insights for analytics, and implements a comprehensive cookie consent mechanism. The CMS appears to be Episerver, supporting a structured and scalable content management approach. Security-wise, the site uses HTTPS and standard cloud platform cookies but lacks explicit security headers and published security policies. Privacy compliance is partially addressed through a detailed cookie consent banner, but no explicit privacy policy or terms of service pages were found. Overall, the website demonstrates a good level of professionalism and technical maturity but could improve in transparency and security documentation.
- KITS AB
kits.se
Technology · Sweden
53Medium
NIS2 5 · GDPR 0
NIS2 5 · GDPR 0
KITS AB is a Swedish IT consulting company specializing in development, project management, integration, and security services. The company targets businesses seeking expert IT consultancy and professionals looking for career opportunities in the IT sector. The website reflects a medium-sized, established firm with a consistent brand presence and active social media engagement. Technically, the site is built using modern frameworks such as React and Gatsby, with integration of Mapbox for mapping features, indicating a contemporary digital infrastructure. However, the site lacks explicit privacy and cookie policies, and no security headers were detected, which are areas for improvement in compliance and security posture. Overall, the website is professional and trustworthy but would benefit from enhanced security and privacy disclosures.
- bubblegum.se
bubble-gum.se
Media · Sweden
41High
NIS2 0 · GDPR 0
NIS2 0 · GDPR 0
bubblegum.se is a Swedish media and communication agency established in 1994, offering a broad range of services including communication strategy, marketing, sound design, film production, and event management. The company serves primarily Scandinavian and European clients, with a portfolio featuring notable brands such as Heron City, Hemglass, Most Digital, and Svenska Spel. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the site is built on the One.com Web Editor platform, uses HTTPS, and is moderately optimized for mobile devices. However, security headers are minimal, and there is a lack of visible privacy and cookie policies, which impacts compliance and trust. No contact information or forms are provided, limiting direct engagement opportunities. Overall, the site presents a solid business presence but would benefit from enhanced security and privacy features.
Xtrfy Gaming ABxtrfy.com
Technology · Sweden
63Medium
NIS2 5 · GDPR 55
NIS2 5 · GDPR 55
Xtrfy Gaming AB is a Swedish company specializing in high-performance gaming peripherals designed for esports professionals and enthusiasts. The company emphasizes collaboration with pro gamers to develop products that meet competitive standards, including mechanical keyboards, mice, headsets, and microphones. Their market position is strong within the niche of esports equipment, supported by professional endorsements and a consistent brand image. Technically, the website is built on WordPress with WooCommerce, utilizing modern JavaScript frameworks and analytics tools, providing a good user experience with mobile optimization and clear navigation. Security posture is robust with HTTPS, security headers, and no visible vulnerabilities, complemented by comprehensive privacy and cookie policies ensuring GDPR compliance. Overall, the website reflects a trustworthy and professional e-commerce platform with clear business information and strong digital maturity.
- PPricewaterhouseCoopers
pwc.se
Finance · Sweden
54Medium
NIS2 5 · GDPR 15
NIS2 5 · GDPR 15
PwC Sweden is a branch of the global PricewaterhouseCoopers network, providing professional consulting, auditing, tax, ESG, finance, cyber security, and M&A advisory services. The website reflects a mature and well-established business with a strong market position in Sweden. The technical infrastructure is built on Adobe Experience Manager CMS, leveraging modern JavaScript frameworks and analytics tools such as Microsoft Clarity, Google Tag Manager, and Adobe DTM. The site is well-optimized for mobile and accessibility, with comprehensive privacy and cookie consent mechanisms in place. Security posture is strong with HTTPS enforced and CSRF protection, though explicit security headers could be improved. Overall, the website demonstrates high professionalism, trustworthiness, and compliance with GDPR regulations.
Stretchgruppenstretch.se
Technology · Sweden
64Medium
NIS2 0 · GDPR 58
NIS2 0 · GDPR 58
Stretchgruppen is a Swedish IT group specializing in digital transformation services and products, with a strong focus on sustainable entrepreneurship and customer-centric solutions. The group operates multiple subsidiaries across Sweden and the Nordic region, offering expertise in Microsoft 365, Salesforce, SAP, Qlik, and business intelligence. Their website reflects a mature digital presence with professional design, clear navigation, and comprehensive content. Technically, the site is built on WordPress with modern plugins and tools such as Cookiebot for consent management and Google reCAPTCHA for form security, indicating a good level of digital maturity. Security posture is strong with HTTPS enforced, security headers implied, and no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with a comprehensive privacy policy and active cookie consent mechanisms. Overall, the website demonstrates high professionalism and trustworthiness, supporting the company's market position as an important regional IT service provider.
Södertälje Hamnsoeport.se
Transportation · Sweden
48High
NIS2 0 · GDPR 15
NIS2 0 · GDPR 15
Södertälje Hamn operates as a regional port located in one of Sweden's most expansive regions near Stockholm and Mälardalen. The company provides key port services including RoRo, container handling, energy port operations, and project cargo logistics. Their market position is that of an important transportation and energy sector player serving businesses in the region. The website reflects a medium-sized enterprise with a focus on sustainability and infrastructure proximity. Technically, the site uses AngularJS framework, integrates Matomo and Google Analytics for tracking, and supports mobile responsiveness with a moderate performance profile. Security posture is adequate with HTTPS enabled and cookie consent mechanisms in place, but lacks explicit security headers and incident response disclosures. Privacy compliance is strong with clear GDPR-aligned privacy and cookie policies. Overall, the website is professional, trustworthy, and well-structured, supporting the company's business credibility effectively.
- LLjunghäll Group
ljunghall.com
Manufacturing · Sweden
33High
NIS2 5 · GDPR 25
NIS2 5 · GDPR 25
Ljunghäll Group is a medium-sized manufacturing company specializing in high pressure die casting solutions, operating internationally with offices in Sweden, Czech Republic, China, and Canada. It is part of the Gnutti Carlo Group SPA, a global leader in engine component manufacturing. The website presents a professional image with clear business focus on industrial B2B services. Technically, the site uses older JavaScript libraries and a proprietary CMS (WebbEdit 3.1), with moderate performance and good mobile optimization. Security posture is moderate with HTTPS usage and cookie consent but lacks modern security headers and uses outdated jQuery, posing potential risks. Privacy compliance is basic with no explicit privacy policy but a cookie banner is present. Overall, the site is credible and trustworthy but would benefit from security and compliance improvements.
- TTelecontracting Scandinavia AB
telecon.se
Energy · Sweden
28High
NIS2 5 · GDPR 0
NIS2 5 · GDPR 0
Telecontracting Scandinavia AB operates primarily in the energy and telecommunications sectors, specializing in wind measurement services and telecom consultancy. Established in 2004, the company has grown to become one of Sweden's leading providers in wind measurement for the wind power industry. Their website reflects a professional business with clear service offerings and strong industry certifications such as ISO 9001, ISO 14001, ISO 45001, and Achilles registration, which enhance their market credibility. Technically, the website employs legacy technologies including an outdated version of jQuery and uses Google Analytics for tracking. The site lacks HTTPS in the provided content, which is a significant security concern. The design and navigation are user-friendly and consistent, though mobile optimization and accessibility are basic. There is no evidence of modern CMS or advanced frameworks, indicating a relatively simple technical infrastructure. From a security perspective, the absence of HTTPS and security headers, along with outdated libraries, lowers the security posture. No privacy or cookie policies are present, indicating compliance gaps with GDPR and related regulations. Contact information is clearly provided, but no incident response or security policy details are found. Overall, the site demonstrates moderate trustworthiness but requires improvements in security and privacy compliance. The overall risk assessment suggests the company is legitimate and established but should prioritize implementing HTTPS, updating technical components, and adding privacy and security policies to enhance trust and compliance.
- Triona AB
triona.se
Technology · Sweden
54Medium
NIS2 0 · GDPR 58
NIS2 0 · GDPR 58
Triona AB is a Swedish IT company specializing in innovative IT solutions focused on logistics, infrastructure, and transport sectors. The company positions itself as a leading and reliable supplier combining domain expertise with specialized software products and expert consulting services. Their website reflects a professional and consistent brand presence with clear navigation and relevant business content. Technically, the site uses modern web technologies including Bootstrap, jQuery, and various JavaScript libraries, with moderate performance and good mobile optimization. Security-wise, the site uses HTTPS and implements a cookie consent mechanism, but lacks visible advanced security headers and vulnerability disclosure mechanisms. Overall, the website demonstrates a solid business and technical foundation with room for improvement in security transparency and compliance documentation.
- LLinnéuniversitetet
lnu.se
Education · Sweden
51Medium
NIS2 5 · GDPR 15
NIS2 5 · GDPR 15
Linnéuniversitetet is a modern and internationally oriented university located in Kalmar and Växjö, Sweden. It offers a wide range of educational programs, research initiatives, and collaborative projects aimed at societal development. The university holds a strong market position in the Swedish higher education sector, supported by accreditations such as AACSB and a comprehensive digital presence. The website reflects a mature digital infrastructure with modern technologies including jQuery, FontAwesome, and cloud hosting via Microsoft Azure. Privacy and cookie consent mechanisms are robust and GDPR-compliant, providing users with granular control over data collection. Security practices are good, with HTTPS enforced and bot management in place, though some security headers could be enhanced. Overall, the site demonstrates high professionalism, trustworthiness, and user experience quality.
Vasakronan ABvasakronan.se
Real Estate · Sweden
65Medium
NIS2 0 · GDPR 70
NIS2 0 · GDPR 70
Vasakronan AB is Sweden's largest real estate company specializing in owning, managing, and developing centrally located office and retail properties in major Swedish cities including Stockholm, Göteborg, Malmö, and Uppsala. The company offers over two million square meters of commercial space across more than 170 properties, targeting businesses and investors seeking premium commercial real estate solutions. Their business model focuses on long-term property leasing and urban development, positioning them as a market leader in the Swedish real estate sector. Technically, the website is built on WordPress and integrates modern tools such as Matomo Analytics for privacy-focused data collection, Google Tag Manager for tag management, and Cookiebot for comprehensive cookie consent management. The site demonstrates good mobile optimization, SEO practices, and moderate performance, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms aligned with GDPR requirements. While explicit security headers are not detected in the HTML content, no critical vulnerabilities or exposed sensitive data were found. The absence of a dedicated security policy or incident response contact suggests room for improvement in transparency and readiness. Overall, Vasakronan's website reflects a professional, trustworthy, and compliant digital presence consistent with its market position. The company demonstrates strong adherence to privacy regulations and provides clear information about its services and corporate identity, supporting a high level of business credibility and user trust.
- AAscom
ascom.com
Telecommunications · Switzerland
66Medium
NIS2 5 · GDPR 58
NIS2 5 · GDPR 58
Tickets for events across the Nordic regiontickster.com
Other
47High
NIS2 0 · GDPR 10
NIS2 0 · GDPR 10
Tickster.com is an online ticketing platform focused on providing tickets for concerts, festivals, theater performances, and other events across the Nordic region. The website targets consumers in Nordic countries such as Norway, Sweden, and Denmark, offering localized access points for each country. The business model centers on event ticket sales and serves as a regional player in the event ticketing market. The site presents a professional and consistent brand image with good design and user experience, supporting mobile optimization and clear navigation. From a technical perspective, the website leverages modern technologies including Google Tag Manager, Cloudflare Insights, and Google Fonts, hosted via AWS Cloudfront CDN. The site uses HTTPS with an excellent SSL configuration, ensuring secure communications. However, explicit security headers are not visible in the HTML content, and no CMS or frameworks are clearly identified. Performance is moderate with good mobile responsiveness and basic accessibility features. Security posture is generally good with HTTPS enforced and cookie consent implemented via Cookiebot, indicating some privacy compliance efforts. However, the absence of visible privacy policy, terms of service, and contact information for security incidents reduces compliance confidence. No vulnerabilities or exposed sensitive data were detected in the provided content. The domain uses privacy protection for WHOIS data, which is justified for this commercial platform. Overall, the site appears legitimate and trustworthy but could improve transparency and security practices. The overall risk assessment is moderate with recommendations to publish privacy and terms policies, add security headers, provide clear contact channels for incident response, and enhance accessibility. These improvements would strengthen compliance, user trust, and security posture.
- RN Nordic AB
renault.se
Transportation · Sweden
48High
NIS2 0 · GDPR 0
NIS2 0 · GDPR 0
Renault Sverige, operated by RN Nordic AB, is a prominent automotive company specializing in manufacturing and selling a wide range of vehicles including electric cars, hybrids, transport vehicles, and sport cars. The website targets Swedish consumers and businesses, offering services such as vehicle sales, leasing, financing, after-sales support, and test drive bookings. The company holds a strong market position in Sweden with a consistent and professional brand presence. Technically, the website is built on modern frameworks like Next.js and Sitecore CMS, integrating advanced tracking and consent management tools such as Google Tag Manager and Usercentrics CMP. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content.
SilkScreen Company ABsilkscreen.se
Other · Sweden
44High
NIS2 5 · GDPR 0
NIS2 5 · GDPR 0
SilkScreen Company AB is a well-established Swedish printing and graphic design company founded in 1955. They offer a broad range of services including screen printing, signage production, large format printing, vehicle decals, textile printing, product design, and promotional products. The company targets businesses, organizations, and private individuals primarily within Sweden and the Nordic region. Their website reflects a professional and consistent brand image with clear service descriptions and comprehensive contact information. Technically, the website is built using standard web technologies including HTML5, CSS3, and JavaScript, and is likely hosted on a platform associated with One.com website builder. The site uses HTTPS and includes Google Fonts and Google Maps integration. Mobile optimization and accessibility are basic but functional. SEO practices are present but could be enhanced. From a security perspective, the site uses HTTPS but lacks several important security headers such as Content-Security-Policy and X-Frame-Options. No privacy or cookie policies are present, indicating gaps in GDPR compliance. The contact form collects user data but no explicit privacy or data protection information is provided. No analytics or tracking scripts were detected, suggesting minimal user tracking. Overall, the website presents a moderate risk profile with room for improvement in privacy compliance and security hardening. The business appears legitimate and consistent with its domain registration data. Strategic recommendations include implementing comprehensive privacy and cookie policies, enhancing security headers, and improving GDPR compliance to build greater trust with users.
- Söderberg & Partners Sverige
soderbergpartners.se
Finance · Sweden
49High
NIS2 5 · GDPR 63
NIS2 5 · GDPR 63
Söderberg & Partners Sverige is a leading Nordic financial advisory and brokerage firm specializing in insurance, pension, wealth management, and financial services for both private individuals and corporate clients. The company holds a strong market position supported by recognized industry awards and a comprehensive portfolio of services tailored to meet diverse client needs. Their digital presence is robust, leveraging modern web technologies such as React, Microsoft Azure services, and advanced analytics tools to deliver a seamless user experience. The website demonstrates excellent design quality, clear navigation, and mobile optimization, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforcement, comprehensive security headers, and no visible vulnerabilities or exposed sensitive data. Privacy compliance is well-managed with explicit cookie consent mechanisms and detailed privacy policies, aligning with GDPR requirements. Overall, the site reflects a professional, trustworthy, and compliant financial services provider with a solid technical foundation.
- M
Other
41High
NIS2 0 · GDPR 0
NIS2 0 · GDPR 0
The website itmab.se currently serves a Microsoft Azure 404 error page indicating that the custom domain has not been configured properly within Azure App Service. There is no accessible business content, contact information, or policies available on the site. The site appears to be inactive or under setup, with no visible branding or company details. Technically, the site is hosted on Microsoft Azure but lacks HTTPS configuration and security headers, resulting in a poor security posture. No analytics or advertising technologies are detected, and no user tracking is present. Overall, the site is non-functional from a business or user perspective and requires proper domain configuration and content deployment to be operational.
- Åkerströms AB
akerstroms.com
Manufacturing · Sweden
42High
NIS2 0 · GDPR 10
NIS2 0 · GDPR 10
Åkerströms AB is a well-established Swedish company specializing in secure and sustainable radio control and digitalization solutions for industrial and mobile applications. With a history dating back to 1918 and as part of the Allgon group, the company holds a strong market position as a provider of customized, robust industrial radio control systems and connected services such as access control and production data logging. Their website reflects a mature digital presence with comprehensive product information, customer references, and a clear focus on safety and control. Technically, the site is built on WordPress with WooCommerce and employs modern web technologies and SEO practices, ensuring good performance and accessibility. Security-wise, the site uses HTTPS and some security best practices but could enhance security headers and incident response visibility. Privacy compliance is strong, featuring a detailed privacy policy and cookie consent mechanism. Overall, the website is professional, trustworthy, and well-aligned with the company's business model and market presence.
Eneaenea.com
Technology · Sweden
66Medium
NIS2 35 · GDPR 43
NIS2 35 · GDPR 43
Enea is a well-established global leader specializing in AI-powered software solutions for telecom networks and cybersecurity. The company serves a broad range of clients including communication service providers, CPaaS providers, software vendors, and government regulators. Their software portfolio covers messaging security, signaling and voice security, network traffic management, and IoT connectivity, among others. Enea's market position is strong, with over 30% of the world's mobile services relying on their technology, and a presence in 101 countries. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content tailored to their target audience. Technically, the website is built on WordPress with modern performance and SEO optimizations including WP Rocket, Yoast SEO Premium, and lazy loading techniques. The site is mobile-optimized and accessible, leveraging popular JavaScript libraries such as jQuery and Axios. Security posture is solid with HTTPS enforced and no visible vulnerabilities, although explicit security headers could be improved. Privacy compliance is well addressed with clear privacy and cookie policies, including consent mechanisms. Overall, the security posture is good with no critical issues detected. The company demonstrates trustworthiness through certifications, client testimonials, and consistent WHOIS data. The website employs moderate user tracking via Piwik PRO and Google Tag Manager, balanced with privacy compliance. Strategic recommendations include enhancing security headers, publishing a security policy, and adding a vulnerability disclosure program to further strengthen trust and compliance.
Unipower ABunipower.se
Energy · Sweden
42High
NIS2 5 · GDPR 55
NIS2 5 · GDPR 55
Unipower AB is a Swedish company specializing in electric power quality instruments and monitoring systems. Positioned as a market leader in Sweden, Unipower offers a range of products including power quality management systems, portable analyzers, accessories, training, and support services. Their website reflects a professional B2B business model targeting power quality professionals and energy sector clients worldwide. The company maintains a consistent brand presence with clear contact information and social media engagement. Technically, the website is built on WordPress with Elementor and optimized for performance and mobile use. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and policies could be enhanced. Overall, the domain registration and website content are consistent, indicating a trustworthy and legitimate business presence.