Security reports directory
150,189 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,189001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
148,451–148,500 of 150,189
TS Experienceucina.net
Other
68Medium
NIS2 25 · GDPR 40
NIS2 25 · GDPR 40
The website demonstrates a moderate to low overall security posture, with no critical vulnerabilities but multiple high and medium severity issues that expose the business to compliance, reputational, and operational risks. Key deficiencies include missing essential security headers, absence of GDPR-compliant privacy and cookie policies, and lack of foundational NIS2 security frameworks and incident response procedures. Email security and network security are relatively strong, but weaknesses in SSL/TLS configurations and DNS security reduce overall trustworthiness and could facilitate data interception or spoofing. The absence of a cookie consent banner and privacy documentation exposes the business to regulatory scrutiny and potential fines. Immediate attention to security policies, encryption standards, and compliance documentation is necessary to safeguard customer data and maintain stakeholder confidence. Addressing these issues will improve legal compliance, reduce attack surface, and demonstrate commitment to security best practices. Without remediation, the business risks data breaches, regulatory penalties, and erosion of customer trust.
USLIbizresourcecenter.com
business services and education · US
61Medium
NIS2 25 · GDPR 43
NIS2 25 · GDPR 43
The website exhibits significant security weaknesses, particularly in foundational security controls such as HTTP security headers, email authentication, and compliance with GDPR and NIS2 regulations. Critical gaps like the absence of email authentication and incident response procedures expose the business to phishing risks and operational disruption. Missing key headers such as Strict-Transport-Security and Content-Security-Policy increase susceptibility to man-in-the-middle attacks and cross-site scripting. Compliance-related issues, including lack of cookie policies and privacy measures, present legal and reputational risks. While network security and DNS health show relatively strong postures, the presence of weak SSL configurations and expiring certificates further degrade trustworthiness. Overall, these vulnerabilities could lead to data breaches, regulatory penalties, and loss of customer confidence. Immediate remediation focused on critical security controls and compliance frameworks is essential to safeguard business operations and reputation.
Related:usli.com
USLIusli.ca
Insurance · Canada
67Medium
NIS2 17 · GDPR 43
NIS2 17 · GDPR 43
The website's overall security posture reveals significant vulnerabilities, particularly in foundational security controls and regulatory compliance. While no critical issues were found, numerous high and medium severity gaps exist, notably in security headers, GDPR compliance, and adherence to NIS2 requirements. The absence of key HTTP security headers like Strict-Transport-Security and Content-Security-Policy exposes the site to common web attacks such as clickjacking and cross-site scripting. GDPR non-compliance, especially lacking cookie policies and consent mechanisms, risks substantial legal and reputational damage. NIS2 deficiencies, including missing security policies and incident response plans, indicate unpreparedness for managing cybersecurity incidents. However, email security, SSL/TLS configurations, DNS health, and network security demonstrate comparatively better maturity. Immediate remediation is essential to mitigate risk exposure, protect customer data, and align with regulatory frameworks. Addressing these weaknesses will enhance trust, reduce liability, and strengthen the organization's cybersecurity resilience.
Related:usli.com
- PPantaenius Versicherungsmakler GmbH
pantaenius.eu
insurance · Germany
66Medium
NIS2 25 · GDPR 18
NIS2 25 · GDPR 18
The website's overall security posture reveals significant gaps, particularly in compliance with EU privacy regulations and foundational security controls. Critical and high-severity issues indicate the absence of essential headers, privacy measures, and security governance frameworks, exposing the business to legal, reputational, and operational risks. GDPR compliance is notably deficient, with no cookie policy, consent mechanisms, or adequate privacy practices in place, creating a critical risk for EU operations. The lack of incident response and security policy documentation further exacerbates vulnerability to cyber threats and breaches. While network security and DNS health demonstrate relatively strong postures, gaps in email security and SSL/TLS configurations could facilitate phishing and data interception attacks. Immediate remediation is required to align with regulatory requirements and industry best practices to protect customer data and maintain trust. Failure to act promptly may result in regulatory penalties, customer attrition, and increased exposure to cyberattacks.
Related:pantaenius.com
- PPantaenius
pantaenius.com.au
Insurance · Australia
71Medium
NIS2 25 · GDPR 43
NIS2 25 · GDPR 43
The website's overall security posture shows no critical vulnerabilities but is hindered by multiple high and medium-level issues, particularly in governance and compliance areas. Key deficiencies include missing fundamental security headers, an absent cookie consent mechanism, and lack of documented security and incident response policies, exposing the business to regulatory risks and operational disruptions. The SSL certificate's imminent expiration poses an immediate threat to secure communications. While network security and DNS health are relatively strong, gaps in email security and GDPR compliance could lead to data breaches and reputational damage. Addressing these issues promptly will enhance user trust, regulatory compliance, and reduce attack surface exposure. The current state suggests insufficient maturity concerning NIS2 requirements, which could impact compliance and operational resilience. Overall, the business should prioritize remediation efforts to strengthen security posture and meet regulatory obligations effectively.
Related:pantaenius.com
- Bonpoint
bonpoint-vintage.com
fashion retail · France
73Medium
NIS2 25 · GDPR 25
NIS2 25 · GDPR 25
The website demonstrates a generally good network security posture and strong email and DNS configurations, but significant gaps exist in privacy compliance and foundational security frameworks. Critical GDPR compliance issues, such as missing privacy and cookie policies and lack of consent mechanisms, present considerable legal and reputational risks. The absence of a documented information security framework, incident response, and business continuity planning under NIS2 further exposes the organization to operational disruptions and regulatory penalties. Weaknesses in SSL/TLS configurations, including weak key lengths and certificates nearing expiration, increase vulnerability to interception and compromise. Security headers are partially configured but lack completeness, potentially allowing certain attack vectors. Overall, the current security posture leaves the business exposed to compliance violations, potential data breaches, and operational risks that could harm customer trust and incur financial penalties. Immediate remediation focusing on compliance and foundational security policies will substantially mitigate these risks and improve resilience.
Related:bonpoint.com
- TTavira
tavira.group
financial services · not explicitly stated
60Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
The website security assessment reveals significant security gaps, particularly in foundational security headers, GDPR compliance, and adherence to NIS2 cybersecurity standards. While no critical issues were identified, the presence of multiple high and medium severity issues indicates a heightened risk of data breaches, regulatory fines, and reputational damage. The absence of key headers like Strict-Transport-Security and Content-Security-Policy exposes the site to man-in-the-middle attacks and cross-site scripting vulnerabilities. Non-compliance with GDPR, including missing privacy policies and cookie consent mechanisms, risks legal penalties and undermines customer trust. Additionally, poor NIS2 compliance, such as lacking incident response procedures and security policies, suggests unpreparedness for cyber incidents. SSL/TLS weaknesses and expiring certificates further threaten secure communications. However, strong network security and DNS health scores demonstrate a solid foundation to build upon. Immediate remediation is necessary to protect sensitive data, ensure regulatory compliance, and maintain business continuity.
Monaco Planningmonacoklanten.nl
planning services · Netherlands
57Medium
NIS2 25 · GDPR 0
NIS2 25 · GDPR 0
The website's security posture is currently weak, with significant gaps in foundational security controls and compliance measures. Critical and high-severity issues predominantly stem from missing essential HTTP security headers, absent GDPR compliance elements, and lack of formal information security frameworks aligned with NIS2 regulations. These deficiencies expose the business to data breaches, regulatory penalties, and reputational damage, especially given the critical GDPR non-compliance for an EU business. While network and DNS security show relatively better maturity, critical gaps remain such as exposed SSH services and missing DNSSEC. Email security is moderately sound but can be further improved. SSL/TLS configurations need urgent attention to avoid man-in-the-middle attacks and ensure secure communications. Addressing these issues promptly will strengthen defense against cyber threats and demonstrate due diligence to customers and regulators.
Related:monacoplanning.nl
Monaco Santémonacosante.mc
healthcare · Monaco
74Medium
NIS2 25 · GDPR 25
NIS2 25 · GDPR 25
The website demonstrates a solid foundation in network security, SSL/TLS configuration, and DNS health, reflecting effective controls in these areas. However, significant gaps exist in privacy compliance and governance frameworks, with the absence of key GDPR policies and NIS2 security documentation exposing the business to regulatory and operational risks. Critical missing security headers, especially the Content-Security-Policy, increase susceptibility to client-side attacks such as cross-site scripting. Additionally, email security could be improved by enforcing DMARC policies to prevent phishing and spoofing. The lack of incident response and business continuity plans further jeopardizes the organization's ability to manage and recover from security incidents, potentially impacting business continuity and reputation. Overall, while technical defenses are adequate, the absence of compliance and governance measures poses higher business risks. Prioritizing policy implementation and security framework development will strengthen compliance posture and reduce exposure to legal and operational threats.
AS Monaco Football Clubasmonaco.com
sports · Monaco/France
71Medium
NIS2 25 · GDPR 25
NIS2 25 · GDPR 25
The website’s overall security posture reveals significant gaps, particularly in compliance with GDPR and NIS2 regulations, which pose high business and legal risks. While no critical vulnerabilities were detected, multiple high-severity issues, such as missing privacy policies, absence of security frameworks, and an expiring SSL certificate, threaten data protection and trust. Security headers are inadequately configured, increasing exposure to common web attacks. DNS and network security are relatively stronger but still have room for improvement. Immediate attention to legal compliance and foundational security policies is essential to avoid regulatory penalties and reputational damage. The lack of incident response and business continuity plans further exposes the organization to prolonged disruptions. Remediation efforts should prioritize legal compliance and securing communication channels to maintain customer trust and operational resilience.
EFS Ebrexefs-ebrex.com
Technology
63Medium
NIS2 25 · GDPR 40
NIS2 25 · GDPR 40
The website's overall security posture reveals significant vulnerabilities, particularly in its security headers, compliance with GDPR, and adherence to NIS2 requirements. Critical and high-severity issues include missing essential security headers like Strict-Transport-Security and Content-Security-Policy, absence of privacy and cookie policies, lack of incident response and security framework documentation, and critical email authentication gaps. While network security and DNS health show strengths, foundational security controls and regulatory compliance are substantially lacking. The presence of an expiring SSL certificate and weak encryption further expose the site to data interception risks. These deficiencies not only increase the risk of cyber incidents but also expose the business to regulatory fines and reputational damage. Immediate remediation is necessary to protect customer data, ensure legal compliance, and maintain trust.
Related:worldpay.com
Black Bull Groupblackbull-group.com
security and defense · Spain
62Medium
NIS2 55 · GDPR 25
NIS2 55 · GDPR 25
The website's security posture reveals significant gaps that expose the business to potential cyber risks and regulatory non-compliance. While there are no critical vulnerabilities, several high and medium-level issues, particularly in security headers, GDPR compliance, and network security, present serious concerns. Missing essential HTTP security headers increases exposure to web-based attacks such as clickjacking, content injection, and cross-site scripting. The absence of privacy and cookie policies, alongside missing cookie consent mechanisms, risks violating data protection regulations like GDPR, potentially resulting in legal penalties and reputational damage. Additionally, the lack of incident response procedures and vulnerability disclosure policies hampers the organization's ability to effectively manage and recover from security incidents. The exposure of high-risk services like FTP further elevates the threat landscape. Overall, immediate remediation is essential to enhance security posture, protect customer data, and ensure regulatory compliance to safeguard business continuity and trust.
Related:stripe.com
Navitransnavitrans.com
logistics · Switzerland
66Medium
NIS2 25 · GDPR 43
NIS2 25 · GDPR 43
The website demonstrates a moderate to low overall security posture with no critical vulnerabilities but multiple high and medium severity issues, primarily related to missing security headers, GDPR compliance gaps, and inadequate security policies. Key risks include exposure of sensitive data due to absent headers like Strict-Transport-Security and Content-Security-Policy, and significant non-compliance with GDPR and NIS2 regulations, which could lead to regulatory fines and reputational damage. Additionally, the presence of a high-risk exposed FTP service and lack of incident response and security documentation pose risks of unauthorized access and inadequate breach handling. SSL/TLS and DNS configurations are fair but require improvements to ensure stronger encryption and domain integrity. Business continuity and vulnerability disclosure policies are also missing, undermining preparedness and transparency. Immediate remediation and policy development are essential to strengthen security, regulatory compliance, and customer trust.
Barclays Bank PLCbarclayscorporate.com
banking · United Kingdom
75Medium
NIS2 30 · GDPR 40
NIS2 30 · GDPR 40
The website exhibits a concerning security posture with no critical issues but multiple high and medium severity vulnerabilities, particularly in security headers, GDPR compliance, and NIS2 regulatory adherence. The absence of key security headers like Content-Security-Policy and X-Frame-Options exposes the site to clickjacking and content injection attacks, increasing the risk of data breaches and reputational damage. GDPR compliance gaps, including missing privacy and cookie policies along with the lack of a consent banner, expose the business to regulatory fines and customer trust erosion. NIS2-related deficiencies such as missing security frameworks, incident response procedures, and security documentation highlight significant operational risks and non-compliance with important EU cybersecurity regulations. While email security, SSL/TLS, DNS health, and network security are relatively strong, the overall low scores in governance and protective controls indicate urgent attention is needed. Addressing these issues will not only enhance security but also ensure regulatory compliance and protect the business’s brand reputation. Immediate remediation will reduce legal risks and improve stakeholder confidence in the company’s cybersecurity maturity.
Related:worldpay.com
- BBarclays Bank Delaware
barclaycardus.com
banking · United States
78Low
NIS2 25 · GDPR 43
NIS2 25 · GDPR 43
The website exhibits a moderate overall security posture with no critical vulnerabilities detected but several high and medium-risk issues that require immediate attention. GDPR compliance is notably weak, scoring 43/100, primarily due to the absence of a cookie policy and consent banner, exposing the business to regulatory risks and potential fines. The NIS2 compliance score is critically low at 25/100, reflecting significant gaps in information security governance, incident response, and security documentation, which could impair the organization’s ability to manage cyber threats and regulatory obligations. Security headers and email security are average but have room for improvement to mitigate common web and email-based attacks. SSL/TLS and DNS configurations are generally strong, but mixed content and missing DNSSEC reduce overall protection. Network security posture is excellent, indicating robust infrastructure defenses. Immediate remediation will reduce legal liability, enhance trust with customers, and strengthen the organization's resilience against cyber threats.
Related:barclays.comfdic.gov
Gruppo Santa Devotasantadevota.it
Finance
65Medium
NIS2 25 · GDPR 15
NIS2 25 · GDPR 15
The website exhibits significant security gaps, particularly in privacy compliance, email authentication, and core security policies, posing substantial risks to business reputation and regulatory adherence. Critical issues in GDPR compliance and email authentication indicate exposure to legal penalties and phishing attacks. Missing key security headers and lack of incident response and business continuity plans reflect immature security governance. While network and DNS health are relatively strong, foundational security controls such as HSTS and DNSSEC require enhancement. The low scores in GDPR and NIS2 modules highlight urgent needs for privacy policies and security frameworks. Immediate remediation is necessary to reduce vulnerability exposure and align with regulatory requirements. Overall, the security posture is weak and demands prioritized, strategic improvements to protect customer data and maintain trust.
- RRestoration Hardware
restorationhardware.com
home furnishings · United States
73Medium
NIS2 25 · GDPR 58
NIS2 25 · GDPR 58
The website demonstrates a mixed security posture with no critical vulnerabilities but several high and medium-risk issues that could expose the business to significant threats. Major gaps exist in security headers, GDPR compliance, and adherence to the NIS2 directive, particularly around incident response and information security frameworks. The absence of essential security headers like Content-Security-Policy and X-Frame-Options increases the risk of web-based attacks such as clickjacking and cross-site scripting. GDPR compliance weaknesses, including missing cookie consent and privacy policy concerns, expose the business to regulatory penalties and reputational damage. Key NIS2 deficiencies highlight a lack of documented security policies and incident management, which could impair response to cyber incidents. SSL/TLS weaknesses and missing DNS security measures further elevate risk by potentially allowing interception or manipulation of data. Positively, email security and network security postures are strong, reducing some risks related to email spoofing and network-based attacks. Overall, urgent remediation is needed to protect the business, customer data, and ensure regulatory compliance while maintaining stakeholder trust.
Related:adyen.comklarna.com
Braquebraque.ca
marketing alimentaire · Canada
49High
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
The website demonstrates significant security weaknesses across multiple domains, presenting substantial risks to the business. Critical and high-severity findings include exposed critical services like MySQL and FTP, missing essential security headers, and lacking fundamental information security policies, which collectively leave the organization vulnerable to data breaches and compliance violations. The absence of GDPR-required elements such as privacy and cookie policies indicates regulatory non-compliance risks, potentially leading to fines and reputational damage. Email security and DNS health exhibit moderate maturity but require improvements to prevent phishing and domain spoofing. SSL/TLS configurations are suboptimal, with expiring certificates and mixed content issues that may undermine user trust and data confidentiality. Network security is particularly concerning due to exposed critical services without adequate protections. Overall, the organization is at high risk of cyber incidents, regulatory penalties, and customer trust erosion, necessitating urgent remediation efforts and governance improvements.
Landmark Trust Grouplandmarktrustgroup.com
financial services · Switzerland
67Medium
NIS2 25 · GDPR 43
NIS2 25 · GDPR 43
The website's overall security posture reveals significant gaps that could expose the business to data breaches, regulatory non-compliance, and reputational damage. Critical security headers are missing, undermining protection against common web attacks such as clickjacking, content injection, and cross-site scripting. GDPR compliance is notably weak, with missing cookie policies and consent mechanisms, risking fines and legal repercussions. The absence of documented information security frameworks, incident response, and business continuity plans highlights operational vulnerabilities according to NIS2 standards. Email security is relatively strong but could be improved further. SSL/TLS and DNS configurations require attention to maintain trust and secure communications. While network security appears robust, foundational web and compliance security improvements are urgently needed to safeguard the business and customer data.
Related:stripe.com
Sky TG24skytg24.it
news media · Italy
76Low
NIS2 25 · GDPR 15
NIS2 25 · GDPR 15
The website demonstrates a strong foundational security posture in network security and SSL/TLS configurations, scoring 100 and 97 respectively. However, critical gaps exist in privacy compliance and email security, with GDPR adherence scoring only 15/100 and email security at 75/100. Notably, absence of a Privacy Policy, Cookie Consent Banner, and proper email authentication expose the business to regulatory fines and reputational damage. The lack of information security frameworks and incident response procedures under the NIS2 directive also presents significant operational risks. Medium to high severity issues with security headers and DNS configurations further increase exposure to common web-based attacks. Immediate remediation on privacy and incident management controls is essential to maintain trust and comply with EU regulations. Overall, while technical network defenses are solid, governance, compliance, and email security require urgent attention to reduce business risk.
Other
60Medium
NIS2 25 · GDPR 40
NIS2 25 · GDPR 40
The website demonstrates a concerning security posture with no critical issues but multiple high and medium severity vulnerabilities, particularly in security headers, GDPR compliance, and information security governance. The absence of key HTTP security headers such as Strict-Transport-Security and Content-Security-Policy exposes the site to common web attacks like clickjacking, XSS, and protocol downgrade attacks. GDPR compliance gaps, including the lack of privacy and cookie policies and consent mechanisms, pose legal and reputational risks. The lack of an information security framework, incident response, and business continuity planning reflects inadequate organizational security maturity, increasing the risk of unmanaged incidents. Weak SSL configurations and exposed high-risk services like FTP further elevate the risk of data interception and unauthorized access. Although email and DNS security show stronger performance, they do not compensate for core systemic weaknesses. Overall, these issues threaten customer trust, regulatory compliance, and operational resilience, necessitating urgent remediation to safeguard business continuity and brand reputation.
- TTrust Merchant Bank
trustmerchantbank.com
banking
73Medium
NIS2 25 · GDPR 40
NIS2 25 · GDPR 40
The website's overall security posture reveals significant vulnerabilities that pose both legal and operational risks. The presence of a critical SSL certificate issue undermines secure communications, potentially exposing sensitive user data and damaging customer trust. Several high-severity gaps in GDPR compliance, including missing privacy and cookie policies and absence of a cookie consent banner, expose the business to regulatory fines and reputational damage. Additionally, the lack of a formal security framework, incident response plan, and security documentation reflects immature cybersecurity governance, increasing the risk of prolonged downtime or data breaches. Security headers are poorly configured, missing critical protections against common web attacks. Although network security and email security show relatively strong scores, fundamental DNS security enhancements are needed. Immediate action is required to address these deficiencies to protect customer data, maintain compliance, and ensure business continuity.
3S-Innovation3s-innovation.com
innovation management and polymer materials · France
62Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
The website demonstrates several significant security weaknesses that expose the business to reputational, compliance, and operational risks. Critical security headers are missing, undermining protection against common web attacks such as clickjacking, content sniffing, and cross-site scripting. GDPR compliance is notably deficient, with absent privacy and cookie policies and no consent mechanisms, risking legal penalties and loss of customer trust. The absence of a formal information security framework, policies, and incident response procedures further exposes the organization to unmanaged threats and regulatory scrutiny under NIS2 directives. Weaknesses in SSL configuration, such as weak keys and impending certificate expiration, jeopardize data confidentiality and integrity during transmission. While network security posture and email security are relatively strong, urgent remediation is needed in web security headers, compliance documentation, and security governance. Addressing these vulnerabilities promptly will reduce potential breaches, ensure regulatory compliance, and strengthen stakeholder confidence.
- TTF1 Carrières Positives
tf1carrierespositives.fr
Media
75Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
The website demonstrates a generally solid security posture with strong SSL/TLS and network security scores, indicating effective encryption and network defenses. However, critical issues in email authentication pose a significant risk, potentially allowing email spoofing, phishing attacks, and damaging the organization's brand reputation. Medium-severity issues such as missing security headers, lack of DNSSEC, and GDPR and NIS2 compliance failures indicate gaps in regulatory compliance and technical controls that could expose the business to legal liabilities and increased attack surface. While low-severity issues like missing CAA records are less urgent, addressing them will further strengthen DNS security. Overall, the site requires immediate focus on email security configuration and improvements in security header implementation and compliance frameworks to mitigate risks and maintain trust with customers and stakeholders.
Related:tf1.fr
- BBentley Gold Coast
bentleygoldcoast.com
automotive dealership · USA
66Medium
NIS2 17 · GDPR 43
NIS2 17 · GDPR 43
The website currently exhibits significant security gaps that could expose the business to data breaches, regulatory non-compliance, and reputational damage. Critical security headers are missing, weakening defenses against common web-based attacks such as clickjacking and content injection. GDPR compliance is insufficient, notably lacking cookie policies and consent mechanisms, increasing legal and financial risk. The absence of a formal information security framework and incident response plans highlights a lack of organizational maturity in cybersecurity governance. SSL/TLS configuration weaknesses and expiring certificates risk undermining encrypted communications and user trust. Although email security and network posture scores are relatively strong, DNS security can be improved. Overall, urgent remediation is needed to protect customer data, maintain regulatory compliance, and safeguard business continuity.
Alcantara S.p.A.alcantara.com
luxury materials and design · Italy
71Medium
NIS2 17 · GDPR 58
NIS2 17 · GDPR 58
The website demonstrates a concerning overall security posture with critical gaps in foundational security controls, particularly in web security headers, GDPR compliance, and adherence to NIS2 regulatory requirements. While no critical vulnerabilities were identified, multiple high-severity issues expose the business to risks such as data breaches, regulatory penalties, and reputational damage. Key deficiencies include absence of essential HTTP security headers, lack of documented security policies, and missing GDPR cookie consent mechanisms. Email security, SSL/TLS, DNS health, and network security show relatively strong performance, mitigating some risk vectors. However, the insufficient information security framework and incident response preparedness significantly reduce resilience against cyber incidents. Immediate remediation is needed to strengthen compliance, protect customer data, and ensure business continuity. Addressing these issues will enhance trust, reduce legal exposure, and align with industry best practices.
- Site not installed - OVHcloud
eurassur.mc
Technology
71Medium
NIS2 25 · GDPR 40
NIS2 25 · GDPR 40
The website demonstrates significant security and compliance gaps that expose the business to potential data breaches, regulatory penalties, and reputational damage. While no critical vulnerabilities were found, the presence of multiple high-severity issues, especially missing key security headers and lack of GDPR and NIS2 compliance documentation, indicates a weak security posture. The absence of a Privacy Policy, Cookie Policy, and consent mechanisms could lead to legal challenges under data protection laws. Additionally, missing incident response and security policies increase operational risk during security events. SSL/TLS and DNS configurations are moderately strong but require attention to maintain trust and secure communications. Email and network security are well managed, reflecting some positive controls in place. Immediate remediation is essential to reduce business risk and ensure regulatory compliance.
Majestasbillionairelife.com
hospitality · United Kingdom
81Low
NIS2 17 · GDPR 58
NIS2 17 · GDPR 58
The website demonstrates a moderate security posture with no critical vulnerabilities detected but multiple high and medium-risk issues that could expose the business to compliance risks and operational threats. Key concerns include non-compliance with GDPR due to the absence of a cookie consent banner and potential privacy policy gaps, which can lead to regulatory penalties and reputational damage. The lack of an information security framework, incident response procedures, and security policy documentation highlights significant gaps in governance, increasing the risk of inadequate incident handling and prolonged downtime. Weak security header configurations and exposed software versioning may facilitate exploitation by attackers. Additionally, email security and DNS configurations show room for improvement to prevent spoofing and enhance trustworthiness. Addressing these issues is essential to safeguard customer data, maintain regulatory compliance, and ensure business continuity. Immediate remediation efforts will strengthen defenses against cyber threats and regulatory scrutiny, supporting long-term business resilience.
FMS Solutionsfmssolutions.com
Profit maximization, technology, outsourcing · United States
64Medium
NIS2 25 · GDPR 25
NIS2 25 · GDPR 25
The website demonstrates significant security weaknesses, particularly in critical HTTP security headers, GDPR compliance, and adherence to NIS2 cybersecurity requirements. No critical vulnerabilities were found, but twelve high-severity issues indicate substantial risk exposure, especially related to missing security headers and lack of privacy policies. The absence of key headers like Strict-Transport-Security, X-Frame-Options, and Content-Security-Policy increases susceptibility to common web attacks such as clickjacking, man-in-the-middle, and cross-site scripting. GDPR compliance gaps, including missing privacy and cookie policies and consent mechanisms, expose the business to regulatory penalties and reputational damage. Additionally, the lack of documented information security frameworks, incident response, and business continuity plans under NIS2 requirements presents operational risks. SSL/TLS implementation is weak due to expiring certificates, weak key lengths, and mixed content, which may undermine user trust and data confidentiality. DNS and network security are relatively strong, but DNSSEC and CAA records should be configured to enhance domain integrity. Immediate remediation is necessary to protect customer data, maintain compliance, and safeguard business continuity.
- VViridien
cgg.com
Earth science and technology · France
75Medium
NIS2 25 · GDPR 25
NIS2 25 · GDPR 25
The website demonstrates a generally strong network and email security posture but has significant gaps in critical security and compliance areas. Notably, the absence of a Content-Security-Policy header and weak HTTP security headers increase exposure to common web attacks. Compliance deficiencies related to GDPR, such as missing privacy and cookie policies and consent mechanisms, present legal and reputational risks. The lack of documented information security frameworks, incident response plans, and security policies under NIS2 requirements further heightens operational vulnerabilities. While SSL/TLS and DNS configurations are mostly adequate, some improvements are needed to maintain trust and secure communications. Overall, the current security posture exposes the business to regulatory penalties, data breaches, and service interruptions. Addressing these issues promptly will strengthen compliance, reduce risk, and protect customer trust.
- SSaint louis university
slu.edu
Higher education · United states
71Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
This website has 1 critical security issue(s) requiring immediate attention. Overall security score: 50/100 (unknown risk level). A comprehensive security review is recommended.
- CCheetah digital
cheetahdigital.com
Computer software · United states
71Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
This website has 1 critical security issue(s) requiring immediate attention. Overall security score: 50/100 (unknown risk level). A comprehensive security review is recommended.
- IImex international
imexintl.com
Business supplies and equipment · Pakistan
49High
NIS2 — · GDPR —
NIS2 — · GDPR —
This website has 3 critical security issue(s) requiring immediate attention. Overall security score: 50/100 (unknown risk level). A comprehensive security review is recommended.
- EEspresso monte-carlo
espressomontecarlo.com
Food production · Monaco
43High
NIS2 — · GDPR —
NIS2 — · GDPR —
This website has 6 critical security issue(s) requiring immediate attention. Overall security score: 50/100 (unknown risk level). A comprehensive security review is recommended.
- JJuvia miami beach
juviamiami.com
Restaurants · United states
68Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
This website has 1 critical security issue(s) requiring immediate attention. Overall security score: 50/100 (unknown risk level). A comprehensive security review is recommended.
- CCarol joy london
caroljoylondon.com
Cosmetics · United kingdom
69Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
This website has 1 critical security issue(s) requiring immediate attention. Overall security score: 50/100 (unknown risk level). A comprehensive security review is recommended.
- II & a research
charlesguerin.com
Market research · United states
68Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
This website has 1 critical security issue(s) requiring immediate attention. Overall security score: 50/100 (unknown risk level). A comprehensive security review is recommended.
- AAtmosphere sud
atmospheresud.com
Events services
68Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
This website has 1 critical security issue(s) requiring immediate attention. Overall security score: 50/100 (unknown risk level). A comprehensive security review is recommended.
- GGiovanni raspini
giovanniraspini.com
Luxury goods & jewelry · Italy
64Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
This website has 1 critical security issue(s) requiring immediate attention. Overall security score: 50/100 (unknown risk level). A comprehensive security review is recommended.
- RRocamed sam
rocamed-urology.com
Medical devices · Monaco
65Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
This website has 2 critical security issue(s) requiring immediate attention. Overall security score: 50/100 (unknown risk level). A comprehensive security review is recommended.
- FFluor corporation
fluor.com
Construction · United states
71Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
This website has 1 critical security issue(s) requiring immediate attention. Overall security score: 50/100 (unknown risk level). A comprehensive security review is recommended.
- HHrh joaillerie
hrh.com
Luxury goods & jewelry · Monaco
68Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
This website has 1 critical security issue(s) requiring immediate attention. Overall security score: 50/100 (unknown risk level). A comprehensive security review is recommended.
- TTheramex
theramex.com
Pharmaceuticals · United kingdom
70Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
This website has 1 critical security issue(s) requiring immediate attention. Overall security score: 50/100 (unknown risk level). A comprehensive security review is recommended.
- MMoi-même
lasmadj.com
Marketing and advertising · France
60Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
This website has 2 critical security issue(s) requiring immediate attention. Overall security score: 50/100 (unknown risk level). A comprehensive security review is recommended.
- UUnivers prestige monaco
univers-prestige.mc
Cosmetics · Monaco
40High
NIS2 — · GDPR —
NIS2 — · GDPR —
This website has 4 critical security issue(s) requiring immediate attention. Overall security score: 50/100 (unknown risk level). A comprehensive security review is recommended.
- DDalenys
dalenys.com
Internet · France
70Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
This website has 1 critical security issue(s) requiring immediate attention. Overall security score: 50/100 (unknown risk level). A comprehensive security review is recommended.
- CCosmopolitan magazine
cosmopolitan.com
Publishing · United states
71Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
This website has 1 critical security issue(s) requiring immediate attention. Overall security score: 50/100 (unknown risk level). A comprehensive security review is recommended.
- EEngen
engenoil.com
Oil & energy · South africa
46High
NIS2 — · GDPR —
NIS2 — · GDPR —
This website has 3 critical security issue(s) requiring immediate attention. Overall security score: 50/100 (unknown risk level). A comprehensive security review is recommended.
- HHybrelec france
hybrelec.fr
International trade and development · France
60Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
This website has 2 critical security issue(s) requiring immediate attention. Overall security score: 50/100 (unknown risk level). A comprehensive security review is recommended.
- NNexen lift trucks
nexenlifttrucks.com
Mechanical or industrial engineering · United kingdom
63Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
This website has 1 critical security issue(s) requiring immediate attention. Overall security score: 50/100 (unknown risk level). A comprehensive security review is recommended.