Security reports directory
150,190 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,190001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
147,001–147,050 of 150,190
Other · Finland
64Medium
NIS2 9 · GDPR 43
NIS2 9 · GDPR 43
The website datartery.com currently functions primarily as a parked domain with minimal original content or business information. It lacks visible contact details, social media presence, or detailed business descriptions. The site is served without a valid SSL certificate, which significantly impacts its security posture and user trust. Advertising scripts from multiple ad networks are embedded, indicating a revenue model based on ad placements rather than active business operations. The technical infrastructure is basic, hosted on Hetzner Online with a Caddy server, but lacks modern security configurations such as TLS and HSTS. Overall, the site demonstrates low digital maturity and limited compliance with privacy and security best practices.
- Haoqq导航
haoqq.com
E-commerce · China
60Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Haoqq.com is a specialized website navigation platform tailored for Amazon global sellers and cross-border e-commerce participants. It aggregates a wide range of resources including keyword tools, ERP order management software, forums, media outlets, logistics, payment solutions, and educational training platforms. The site serves as a comprehensive portal to reduce information asymmetry among small and medium sellers, positioning itself as a key resource hub in the e-commerce ecosystem primarily targeting Chinese-speaking Amazon sellers. Technically, the website runs on an nginx server with PHP 5.6.30 backend, uses a valid SSL certificate issued by a recognized CA, and integrates Google Analytics and Google Adsense for tracking and advertising. However, it lacks modern TLS protocol support and security headers, and the PHP version is outdated, indicating potential security and compliance risks. The site shows good mobile optimization and SEO practices but lacks privacy and cookie policies, which may affect regulatory compliance. From a security perspective, the site has a valid SSL certificate and no known major SSL vulnerabilities but does not implement advanced security headers or modern TLS versions. There is no visible privacy policy, cookie consent mechanism, or incident response contact information, which are critical for GDPR and other data protection regulations. The absence of contact information and security policies reduces transparency and trustworthiness. Overall, haoqq.com is a valuable resource platform for its niche but requires significant improvements in security posture, privacy compliance, and transparency to enhance user trust and regulatory adherence.
Related:163.compingpongx.com
RE/MAXremaxcommercial.com
Real Estate · United States
55Medium
NIS2 25 · GDPR 25
NIS2 25 · GDPR 25
RE/MAX Commercial operates as a prominent commercial real estate brokerage platform, offering extensive property listings for sale and lease across multiple regions, primarily in the United States and Canada. The company leverages the strong RE/MAX brand and network to connect commercial property buyers, sellers, and brokers, providing a trusted marketplace and professional services. Their website is well-structured with clear navigation, targeting commercial real estate investors and professionals seeking brokerage services. The business model centers on brokerage commissions and facilitating commercial real estate transactions through a digital platform integrated with professional broker searches and office locators. Technically, the website is built on WordPress VIP, utilizing modern web technologies including Yoast SEO for search optimization, Google Tag Manager for analytics, and TrustArc for cookie consent management. Hosting is provided via Amazon AWS DNS infrastructure, ensuring scalability and reliability. The site demonstrates good mobile optimization and SEO practices, with structured data enhancing search engine visibility. Performance is fast, and the user experience is professional and consistent with the RE/MAX brand. From a security perspective, the site maintains a valid SSL certificate but lacks modern TLS protocol support and advanced security headers, which limits its security posture. The presence of TrustArc indicates compliance with privacy regulations including GDPR, supported by a comprehensive privacy policy and cookie consent mechanism. However, there is no explicit security policy, incident response information, or vulnerability disclosure found, which are areas for improvement. Contact information is available primarily via phone and contact forms, with no direct company emails listed. Overall, RE/MAX Commercial presents a mature digital presence with strong business positioning in commercial real estate. Security practices are adequate but could be enhanced to meet higher standards. Strategic improvements in security protocols and transparency would further strengthen trust and compliance, supporting continued growth and market leadership.
Related:remax.com
wemlo, LLCwemlo.io
Finance · United States
60Medium
NIS2 25 · GDPR 25
NIS2 25 · GDPR 25
Wemlo, LLC is a specialized mortgage loan processing company serving mortgage brokers across the United States. Founded in 2019, the company has established itself as an industry leader with a strong track record, having supported over 500 brokerages and processed thousands of loans. Wemlo emphasizes flexible, transparent, and highly qualified processing services, supported by a dedicated team and advanced technology. The company holds multiple industry awards, reinforcing its market position and trustworthiness. Technically, the website is built on the WordPress VIP platform, leveraging modern libraries such as Swiper.js and Gravity Forms, and is hosted on Amazon AWS infrastructure. The site is optimized for performance, mobile responsiveness, and SEO, with comprehensive privacy and cookie compliance implemented via TrustArc. Security-wise, the site uses a valid SSL certificate but lacks advanced configurations like HSTS and DNSSEC. No explicit security or incident response policies are publicly available, indicating an area for improvement. Overall, Wemlo demonstrates a mature digital presence with strong business and compliance practices, though security posture can be enhanced to mitigate risks and build further trust.
MottoMortgage, LLCmottomortgage.com
Finance · United States
67Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
MottoMortgage, LLC operates as a mortgage lending company focused on providing home financing services primarily within the United States, with a physical presence in Denver, Colorado. The company targets homebuyers seeking mortgage solutions and positions itself as a regional mortgage provider. The website leverages modern web technologies including Vue.js and Prismic CMS, hosted on Amazon AWS infrastructure, and integrates multiple marketing and analytics tools such as Google Analytics, Meta Pixel, and LinkedIn Insight Tag. Performance optimizations and consent management via TrustArc indicate a moderate level of digital maturity. Security posture is adequate with a valid SSL certificate and no deprecated protocols enabled; however, the absence of advanced security headers, DNSSEC, and modern TLS protocols suggests room for improvement. Privacy compliance is addressed through a comprehensive privacy policy and cookie consent mechanism, but incident response and vulnerability disclosure policies are not evident. Overall, the website demonstrates a good balance of business functionality and technical implementation but would benefit from enhanced security and compliance measures.
Related:trustarc.com
- 冠冠捷电子科技股份有限公司
tpv-tech.com
Technology · China
66Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
TPV Technology Limited (冠捷电子科技股份有限公司) is a large enterprise specializing in the manufacturing and operation of display and audio technology products, including monitors, TVs, commercial displays, all-in-one PCs, and mobile communication devices. The company operates multiple well-known brands and maintains a strong presence in both domestic and international markets. Their website targets consumers and businesses interested in technology products and smart manufacturing solutions. Technically, the website uses common web technologies such as jQuery, Bootstrap, and Swiper for UI components, with a focus on Chinese language content and some language switching capabilities. Performance is fast and mobile optimization is good, though accessibility and SEO are basic. Security-wise, the site has a valid SSL certificate but lacks modern TLS protocols and important security headers. There is no cookie consent mechanism or detailed security policy published. Overall, the company demonstrates moderate digital maturity with room for security and compliance improvements.
—
75Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
Security assessment completed with an overall score of 50/100 (unknown risk). Total of 6 security findings identified across all modules.
Red Bull X-Alpsredbullxalps.com
Sports & Racing
74Medium
NIS2 25 · GDPR 43
NIS2 25 · GDPR 43
Red Bull X-Alps is a globally recognized extreme adventure race organized under the Red Bull brand, focusing on paragliding and hiking across the Alps. The website serves as a comprehensive platform for event information, athlete profiles, live tracking, and media content, positioning itself as a leader in the adventure sports niche. The technical infrastructure leverages modern web technologies including StencilJS and Cloudinary for media delivery, ensuring fast performance and excellent mobile optimization. Security measures are in place with standard headers and a valid SSL certificate, though improvements such as enabling HSTS and DNSSEC are recommended. The site maintains good privacy and terms of service policies, reflecting compliance with GDPR standards. Overall, the digital presence is professional, trustworthy, and well-aligned with the brand's high standards.
—
75Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
Security assessment completed with an overall score of 50/100 (unknown risk). 2 high-priority issues should be addressed promptly. Total of 14 security findings identified across all modules.
AlphaTauri GmbHalphatauri.com
E-commerce · Germany
78Low
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
AlphaTauri GmbH operates a premium fashion e-commerce platform focused on innovative textile technologies and purposeful design. The company targets men and women seeking aspirational styles and premium materials, positioning itself as a technologically advanced fashion brand. The website demonstrates a mature digital infrastructure with modern web technologies, comprehensive navigation, and strong branding consistency. Security measures include a valid SSL certificate with HSTS and secure cookie settings, although TLS protocols are not currently enabled. Privacy and terms policies are clearly linked and GDPR compliant, with cookie consent mechanisms in place. The site integrates marketing and analytics tools such as New Relic, Google Tag Manager, Exponea, and Gigya, reflecting a moderate level of user tracking balanced with privacy compliance. Overall, the website presents a professional, trustworthy, and well-optimized online retail experience.
Related:redbull.com
- Wings for Life
wingsforlife.com
Non-profit · Austria
68Medium
NIS2 25 · GDPR 25
NIS2 25 · GDPR 25
Wings for Life is a medium-sized non-profit organization focused on funding spinal cord injury research and supporting life-changing projects worldwide. The organization maintains a strong market position with global outreach and partnerships, including affiliation with Red Bull. Their website is built on modern technologies such as Nuxt.js and Vue.js, hosted on Netlify, and integrates payment processing via Stripe and security via Google reCAPTCHA. The site demonstrates good digital maturity with excellent mobile optimization, accessibility, and SEO practices. Security posture is solid with a valid SSL certificate and HSTS enabled, though it lacks modern TLS protocol support and DNSSEC. Privacy and terms policies are comprehensive and GDPR compliant, with active consent mechanisms. Overall, the organization presents a professional and trustworthy online presence with room for security enhancements.
Related:redbull.com
- RRed Bull
wingfinder.com
Other
70Medium
NIS2 25 · GDPR 40
NIS2 25 · GDPR 40
Red Bull Wingfinder is a free, expert-backed personality assessment tool designed to help individuals identify and leverage their strengths for career success. The platform is supported by Red Bull's global brand and integrates psychological research from leading universities. Technically, the website is built on modern frameworks like Next.js and hosted on Vercel, ensuring fast performance and good mobile optimization. Security is solid with a valid SSL certificate and strict transport security, though it lacks modern TLS protocol support and visible privacy or cookie policies. The site uses Google Tag Manager for analytics and tracking, indicating moderate user tracking without explicit consent mechanisms. Overall, the site presents a professional and trustworthy user experience but would benefit from enhanced privacy disclosures and security protocol updates.
Related:redbull.com
—
75Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
Security assessment completed with an overall score of 50/100 (unknown risk). Total of 7 security findings identified across all modules.
Meritain Healthmeritain.com
Healthcare · United States
73Medium
NIS2 25 · GDPR 25
NIS2 25 · GDPR 25
Meritain Health is a large healthcare company specializing in flexible health insurance solutions for employees, focusing on self-funding and third-party administration. The company positions itself as an industry leader with innovative partnerships and customized employee benefit plans. Their website reflects a mature digital presence with comprehensive content, strong branding, and targeted services for plan sponsors, consultants, members, providers, and product partners. Technically, the site is built on WordPress hosted on WP Engine with Cloudflare CDN, employing modern SEO practices and responsive design for good mobile optimization. Security-wise, the site implements strong HTTP security headers and a valid SSL certificate but lacks support for modern TLS protocols and a cookie consent mechanism, which are areas for improvement. Analytics and marketing tools like Google Analytics, Google Tag Manager, and Pardot are used, indicating moderate user tracking. Overall, the website is professional, trustworthy, and well-optimized, though it could enhance privacy compliance and security posture further.
Ventura Foods, LLClouana.com
Retail · United States
76Low
NIS2 25 · GDPR 43
NIS2 25 · GDPR 43
LouAna.com represents the digital presence of LouAna Oils, a well-established brand under Ventura Foods, LLC, specializing in cooking oils and related recipe content. The website targets consumers interested in cooking and beauty uses of oils, offering product information, recipes, tips, and beauty advice. The business model combines product retail with content marketing to engage and retain customers. Technically, the site is built on WordPress, leveraging common plugins and third-party marketing tools, hosted via WP Engine and protected by Cloudflare. Performance and mobile optimization are good, with SEO practices supported by Yoast SEO plugin. Security posture is moderate with valid SSL certificates and several security headers implemented; however, the lack of modern TLS protocols and disabled X-XSS-Protection header reduce the overall security score. No cookie consent mechanism or explicit GDPR compliance is evident, and no incident response or vulnerability disclosure policies are published. The site integrates multiple marketing and tracking tools including Google Analytics, Facebook and Pinterest pixels, and affiliate marketing via Hopster. Overall, LouAna.com is a professionally maintained retail and content site with room for security and privacy enhancements.
Related:venturafoods.com
Ventura Foods Mexicoventurafoods.mx
Manufacturing · Mexico
72Medium
NIS2 25 · GDPR 58
NIS2 25 · GDPR 58
Ventura Foods Mexico is a large-scale food solutions provider specializing in innovative food products, culinary inspiration, and risk management services. The company operates a well-branded, multi-language website built on WordPress and WooCommerce, targeting food industry professionals and retail customers. Their market position is strong with a broad portfolio of products and services, supported by a consistent and professional digital presence. Technically, the website leverages modern web technologies and CDN services for fast performance and good mobile optimization. Security posture is adequate with valid SSL and security headers, but lacks modern TLS protocols and advanced DNS security features. Privacy compliance is well addressed with GDPR and cookie consent mechanisms in place. Overall, the site demonstrates a mature digital infrastructure with room for security enhancements.
Related:venturafoods.com
Ventura Foods Canadaventurafoods.ca
Retail · Canada
76Low
NIS2 25 · GDPR 58
NIS2 25 · GDPR 58
Ventura Foods Canada operates as a leading food solutions provider specializing in innovative culinary products and services. Established in 1996, the company offers a broad portfolio including ketchup, sauces, and condiments, targeting foodservice and retail sectors. Their digital presence is robust, leveraging WordPress and WooCommerce with multi-language support for Canada, USA, and Mexico markets. The website demonstrates excellent content quality, user experience, and SEO optimization, reflecting a mature digital strategy. Security posture is solid with valid SSL and security headers, though improvements in TLS protocol support and HSTS implementation are recommended. Privacy and cookie policies are comprehensive and GDPR compliant, supported by a consent mechanism. Overall, Ventura Foods Canada presents a professional and trustworthy online presence aligned with its market position.
Related:venturafoods.comventurafoods.mx
DYMA Brandsdymabrands.com
Manufacturing · US
56Medium
NIS2 25 · GDPR 25
NIS2 25 · GDPR 25
DYMA Brands is a medium-sized US-based manufacturing company specializing in customized flavor solutions for the foodservice industry. As a subsidiary of Ventura Foods, it holds a strong market position with a diverse portfolio including liquid portion control, dry condiments, and dry-blended mixes. The company targets various foodservice sectors such as convenience, education, healthcare, military, office coffee services, and restaurants. Their business model focuses on B2B manufacturing and distribution, supported by in-house R&D and graphic design capabilities. The website reflects a professional and consistent brand image with good content quality and user experience. Technically, the site is built on WordPress with Elementor, hosted on Cloudways, and employs Google Tag Manager for analytics. Performance and mobile optimization are good, though accessibility is basic.
Related:venturafoods.compaycomonline.net
- EssilorLuxottica
essilorluxottica.com
Healthcare
85Low
NIS2 25 · GDPR 40
NIS2 25 · GDPR 40
EssilorLuxottica is a global integrated leader in the eyecare and eyewear industry, offering a comprehensive portfolio of products and services including eyewear brands, eyecare solutions, and direct-to-consumer retail. The company targets consumers, investors, and partners with a strong emphasis on innovation, sustainability, and governance. Their digital presence is built on modern technologies such as React and Next.js, hosted on Microsoft Azure, and managed via CoreMedia CMS, reflecting a mature and scalable technical infrastructure. Security posture is strong with multiple security headers and a valid SSL certificate, although the absence of enabled TLS protocols and lack of a public vulnerability disclosure policy indicate areas for improvement. Overall, the website demonstrates high professionalism, excellent user experience, and consistent branding, supporting the company's market position and trustworthiness.
- EssilorLuxottica
luxottica.com
Healthcare
85Low
NIS2 25 · GDPR 40
NIS2 25 · GDPR 40
EssilorLuxottica is a global leader in the eyecare and eyewear industry, integrating manufacturing, retail, and innovation to deliver comprehensive vision care solutions. The company operates a sophisticated digital presence with a modern tech stack including React and Next.js, hosted on Akamai and managed via CoreMedia CMS. The website demonstrates excellent design, user experience, and content quality, targeting consumers, investors, and partners worldwide. Security posture is strong with valid SSL certificates and robust security headers, although the lack of modern TLS protocols and absence of a vulnerability disclosure page indicate areas for improvement. Privacy and compliance policies are comprehensive and GDPR compliant, but cookie consent mechanisms could be enhanced. Overall, the site reflects a mature digital infrastructure supporting a large enterprise with a global footprint.
- VVIRTUAGEEK
virtuageek.com
Other
49High
NIS2 25 · GDPR 40
NIS2 25 · GDPR 40
VIRTUAGEEK operates a minimalistic website serving primarily as a digital placeholder or contact point with very limited business information or service descriptions. The site presents a single email contact and a simple branded landing page without metadata or interactive features, indicating a low digital maturity and minimal online presence. Technically, the site is hosted on Apache via HostGator Brazil with a valid SSL certificate; however, it lacks modern TLS protocol support and advanced security headers, reflecting a basic security posture. The absence of privacy, cookie, or terms of service policies and lack of DNSSEC or CAA records further highlight compliance and security gaps. Overall, the website poses a low risk but would benefit from enhanced security configurations and richer content to improve trust and professionalism.
Xplor Technologiesxplortechnologies.com
Technology
80Low
NIS2 25 · GDPR 43
NIS2 25 · GDPR 43
Xplor Technologies is a large technology company specializing in vertical-specific SaaS software, embedded payments, and growth technologies. They serve small and medium-sized businesses across childcare, fitness, field services, personal services, and payments sectors. The company positions itself as a global leader integrating smart software and seamless payments to accelerate customer growth. Their website demonstrates a mature digital presence with modern technologies such as React, WordPress CMS, and advanced SEO practices including structured data and social media integration. Security-wise, the site employs strong HTTP security headers and a valid SSL certificate, though it lacks support for modern TLS protocols and does not enforce a strict Content Security Policy. Privacy and cookie policies are comprehensive and GDPR compliant, with a consent mechanism in place. However, there is no explicit security policy, incident response information, or vulnerability disclosure program publicly available. Overall, the website is professionally designed, fast, mobile-optimized, and trustworthy, reflecting a company with a strong market position but with room for improvement in security transparency and protocol support.
Related:outlook.com
- RRalph Lauren
ralphlauren.com
Retail
67Medium
NIS2 25 · GDPR 25
NIS2 25 · GDPR 25
Ralph Lauren operates as a leading global luxury fashion retailer specializing in apparel, accessories, and home furnishings. The company targets consumers seeking premium lifestyle products and maintains a strong market position in the retail sector. The website is designed to support e-commerce sales but the analyzed page is a bot protection challenge, limiting direct content visibility. Technically, the site leverages Cloudflare for hosting and caching, Salesforce Demandware as the e-commerce platform, and PerimeterX for bot mitigation. The SSL certificate is valid but lacks support for modern TLS protocols, which is a security concern. Security headers are minimal with only HSTS enabled at a low max-age, and no comprehensive security or privacy policies are exposed on the analyzed page. Overall, the site demonstrates moderate trust indicators but lacks transparency in privacy and security disclosures. Recommendations include upgrading TLS support, enhancing security headers, publishing clear privacy and security policies, and improving accessibility and SEO to strengthen user trust and compliance.
- Bitly, Inc.
fce.gg
Technology · United States
78Low
NIS2 25 · GDPR 58
NIS2 25 · GDPR 58
Bitly, Inc. operates a leading branded link management platform offering URL shortening, QR codes, analytics, and branded links to businesses and enterprises globally. The company is positioned as a trusted technology provider with a strong brand presence and a comprehensive suite of services aimed at enhancing digital marketing and customer engagement. The website infrastructure leverages WordPress CMS, Cloudflare DNS, AWS Cloudfront CDN, and integrates modern JavaScript libraries and marketing tools such as Optimizely and ProfitWell, indicating a mature digital infrastructure optimized for performance and user experience. Security posture is solid with valid SSL certificates, HSTS enforcement, and secure cookie settings, though the absence of modern TLS protocols and DNSSEC implementation suggests areas for improvement. Privacy and compliance are well addressed with clear policies and consent mechanisms, supporting GDPR compliance. Overall, the site demonstrates high professionalism, accessibility, and trustworthiness, with strategic recommendations focusing on enhancing TLS support, DNS security, and incident response transparency.
Related:profitwell.com
Barton Gbartong.com
Hospitality
49High
NIS2 25 · GDPR 43
NIS2 25 · GDPR 43
Barton G is a hospitality company offering premium dining experiences, event hosting, and catering services. The website positions the brand as a provider of unique restaurant experiences and event organization, targeting consumers seeking upscale hospitality services. The business operates multiple restaurant locations and integrates event and catering services to diversify its offerings. Technically, the website is built on WordPress, leveraging modern JavaScript libraries such as GSAP and Swiper for enhanced user experience. It uses Cloudflare for DNS and Apache as the web server. The site is optimized for performance and mobile use, with good SEO practices implemented via Yoast SEO. Security-wise, the site has a valid SSL certificate but lacks modern TLS protocol support and advanced security headers. There is no cookie consent mechanism, and no explicit security or incident response policies are published. Privacy and terms of use pages are present and linked in the footer, indicating some compliance awareness. Overall, the site demonstrates a moderate security posture with room for improvement in security best practices and compliance mechanisms.
Related:opentable.com
Law Offices of Spar & Bernsteinsparbernstein.com
Other · United States
67Medium
NIS2 25 · GDPR 43
NIS2 25 · GDPR 43
The Law Offices of Spar & Bernstein is a well-established legal firm specializing in immigration and personal injury law, serving clients primarily in New York City and Hartford, Connecticut. With over 60 years of experience and a strong track record of more than 100,000 cases successfully resolved, the firm positions itself as a trusted expert in its field. Their services cater to both individuals and businesses, offering tailored immigration solutions and personal injury representation. The website reflects a professional and consistent brand image, supported by client testimonials and press features that enhance trust and credibility. Technically, the site is built on WordPress with modern plugins such as Gravity Forms and uses Cloudflare for hosting and CDN services, ensuring fast performance and good SEO optimization. However, the SSL configuration lacks support for modern TLS protocols, and security headers could be improved by enabling HSTS and other best practices. The firm actively engages users through multiple social media channels and uses Google Tag Manager for analytics and marketing, though it lacks a visible cookie consent mechanism. Overall, the security posture is moderate with room for enhancements in compliance and incident response transparency.
Related:digitalsilk.com
Rollinkrollink.com
E-commerce
65Medium
NIS2 25 · GDPR 43
NIS2 25 · GDPR 43
Rollink is a premium e-commerce company specializing in collapsible and foldable luggage designed for travelers seeking durable, lightweight, and space-saving travel solutions. The company positions itself in a niche market with a focus on quality and style, offering a range of luggage and travel accessories. Their website is built on WordPress with WooCommerce, leveraging modern web technologies and marketing tools such as Klaviyo and Facebook Pixel to engage customers and track performance. The site demonstrates good digital maturity with fast performance, mobile optimization, and strong branding consistency. Security posture is adequate with a valid SSL certificate and no known vulnerabilities, but lacks advanced security headers like HSTS and DNSSEC. Privacy and terms of service policies are present, but cookie consent mechanisms and explicit security policies are missing, indicating areas for compliance improvement. Overall, Rollink maintains a professional and trustworthy online presence with room to enhance security and privacy transparency.
Related:digitalsilk.comoutlook.com
- Haoqq导航
mcds.com
E-commerce · China
51Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Haoqq导航 operates as a specialized navigation portal tailored for Amazon global sellers and cross-border e-commerce practitioners. It aggregates and provides access to a wide range of resources including keyword tools, ERP systems, forums, media outlets, logistics, payment solutions, and educational platforms. The website targets primarily Chinese-speaking Amazon sellers and cross-border merchants, positioning itself as a comprehensive resource hub to bridge information gaps among sellers. Technically, the site runs on an nginx server with PHP 5.6.30, employs Google Analytics and Tag Manager for tracking, and uses a responsive design framework likely based on Bootstrap. However, the SSL certificate is invalid and mismatched, and no modern TLS protocols are enabled, indicating a weak security posture. No privacy, cookie, or terms of service policies are present, and no contact information is disclosed, which may impact user trust and compliance. The site heavily relies on external affiliate and partner links, integrating multiple third-party tools and services. Strategic improvements in security, compliance, and transparency are recommended to enhance trust and protect user data.
FieldEdgefieldedge.com
Technology · United States
74Medium
NIS2 25 · GDPR 43
NIS2 25 · GDPR 43
FieldEdge is a medium-sized technology company specializing in field service management software tailored for contractors in HVAC, plumbing, electrician, locksmith, and appliance repair industries. The company operates under the parent company Xplor Technologies and offers a comprehensive SaaS platform that integrates scheduling, dispatching, payments, and marketing tools to streamline field operations and increase profitability. Their market position is strong, supported by customer testimonials and SOC 2 certification, indicating a focus on trust and compliance. Technically, the website is built on WordPress with Elementor and uses modern marketing and analytics tools such as Google Tag Manager, Pardot, and OneTrust for cookie consent. The site is optimized for performance and mobile use, with good SEO practices in place. Security-wise, the site has a valid SSL certificate but lacks modern TLS protocol support and HSTS enforcement, which are areas for improvement. The presence of security headers like CSP (report-only), X-Content-Type-Options, and X-Frame-Options indicates some security awareness, but incident response and vulnerability disclosure policies are not publicly available. Overall, FieldEdge demonstrates a solid digital presence with room to enhance security posture and transparency.
Related:site.com
doFormsdoforms.com
Technology · United States
70Medium
NIS2 25 · GDPR 58
NIS2 25 · GDPR 58
doForms is a technology company specializing in mobile forms software and mobile data collection solutions designed to improve business operations across small to medium businesses and enterprises. The company offers a SaaS platform that includes mobile forms, data management, automated workflows, live dashboards, and extensive integrations with major applications. Positioned as an established provider with a broad customer base, doForms targets industries such as technology, energy, and transportation primarily in the United States. The website demonstrates excellent content quality, branding consistency, and trust indicators including customer reviews and partner logos. Technically, the website is built on WordPress hosted on WP Engine, utilizing modern technologies such as jQuery, WP Rocket for performance optimization, and Yoast SEO for search engine optimization. The site is mobile-optimized with good accessibility and fast performance. Security-wise, the site has a valid SSL certificate but lacks enabled TLS protocols and HSTS, which are critical for secure communications. Security headers are present but could be enhanced with additional best practices. There is no explicit incident response or vulnerability disclosure policy visible, which could be a gap in security posture. Overall, doForms maintains a strong digital presence with good SEO and user experience, but should address TLS protocol support and security header enhancements to improve security posture. The absence of incident response contacts and vulnerability disclosure mechanisms suggests room for improvement in security governance. Strategic recommendations include enabling modern TLS versions, implementing HSTS, adding security headers, and publishing clear incident response and vulnerability disclosure policies.
Ventura Foodsventurafoods.com
Manufacturing · United States
77Low
NIS2 25 · GDPR 58
NIS2 25 · GDPR 58
Ventura Foods is a large, established food solutions company specializing in manufacturing and culinary innovation. They offer a broad portfolio of products and services including food innovation, culinary solutions, strategic insights, product development, category management, risk management, and digital eCommerce. The company targets foodservice, retail, and international markets with multiple well-known brands and subsidiaries. Technically, the website is built on WordPress with WooCommerce, leveraging modern web technologies and optimized for performance, mobile, accessibility, and SEO. Security posture is moderate with valid SSL and security headers but lacks modern TLS support and advanced security policies. Privacy compliance is good with GDPR and cookie consent mechanisms in place. Overall, Ventura Foods presents a professional, trustworthy digital presence with room for security enhancements.
Northwestern Universitynorthwestern.edu
Education · United States
71Medium
NIS2 25 · GDPR 43
NIS2 25 · GDPR 43
Northwestern University is a prestigious large educational institution in the United States, offering a wide range of undergraduate, graduate, and professional programs across multiple disciplines. It holds a strong market position as a top-ranked national university with recognized graduate schools and a focus on interdisciplinary research and innovation. The website reflects a mature digital presence with excellent design, navigation, and content quality, targeting students, faculty, alumni, and the broader community. Technically, the site uses Apache server technology, jQuery, and Google Tag Manager for analytics, with a valid SSL certificate but lacks modern TLS protocol support and some advanced security headers. Security posture is moderate with room for improvement in encryption protocols, HSTS implementation, and domain security features. Privacy compliance is basic with a comprehensive privacy policy but no visible cookie consent mechanism. Overall, the site is professional and trustworthy but could enhance security and compliance to reduce risk and improve user trust.
- RRE/MAX, LLC (RMAX)
remax.com
Real Estate · United States
82Low
NIS2 17 · GDPR 43
NIS2 17 · GDPR 43
RE/MAX, LLC operates a large-scale real estate brokerage network with a significant global presence, offering comprehensive services including property listings, agent and office searches, and specialized real estate segments such as luxury and commercial properties. The company is recognized as a trusted brand in the U.S. real estate market, supported by a robust agent network and extensive resources. Technically, the website leverages modern web technologies such as Next.js and React, hosted on AWS infrastructure, with good performance and mobile optimization. Security posture is strong in terms of HTTP headers and content security policies, but the lack of modern TLS protocols and absence of DNSSEC indicate areas for improvement. The site integrates multiple marketing and analytics tools, resulting in extensive user tracking but lacks a visible cookie consent mechanism, which may impact privacy compliance. Overall, the website is professional, trustworthy, and well-branded, with clear contact and legal information.
—
75Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
Security assessment completed with an overall score of 50/100 (unknown risk). Total of 7 security findings identified across all modules.
J&H Tacklejandh.com
E-commerce · United States
77Low
NIS2 25 · GDPR 43
NIS2 25 · GDPR 43
J&H Tackle is a specialized e-commerce retailer focused on fishing equipment, offering a broad range of products including rods, reels, lures, lines, and accessories for both freshwater and saltwater fishing enthusiasts. The company has established a strong market presence with a well-designed, user-friendly website built on the Shopify platform, leveraging modern technologies and integrations to enhance customer experience and operational efficiency. Their digital infrastructure includes robust security measures, comprehensive privacy and cookie policies, and active engagement with customers through social media and marketing tools. The security posture is strong with appropriate headers, valid SSL, and no detected vulnerabilities, though there is room for improvement in enabling modern TLS protocols and formalizing security policies. Overall, J&H Tackle demonstrates a mature digital presence with a focus on quality, trust, and customer satisfaction, positioning them well in the competitive online fishing gear market.
Related:myshopify.com
MOD Corpmod-pls.com
Energy · United States
71Medium
NIS2 25 · GDPR 58
NIS2 25 · GDPR 58
MOD Corp is a medium-sized company specializing in power, charging, and lighting solutions, serving both B2B and B2C markets. With over 25 years of experience, MOD offers a broad range of products including custom power solutions, LED lighting, and wire management, supported by a robust e-commerce platform powered by WordPress and WooCommerce. The company maintains an active online presence with social media engagement and a partner program to grow its business network. Technically, the website is well-structured with modern web technologies and optimized for performance and SEO, though there is room for improvement in security protocols and headers. Security posture is solid with valid SSL and Cloudflare protection, but lacks advanced TLS support and a published security policy or incident response plan. Overall, MOD demonstrates a professional and trustworthy digital presence with good compliance to privacy regulations such as GDPR.
Related:outlook.com
- BBang & Olufsen A/S
bang-olufsen.com
E-commerce · Denmark
81Low
NIS2 25 · GDPR 58
NIS2 25 · GDPR 58
Bang & Olufsen A/S is a renowned Danish company specializing in high-end audio and visual products, including headphones, speakers, and televisions. Established in 1925, the company holds a strong market position as a luxury brand with a focus on superior craftsmanship and innovative design. Their business model integrates e-commerce with rich brand storytelling and digital customization tools, targeting discerning consumers seeking premium sound and design experiences. The website demonstrates a mature digital infrastructure leveraging modern technologies such as React, Next.js, and Azure hosting, ensuring fast performance and excellent mobile optimization. Security measures include robust HTTP headers and a valid SSL certificate, though the absence of modern TLS protocols suggests room for improvement. Privacy and cookie policies are comprehensive and GDPR-compliant, supported by a consent management mechanism. Overall, the company maintains a high level of professionalism and trustworthiness in its online presence.
Absolute Dogsabsolute-dogs.com
E-commerce · United Kingdom
78Low
NIS2 25 · GDPR 43
NIS2 25 · GDPR 43
Absolute Dogs is a UK-based e-commerce and education platform specializing in innovative, game-based online dog training courses and resources. The company has established a strong market position with a large international customer base and a comprehensive offering that includes courses, memberships, podcasts, ebooks, and blog content. Technically, the website is built on the Shopify platform, leveraging modern JavaScript libraries and third-party marketing and analytics tools, hosted behind Cloudflare for performance and security. The security posture is strong with valid SSL, HSTS, and appropriate security headers, though TLS protocols are not enabled, representing an area for improvement. Privacy and terms policies are comprehensive and GDPR compliant, with active consent mechanisms in place. Overall, the site demonstrates a mature digital presence with good user experience and trust indicators, but could enhance security by enabling modern TLS versions and publishing explicit security policies.
Related:zendesk.comdigitalsilk.com
Other
71Medium
NIS2 25 · GDPR 40
NIS2 25 · GDPR 40
The website powr2.com currently serves a Cloudflare anti-bot challenge page with no visible business content or metadata. There is no indication of the company's business operations, services, or market positioning from the provided HTML content. The technical infrastructure relies on Cloudflare for hosting and security, with a valid SSL certificate but lacking modern TLS protocol support. Security headers are implemented to a moderate degree, but important enhancements such as HSTS are missing. No privacy, cookie, or terms of service policies are present, indicating a low level of compliance and transparency. Overall, the website's digital maturity appears minimal, with limited user engagement or trust signals. The security posture is basic, with no detected vulnerabilities but also lacking advanced protections. Strategic recommendations include enabling modern TLS, publishing comprehensive policies, and improving SEO and accessibility to enhance trust and compliance.
G2 Esportsg2esports.com
E-commerce · Finland
77Low
NIS2 25 · GDPR 43
NIS2 25 · GDPR 43
G2 Esports is a leading global esports and entertainment organization that operates an e-commerce platform selling branded merchandise and managing professional esports teams. The company has a strong market position with a well-established brand and a broad partnership ecosystem including major global brands. Their digital infrastructure is built on Shopify with integrations for marketing, analytics, and customer engagement, reflecting a mature and modern e-commerce setup. Security measures are robust with proper SSL, HSTS, and security headers, though there is room for improvement in protocol support and formal security policies. Overall, G2 Esports demonstrates a high level of professionalism and digital maturity, serving a global audience of esports fans and consumers.
Related:logitechg.commastercard.com
Toolsettoolset.com
Technology
81Low
NIS2 17 · GDPR 43
NIS2 17 · GDPR 43
Toolset is a technology company specializing in providing advanced WordPress development tools that enable professionals to build complex websites without coding. Positioned as an established player with a strong client base exceeding 30,000 clients and over 120,000 sites built, Toolset offers a comprehensive package including custom post types, fields, templates, forms, maps, and access control. The company operates under the parent company OnTheGoSystems Limited and benefits from multilingual capabilities through WPML integration. Technically, the website leverages a mature WordPress infrastructure with WooCommerce for e-commerce, enhanced by modern JavaScript libraries such as React and Alpine.js, and performance optimizations via WP Rocket and CDN services. Security posture is strong with robust SSL configuration, strict security headers, and HSTS enforcement, although some legacy CSP allowances could be tightened. Privacy and cookie policies are comprehensive and GDPR compliant, but explicit terms of service and security policies are not prominently available. Overall, the company demonstrates a high level of digital maturity and professionalism with a focus on user experience and trust.
Related:onthegosystems.comstripe.com
—
75Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
Security assessment completed with an overall score of 50/100 (unknown risk). Total of 8 security findings identified across all modules.
—
75Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
Security assessment completed with an overall score of 50/100 (unknown risk). 1 critical issues require immediate attention. Total of 8 security findings identified across all modules.
- GGoogle LLC
googlemail.com
Technology · United States
78Low
NIS2 25 · GDPR 25
NIS2 25 · GDPR 25
Google LLC operates the Gmail service, a leading email platform globally recognized for its intuitive, efficient, and secure email experience. The service offers 15 GB of storage, robust spam filtering, and seamless mobile access, catering to a broad audience including individual users and businesses. As part of the larger Alphabet Inc. ecosystem, Gmail benefits from extensive technological resources and integration with other Google services. The website demonstrates a mature digital infrastructure with advanced security measures such as strict content security policies, HSTS, and secure cookie handling. However, the absence of modern TLS protocols indicates an area for improvement in cryptographic standards. The security posture is strong with no detected vulnerabilities or subdomain takeover risks, reflecting Google's commitment to protecting user data and privacy. Overall, the site presents a professional, trustworthy, and user-friendly interface aligned with Google's brand standards.
Related:google.com
Digital Silkdigitalsilk.com
Technology · United States
70Medium
NIS2 25 · GDPR 43
NIS2 25 · GDPR 43
Digital Silk is a leading full-service web design agency based in the United States, offering comprehensive digital solutions including custom web design, branding, eCommerce development, and digital marketing. The company holds a strong market position with numerous industry awards and a diverse client portfolio across multiple sectors such as technology, retail, and eCommerce. Their technical infrastructure leverages modern technologies including WordPress, Gravity Forms, and Cloudflare, ensuring fast performance and excellent mobile optimization. Security measures include standard headers and Cloudflare protection, though improvements in HSTS and CSP are recommended. Overall, Digital Silk demonstrates a mature digital presence with strong SEO and accessibility practices, supported by robust analytics and consent management frameworks.
Related:designrush.com
Interlinkinterlink.org
Technology · Germany
73Medium
NIS2 25 · GDPR 25
NIS2 25 · GDPR 25
Interlink is a socially-driven company builder focused on developing, funding, and implementing solutions to social, environmental, and economic challenges. Positioned as a medium-sized enterprise based in Germany, it operates multiple companies across sectors such as green energy, bot protection, coworking spaces, and resource reuse. The website reflects a strong commitment to sustainability and social entrepreneurship, targeting startups, freelancers, and established companies. Technically, the site is built on WordPress with Elementor and optimized for performance and SEO, employing modern plugins and privacy-compliant analytics. Security posture is generally strong with valid SSL, HSTS, and security headers, though TLS protocols are currently disabled, which is a critical area for improvement. No explicit security or incident response policies are published, indicating room for maturity in security governance. Overall, Interlink presents a professional and trustworthy digital presence aligned with its mission and audience.
—
75Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
Security assessment completed with an overall score of 50/100 (unknown risk). Total of 8 security findings identified across all modules.
- TeamSupport
teamsupport.com
Technology · United States
71Medium
NIS2 25 · GDPR 43
NIS2 25 · GDPR 43
TeamSupport is a medium-sized technology company specializing in B2B SaaS customer support platforms. Their website highlights AI-powered help desk ticketing, live chat, and analytics solutions designed to transform customer support into a business growth driver. The company targets B2B SaaS providers and customer support teams, positioning itself as a specialized provider with advanced AI capabilities. Technically, the website is built on WordPress with modern JavaScript libraries and integrates tools like Google Tag Manager and SnapEngage. Hosting is via Amazon AWS DNS infrastructure. Security posture is adequate with valid SSL and several security headers, but lacks modern TLS support and HSTS enforcement. Privacy policies are comprehensive and GDPR compliant, though no explicit cookie consent mechanism is detected. Overall, the site is professionally designed with excellent content quality and user experience, supported by customer testimonials and social media presence.
Sendmarcsendmarc.com
Technology · United States of America
75Medium
NIS2 25 · GDPR 43
NIS2 25 · GDPR 43
Sendmarc is a technology company specializing in DMARC email security and domain protection solutions. Positioned as a leading DMARC management platform, it serves enterprises, governments, SMEs, MSPs, OEMs, and partners globally. The company offers a comprehensive suite of services including DMARC management, Lookalike Domain Defense, Breach Detection, BIMI, and a dedicated DMARC platform for MSPs. Their business model is SaaS-based with a strong partner ecosystem and a focus on email security compliance and branding. Technically, the website is built on WordPress with Elementor, leveraging Cloudflare for hosting and security. The site demonstrates excellent SEO, mobile optimization, and accessibility, supported by marketing and analytics tools such as HubSpot and Google Tag Manager. Security posture is strong with multiple security headers and certifications like SOC 2 Type 2 and ISO/IEC 27001:2022, although TLS protocols are not currently enabled, and DNSSEC is absent. Overall, Sendmarc presents a professional, trustworthy, and technically mature digital presence with room for security protocol enhancements.
Technology
67Medium
NIS2 25 · GDPR 40
NIS2 25 · GDPR 40
The bing.net domain currently serves a placeholder page indicating that services are temporarily unavailable. There is no visible business or marketing content, metadata, or structured data to provide insights into the company's operations or market positioning. The technical infrastructure shows hosting on Microsoft Azure but suffers from an invalid SSL certificate that does not match the domain, and no modern TLS protocols are enabled, resulting in a weak security posture. No privacy, cookie, or terms of service policies are present, and no contact or social media information is available, limiting user trust and engagement. Overall, the website is non-functional from a user and business perspective at this time.