Medium-risk security reports
99,068 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,179001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
14,601–14,650 of 99,068
- Bastide le confort médical
bastideleconfortmedical.com
Healthcare · France
62Medium
NIS2 22 · GDPR 35
NIS2 22 · GDPR 35
Bastide Le Confort Médical operates as a leading French e-commerce platform specializing in medical equipment and mobility aids, including fauteuils releveurs (lift chairs), incontinence products, and professional medical supplies. The company positions itself as the premier network for medical equipment in France, targeting both individual consumers and healthcare professionals. Their business model focuses on online retail complemented by physical stores and customer support services, including delivery and installation. Technically, the website is built on the Planet Unified Commerce platform, utilizing AngularJS and Bootstrap frameworks, with integrations for advanced search (Doofinder), marketing (Google Tag Manager, SaleCycle), and cookie consent management (Axeptio). The site is mobile-optimized and employs HTTPS with a moderate performance profile. However, some modern security headers are missing, and the site could improve accessibility features. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and consent management but lacks comprehensive security headers and explicit privacy policies. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS registration data raises concerns about domain legitimacy, though the professional content and business information mitigate some risk. Overall, the website presents a trustworthy and professional front for a healthcare retail business but should address WHOIS inconsistencies and enhance security and privacy disclosures to strengthen trust and compliance.
Force plusforce-plus.fr
Healthcare · France
60Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Force plus is a French healthcare-focused company specializing in protein-rich refrigerated desserts designed to support patients with malnutrition. The company has a niche market presence, supplying hospitals and offering home delivery in the Île-de-France region. The website is built on WordPress with modern tools like Elementor and Yoast SEO, providing a good user experience and mobile optimization. Security posture is adequate with HTTPS and cookie consent mechanisms, though it lacks explicit privacy and security policies. The domain registration is consistent and legitimate, supporting the company's credibility. Strategic improvements include publishing comprehensive privacy and security policies and enhancing security headers.
- Nestlé Health Science
nestlehealthscience.fr
Healthcare · France
73Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
Nestlé Health Science is a prominent healthcare nutrition company offering specialized products to support patient health through nutrition. The website reflects a mature digital presence with a professional design, clear navigation, and compliance with privacy regulations such as GDPR. Technically, the site is built on Drupal CMS and leverages modern JavaScript libraries and analytics tools, ensuring good performance and accessibility. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response details are not publicly visible. The absence of WHOIS data is a notable gap, slightly impacting trust but not detracting from the overall legitimacy given the strong brand presence. Strategic recommendations include publishing detailed security and incident response policies and adding vulnerability disclosure mechanisms to enhance transparency and trust.
- B. Braun Melsungen AG
bbraun.fr
Healthcare · France
70Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
B. Braun Melsungen AG operates a comprehensive French website focused on medical technology and healthcare solutions. The company offers a broad portfolio of medical devices, therapies, and patient care services, positioning itself as a global leader in the healthcare sector. The website targets healthcare professionals, patients, and industrial partners, providing detailed product catalogs, corporate responsibility information, and career opportunities. Technically, the site is built on Adobe Experience Manager with modern JavaScript libraries and includes consent management tools to comply with privacy regulations. Security posture is strong with HTTPS and CSRF protections, though explicit security headers could be enhanced. The absence of WHOIS data limits domain trust assessment, but the professional branding and content quality strongly support legitimacy. Overall, the site demonstrates a mature digital presence with good privacy compliance and user experience.
AssoConnectassoconnect.com
Non-profit · France
73Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
AssoConnect is a French SaaS company providing a comprehensive management platform tailored for associations. Their services include membership and donation collection, accounting management, communication tools, payment processing, and website creation. The platform targets associations of all sizes and sectors, boasting over 40,000 users, positioning it as a market leader in France. Technically, the website is built on modern frameworks such as React and Gatsby, hosted on Azure CDN, and optimized for performance and mobile devices. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though explicit security policies and incident response details are not publicly disclosed. Overall, the website is professional, trustworthy, and compliant with GDPR, reflecting a mature digital presence.
Event Engine CMS Ltdrondayvoo.ai
Technology · Iceland
65Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Rondayvoo AI is a small technology company specializing in AI-powered content generation services tailored for event marketing. Their offerings include creating exhibitor profiles, social media posts, email marketing content, and blogs to help event organizers fill content gaps efficiently. The company operates under Event Engine CMS Ltd and targets event professionals seeking automated content solutions. The website is built on WordPress using the Bricks builder theme, incorporating modern web technologies such as Google Fonts, Font Awesome, and GSAP for animations. While the site is generally well-designed and mobile-optimized, some technical issues such as an invalid Google reCAPTCHA key reduce its security posture. Privacy and cookie policies are present but hosted on a related domain, and no direct contact emails or phone numbers are listed, relying instead on a contact form. The domain is privacy protected, consistent with a new startup founded in 2023. Overall, the site demonstrates a moderate level of digital maturity with room for improvement in security and compliance.
Rondayvoo Liverondayvoo.live
Technology
70Medium
NIS2 17 · GDPR 95
NIS2 17 · GDPR 95
Rondayvoo Live is a technology service provider specializing in creating custom branded websites for online and hybrid events. Their platform offers features such as multi-stage live streaming, sponsor engagement with video chat, matchmaking, networking tools, and a user-friendly content management interface. The company targets event organizers and sponsors seeking to enhance their digital event presence with a professional and branded online venue. The website demonstrates a good level of digital maturity, utilizing WordPress CMS with a modern theme, integrated analytics, and cookie consent management. However, some technical issues such as an invalid Google reCAPTCHA key and lack of explicit privacy and security policies slightly reduce the overall security posture. The site is fully accessible with no WAF or blocking mechanisms detected, and the content is safe for general audiences.
Event Engine CMS Ltdrondayvoo.com
Technology · United Kingdom
66Medium
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Rondayvoo is a specialized service provider offering event website design and management solutions, targeting event organizers and marketers seeking conversion-optimized, easy-to-manage websites integrated with ticketing and registration platforms. The company operates under Event Engine CMS Ltd, with a domain age consistent with its stated 15+ years of experience. The website is built on WordPress using the Bricks Builder theme, incorporating modern web technologies and third-party services such as Cookiebot for cookie consent and Visitor Queue for analytics. While the site is professionally designed and mobile-optimized, a key security control, Google reCAPTCHA, is misconfigured with an invalid site key, which may expose the contact form to spam risks. Privacy and cookie policies are present and GDPR compliant, but no explicit terms of service or security policies are found. Overall, the website demonstrates a good security posture with room for improvement in form security and HTTP headers.
Burge Agencyburgeagency.com
Media · United Kingdom
57Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Burge Agency is a well-established creative and design agency based in Winchester, Hampshire, UK, founded in 2009. The company specializes in branding, graphic design, website design, packaging, advertising campaigns, and print media, serving a diverse clientele including both large and small brands. Their website reflects a professional and consistent brand image with a comprehensive portfolio showcasing their work. Technically, the website is built on WordPress with Bootstrap and uses modern web technologies and analytics tools, indicating a moderate to good level of digital maturity. Security-wise, the site uses HTTPS and has domain transfer protections but lacks DNSSEC and security headers, which are recommended for enhanced security. Privacy compliance is weak due to the absence of visible privacy and cookie policies. Overall, the website is trustworthy and professional but would benefit from improved privacy and security practices.
Manufacturing · Germany
50Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
The BDSV website represents the Bundesvereinigung Deutscher Stahlrecycling- und Entsorgungsunternehmen e.V., a leading German steel recycling industry association. The organization serves as a key representative body for companies involved in steel recycling and related environmental services, positioning itself as the largest steel recycling association in Europe. Their services include advocacy, market information, education, and quality assurance, targeting industry professionals and policymakers. The website content is professionally presented, primarily in German, and includes news, events, publications, and interactive tools such as a CO2 calculator. Technically, the site is built on TYPO3 CMS with modern web technologies including jQuery, Bootstrap, and RequireJS. The site is mobile-optimized and features good navigation and SEO practices. Hosting details are limited but the domain is registered with IONOS SE, a reputable registrar. Performance is moderate with no major technical issues detected. Security posture is adequate but could be improved by enabling DNSSEC, adding security headers, and implementing cookie consent mechanisms to enhance GDPR compliance. No WAF or blocking mechanisms were detected, and no exposed sensitive data was found. The WHOIS data confirms a stable and consistent domain registration dating back to 2007, supporting the legitimacy of the organization. Overall, the website is a credible, professional platform for the steel recycling industry with room for improvement in security and privacy compliance to meet modern standards.
Recyclingzentrum Zwickaurecyclingzentrum-zwickau.de
Other · Germany
54Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
Recyclingzentrum Zwickau operates as a local recycling center in Germany, focusing on sustainable recycling services. The website serves primarily as an informational portal with links to partner companies Hofmann Metall and Hofmann Recycling. The digital infrastructure is based on the Contao CMS platform, integrating standard tracking and consent management tools such as Google Analytics and Usercentrics. The site demonstrates basic technical implementation with moderate performance and mobile optimization. Security posture is adequate with SSL enabled and IP anonymization for analytics, but lacks advanced security headers and explicit security policies. Privacy compliance is supported by a GDPR-compliant cookie consent mechanism and a privacy policy page. However, the absence of contact information and terms of service reduces business credibility. Overall, the website is functional but basic in content and security sophistication.
Hofmann Recyclinghofmann-recycling.de
Transportation · Germany
61Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Hofmann Recycling is a small, regionally focused certified waste disposal and recycling company based in Zwickau, Germany. The company offers a broad range of services including waste collection, recycling, container rental, and disposal solutions. Their website reflects a professional and consistent brand image targeting both private and commercial customers in the local area. Technically, the site is built on the Contao CMS platform, utilizing modern JavaScript libraries and a GDPR-compliant consent management platform. Analytics are implemented via Google Analytics 4 and Universal Analytics with IP anonymization, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, but lacks explicit security headers and published security policies. Overall, the website is trustworthy, well-structured, and compliant with privacy regulations, though improvements in security transparency and contact information availability could enhance credibility further.
Other · Germany
50Medium
NIS2 52 · GDPR 55
NIS2 52 · GDPR 55
VdS Schadenverhütung GmbH operates as a leading institution in corporate security, specializing in fire protection, security certifications, natural hazard prevention, and cyber security. The company offers a broad range of services including technical testing, certification, consulting, risk management, and educational programs. Their market position is strong within Germany and internationally, supported by recognized certifications and a comprehensive service portfolio. The website reflects a professional and consistent brand image, targeting businesses and organizations seeking security and compliance solutions. Technically, the website is built on TYPO3 CMS with modern JavaScript libraries such as jQuery and Swiper.js for interactive elements. The site is mobile-optimized and demonstrates good SEO practices, although some accessibility features could be enhanced. Hosting details suggest agency-managed infrastructure, with HTTPS enforced and cookie consent mechanisms in place, indicating a mature digital presence. From a security perspective, the site employs HTTPS and cookie consent but lacks explicit security headers and published incident response or vulnerability disclosure policies. No direct contact information for security incidents was found, which could be improved to enhance trust and compliance. The absence of tracking or advertising scripts suggests a privacy-conscious approach. Overall, the website is safe, professional, and well-structured, with a high trustworthiness rating. Strategic improvements in security policy transparency and contact availability would further strengthen the company's security posture and user confidence.
E.L.V.I.S. AGelvis-ag.com
Transportation · Germany
65Medium
NIS2 2 · GDPR 100
NIS2 2 · GDPR 100
E.L.V.I.S. AG is a European logistics consortium specializing in freight forwarding and transport services. The company positions itself as a strong network for international freight forwarders, offering a variety of transport solutions including CO2 transport calculation, partial loads, cross-load networks, and special solutions. The website is professionally designed using WordPress with Elementor and WooCommerce, indicating a moderate level of digital maturity. It supports German and English languages and includes SEO optimizations and cookie consent mechanisms. Security posture is good with HTTPS and cookie consent implemented, but lacks explicit security headers and detailed privacy or incident response policies. WHOIS data is missing or unavailable, which raises some concerns about domain registration legitimacy. Overall, the website is functional and professional but would benefit from enhanced transparency and security documentation.
- Palla Media
pallamedia.com
Media · Canada
55Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Palla Media is a small Canadian media company specializing in publishing community magazines such as Dunbar Life, Kerrisdale Insider, and Steveston Insider. The company emphasizes connecting local communities and providing affordable advertising solutions for local businesses. Their website is built on WordPress and uses common plugins for sliders and social media integration. The site is visually professional with good navigation and mobile optimization. However, the absence of WHOIS data raises concerns about domain registration legitimacy. Security posture is moderate with HTTPS enabled but lacking security headers and formal privacy or cookie policies. Overall, the business appears credible and established locally, but domain registration ambiguity and privacy compliance gaps present risks.
Reliasrelias.com
Healthcare
75Medium
NIS2 25 · GDPR 83
NIS2 25 · GDPR 83
Relias is an enterprise-level healthcare workforce management solutions provider specializing in education, training, and workforce enablement for human services and healthcare organizations. The company positions itself as a leading provider in this niche, targeting healthcare and human services sectors with comprehensive digital learning and compliance solutions. The website reflects a mature digital presence with professional branding, consistent messaging, and a clear focus on its target audience. Technically, the site is built on WordPress with modern SEO and analytics integrations, including Google Tag Manager, Microsoft Clarity, Hotjar, and AB Tasty, indicating a data-driven approach to user experience and marketing. Security posture is generally strong with HTTPS enforced and cookie consent mechanisms in place; however, explicit security headers and a dedicated security policy are not evident, suggesting room for improvement. The absence of WHOIS registration data is a notable anomaly, reducing domain trustworthiness, but the professional quality of the website content and presence of privacy compliance measures mitigate some concerns. Overall, the site demonstrates a solid business and technical foundation with moderate security maturity.
Strom životazivotastrom.cz
Healthcare · Czech Republic
50Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Mobilní hospic Strom života is a Czech Republic based small-sized healthcare non-profit organization founded in 2015, providing mobile hospice care services to terminally ill patients and support to their families. The website reflects a professional and consistent brand presence with a clear focus on patient care and community support. Technically, the site is built on WordPress using the Divi theme, leveraging modern analytics and marketing tools such as Google Tag Manager, Microsoft Clarity, and Facebook Pixel. Security posture is good with HTTPS enforced and use of reCAPTCHA, though some security headers could be improved. Privacy compliance is strong with a comprehensive cookie consent mechanism and GDPR-aligned privacy policy. Overall, the site is trustworthy, well-maintained, and serves its target audience effectively.
Sdílení o.p.s.sdileni-telc.cz
Healthcare · Czech Republic
50Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Sdílení o.p.s. is a Czech non-profit organization specializing in hospice and palliative care services, supporting elderly and seriously ill individuals to remain at home with their families. Established since 2007, it offers a comprehensive range of healthcare and social services including nursing care, respite care, social counseling, and equipment rental. The organization maintains a strong local presence with clear contact information, active social media channels, and a professional website designed to engage donors and clients alike. Technically, the website is built on WordPress with modern frameworks like Bootstrap and includes GDPR-compliant cookie consent mechanisms. Security posture is generally good with HTTPS enforced and no visible sensitive data exposure, though the absence of HTTP security headers and missing WHOIS data are areas for improvement. Overall, the site is well-structured, content-rich, and trustworthy from a user perspective, but domain legitimacy verification is hindered by unavailable WHOIS information.
Mobilní hospic Nejste saminejstesami.eu
Healthcare · Czech Republic
53Medium
NIS2 2 · GDPR 85
NIS2 2 · GDPR 85
Mobilní hospic Nejste sami is a Czech non-profit healthcare organization providing free mobile hospice and palliative care services to adult and pediatric patients in Olomouc and surrounding areas. The organization enables patients to spend their final moments in a familiar home environment, supported by professional healthcare and social services. Their website reflects a well-established regional presence with clear communication of services, strong donor engagement, and active social media channels. Technically, the website is built on WordPress with modern plugins for SEO, analytics, and GDPR compliance, hosted by a reputable provider. Security posture is good with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are not published. Overall, the site is professional, trustworthy, and compliant with privacy regulations.
- Girasole, z. s.
girasole.cz
Healthcare · Czech Republic
65Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Girasole, z. s. is a Czech non-profit organization providing healthcare and social services focused on home hospice care, personal assistance, and emergency care for seriously ill and elderly individuals in the Hustopeče region. Their mission is to support patients and families to live dignified lives at home during serious illness. The website reflects a local healthcare service provider with a clear focus on palliative and hospice care, supported by community and regional partnerships.
Diakonie ČCE - Vsetíndiakonievsetin.cz
Non-profit · Czech Republic
64Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
Diakonie ČCE Vsetín is a well-established non-profit organization providing social services and specialized education in the Czech Republic. The website reflects a mature digital presence with clear information about their services, target audience, and contact details. The organization positions itself as a significant social service provider with a 30-year history, serving children, adults, and seniors in various life situations. Technically, the site is built on WordPress using the Divi theme, incorporating modern web technologies such as Google Fonts, Google Maps API, and GDPR-compliant cookie consent mechanisms. Security posture is solid with HTTPS enforced and reCAPTCHA implemented, though some security headers could be improved. Privacy compliance is well addressed with clear policies and consent management. The absence of WHOIS data limits domain legitimacy verification, but the website content and branding strongly indicate a legitimate entity affiliated with the parent organization Diakonie ČCE. Overall, the site is professional, trustworthy, and user-friendly, supporting the organization's mission effectively.
Centrum sociálních a zdravotních služeb Poděbradycentrum-podebrady.info
Healthcare · Czech Republic
67Medium
NIS2 17 · GDPR 65
NIS2 17 · GDPR 65
Centrum sociálních a zdravotních služeb Poděbrady is a well-established non-profit organization providing comprehensive social and health care services primarily in the Středočeský kraj region of the Czech Republic. Founded in 1976, it serves seniors, disabled individuals, and foster families with a broad range of services including home health care, hospice care, social assistance, and foster care support. The organization maintains a strong regional presence with multiple branches and partnerships with government ministries and local authorities. The website reflects a professional and community-focused business model with clear service offerings and active engagement through news updates and social media. Technically, the website is built on WordPress CMS, leveraging modern web technologies such as Bootstrap for responsive design, Leaflet for interactive maps, and Splide.js for sliders. It integrates analytics tools like Google Analytics and Hotjar for user behavior insights and employs CookieYes for GDPR-compliant cookie consent management. The site demonstrates good mobile optimization, SEO practices, and accessibility basics, although there is room for improvement in security headers and accessibility features. From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA to protect forms. Cookie consent is implemented with detailed categories, enhancing privacy compliance. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of explicit security headers and a vulnerability disclosure policy suggests opportunities to strengthen the security posture further. Overall, the domain appears legitimate and consistent with the organization's profile, despite limited WHOIS data due to privacy protections. The website is accessible without WAF or blocking mechanisms, providing a trustworthy and professional online presence. Strategic recommendations include enhancing security headers, formalizing vulnerability disclosure, and improving accessibility compliance to further solidify trust and security.
Healthcare · Czech Republic
60Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Centrum pro léčbu bolesti a paliativní medicínu s.r.o. is a specialized healthcare provider based in Zlín, Czech Republic, focusing on the treatment of chronic pain for oncological and non-oncological patients, as well as providing mobile hospice and palliative care services. The website is professionally designed using the Wix platform, offering clear information about their services and contact details. However, the absence of WHOIS data raises concerns about domain registration legitimacy. Technically, the site uses Wix's proprietary frameworks and scripts, with moderate performance and good mobile optimization. Security posture is average, with HTTPS implied but lacking explicit security headers and privacy policies. Overall, the business appears legitimate and focused on healthcare, but improvements in security and privacy compliance are recommended.
Oblastní charita Pardubicecharitapardubice.cz
Non-profit · Czech Republic
61Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Oblastní charita Pardubice is a regional non-profit organization operating under the national Charita Česká republika network. It provides a wide range of social and healthcare services including home health care, hospice care, personal assistance, social activation for families, and volunteer coordination. The organization targets residents of the Pardubice region, donors, and volunteers, maintaining a strong community presence and partnerships with governmental and private entities. The website reflects a mature digital presence with good content quality and clear navigation, supporting its mission effectively. Technically, the site uses modern JavaScript libraries, integrates donation widgets, and employs Google Analytics and Facebook Pixel for tracking, with a cookie consent mechanism in place. Security posture is solid with HTTPS enforced, though additional security headers and explicit security policies could enhance protection. Overall, the domain registration and WHOIS data align well with the organization's profile, indicating legitimacy and trustworthiness.
Charita Česká Kamenicecharita-ceska-kamenice.cz
Non-profit · Czech Republic
55Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Charita Česká Kamenice is a well-established non-profit organization founded in 2009, operating under the umbrella of Charita Česká republika. The organization provides a broad range of social and humanitarian services including hospice care, social rehabilitation, sheltered housing, and support for vulnerable groups such as seniors, disabled individuals, families, children, youth, and the homeless. Their market position is regional with strong partnerships with government bodies and charitable foundations, enhancing their credibility and funding sources. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to their target audience. Technically, the website employs standard web technologies including JavaScript, CSS, and HTML5, with fonts loaded from Google Fonts and Adobe Typekit. The site appears to be custom-built or uses a proprietary CMS, likely provided by VIZUS.CZ, the web development company credited in the footer. Performance is moderate with good mobile optimization and basic accessibility features. SEO is basic but sufficient for their audience. The site uses HTTPS with a good SSL configuration, and a cookie consent mechanism is implemented to comply with privacy regulations. From a security perspective, the website shows good practices such as HTTPS enforcement and cookie consent management. However, there is no explicit security policy or incident response contact information available, which could be improved. No vulnerabilities or exposed sensitive data were detected in the HTML content. The WHOIS data is consistent with the organization's claims, showing a domain age appropriate for the business history and no privacy protection masking the registrant. Overall, the website is safe, trustworthy, and compliant with GDPR requirements. It effectively serves its purpose as an informational and engagement platform for a non-profit social service organization. Strategic recommendations include enhancing security headers, publishing a security policy, and improving accessibility features to further strengthen their digital maturity and trustworthiness.
Charita Česká republikahospic.cz
Healthcare · Czech Republic
59Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Hospic Anežky České is a reputable non-profit hospice care provider in the Czech Republic, offering a wide range of services including inpatient and mobile hospice care, palliative outpatient services, social counseling, and spiritual care. The organization is affiliated with Charita Česká republika and maintains strong partnerships with governmental and healthcare institutions. The website reflects a professional and trustworthy presence with clear donation mechanisms and comprehensive service information. Technically, the site uses modern web technologies such as Google Tag Manager, Google Analytics, and a custom CMS platform, ensuring a good user experience with mobile optimization and accessibility considerations. Security posture is solid with HTTPS enforcement and cookie consent management, though additional security headers and policies could enhance protection. Privacy compliance is well addressed with a detailed privacy policy and cookie consent banner. Overall, the site demonstrates a high level of business credibility and digital maturity.
Domácí hospic sv. Markéty Strakonicehospicmarketa.cz
Healthcare · Czech Republic
59Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Domácí hospic sv. Markéty Strakonice is a small, specialized healthcare non-profit organization providing home hospice and respite care services to families in the Strakonice region of the Czech Republic. Founded in 2018, the organization focuses on enabling patients to spend their final life stages in familiar home environments with professional medical, psychological, and spiritual support. The website reflects a professional and consistent brand presence with clear contact information and social media linkage, targeting families seeking compassionate end-of-life care. Technically, the site is built on WordPress using the Divi theme, with standard modern web technologies and moderate performance. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal privacy or cookie policies, which are recommended for compliance and trust. The absence of WHOIS data for the domain raises some concerns about domain legitimacy, though the website content and contact details appear genuine. Overall, the site is safe, well-structured, and trustworthy for its intended audience but would benefit from enhanced privacy compliance and security best practices.
Domácí hospic sv. Jakuba Prachaticehospicjakub.cz
Healthcare · Czech Republic
61Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Domácí hospic sv. Jakuba v Prachaticích is a specialized home hospice care provider focused on delivering comprehensive palliative care to terminally ill patients in their homes. The organization emphasizes compassionate care that includes medical, social, psychological, and spiritual support, aiming to preserve patient dignity and comfort. Their services are targeted primarily at patients and families within Prachatice and surrounding areas, offering 24/7 care and equipment lending to ease caregiving burdens. Technically, the website is built on WordPress using the Divi theme and jQuery, providing a professional and responsive user experience. Security posture is adequate with HTTPS enabled but lacks advanced security headers and privacy compliance documentation. The absence of WHOIS data reduces domain trustworthiness, but the website content and contact information appear legitimate and professional. Overall, the site is well-structured and informative but would benefit from enhanced security and privacy compliance measures.
Hospic Žďár nad Sázavouhospiczdislavy.cz
Healthcare · Czech Republic
66Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Hospic Žďár nad Sázavou operates as a small non-profit healthcare organization specializing in hospice and palliative care services within the Czech Republic. The website serves as an informational and engagement platform for patients, families, volunteers, and donors, providing details about their services and ways to support the hospice. The organization appears to have a localized market presence with a focus on compassionate end-of-life care. Technically, the website is built on the Wix platform, leveraging Wix's content management and hosting infrastructure. The site uses standard Wix scripts and assets, ensuring moderate performance and good mobile optimization. However, the technical implementation lacks advanced security headers and comprehensive privacy documentation, which are areas for improvement. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism, indicating some attention to user privacy and security. Nonetheless, the absence of security headers, vulnerability disclosure policies, and WHOIS transparency limits the overall security posture. There are no indications of exposed sensitive data or vulnerabilities in the visible content. Overall, the website is functional and professionally presented but would benefit from enhanced privacy compliance, security best practices, and transparent business information to strengthen trust and compliance with regulatory standards.
Hospic sv. Víta Český Krumlovhospicvit.cz
Healthcare · Czech Republic
59Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Hospic sv. Víta Český Krumlov is a small, local non-profit organization providing home hospice care and related support services in the Český Krumlov region of the Czech Republic. Their services focus on compassionate end-of-life care, including pain management, respite services, equipment rental, and counseling. The website is professionally designed using WordPress and the Divi theme, with clear navigation and relevant content targeted at patients and families seeking hospice care. Technical infrastructure is modern and includes HTTPS with a moderate performance profile. However, the site lacks privacy and cookie policies, security headers, and WHOIS data is unavailable, which limits trust verification. No analytics or tracking scripts are detected, indicating minimal user tracking.
Athelas Hospic Písekhospic-pisek.cz
Healthcare · Czech Republic
60Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Hospic Athelas is a Czech Republic based hospice and palliative care provider operating primarily in Písek. The organization appears to be a small non-profit healthcare entity founded around 2014, offering specialized end-of-life care services. The website is professionally designed using WordPress with the Divi theme, integrating common analytics and marketing tools such as Google Analytics, Google Tag Manager, and Facebook Pixel. While the technical infrastructure is modern and the site is mobile optimized, there are notable gaps in privacy compliance, including the absence of privacy and cookie policies and consent mechanisms. Security posture is adequate with HTTPS enabled but lacks some security headers and explicit incident response contacts. Overall, the domain registration data is consistent and trustworthy, supporting the legitimacy of the business.
Healthcare · Czech Republic
54Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Hospicmezibrehy.cz is a Czech Republic-based small healthcare non-profit organization providing specialized home hospice and palliative care services to terminally ill patients and their families in the Beroun and surrounding regions. The website is professionally designed using WordPress and Elementor, offering clear descriptions of their key services including mobile hospice health services, social counseling, bereavement support, and respite care. Contact details including a named director, phone number, and email are provided, along with social media presence on Facebook and Instagram. Technically, the site uses modern web technologies and SEO best practices, with Google Analytics integrated for user tracking. Security posture is adequate with HTTPS enforced and privacy compliance partially addressed via a cookie consent mechanism, though formal privacy policies and security policies are absent. WHOIS data confirms the domain is recently registered in 2023, consistent with the organization's founding. Overall, the site is trustworthy and well-positioned for its regional healthcare niche.
- Hospic Tempus, z.s.
hospictempus.cz
Healthcare · Czech Republic
50Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
Hospic Tempus, z.s. is a Czech non-profit organization specializing in home hospice care services primarily in the Mělník and Prague-East districts. The organization collaborates with local healthcare providers to deliver expert home-based hospice care, psychosocial support, and respite services to patients and their families. Their website reflects a professional and community-focused approach, providing clear contact information and showcasing partnerships and testimonials that enhance trust. The business model centers on compassionate care within the patient's social environment, targeting patients requiring end-of-life care and their families in the region. Technically, the website employs modern web technologies including Bootstrap, jQuery, Font Awesome, and Fancybox, ensuring a responsive and user-friendly experience. The site includes a comprehensive cookie consent mechanism compliant with GDPR standards, indicating a mature approach to privacy compliance. However, the absence of explicit privacy and terms of service pages and missing WHOIS domain registration data are notable gaps. From a security perspective, the site uses HTTPS and implements cookie consent but lacks visible HTTP security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. The missing WHOIS data reduces the ability to fully verify domain legitimacy, which is a risk factor. Overall, Hospic Tempus presents as a trustworthy and professional healthcare non-profit with a solid digital presence but would benefit from enhanced transparency in domain registration, privacy policies, and security disclosures to improve trust and compliance posture.
Business Travel Awards Europebusinesstravelawardseurope.com
Hospitality · United Kingdom
72Medium
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Business Travel Awards Europe is a specialized event organizer focused on recognizing excellence in the European business travel sector. The organization operates under the BTN Group umbrella and targets corporate travel professionals and industry stakeholders. Their business model revolves around hosting annual awards, securing sponsorships, and providing industry recognition. Technically, the website is built on Squarespace, leveraging modern web technologies and third-party analytics tools such as Google Tag Manager and Crazy Egg. The site is well-designed, mobile-optimized, and provides clear navigation and contact information. Security-wise, the site enforces HTTPS with HSTS but lacks some advanced security headers and formal vulnerability disclosure mechanisms. The absence of WHOIS registration data is a notable concern, although the website content and branding suggest legitimacy. Overall, the site presents a professional image but would benefit from enhanced privacy and security disclosures.
Magazín o přírodní léčbě a bylinkách - FarmaZdravi.czfarmazdravi.cz
Media · Czech Republic
59Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
FarmaZdravi.cz is a Czech Republic based online magazine specializing in natural treatment and herbal remedies. The website provides daily articles and an atlas of herbs, targeting a general audience interested in healthy lifestyles aligned with nature. The business operates primarily as a content publisher within the media industry, with a small-scale operation founded in 2015. Technically, the website is built on WordPress and leverages Cloudflare for DNS and CDN services, indicating a moderate level of digital maturity. The site demonstrates good mobile optimization and SEO practices but lacks advanced accessibility features. Security-wise, the site uses HTTPS and Cloudflare services but lacks explicit security headers and formal security or incident response policies. Privacy compliance is weak, with no visible privacy or cookie policies, which could expose the business to regulatory risks. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and security measures.
- D-Marin
d-marin.com
Transportation
73Medium
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
D-Marin operates as a premium marina service provider focusing on the Mediterranean and Gulf regions, catering primarily to yacht owners and enthusiasts. The website presents a professional and well-structured digital presence, highlighting their marina offerings and services. The business model revolves around providing high-quality berthing and associated yacht services, positioning itself as a key player in the luxury marina market segment. The website content is relevant and targeted, with a clear focus on its niche audience. Technically, the website leverages modern web technologies such as React and Next.js, ensuring a responsive and performant user experience. Integration of advanced analytics and tracking tools like Microsoft Clarity, FullStory, and Google Tag Manager indicates a mature digital infrastructure aimed at optimizing user engagement and marketing effectiveness. Security measures including HTTPS enforcement and comprehensive security headers are in place, reflecting a strong commitment to protecting user data and maintaining site integrity. From a security perspective, the site demonstrates good practices with no evident vulnerabilities or exposed sensitive information. However, the absence of explicit privacy policy and terms of service pages, as well as lack of clear contact information, represent compliance and trust gaps that should be addressed. The WHOIS data is notably missing or inaccessible, which raises concerns about domain registration legitimacy despite the professional website facade. Overall, the website is well-designed and secure but requires improvements in transparency and compliance documentation to enhance trustworthiness and regulatory adherence. Strategic recommendations include publishing comprehensive privacy and terms policies, providing clear contact channels for security incidents, and clarifying domain registration details to reinforce legitimacy.
Marina Portorožmarinap.si
Hospitality · Slovenia
52Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Marina Portorož is a well-established marina and hospitality service provider located in Slovenia, with a domain age dating back to 1996, supporting its long-standing market presence. The website offers comprehensive information about mooring services, boat maintenance, accommodation, and maritime experiences, targeting boating enthusiasts and tourists. Technically, the site is built on WordPress with Elementor, employing modern web technologies and plugins, and demonstrates good mobile optimization and SEO practices. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though it lacks a dedicated security policy or incident response contacts. Overall, the site is professional, trustworthy, and compliant with privacy regulations, making it a reliable digital presence for the business.
- YYOU(R)SEA
yoursea.org
Non-profit · Slovenia
62Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
YOU(R)SEA is a small non-profit organization based in Slovenia dedicated to marine conservation, education, and community engagement. Their website provides educational content, participatory science initiatives for youth, and promotes environmental awareness through various projects and events. The organization maintains an active presence on multiple social media platforms, enhancing outreach and community involvement. Technically, the website is built on Squarespace, leveraging modern web technologies such as jQuery, Swiper.js, and Weglot for multilingual support. The site is mobile-optimized and uses HTTPS with HSTS enabled, reflecting a good security posture. However, the absence of explicit privacy and terms of service pages and the lack of publicly available WHOIS data slightly reduce trust and compliance confidence. Overall, the website is professional, secure, and serves its educational mission effectively.
- AAERODROM PORTOROŽ, d.o.o.
portoroz-airport.si
Transportation · Slovenia
50Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
Aerodrom Portorož operates as the third international airport in Slovenia, specializing in general aviation services including panoramic flights, tandem skydiving, and business space rentals. The airport leverages its strategic location near Piran and Portorož to serve pilots, tourists, and business clients effectively. The website reflects a professional and consistent brand image, providing clear information and multiple service offerings tailored to its target audience. Technically, the site employs modern web technologies such as jQuery, Google Analytics, and reCAPTCHA, ensuring a secure and user-friendly experience. Security measures include HTTPS enforcement and cookie consent mechanisms, although explicit security policies and incident response contacts are absent. Overall, the site demonstrates a mature digital presence with good compliance to privacy regulations and a trustworthy business profile.
Seakeeper Inc.seakeeper.com
Transportation
58Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Seakeeper Inc. is a recognized leader in marine motion control technology, specializing in gyroscopic stabilizers and vessel attitude control systems that enhance boating experiences worldwide. Their website reflects a professional and consistent brand presence targeting boating enthusiasts and professionals. The technical infrastructure leverages modern web technologies including Google Tag Manager, Google Analytics, and Facebook Pixel for marketing and analytics, hosted on a WordPress CMS platform with embedded Vimeo videos for rich media content. Security posture is generally good with HTTPS enforced, but lacks some security headers and cookie consent mechanisms, which are recommended for improved compliance and protection. The absence of WHOIS data is a notable anomaly that slightly reduces trust but does not negate the evident legitimacy of the business. Overall, the website is well-structured, content-rich, and professionally maintained, supporting a medium-sized enterprise in the transportation sector.
Special Service International Energy, a.s.ssienergy.cz
Energy · Czech Republic
61Medium
NIS2 2 · GDPR 85
NIS2 2 · GDPR 85
SSI Energy is a Czech-based engineering and EPC company specializing in projects within the heating and industrial energy sectors. Founded in 2020 and part of the SSI Group, the company offers comprehensive services including energy unit construction, design & build, consulting, and EPC projects. Their website reflects a professional and consistent brand image targeting industrial clients seeking energy solutions. The company demonstrates a solid market position within the Czech energy engineering sector with a medium-sized operational scale. Technically, the website is built on WordPress and integrates modern tools such as Google Maps API, Google reCAPTCHA, Google Tag Manager, and Microsoft Clarity for analytics and user experience enhancement. The site is multilingual and optimized for mobile devices, providing a good user experience and SEO presence. Hosting and domain registration are consistent with the company's Czech business focus. From a security perspective, the site uses HTTPS with a strong SSL configuration and employs reCAPTCHA to protect forms. However, it lacks explicit security headers and published security policies or incident response information, which are areas for improvement. Privacy compliance is well addressed with a clear privacy policy, cookie consent mechanism, and GDPR adherence. Overall, SSI Energy's digital presence is professional and trustworthy, with moderate technical sophistication and good privacy practices. Strategic enhancements in security headers, incident response transparency, and accessibility could further strengthen their security posture and user trust.
Special Service International Technology, s.r.o.ssitechnology.cz
Technology · Czech Republic
61Medium
NIS2 2 · GDPR 85
NIS2 2 · GDPR 85
SSI Technology, operating under Special Service International Technology, s.r.o., is a Czech-based company specializing in security technologies and integrated facility management services. The company offers a broad range of services including helpdesk support, analytical services, PCO/DPPC monitoring centers, and AI-enhanced video services. With over 35 years of market presence and a team exceeding 3000 professionals, SSI Technology holds a strong position in the security and facility management sector, targeting businesses and organizations requiring comprehensive security solutions. The company is part of the SSI Group holding, which adds to its credibility and market reach. Technically, the website is built on WordPress with modern SEO and analytics tools such as Yoast SEO, Google Tag Manager, and Microsoft Clarity, indicating a mature digital infrastructure. Security-wise, the site enforces HTTPS, integrates Google reCAPTCHA for form protection, and implements cookie consent mechanisms, although it lacks explicit security policies and vulnerability disclosure pages. Overall, the website is professional, well-structured, and compliant with GDPR, reflecting a trustworthy and established business entity.
Special Service International Cleaning, s.r.o.ssicleaning.cz
Real Estate · Czech Republic
61Medium
NIS2 2 · GDPR 85
NIS2 2 · GDPR 85
SSI GROUP, operating under Special Service International Cleaning, s.r.o., is a well-established integrated facility management company with over 35 years of experience, offering services such as cleaning, pest control, and green maintenance primarily in the Czech Republic. The website reflects a professional B2B service provider with a large team and a significant client portfolio. Technically, the site is built on WordPress with modern plugins and tracking tools, providing good SEO and mobile optimization. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent, though some security headers and policies could be improved. The domain is relatively new compared to the business age, likely due to recent domain registration or rebranding under the SSI Group holding. Overall, the site is trustworthy, compliant with GDPR, and suitable for its target audience.
Czech facility a.s.czechfacility.cz
Real Estate · Czech Republic
62Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Czech facility a.s. is a Czech Republic-based company specializing in comprehensive property management services since 2008. The company offers a broad range of services including building operation, energy management, technical servicing, physical security, occupational safety, cleaning, and greenery maintenance. Positioned as a leading provider in the Czech real estate management sector, it operates under the parent company SSI Group, enhancing its market credibility. The website is professionally designed, targeting local clients seeking reliable facility management solutions. Technically, the site employs modern web technologies including Google Tag Manager and Cloudflare Insights, ensuring moderate performance and good mobile responsiveness. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though improvements in security headers and cookie consent mechanisms are recommended. The absence of WHOIS data reduces domain transparency but does not detract significantly from the overall trustworthiness given the professional presentation and clear business information. Overall, the website and business demonstrate a mature digital presence with room for enhanced privacy compliance and security best practices.
Special Service International Facility s.r.o.ssifacility.cz
Real Estate · Czech Republic
61Medium
NIS2 2 · GDPR 85
NIS2 2 · GDPR 85
SSI Facility, operated by Special Service International Facility s.r.o., is a well-established facility management company in the Czech Republic with over 35 years of experience. The company offers comprehensive services including technical building management, maintenance, energy management, and safety compliance (BOZP). It serves a large client base with over 900 managed properties and a team exceeding 3000 professionals, positioning itself as a significant player in the real estate and facility management sector. The website reflects a professional and consistent brand image aligned with its parent company SSI Group. Technically, the website is built on WordPress and integrates modern tools such as Google Maps API, Google reCAPTCHA, Microsoft Clarity, and Google Tag Manager, ensuring a good level of digital maturity and user experience. Security-wise, the site enforces HTTPS and uses CAPTCHA for form protection, but lacks explicit security headers and a published security policy, which are areas for improvement. Privacy compliance is strong with a clear cookie consent mechanism and a comprehensive privacy policy, demonstrating adherence to GDPR requirements. Overall, the website is trustworthy, content-rich, and professionally maintained, with minor gaps in security documentation and domain age consistency. Strategic recommendations include enhancing security headers, publishing a security policy, and considering a vulnerability disclosure program to further strengthen trust and compliance.
Special Service International Security, s.r.o.ssisecurity.cz
Real Estate · Czech Republic
61Medium
NIS2 2 · GDPR 85
NIS2 2 · GDPR 85
SSI Security is a well-established security services provider operating since 1990, offering comprehensive physical security, detective services, security assessments, and technology solutions primarily in the Czech Republic. The company is part of the SSI Group holding and serves a large client base with over 3000 professionals and 900 managed sites. The website reflects a mature digital presence built on WordPress, integrating modern analytics and consent management tools, ensuring GDPR compliance and user privacy. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though some security headers could be improved. The domain is recently registered but consistent with the business identity, indicating a possible domain migration or new web presence. Overall, SSI Security demonstrates strong business credibility, professional web design, and good compliance with privacy regulations.
Grace Themesgracethemes.com
Technology
69Medium
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Grace Themes is a specialized WordPress theme provider offering a wide range of premium and free themes optimized for responsiveness, SEO, and WooCommerce integration. Established in 2015, the company targets designers, agencies, freelancers, and small to medium online businesses, positioning itself as a reliable and trusted theme vendor with over 90,000 active installs and millions of downloads. The website demonstrates a mature digital infrastructure leveraging WordPress CMS, WooCommerce, Yoast SEO, CleanTalk anti-spam, and performance optimization tools like WP Rocket and Perfmatters. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. Security posture is strong with HTTPS, anti-spam measures, and domain transfer protections, though DNSSEC is not enabled and some security headers could be improved. Overall, the site is professional, trustworthy, and user-friendly, supported by positive Trustpilot reviews and clear contact channels.
Ewaldsewalds.sk
Retail · Slovakia
68Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
Ewalds.sk is a well-established Slovakian e-commerce retailer specializing in home accessories and decorations, operating since 1997. The company offers a broad range of products with over 3000 decorations in stock and supports both retail consumers and wholesale buyers. Their business model combines online sales with a physical showroom, enhancing customer trust and market presence. The website is professionally designed with clear navigation and mobile optimization, supporting a positive user experience. Technically, the site leverages modern JavaScript frameworks (Vue.js), integrates Google Tag Manager, Google Analytics, Hotjar, and Facebook Pixel for marketing and analytics, and uses AWS infrastructure. Privacy compliance is robust, featuring a comprehensive cookie consent mechanism and GDPR-aligned policies. Security posture is good with HTTPS enforced and CSRF protections, though some HTTP security headers could be improved. No critical vulnerabilities or suspicious activities were detected. Overall, the site demonstrates a mature digital presence with strong business credibility and compliance.
Renovabis e.V.renovabis.de
Non-profit · Germany
67Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
Renovabis e.V. is a well-established German non-profit organization dedicated to providing aid and support to people in Eastern Europe, focusing on social and pastoral renewal. Founded in 1993 by the German Bishops' Conference, it operates through donations, project funding, and educational initiatives. The website reflects a professional and trustworthy presence with comprehensive content, clear navigation, and consistent branding. It targets donors, partners, and communities interested in charitable work in Eastern Europe. Technically, the website employs modern web technologies including JavaScript, CSS, and integrates third-party services such as Usercentrics for consent management, Google Tag Manager for analytics, and Algolia for search functionality. The site is mobile-optimized, accessible, and performs moderately well. Hosting appears to be based in Germany, aligning with the organization's location. From a security perspective, the site enforces HTTPS and uses consent management to comply with GDPR. While explicit security headers are not detected, no vulnerabilities or exposed sensitive data were found. The organization demonstrates good privacy compliance with a clear privacy policy and cookie consent mechanism. Contact information is transparent and includes multiple channels. Overall, Renovabis presents a low-risk profile with strong business credibility and privacy practices. Recommendations include enhancing security headers, publishing a security policy, and adding a vulnerability disclosure mechanism to further strengthen security posture.
Darklace Limitedkvpzr.cz
Other · Cyprus
52Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Adell Casino is an online gambling platform operated by Darklace Limited, licensed in Cyprus. The website offers a variety of casino games including slots, live dealer games, jackpots, and video poker, targeting adult players primarily in Czech and German languages. The platform provides demo modes, multiple payment options, and various bonuses to attract and retain players. Technically, the site is built on modern frameworks such as Next.js and React, hosted behind Cloudflare DNS services, and shows moderate performance and good mobile optimization. However, the site lacks explicit privacy and terms of service pages, security headers, and incident response contact information, which are critical for compliance and trust. The WHOIS data shows a suspicious domain creation date in the future, which raises concerns about legitimacy. Overall, the site is functional and professional but requires improvements in security posture and compliance documentation.