Security reports directory
150,190 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,190001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
147,101–147,150 of 150,190
—
65Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
Security assessment completed with an overall score of 50/100 (unknown risk). 3 critical issues require immediate attention. Total of 11 security findings identified across all modules.
—
75Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
Security assessment completed with an overall score of 50/100 (unknown risk). Total of 5 security findings identified across all modules.
—
75Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
Security assessment completed with an overall score of 50/100 (unknown risk). 1 critical issues require immediate attention. Total of 9 security findings identified across all modules.
—
75Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
Security assessment completed with an overall score of 50/100 (unknown risk). Total of 7 security findings identified across all modules.
—
75Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
Security assessment completed with an overall score of 50/100 (unknown risk). Total of 8 security findings identified across all modules.
—
75Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
Security assessment completed with an overall score of 50/100 (unknown risk). Total of 6 security findings identified across all modules.
—
75Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
Security assessment completed with an overall score of 50/100 (unknown risk). 1 critical issues require immediate attention. Total of 8 security findings identified across all modules.
—
75Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
Security assessment completed with an overall score of 50/100 (unknown risk). Total of 6 security findings identified across all modules.
—
65Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
Security assessment completed with an overall score of 50/100 (unknown risk). 3 critical issues require immediate attention. Total of 11 security findings identified across all modules.
- SSwim School | Swim Lessons | Goldfish Swim School
goldfishswimschool.com
—
66Medium
NIS2 25 · GDPR 43
NIS2 25 · GDPR 43
Security assessment completed with an overall score of 50/100 (unknown risk). 10 high-priority issues should be addressed promptly. Total of 27 security findings identified across all modules.
- AAmerican Swimming Coaches Association
swimmingcoach.org
—
75Medium
NIS2 25 · GDPR 25
NIS2 25 · GDPR 25
Security assessment completed with an overall score of 50/100 (unknown risk). 9 high-priority issues should be addressed promptly. Total of 23 security findings identified across all modules.
—
66Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Security assessment completed with an overall score of 50/100 (unknown risk). 11 high-priority issues should be addressed promptly. Total of 27 security findings identified across all modules.
—
65Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
Security assessment completed with an overall score of 50/100 (unknown risk). 3 critical issues require immediate attention. Total of 11 security findings identified across all modules.
- EEvery Child A Swimmer charity store page
everychildaswimmer.com
—
73Medium
NIS2 25 · GDPR 43
NIS2 25 · GDPR 43
Security assessment completed with an overall score of 50/100 (unknown risk). 7 high-priority issues should be addressed promptly. Total of 26 security findings identified across all modules.
—
63Medium
NIS2 25 · GDPR 43
NIS2 25 · GDPR 43
Security assessment completed with an overall score of 50/100 (unknown risk). 1 critical issues require immediate attention. Total of 28 security findings identified across all modules.
Michigan Gamingmichigangaming.com
Government · United States
68Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Michigan Gaming is a specialized information resource focused on the gaming industry within the state of Michigan, providing regulatory news, licensing information, and industry updates. The site is operated by RMC Ventures, LLC, with contributions from legal and gaming experts, positioning it as a trusted source for government officials, industry professionals, and the public interested in Michigan gaming. The website leverages WordPress CMS with a custom theme and integrates common web technologies such as jQuery, AOS for animations, and Contact Form 7 for user interactions. Google Analytics and reCAPTCHA are used for analytics and security respectively. The SSL certificate is valid but lacks modern TLS protocol support, and security headers are partially implemented. No explicit privacy, cookie, or terms of service policies are found, indicating potential compliance gaps. Contact information is clearly provided, including email, phone, and a contact form. Overall, the site demonstrates a moderate level of digital maturity with room for improvement in security and compliance.
Related:rmclegal.com
—
79Low
NIS2 25 · GDPR 43
NIS2 25 · GDPR 43
Security assessment completed with an overall score of 50/100 (unknown risk). 1 critical issues require immediate attention. Total of 20 security findings identified across all modules.
—
75Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
Security assessment completed with an overall score of 50/100 (unknown risk). Total of 7 security findings identified across all modules.
- BBusinessFirms
businessfirms.co
Technology · US
68Medium
NIS2 17 · GDPR 43
NIS2 17 · GDPR 43
BusinessFirms is a B2B review and research platform focused on connecting businesses with top software development and IT companies worldwide. It offers a trusted directory with verified reviews and expert guidance, positioning itself as a reliable partner for businesses seeking strategic collaborations. The platform targets businesses looking for vetted IT service providers and aims to facilitate informed decision-making through authentic feedback and ratings. Technically, the website leverages modern frontend technologies such as SvelteKit and is hosted on an Apache server. While the site performs well with good mobile optimization and SEO practices, its security posture shows room for improvement, particularly in enabling modern TLS protocols and implementing advanced security headers. The SSL certificate is valid but lacks support for TLS 1.2 or higher, and DNSSEC is not enabled. Overall, the platform demonstrates a solid market presence with consistent branding and trust indicators but should enhance its security and privacy compliance to strengthen user trust further.
—
74Medium
NIS2 25 · GDPR 25
NIS2 25 · GDPR 25
Security assessment completed with an overall score of 50/100 (unknown risk). 9 high-priority issues should be addressed promptly. Total of 22 security findings identified across all modules.
- S
Other · Australia
62Medium
NIS2 25 · GDPR 25
NIS2 25 · GDPR 25
The website searchengine.com.au operates as a small-scale SEO service provider specializing in natural organic search optimization for major search engines such as Google, Bing, and Yahoo. The business targets companies seeking to improve their online visibility through SEO consulting and marketing services. The site content and structure indicate a niche market position with basic service offerings and moderate branding consistency. Technically, the website uses legacy technologies such as jQuery and jHtmlArea, hosted on an nginx server with a valid SSL certificate but lacking modern TLS protocol support. Performance is fast, but mobile optimization and accessibility are basic. Security headers include HSTS, but DNSSEC and CAA records are not implemented, and no advanced security policies or privacy compliance mechanisms are present. The site uses Google Analytics for tracking without visible privacy or cookie consent mechanisms, indicating potential compliance gaps. Overall, the security posture is basic with room for significant improvements in encryption protocols, policy disclosures, and data protection practices.
Related:domainmarketplace.com.au
- TTotal Internet
totalinternet.com.au
Technology · Australia
66Medium
NIS2 25 · GDPR 40
NIS2 25 · GDPR 40
Total Internet is an established Australian company founded in 1999 specializing in domain name registration, hosting solutions, online marketing, web development, and business intelligence services. It holds a strong market position as an industry leader with ISO27001-13 certification and accreditations from ASIC, auDA, and ACIC. The company operates multiple subsidiaries including ddns.com.au, cheaperdomains.com.au, and ib.com.au, targeting individuals, small businesses, and enterprises. Technically, the website uses nginx with the Foundation framework and jQuery, delivering fast performance and good mobile optimization, though it lacks modern TLS protocol support. Security posture is solid with HSTS enabled and a valid SSL certificate, but improvements are needed in TLS protocol support and privacy compliance. No privacy or cookie policies were found, and incident response information is absent, indicating gaps in compliance and security transparency. Overall, the website is professional with consistent branding and clear contact information but could enhance trust through improved security and privacy practices.
Related:cheaperdomains.com.auib.com.au
- CCheaper Domain Names | Hosting | Cheap Domains Australia
cheaperdomains.com.au
—
78Low
NIS2 25 · GDPR 25
NIS2 25 · GDPR 25
Security assessment completed with an overall score of 50/100 (unknown risk). 8 high-priority issues should be addressed promptly. Total of 21 security findings identified across all modules.
—
75Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
Security assessment completed with an overall score of 50/100 (unknown risk). 1 high-priority issues should be addressed promptly. Total of 10 security findings identified across all modules.
UNIQLOuniqlo.com
Retail
75Medium
NIS2 25 · GDPR 25
NIS2 25 · GDPR 25
UNIQLO is a global retail brand specializing in casual apparel, operating an enterprise-scale e-commerce platform. The website leverages modern web technologies including React and is hosted on Amazon AWS infrastructure with CDN support from Akamai. The digital maturity is evidenced by the use of advanced marketing and analytics tools such as Google Tag Manager, Datadog, and Queue-it for traffic management. Security posture is solid with valid SSL certificates and HSTS enabled; however, the absence of modern TLS protocols and some missing security headers indicate room for improvement. No explicit privacy, cookie, or terms of service policies were detected in the provided HTML content, which may impact compliance and user trust. Overall, the website demonstrates a professional and trustworthy presence with good performance and user experience.
Related:outlook.com
株式会社ローソンエンタテインメントl-tike.com
Other · Japan
68Medium
NIS2 25 · GDPR 25
NIS2 25 · GDPR 25
株式会社ローソンエンタテインメント operates l-tike.com, a leading Japanese ticket sales and reservation platform specializing in concerts, sports, theater, and various entertainment events. The website serves a broad audience of entertainment consumers and event attendees, offering services including ticket sales, electronic ticket delivery, fan club memberships, and travel-related bookings. The company is a subsidiary of Lawson, a major Japanese retail group, positioning it strongly in the domestic entertainment market. Technically, the site employs common web technologies such as jQuery, Swiper, and Flatpickr, with multi-language support via WOVN.io and is hosted on Akamai's CDN network. However, the SSL certificate is currently invalid, and no modern TLS protocols are supported, which significantly impacts the security posture. Security headers are partially implemented, but critical improvements are needed to secure user data and communications. The site integrates marketing and advertising tools including Google Tag Manager and Facebook SDK, with moderate user tracking but lacks a cookie consent mechanism. Overall, the website is professionally designed with good content relevance and navigation, but security and privacy compliance require urgent attention.
Related:lawson.co.jp
—
75Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
Security assessment completed with an overall score of 50/100 (unknown risk). Total of 8 security findings identified across all modules.
ラグザス株式会社|RAXUS INC. - 今ここにない未来を創り出すraxus.inc
—
63Medium
NIS2 25 · GDPR 25
NIS2 25 · GDPR 25
Security assessment completed with an overall score of 50/100 (unknown risk). 12 high-priority issues should be addressed promptly. Total of 26 security findings identified across all modules.
- RomanianCompanies
romanian-companies.eu
Other · Romania
66Medium
NIS2 25 · GDPR 0
NIS2 25 · GDPR 0
RomanianCompanies.eu is a data service platform providing comprehensive information on Romanian companies including contact details, financial data, legal status, and monitoring services. The platform targets businesses and individuals seeking detailed company data and offers both free and subscription-based access models. It holds a moderate market position with notable clients such as Altex, Emag, and Mercedes, indicating trust and relevance in the Romanian business data sector. Technically, the website employs modern frontend technologies including jQuery, Bootstrap, Font Awesome, and Google Fonts, hosted on infrastructure using Google Cloud DNS. However, the SSL certificate is invalid and does not match the domain, which undermines user trust and security. The site lacks TLS protocol support and HSTS, exposing it to potential security risks. Security headers like X-Frame-Options and X-Content-Type-Options are implemented, but cookie consent mechanisms and GDPR compliance are minimal or absent. Overall, the platform demonstrates good content quality and user experience but requires significant improvements in security and privacy compliance to enhance trust and regulatory adherence.
Related:listafirme.ro
- CCasino City Press
globalgamingalmanac.com
Other
67Medium
NIS2 25 · GDPR 25
NIS2 25 · GDPR 25
Casino City's GlobalGamingAlmanac.com is a subscription-based online service providing comprehensive global casino and gaming market data, including jurisdictional gaming activities, property profiles, revenue data, and regulatory information. The platform targets gaming industry professionals and businesses seeking detailed analytics and market insights. Technically, the site is built on a legacy ASP.NET WebForms framework, utilizing jQuery and jQuery UI for client-side interactivity, and is hosted behind Cloudflare DNS services. While the SSL certificate is valid and HSTS is enabled with preload, the site lacks support for modern TLS protocols, which is a notable security gap. The site employs Google Analytics for user tracking but does not implement a cookie consent mechanism, which may impact privacy compliance. Security policies and incident response information are not publicly disclosed, indicating room for improvement in transparency and governance.
- CCasino City Press
northamericangamingalmanac.com
Media · United States
67Medium
NIS2 25 · GDPR 25
NIS2 25 · GDPR 25
Casino City Press operates the North American Gaming Almanac website, providing detailed and comprehensive data on casino and gaming markets across North America. Their service targets industry professionals, regulators, and analysts by offering subscription-based access to gaming directories, revenue data, market analysis tools, and regulatory information. The company has an established market presence since 2003 and positions itself as a key data provider in the gaming media sector. Technically, the website is built on ASP.NET Web Forms with jQuery and uses Cloudflare for DNS and hosting services. While the site implements strong HSTS policies and has a valid SSL certificate, it lacks support for modern TLS protocols, which is a critical security gap. The site uses Google Analytics and Tag Manager for user tracking but does not implement explicit cookie consent mechanisms. Overall, the security posture is moderate with room for improvement in encryption protocols and DNS security. Business contact information is clearly provided, but no social media presence or physical address is listed.
- PPID Polyester Innovation Développement
pid-piscine.fr
Manufacturing · France
55Medium
NIS2 25 · GDPR 0
NIS2 25 · GDPR 0
PID Polyester Innovation Développement is a French manufacturer specializing in monobloc polyester swimming pools with nearly 40 years of experience. The company emphasizes quality, customization, and customer service, targeting residential customers in France. Their market position is strengthened by patented technology and compliance with French safety standards. Technically, the website is built on WordPress with the Divi theme, integrating modern marketing and analytics tools such as Google Analytics, Facebook Pixel, and Brevo email marketing. The site is performant and mobile-optimized but lacks some advanced security configurations such as modern TLS protocols and security headers. The security posture is moderate with valid SSL but no DNSSEC or HSTS enabled. Privacy compliance is good with GDPR-aligned cookie consent mechanisms. Overall, the company presents a professional and trustworthy online presence with clear contact information and active social media engagement.
Piscines Provence Polyesterpiscines-ppp.com
Manufacturing · France
49High
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Piscines Provence Polyester is a French manufacturer and installer of polyester shell swimming pools, established in 1972 and part of the TEAM HORNER group since 2020. The company offers a wide range of pool models and installation services, targeting residential customers in France. Their market position is strong with over 50 years of experience and trust signals such as AXA insurance guarantees and membership in the Federation of Pool and Spa Professionals. Technically, the website is built on WordPress with Elementor and several premium plugins, hosted on Hostinger with LiteSpeed server technology. The site supports multilingual content (French and German) and complies with GDPR through a cookie consent mechanism. Security posture is moderate with a valid SSL certificate but lacks modern TLS protocols and advanced security headers. No explicit security policy or incident response information is published. Overall, the business demonstrates good digital maturity and professionalism but could improve security configurations and transparency.
Related:teamhorner.comautopilot.com
TropiCleartropiclear.com
Other · United States
65Medium
NIS2 25 · GDPR 43
NIS2 25 · GDPR 43
TropiClear is a specialized pool chemical product line established in 1969, serving pool owners and maintenance professionals primarily in the United States. The company operates as part of the Team Horner Group, leveraging its market position to offer a comprehensive range of pool chemicals including algaecides, balancers, sanitizers, and specialty chemicals. The website reflects a medium-sized business with a focus on product sales and customer support through informational content and a troubleshooting guide. The inclusion of a donation mechanism for the Bill Kent Family Foundation highlights community engagement and corporate social responsibility. Technically, the website is built on WordPress with WooCommerce and hosted on WP Engine, utilizing modern marketing and SEO tools such as Yoast SEO and Google Analytics. The site demonstrates good design quality, user experience, and SEO optimization, although accessibility is basic. Security-wise, the site has a valid SSL certificate but lacks modern TLS protocols and advanced security headers. Cookie consent and GDPR compliance mechanisms are in place, but there is no visible security policy or incident response information. Overall, TropiClear maintains a moderate trust level with room for security and compliance improvements.
Related:teamhorner.comhornerxpress.com
BackyardXpobackyardxpo.com
Retail · United States
64Medium
NIS2 25 · GDPR 43
NIS2 25 · GDPR 43
BackyardXpo is a specialized retail and dealer distribution business focused on custom outdoor living products including kitchens, furniture, pavers, and fire features. The company operates under the parent company Team Horner Group and targets consumers and dealers primarily in the United States. Their website demonstrates a solid market position with multiple brand partnerships and a medium-sized business footprint. Technically, the website is built on WordPress with WooCommerce and hosted on WP Engine, leveraging modern web technologies and plugins for enhanced user experience. Performance and mobile optimization are good, though accessibility is basic. Security posture is moderate with a valid SSL certificate but lacks modern TLS protocols and advanced security headers. Cookie consent mechanisms indicate GDPR awareness, but no explicit security or incident response policies are published. Overall, the website is professional and trustworthy with room for security and compliance improvements.
Related:teamhorner.com
TileXpressionstilexpressions.com
Retail · United States
66Medium
NIS2 25 · GDPR 43
NIS2 25 · GDPR 43
TileXpressions is a specialized B2B supplier of high-quality swimming pool tiles and related products, serving dealers and contractors primarily in the United States. The company emphasizes quality products and customer service, positioning itself as a premier supplier in its niche market. The website reflects a mature digital presence built on WordPress with WooCommerce and several commercial plugins, hosted on WP Engine. It integrates marketing and analytics tools such as Google Analytics and Tag Manager, and complies with GDPR through cookie consent mechanisms. Security posture is adequate with a valid SSL certificate but lacks modern TLS support and advanced security headers. No explicit security or incident response policies are published, which could be improved to enhance trust and compliance.
Other
74Medium
NIS2 25 · GDPR 40
NIS2 25 · GDPR 40
The website mdientertainment.com appears to be a minimal or placeholder site heavily protected by Incapsula security services, resulting in limited accessible content. There is no visible business information, metadata, or user-facing content to analyze. The company behind the domain is not identifiable from the site content or metadata. The technical infrastructure includes a valid SSL certificate issued by Starfield Secure Certificate Authority, but no modern TLS protocols are enabled, which limits security posture. Security headers such as HSTS are implemented with includeSubDomains, and cookies are set with secure attributes, indicating some security best practices. However, the absence of privacy, cookie, terms of service, or contact information indicates a lack of compliance and transparency. Overall, the site’s digital maturity is low, with poor content quality and minimal user engagement features.
NetXposure, Inc.netx.net
Technology · United States
80Low
NIS2 25 · GDPR 43
NIS2 25 · GDPR 43
NetXposure, Inc. operates the NetX digital asset management platform, targeting enterprises and organizations across diverse industries such as fashion, professional sports, corporations, higher education, museums, MarTech, and tourism. The company offers a SaaS model complemented by professional onboarding and full-service DAM solutions, positioning itself as a high performer with strong customer support and a modern UI. Technically, the website is built on HubSpot CMS, leveraging multiple marketing and analytics tools including Google Analytics, Hotjar, and Bing UET, and is hosted behind Cloudflare. Security posture is solid with strict security headers and a valid SSL certificate, though it lacks modern TLS protocol support and visible incident response or security policies. The absence of a cookie consent mechanism and limited GDPR compliance indications suggest areas for improvement. Overall, the company demonstrates a mature digital presence with good market positioning but could enhance its security and privacy transparency to align with best practices.
Related:hubspot.comzoominfo.com
- RRegulatory Management Counselors, P.C.
rmclegal.com
Other · United States
63Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Regulatory Management Counselors, P.C. (RMC Legal) is a specialized professional corporation providing legal, regulatory, and compliance consulting services primarily to the casino gaming industry and other heavily regulated sectors. The company leverages decades of experience to assist clients with regulatory management, compliance reviews, and government relations. Their market position is that of a niche expert with a focused client base in the United States. Technically, the website is built on WordPress, hosted by Flywheel, and uses modern web technologies including jQuery, AOS, and Contact Form 7, with SEO enhancements via Yoast. The site is performant and mobile optimized but lacks some advanced accessibility features. Security-wise, the site has a valid SSL certificate but does not support modern TLS protocols and lacks several security headers and policies such as HSTS and security.txt. Contact information is clearly provided, but privacy and cookie policies are absent, indicating potential compliance gaps. Overall, the site presents a professional image with moderate trustworthiness but would benefit from enhanced security and compliance measures.
Aristocrat Technologies Australia PTY LTDaristocrat-us.com
Other · United States
70Medium
NIS2 17 · GDPR 43
NIS2 17 · GDPR 43
Aristocrat Technologies Australia PTY LTD operates the aristocrat-us.com website, providing information about their slot machine games and resources for casino operators. The company is positioned as a large, established player in the gaming technology sector, targeting casino players and operators with a comprehensive game catalog and brand experience. The website features modern design elements and integrates marketing tools such as Constant Contact and Google Tag Manager to engage users and collect marketing consents. Technically, the site is built on ASP.NET with Bootstrap and jQuery, hosted on Microsoft IIS behind Amazon CloudFront, but suffers from an invalid SSL certificate and disabled TLS protocols, which significantly impact its security posture. The security headers are partially implemented, but CORS settings are overly permissive, and no advanced security policies like HSTS or security.txt are present. Overall, the site demonstrates moderate digital maturity with room for improvement in security and privacy compliance.
- HornerXpress® Worldwide
hxworldwide.com
Manufacturing · United States
68Medium
NIS2 25 · GDPR 43
NIS2 25 · GDPR 43
HornerXpress® Worldwide is a well-established global distributor specializing in pool and spa equipment since 1969. The company holds a leading market position with a broad portfolio of product lines and a global customer base spanning over 100 countries. Their business model focuses on B2B distribution, supported by value-added services such as logistics and marketing support. The website reflects a professional and consistent brand image with clear communication of their services and partnerships. Technically, the website is built on WordPress using Elementor and WooCommerce, hosted on WP Engine, indicating a modern and scalable infrastructure. Performance is inferred to be fast with good mobile optimization and SEO practices. However, accessibility is basic and could be improved. From a security perspective, the site has a valid SSL certificate but lacks modern TLS protocol support and important security headers. There is no visible cookie consent mechanism or detailed privacy compliance beyond a basic privacy policy. Incident response and vulnerability disclosure information are absent, indicating room for maturity in security governance. Overall, the website and business demonstrate strong market presence and technical foundation but would benefit from enhanced security practices and compliance transparency to reduce risk and build greater trust with customers and partners.
Related:teamhorner.comhornerxpress.com
- HHome | Sunkist Graphics
sunkistgraphics.com
—
75Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
Security assessment completed with an overall score of 50/100 (unknown risk). 8 high-priority issues should be addressed promptly. Total of 22 security findings identified across all modules.
Every Child A Swimmereverychildaswimmer.org
Other · United States
63Medium
NIS2 17 · GDPR 43
NIS2 17 · GDPR 43
Every Child A Swimmer is a small non-profit organization dedicated to providing life-saving swim education to children, primarily through scholarships and partnerships with swim schools and safety organizations. Their mission focuses on reducing drowning risks by making swim lessons accessible to all children, especially those who cannot afford them. The website reflects a well-structured digital presence built on WordPress with the Divi theme, integrating various plugins for forms, social media feeds, and donation facilitation. The organization maintains partnerships with reputable entities such as the International Swimming Hall of Fame and the American Red Cross, enhancing its credibility and outreach. Technically, the website is hosted on Flywheel and uses a valid SSL certificate, though it lacks modern TLS protocol support and advanced security headers like HSTS. The site demonstrates good performance and mobile optimization, with basic accessibility and SEO practices in place. Data collection is primarily through contact and newsletter subscription forms, with minimal user tracking and marketing tools such as Constant Contact and GiveButter. From a security perspective, the site employs some standard headers and has no known SSL vulnerabilities, but it lacks a formal security policy, incident response information, and vulnerability disclosure mechanisms. The absence of cookie consent and terms of service pages indicates potential compliance gaps. Overall, the security posture is moderate but could be improved with updated protocols and enhanced policies. Strategically, the organization should focus on improving its security and privacy compliance, implementing cookie consent, upgrading TLS support, and publishing clear security and incident response policies. These steps will strengthen trust and regulatory adherence while supporting its mission to save lives through swim education.
HornerXpress, Inchornerxpress.com
Manufacturing · United States
65Medium
NIS2 25 · GDPR 43
NIS2 25 · GDPR 43
HornerXpress, Inc is a well-established wholesale distributor specializing in swimming pool and spa supplies, operating since 1969 with a large footprint of over 20 locations in the USA and global distribution to over 100 countries. The company offers proprietary brands, extensive inventory, and comprehensive marketing and training support to its dealer and vendor network. Technically, the website is built on WordPress hosted on WP Engine with a modern theme and multiple plugins supporting e-commerce, events, and forms. The security posture is moderate with a valid SSL certificate but lacks modern TLS protocol support and HSTS enforcement. Privacy compliance is addressed with a clear privacy policy and cookie consent mechanism. Overall, the company demonstrates strong market positioning and digital maturity but could improve security configurations and incident response transparency.
Related:teamhorner.comautopilot.com
- PPage Error
audiovegas.com
Other
71Medium
NIS2 25 · GDPR 40
NIS2 25 · GDPR 40
The website audiovegas.com appears to be a content-focused site centered on gambling interviews, though the current page content is minimal and indicates a page error. The business model is likely content publishing targeting gambling enthusiasts. Technically, the site runs on WordPress and is hosted behind Cloudflare, but lacks modern TLS protocol support which impacts its security posture. Security headers are well configured, including HSTS with preload and frame protection, but DNSSEC is disabled and CAA records are invalid. There is no evidence of privacy, cookie, or terms of service policies, nor contact or incident response information, indicating gaps in compliance and user trust. Overall, the site has a low level of digital maturity and security readiness.
—
75Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
Security assessment completed with an overall score of 50/100 (unknown risk). Total of 7 security findings identified across all modules.
Other
74Medium
NIS2 25 · GDPR —
NIS2 25 · GDPR —
The website studio.site currently serves a 'Page not found' error page with minimal content and no visible business or contact information. The site is built using the Nuxt framework and leverages Google Fonts and Font Awesome for styling. Hosting appears to be on Google Cloud infrastructure. The technical infrastructure is modern but the site lacks substantive content and business details, indicating it may be inactive or under development. Security posture is weak due to an expired SSL certificate, absence of TLS protocols, and missing security headers beyond a basic Content-Security-Policy. No privacy, cookie, or terms of service policies are present, and no contact or incident response information is available. Overall, the site exhibits low trustworthiness and poor user experience.
—
75Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
Security assessment completed with an overall score of 50/100 (unknown risk). 1 critical issues require immediate attention. Total of 10 security findings identified across all modules.
- CCasino City Press
casinobuyersguide.com
Hospitality
75Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
Casino City Press operates Casino Buyer's Guide, a leading free resource connecting casino industry buyers with suppliers across North America. The guide catalogs thousands of vendors in numerous product and service categories, supporting advertising and publishing services tailored to the casino and gaming hospitality sector. The website demonstrates a moderate level of digital maturity with use of legacy technologies alongside modern analytics tools such as Google Analytics and Google Tag Manager. Hosting is provided via Cloudflare, enhancing availability and security. Security posture is solid with HSTS enabled and a valid SSL certificate, though the absence of modern TLS protocols and DNS security features indicates room for improvement. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism or terms of service page visible. Overall, the site is professionally presented with good content relevance and navigation clarity, targeting casino industry professionals seeking vendor information and advertising opportunities.
Big Fish Gamesbigfishgames.com
Media
75Medium
NIS2 25 · GDPR —
NIS2 25 · GDPR —
Big Fish Games is a leading provider of downloadable casual games primarily targeting PC and Mac users, with a strong presence in the casual gaming market. The company operates a large catalog of games and offers subscription-based perks through its Game Club. Technically, the website is built on Adobe Experience Manager with React components and uses modern monitoring tools like New Relic. The site is hosted on a CDN (Fastly) with valid SSL certificates but lacks modern TLS protocol support. Security headers are well implemented, though DNSSEC and CAA records are missing. Privacy and terms policies are comprehensive and GDPR compliant, but no explicit cookie consent mechanism is observed. Overall, the company demonstrates a mature digital presence with good content quality and user experience.
Related:zendesk.commyworkdayjobs.com