Security reports directory
150,188 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,188001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
101–150 of 150,188
GLOBAL LIFT POLSKA Sp. z o. o.global-lift.pl
Manufacturing · Poland
74Medium
NIS2 60 · GDPR 59
NIS2 60 · GDPR 59
GLOBAL LIFT POLSKA Sp. z o. o. is a well-established Polish manufacturer and service provider specializing in elevators, lifts, platforms, and related components. Founded in 1999, the company holds a strong market position with over 25 years of experience and more than 1200 completed projects. Their offerings include design, production, installation, maintenance, modernization, and spare parts sales, targeting residential, commercial, and public sector clients. The website reflects a professional and comprehensive digital presence, leveraging modern technologies such as WordPress with Elementor, Google Analytics, and Facebook Pixel for marketing and analytics. Privacy and cookie compliance are well implemented, with a detailed cookie consent mechanism and a comprehensive privacy policy in Polish. Security posture is solid with HTTPS enforced and use of Google reCAPTCHA, though some security headers could be improved. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with relevant regulations.
Site Score Checkersitescorechecker.com
Technology
77Low
NIS2 60 · GDPR 74
NIS2 60 · GDPR 74
Site Score Checker is a small technology-focused business providing free online SEO and website analysis tools. The website offers a broad range of services including SEO audits, PageSpeed insights, backlink analysis, and various other SEO-related utilities. It targets webmasters, digital marketers, SEO professionals, and business owners seeking to improve their online presence. The business operates primarily through a web platform with a mobile-responsive design and offers a Chrome extension for instant page analysis. Technically, the site uses modern web technologies such as Bootstrap, Font Awesome, Google Fonts, and integrates Google Adsense and Google Analytics for monetization and analytics. Security posture is moderate with HTTPS enabled and secure form submissions, but lacks advanced security headers and explicit security policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the site is legitimate and consistent with its business claims, but could improve transparency and compliance.
Bloom Apps, Inc.bloom.io
Technology · United States
92Low
NIS2 85 · GDPR 100
NIS2 85 · GDPR 100
Bloom Apps, Inc. operates Bloom.io, a comprehensive SaaS platform designed to streamline business workflows and client management for professional services. The platform offers a suite of integrated tools including CRM, invoicing, payments, contracts, client portals, scheduling, and automation, positioning itself as a niche solution for service professionals seeking an all-in-one workspace. The company maintains a clear market position with a focus on usability and integration with popular payment and communication services. Technically, Bloom.io leverages modern web technologies such as React and Next.js, hosted primarily on AWS infrastructure with integrations to Firebase, Stripe, Square, and Zoom. The website demonstrates strong digital maturity with fast performance, mobile optimization, and good SEO practices, supported by structured data and comprehensive metadata. From a security perspective, the site enforces HTTPS, employs security headers, and integrates anti-bot measures like Google reCAPTCHA. While no critical vulnerabilities or exposed sensitive data were detected, the absence of a dedicated security policy or incident response information suggests room for improvement in transparency and preparedness. Overall, Bloom.io presents a professional, trustworthy, and technically sound platform with strong business credibility. Strategic enhancements in security communication and vulnerability disclosure would further strengthen its risk posture and customer trust.
- PPixieset
mypixieset.com
Technology · Canada
88Low
NIS2 75 · GDPR 100
NIS2 75 · GDPR 100
Pixieset is a well-established SaaS platform dedicated to professional photographers, offering an integrated suite of tools including client galleries, website building, studio management, online stores, and AI-powered photo editing. The company holds a strong market position with over one million users and a decade of experience, primarily serving the photography industry. Technically, the website is built on modern frameworks such as Next.js and leverages cloud hosting and third-party services like Vimeo and PostHog for video and analytics, respectively. The site is optimized for performance, mobile responsiveness, and SEO, reflecting a mature digital infrastructure. Security posture is robust with HTTPS enforcement, comprehensive security headers, and secure user authentication flows, although explicit security policies and incident response contacts are not publicly detailed. Overall, Pixieset demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations, making it a reliable platform for its target audience.
Grupa Cichy-Zasada Sp. z o.o. Sp. j.cichy-zasada.pl
Transportation · Poland
92Low
NIS2 85 · GDPR 67
NIS2 85 · GDPR 67
Grupa Cichy-Zasada is the largest car dealership group in Poland, specializing in sales of vehicles from the Volkswagen Automotive Group brands including Volkswagen, Škoda, Seat, CUPRA, Audi, and Porsche. With over 30 years of market presence, the company holds a strong position in the Polish automotive retail sector, targeting individual and corporate car buyers. The website reflects a professional business model focused on automotive sales and customer service. Technically, the site is built on modern frameworks such as Next.js and React, integrating key marketing and analytics tools like Google Tag Manager and Facebook Pixel, alongside a robust cookie consent mechanism via Cookiebot. Security posture is solid with HTTPS enforced and privacy compliance well addressed, although some security headers could be improved. Overall, the site is well-optimized for SEO and mobile users, providing a good user experience. No critical vulnerabilities or suspicious content were detected, and the domain registration data aligns well with the business claims, indicating high legitimacy.
DigitalGrootdigitalgroot.com
Other · India
84Low
NIS2 65 · GDPR 82
NIS2 65 · GDPR 82
DigitalGroot is a small-sized digital marketing agency based in India, primarily serving the Prayagraj, Lucknow, and Varanasi regions. The company offers a range of services including website designing, SEO, social media optimization, Google Ads management, and content writing. The website is built on WordPress using popular plugins such as Yoast SEO, WP Rocket, and Revolution Slider, indicating a moderate level of technical maturity and focus on performance and SEO. Contact information is clearly presented, enhancing business credibility. However, the absence of privacy and cookie policies indicates a compliance gap that should be addressed to meet GDPR and other privacy regulations. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks explicit security policies or incident response information.
- SAKRET
sakret.lv
Manufacturing · Latvia
78Low
NIS2 60 · GDPR 82
NIS2 60 · GDPR 82
SAKRET is a leading manufacturer of dry construction mixes and building materials in Latvia and the Baltic region. The company operates a multilingual website offering detailed product information, interactive calculators, and support services targeting construction professionals and consumers. Their market position is strong as one of the largest dry mix producers in the region, supported by consistent branding and professional content. Technically, the website is built on WordPress with modern plugins and tracking tools, providing a good user experience and SEO optimization. Security posture is solid with HTTPS, cookie consent, and use of security plugins, though some security headers could be improved. Overall, the site is compliant with GDPR and provides clear privacy and cookie policies. No critical vulnerabilities or suspicious indicators were found, supporting a high trust level for visitors and business partners.
Sports Bookersports-booker.com
Technology
86Low
NIS2 70 · GDPR 100
NIS2 70 · GDPR 100
Sports Booker operates a SaaS platform specializing in facility management and online booking, targeting businesses managing sports facilities. The website presents a professional and modern design with clear navigation and a focus on delivering a great customer experience. The technical infrastructure leverages modern frontend technologies including Bootstrap and Mapbox GL JS, indicating a moderate level of digital maturity. However, performance and SEO optimizations are basic, and accessibility features are limited. Security posture is moderate with no HTTPS or security headers explicitly confirmed in the data, and no visible incident response or security policies. Privacy compliance is partial with privacy and cookie policies present but lacking explicit consent mechanisms. Overall, the website is legitimate and trustworthy but could improve in security and privacy compliance.
The City University of New Yorkcuny.edu
Education · United States
87Low
NIS2 80 · GDPR 82
NIS2 80 · GDPR 82
The City University of New York (CUNY) is a large public university system serving New York City with 26 colleges and schools. It offers a wide range of undergraduate and graduate programs, research opportunities, and community services. The website reflects its stature as the largest urban public university system in the U.S., targeting students, faculty, and the public with comprehensive educational content and resources. Technically, the site is built on WordPress with modern plugins and libraries, optimized for mobile and accessibility, and integrates multiple analytics and marketing tools. Security posture is strong with HTTPS, security headers, and no evident vulnerabilities, though a dedicated security policy and incident response information are not prominently published. Privacy and cookie policies are present with consent mechanisms, indicating good compliance practices. Overall, the site is professional, trustworthy, and well-maintained, supporting CUNY's mission and reputation effectively.
- CCrete hotels & apartments, all accommodations in Crete
hotel-crete.net
Hospitality · Greece
82Low
NIS2 70 · GDPR 82
NIS2 70 · GDPR 82
The website www.hotel-crete.net serves as an online booking platform specializing in hotels, apartments, villas, and other accommodations in Crete, Greece. It targets travelers and tourists seeking lodging options with a broad catalog of properties categorized by star rating, location, and thematic preferences. The platform supports multiple languages and currencies, enhancing accessibility for international users. Technically, the site employs modern web technologies including HTML5, CSS3, JavaScript, Google Fonts, and Swiper.js for interactive carousels. The design is professional and mobile-optimized, providing a good user experience with clear navigation and relevant content. However, the site lacks visible privacy and cookie policies, terms of service, and explicit contact information, which are critical for compliance and user trust. Security posture is moderate with no visible security headers or incident response policies, and SSL configuration details are not provided. Overall, the site is functional and business credible but requires improvements in privacy compliance and security best practices to enhance trust and regulatory adherence.
- Scotiabank
scotiabank.com
Finance · Canada
90Low
NIS2 85 · GDPR 75
NIS2 85 · GDPR 75
Scotiabank is a leading multinational financial institution headquartered in Canada, offering a broad range of banking and financial services globally. The website serves as a global portal providing access to country-specific banking services, wealth management, corporate and investment banking, and capital markets. The company is well-established with a large workforce and a strong market presence. The site reflects a mature digital infrastructure leveraging modern technologies such as React and Adobe Experience Manager, supported by robust analytics and marketing tools. Privacy and security policies are comprehensive and GDPR compliant, with clear user consent mechanisms. The security posture is strong, with HTTPS enforcement, security headers, and no visible vulnerabilities. Overall, the website demonstrates high professionalism, trustworthiness, and compliance with industry standards.
Moonfruitmoonfruit.com
Media
85Low
NIS2 70 · GDPR 66
NIS2 70 · GDPR 66
Moonfruit operates as an online platform connecting businesses with elite digital marketing agencies worldwide. The website positions itself as a comprehensive directory and connector for various digital marketing services including advertising, branding, content marketing, and more. The target audience primarily consists of businesses seeking specialized marketing agency services. The platform leverages modern web technologies such as WordPress CMS, Google Tag Manager, HubSpot analytics, and anti-spam tools to deliver a professional and functional user experience. The website is mobile optimized and SEO friendly, with structured data enhancing search visibility. Security posture is adequate with HTTPS enforcement and anti-spam measures, though lacks advanced security headers and explicit security policies. Privacy compliance is basic, with a cookie consent mechanism present but no visible privacy or terms of service pages. Overall, the site demonstrates moderate digital maturity and business credibility but would benefit from enhanced transparency and security documentation.
- SS G Finance Ltd
ifa-web.co.uk
Finance · United Kingdom
75Partial
DNS & email only
DNS & email only
Guard could not load ifa-web.co.uk (blocked or unreachable from its scanning network), so only DNS, email security, network exposure were assessed.
- City of Philadelphia
phila.gov
Government · United States
83Low
NIS2 80 · GDPR 72
NIS2 80 · GDPR 72
The City of Philadelphia's official website serves as a comprehensive portal for municipal services, information, and resources for residents and businesses. It holds a strong market position as the authoritative source for city government services, including permits, licenses, tax payments, emergency alerts, and job opportunities. The site targets Philadelphia citizens and local businesses, providing a broad range of public services and community engagement tools. Technically, the website is built on WordPress and leverages modern web technologies such as Google Analytics, Microsoft Clarity, Highcharts, and the Foundation framework. It demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate. The site uses HTTPS with a valid SSL certificate and includes trusted .gov domain indicators, enhancing user trust. From a security perspective, the website enforces HTTPS and employs security best practices, but lacks some advanced security headers and explicit incident response or vulnerability disclosure information. Privacy compliance is basic, with a clear privacy policy and terms of use but no visible cookie consent mechanism or GDPR-specific compliance features. Overall, the website is professional, trustworthy, and well-maintained, with minor areas for improvement in privacy compliance and security transparency. The domain registration data aligns well with the official government entity, supporting high legitimacy and trustworthiness.
Ekonomikas un Kultūras augstskolaaugstskola.lv
Education · Latvia
87Low
NIS2 80 · GDPR 97
NIS2 80 · GDPR 97
Ekonomikas un Kultūras augstskola (EKA) is a Latvian higher education institution providing a broad range of study programs in economics, culture, business, law, IT, and design. The website presents a professional and content-rich platform targeting prospective students with detailed program information, flexible study options including distance learning, and scholarship opportunities. The institution maintains a moderate international presence through Erasmus+ and research collaborations. Technically, the website uses a custom stack with jQuery, Font Awesome, and third-party embedded forms from Zoho, delivering a good user experience with mobile optimization and clear navigation. Security posture is adequate with HTTPS and cookie consent mechanisms but lacks explicit security headers and published security policies. Privacy compliance is well addressed with GDPR-aligned cookie and privacy notices. Overall, the domain registration data aligns with the business claims, supporting legitimacy and trustworthiness.
—
75Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
Guard could not load autotrader.co.uk (blocked or unreachable from its scanning network), so only DNS, email security, network exposure, the TLS certificate and configuration were assessed.
- Homestead Technologies Inc.
homestead.com
Technology · United States
81Low
NIS2 67 · GDPR 100
NIS2 67 · GDPR 100
Homestead Technologies Inc. operates a website building and hosting platform targeting individuals and small to medium businesses. The company is in transition to become part of Network Solutions, leveraging the parent company's broader resources and market presence. The website offers login access for customers and provides webmail services, emphasizing ease of use and continuity during the transition. Technically, the site uses legacy JavaScript libraries such as jQuery 1.6.3 and Google Tag Manager for analytics, with enforced HTTPS ensuring secure connections. However, some modernization and security header enhancements are recommended. The security posture is solid with no visible vulnerabilities or exposed sensitive data, but updating libraries and adding explicit security policies would improve resilience. Privacy and cookie policies are present and GDPR compliant, supporting good privacy practices. Overall, the site is professional, trustworthy, and safe for general audiences.
Universitas Syiah Kualausk.ac.id
Education · Indonesia
75Partial
DNS & email only
DNS & email only
Guard could not load usk.ac.id (blocked or unreachable from its scanning network), so only DNS, email security, network exposure were assessed.
- Adept Computer Support Ltd
adeptcom.co.uk
Technology · United Kingdom
72Medium
NIS2 55 · GDPR 75
NIS2 55 · GDPR 75
Adept Computer Support Ltd is a UK-based specialist provider of Sage 50 accounting software solutions, including proprietary add-ons, consultancy, training, and support services. The company holds a strong market position as a Sage Platinum Partner with a history of awards and notable clients such as the Royal Navy. Their business model focuses on software sales, custom add-ons, and expert support for Sage 50 users. Technically, the website uses basic HTML with embedded JavaScript for social media and analytics integration, but lacks modern CMS or advanced frameworks. Security posture is moderate with HTTPS implied but missing explicit security headers and cookie consent mechanisms. Privacy compliance is supported by a comprehensive GDPR-compliant privacy policy, though cookie management could be improved. Overall, the website is functional but dated in design and technical implementation, with good business credibility and trust indicators.
Government · United States
75Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
Guard could not load pima.gov (blocked or unreachable from its scanning network), so only DNS, email security, network exposure, the TLS certificate and configuration were assessed.
RECA Groupreca.com
Manufacturing · Germany
93Low
NIS2 75 · GDPR 100
NIS2 75 · GDPR 100
RECA Group is a well-established company operating primarily in the manufacturing, retail, and transportation sectors, serving business customers in crafts, industry, and automotive markets. The company has a strong market position with a broad portfolio of products and services, supported by a professional and comprehensive website. The technical infrastructure is modern, leveraging WordPress CMS and popular JavaScript libraries, with good mobile optimization and SEO practices. Security posture is strong, with HTTPS enforced and appropriate security headers, although there is room for improvement in publishing explicit security policies and incident response contacts. Overall, the website reflects a mature digital presence with high trustworthiness and compliance with privacy regulations.
.GB.NETgb.net
Technology · United States
83Low
NIS2 75 · GDPR 75
NIS2 75 · GDPR 75
The website gb.net operates as a domain registry and sales platform specializing in the .GB.NET domain, targeting businesses and individuals seeking a professional British-relevant domain with global accessibility. It is positioned as a niche alternative to traditional UK domains, offering premium availability and no residency restrictions. The business is operated by Gen.xyz, a known domain registry operator based in the United States. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript libraries such as jQuery and Underscore.js, and Google Tag Manager for analytics. The site is mobile optimized with good SEO practices and a clear user interface for domain search and registration. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though formal security policies and vulnerability disclosures are absent. Privacy compliance is basic, lacking cookie consent mechanisms and explicit GDPR statements. Contact and abuse reporting channels are clearly provided via Gen.xyz. Overall, the site is professional and trustworthy with moderate tracking and good business credibility.
- GBdirect
gbdirect.co.uk
Technology · United Kingdom
79Low
NIS2 55 · GDPR 75
NIS2 55 · GDPR 75
GBdirect is a UK-based company specializing in IT training, consultancy, and software development services. The company positions itself as a premier supplier of IT training in the UK, offering a broad range of courses and consultancy services tailored to business needs. Their website reflects a mature business with multiple dedicated subdomains for different service areas, indicating a segmented and organized business model. The target audience primarily includes IT professionals and organizations seeking specialized training and consultancy. Technically, the website uses standard web technologies including HTML, CSS, JavaScript, and integrates Google Analytics and Google Custom Search Engine for analytics and search functionality. The site is moderately optimized for performance and mobile use but lacks advanced accessibility features. SEO is basic but present through meta tags and structured navigation. From a security perspective, the site uses HTTPS as indicated by canonical URLs, but no explicit security headers were detected in the provided data. There is no cookie consent mechanism, and no published security or incident response policies were found. The absence of contact emails and phone numbers on the main pages reduces direct communication channels. The WHOIS data aligns well with the business claims, supporting legitimacy. Overall, GBdirect presents a professional and credible online presence with room for improvement in security practices and privacy compliance. Enhancing security headers, implementing cookie consent, and publishing clear security policies would strengthen trust and compliance.
- City of Vacaville
vacaville.ca.us
Government · United States
75Partial
DNS & email only
DNS & email only
Guard could not load vacaville.ca.us (blocked or unreachable from its scanning network), so only DNS, email security, network exposure were assessed.
Color Confidencecolorconfidence.com
E-commerce · United Kingdom
90Low
NIS2 85 · GDPR 80
NIS2 85 · GDPR 80
Color Confidence is a UK-based e-commerce business specializing in high-quality photography, filmmaking, and design products, including color calibration monitors, charts, and lighting solutions. The company operates on the Shopify platform, leveraging a modern and responsive theme to deliver a professional user experience. Their market position is that of a niche leader serving professionals in photography and design sectors, supported by partnerships with recognized brands like Pantone and BenQ. The website demonstrates good content quality, clear navigation, and consistent branding aligned with their business focus. Technically, the website is well-implemented using Shopify's Empire theme, with fast performance, mobile optimization, and accessibility considerations. It integrates standard analytics and marketing tools such as Google Analytics, Facebook Pixel, and Mailchimp, enabling moderate user tracking with privacy compliance mechanisms including cookie consent and GDPR-aligned privacy policies. From a security perspective, the site enforces HTTPS with strong SSL configuration and implements key security headers. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of a dedicated security policy, incident response information, and vulnerability disclosure program indicates areas for improvement in security transparency and readiness. Overall, the website presents a low-risk profile with strong business credibility and technical maturity. Strategic recommendations include publishing explicit security and incident response policies, establishing a vulnerability disclosure process, and enhancing data protection transparency to further strengthen trust and compliance.
Netherhall Housenetherhall.org.uk
Education · United Kingdom
90Low
NIS2 85 · GDPR 67
NIS2 85 · GDPR 67
Netherhall House is a UK-based residential college for university students, emphasizing community, study, culture, social life, and spiritual growth. Owned by the Netherhall Educational Association, a registered charity, it offers accommodation, meals, study facilities, cultural events, and spiritual activities. The website is professionally designed on the Squarespace platform, with good mobile optimization and clear navigation. Contact information and social media presence are well established, supporting business credibility. However, the site lacks a privacy policy and terms of service, which are important for compliance. Security posture is solid with HTTPS and HSTS enabled, but could be improved with additional security headers and published security policies. Overall, the website is trustworthy and serves its educational mission effectively.
- SState of New Hampshire
nh.gov
Government · United States
86Low
NIS2 72 · GDPR 87
NIS2 72 · GDPR 87
NH.gov is the official website of the New Hampshire State Government, serving as a centralized portal for residents, businesses, visitors, and government employees to access a wide range of state services and information. The site offers key services such as Paid Family & Medical Leave information, business gateway access, vendor resources, and contact information for state agencies. It is positioned as a trusted government resource with a clear focus on accessibility and user experience. Technically, the website is built on Drupal 10, leveraging modern web technologies including jQuery, Bootstrap, FontAwesome, and Google Analytics for tracking. The site demonstrates good mobile optimization, accessibility features, and SEO practices, although performance is moderate and could benefit from further optimization. The presence of Google Translate enhances accessibility for non-English speakers. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data in its HTML content. However, it lacks some security headers and a formal security policy or vulnerability disclosure page. The incident response mechanism is partially addressed via a cyber incident reporting form. Privacy compliance is moderate, with a comprehensive privacy policy but no visible cookie consent mechanism. Overall, NH.gov presents a high level of professionalism, trustworthiness, and content quality appropriate for a government portal. Strategic improvements in security headers, privacy consent, and transparency around security policies would further enhance its security posture and compliance.
Other
49High
NIS2 50 · GDPR 60
NIS2 50 · GDPR 60
The analyzed website is currently inaccessible and presents an HTTP ERROR 436 page, which is a non-standard HTTP error indicating a problem with the site or server. The page content is minimal and includes only a generic error message and a reload button pointing to the same domain. The presence of the Chrome offline dinosaur game script indicates this is a default browser error page rather than an active business website. Due to the lack of accessible content, no business information, privacy policies, or contact details are available for analysis. The technical infrastructure appears to be minimal, with no advanced security headers or analytics detected. The security posture is weak due to the absence of HTTPS enforcement and security best practices. Overall, the site is either down, blocked, or misconfigured, preventing meaningful analysis or engagement.
Consolidated Services Ltd – Keeping Business Movingconsolidatedstorage.net
—
75Partial
DNS & email only
DNS & email only
Guard could not load consolidatedstorage.net (blocked or unreachable from its scanning network), so only DNS, email security, network exposure were assessed.
—
75Partial
DNS & email only
DNS & email only
Guard could not load myzen.co.uk (blocked or unreachable from its scanning network), so only DNS, email security, network exposure were assessed.
中国信鸽信息网chinaxinge.com
Other · China
82Low
NIS2 60 · GDPR 100
NIS2 60 · GDPR 100
The website www.chinaxinge.com is a well-established Chinese platform dedicated to pigeon racing, breeding, and related community activities. It serves as a comprehensive information portal and e-commerce platform, offering news, online auctions, live event broadcasts, and community forums. The site targets pigeon enthusiasts, breeders, and associations primarily within China, positioning itself as a leading niche platform with extensive content and partnerships. Technically, the site employs traditional web technologies such as HTML, CSS, and JavaScript without modern frameworks or CMS detected. The performance and mobile optimization are basic, with room for improvement in accessibility and SEO. Security practices appear minimal, with no visible HTTPS enforcement details, security headers, or privacy policies, indicating potential compliance and security gaps. From a security perspective, the site lacks critical security headers and privacy compliance mechanisms, and no incident response or data protection officer contacts are provided. The WHOIS data is consistent and supports the legitimacy of the domain and business. No WAF or blocking mechanisms were detected, and the content is safe for general audiences. Overall, the site is functional and content-rich but requires significant improvements in security posture, privacy compliance, and technical modernization to enhance trustworthiness and user experience.
WSFS Bankwsfsbank.com
Finance · United States
94Low
NIS2 75 · GDPR 100
NIS2 75 · GDPR 100
WSFS Bank is a well-established financial institution with nearly 200 years of history, serving individuals, businesses, and communities primarily in the United States. The website reflects a professional banking service provider with a focus on community upliftment and comprehensive financial services. The digital infrastructure is built on WordPress with modern plugins such as Yoast SEO and Kadence Blocks, indicating a mature and maintainable technical environment. The site is mobile-optimized and SEO-friendly, though some accessibility features could be improved. Security posture is solid with HTTPS enabled and no visible sensitive data exposure; however, the absence of explicit security policies and incident response contacts suggests room for enhancement in transparency and compliance. Privacy compliance is weak due to missing privacy and cookie policies, which is a critical area for improvement given the nature of financial services. Overall, the website is trustworthy and professional but would benefit from enhanced privacy and security disclosures to align with best practices.
- Google LLC
business.site
Technology · United States
94Low
NIS2 60 · GDPR 97
NIS2 60 · GDPR 97
The analyzed website is a Google consent management interface designed to handle user privacy and cookie preferences for Google services. It serves as a functional page within Google's ecosystem, providing users with control over their data consent in compliance with privacy regulations. The site is part of Google's broader infrastructure and reflects the company's market leadership in technology and internet services. The page itself is not a commercial or marketing site but a technical component of Google's privacy compliance framework. Technically, the site employs modern web technologies including JavaScript, Material Design Components, and strong security practices such as HTTPS enforcement and Content Security Policy with nonce attributes. The hosting is managed by Google Cloud Platform, ensuring high performance and availability. The site is mobile-optimized and accessible at a basic level, suitable for its functional purpose. From a security perspective, the site demonstrates excellent SSL configuration and security headers, with no detected vulnerabilities or exposed sensitive data. The JavaScript includes advanced measures to prevent prototype pollution and enforce object sealing, indicating a mature security posture. However, the page lacks explicit privacy policy, cookie policy, or terms of service links, which are likely hosted elsewhere within Google's domain. Overall, the site is trustworthy and legitimate, with domain registration details consistent with Google LLC. There are no signs of blocking or WAF challenges, and the content is safe for general audiences. Strategic recommendations include maintaining up-to-date security policies, enhancing privacy compliance disclosures on related pages, and continuing regular security audits to uphold the high security standards.
- Webnode AG
webnode.pt
Technology · Switzerland
95Low
NIS2 95 · GDPR 97
NIS2 95 · GDPR 97
Webnode AG operates a mature and well-established AI-powered website builder platform targeting small businesses, entrepreneurs, and individuals. With over 15 years in the market and more than 50 million websites created, it holds a strong position in the SaaS website builder industry. The platform offers comprehensive features including custom domains, professional email, e-commerce, online booking, SEO tools, and AI content generation, catering to a broad user base with multilingual support. The parent company, team.blue, further strengthens its market presence and operational backing. Technically, Webnode employs modern web technologies such as React and Next.js, hosted on Amazon Cloudfront CDN, ensuring fast performance and excellent mobile optimization. The site integrates advanced analytics and marketing tools including Google Analytics, Google Tag Manager, and reCAPTCHA for security. Accessibility is well addressed via the AccessiWay widget, and SEO best practices are implemented effectively. From a security perspective, the website enforces HTTPS, uses reCAPTCHA to mitigate bot activity, and implements cookie consent mechanisms aligned with GDPR. However, explicit security policies and incident response contacts are not publicly disclosed, representing an area for improvement. No vulnerabilities or exposed sensitive data were detected, indicating a solid security posture. Overall, Webnode presents a trustworthy, professional, and user-friendly platform with strong business credibility and compliance. Strategic recommendations include publishing detailed security and incident response policies, establishing a vulnerability disclosure program, and ensuring continuous monitoring of third-party scripts to maintain security integrity.
SAPOsapo.pt
Media · Portugal
95Low
NIS2 85 · GDPR 97
NIS2 85 · GDPR 97
SAPO is a leading Portuguese online news and media portal offering a wide range of content including national and international news, sports, culture, lifestyle, podcasts, and travel services. The site aggregates content from multiple partner news organizations and provides additional services such as weather updates and flight/hotel search via SAPO GO. The platform is well-established with a strong market position in Portugal and targets a broad Portuguese-speaking audience interested in current affairs and lifestyle content. Technically, SAPO employs modern web technologies including ES6 JavaScript modules, Google Fonts, Google Tag Manager, and advanced advertising frameworks such as Prebid.js and DoubleClick. The site is mobile-optimized, accessible, and SEO-friendly, delivering a professional user experience. Security-wise, SAPO enforces HTTPS, implements multiple security headers, and uses a consent management platform to comply with GDPR. No critical vulnerabilities or exposed sensitive data were detected. However, explicit security policies and incident response contacts are not publicly visible, and no vulnerability disclosure program was found. Overall, SAPO demonstrates a mature digital infrastructure and a strong security posture appropriate for a major media entity.
.UK.NETuk.net
Technology · United Kingdom
84Low
NIS2 75 · GDPR 75
NIS2 75 · GDPR 75
The website uk.net represents .UK.NET, a domain registry service offering unrestricted .UK.NET domain registrations targeting businesses and individuals seeking a UK digital presence with global reach. The company positions itself as an independent entity unaffiliated with UK government or other registries, providing a flexible domain alternative with no residency restrictions. The site is well-structured, professionally designed, and provides clear information about domain registration benefits, live sites, and contact avenues. Technically, the site uses modern web technologies including jQuery, Underscore.js, Bootstrap grid, and Google Tag Manager for analytics. It is mobile optimized and SEO friendly, though accessibility features are basic. Security posture is solid with HTTPS enforced and no visible vulnerabilities, but lacks published security policies and vulnerability disclosure mechanisms. Contact and abuse handling are managed via a trusted partner, Gen.xyz, enhancing trust. Overall, the site is credible and suitable for its business purpose, with room for improvement in privacy compliance and security transparency.
—
49High
NIS2 — · GDPR —
NIS2 — · GDPR —
Browsers refuse the HTTPS connection to lr-partner.com, so Guard could not load the page. Assessed: DNS, email security, network exposure, the TLS certificate and configuration; the website checks did not run.
—
49High
NIS2 — · GDPR —
NIS2 — · GDPR —
Browsers refuse the HTTPS connection to onvarma.fi, so Guard could not load the page. Assessed: DNS, email security, network exposure, the TLS certificate and configuration; the website checks did not run.
—
49High
NIS2 — · GDPR —
NIS2 — · GDPR —
Browsers refuse the HTTPS connection to greswolde.com, so Guard could not load the page. Assessed: DNS, email security, network exposure, the TLS certificate and configuration; the website checks did not run.
Georgia.govgeorgia.gov
Government · United States
90Low
NIS2 80 · GDPR 75
NIS2 80 · GDPR 75
Georgia.gov is the official state government website for Georgia, providing a comprehensive portal for residents, businesses, and visitors to access government services, information, and resources. The site offers key services such as voting information, tax and revenue services, business registration, and vital records. It serves as a trusted digital gateway to state agencies and public programs, positioning itself as the authoritative source for Georgia state government online presence. The website targets a broad audience including citizens, businesses, and government employees, supporting transparency and accessibility.
Shivtrshivtr.com
Technology
88Low
NIS2 83 · GDPR 97
NIS2 83 · GDPR 97
Shivtr operates as a specialized hosting service targeting gaming guilds, clans, and communities, offering free and paid website hosting with multi-gaming support and customizable themes. The platform is positioned as a niche provider with a moderate market presence, focusing on gamers and gaming communities worldwide. Technically, the site is built likely on Ruby on Rails with modern front-end technologies, featuring mobile-optimized responsive design and secure form handling via CSRF tokens. However, some security headers are missing, and cookie consent mechanisms are not implemented, indicating room for improvement in privacy compliance and security posture. Overall, the website is professional, functional, and trustworthy, but lacks explicit contact information and advanced security disclosures.
Eiropas Tālmācības vidusskolaeiropasskola.lv
Education · Latvia
88Low
NIS2 75 · GDPR 72
NIS2 75 · GDPR 72
Eiropas Tālmācības vidusskola is an accredited Latvian distance learning school offering educational programs for grades 7 through 12. The institution emphasizes flexible learning combined with structured schedules and professional pedagogical support, including online classes and in-person events. With over 12 years of experience and approximately 1000 students annually, it holds a strong market position in Latvia's education sector. The website reflects a professional and modern digital presence with comprehensive content and clear navigation tailored to its target audience of students and parents seeking flexible secondary education solutions. Technically, the site employs modern web technologies, including React-based frameworks, Google Tag Manager, and Facebook Pixel for analytics and marketing, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and no visible vulnerabilities, though it lacks explicit security policies and cookie consent mechanisms. Overall, the site demonstrates high business credibility and trustworthiness, supported by transparent WHOIS data and consistent branding.
Google LLCblogspot.lt
Technology · United States
93Low
NIS2 80 · GDPR 97
NIS2 80 · GDPR 97
Google LLC is a global leader in technology, primarily known for its search engine and advertising services. The company operates a vast ecosystem of products including cloud computing, software, and hardware, serving a broad general audience worldwide. As a subsidiary of Alphabet Inc., Google maintains a dominant market position with a comprehensive portfolio of digital services. The website reflects this stature with professional design, excellent content quality, and strong branding consistency. Technically, the website leverages modern web technologies and Google’s proprietary frameworks, hosted on Google Cloud Platform, ensuring fast performance and excellent mobile optimization. The site incorporates advanced SEO and accessibility features, providing a seamless user experience. Security is robust, with HTTPS enforced, comprehensive security headers, and adherence to best practices including a public bug bounty program. From a security and compliance perspective, Google demonstrates maturity with clear privacy and cookie policies, GDPR compliance, and dedicated incident response contacts. The domain registration details align perfectly with the business entity, reinforcing trust and legitimacy. No vulnerabilities or suspicious activities were detected, and the site employs extensive analytics and advertising tools transparently. Overall, Google’s website exemplifies a high standard of digital maturity, security posture, and business credibility, making it a trustworthy and authoritative online presence.
- SState of Arkansas
arkansas.gov
Government · United States
75Medium
NIS2 80 · GDPR 75
NIS2 80 · GDPR 75
The website portal.arkansas.gov is an official government domain intended to provide access to state services and information for the State of Arkansas. However, the current accessible content is a 403 Forbidden error page, indicating that the site or resource is blocked or restricted. This limits the ability to analyze the website's content, policies, and technical infrastructure. The domain registration data aligns with a legitimate government entity, confirming the authenticity of the domain. Due to the lack of accessible content, no metadata, forms, or scripts could be analyzed, and no privacy or security policies were found on the page. The security posture cannot be fully assessed, but the absence of accessible content and security headers suggests potential configuration issues or access restrictions. Overall, the site is legitimate but currently inaccessible, resulting in a low AI score and limited insights.
—
75Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
Guard could not load btck.co.uk (blocked or unreachable from its scanning network), so only DNS, email security, network exposure, the TLS certificate and configuration were assessed.
- TradeIndia
tradeindia.com
E-commerce · India
95Low
NIS2 85 · GDPR 100
NIS2 85 · GDPR 100
TradeIndia is a leading Indian B2B marketplace connecting manufacturers, exporters, suppliers, and buyers with a large user base exceeding 10 million registered users. The platform offers a comprehensive suite of services including product listings, trade leads, membership plans, trade shows, and payment solutions, positioning itself as a dominant player in the Indian e-commerce and manufacturing sectors. Technically, the website leverages modern web technologies such as Next.js and React, ensuring a responsive and performant user experience across devices. The presence of Google Tag Manager and CookieYes indicates a mature approach to analytics and privacy compliance. Security-wise, the site enforces HTTPS, employs standard security headers, and implements cookie consent mechanisms aligned with GDPR requirements, reflecting a strong security posture. Overall, the website is professional, trustworthy, and well-optimized, with clear business credibility and compliance practices.
- Den norske kirke
kirken.no
Government · Norway
89Low
NIS2 90 · GDPR 70
NIS2 90 · GDPR 70
Den norske kirke operates as the official Church of Norway, providing religious services and information to the Norwegian population. The website serves as a comprehensive portal for church-related activities including baptism, confirmation, weddings, and general church news. It targets Norwegian residents and members of the church, positioning itself as a large government-affiliated religious institution. The business model is non-profit and service-oriented, focusing on community engagement and religious service provision. Technically, the website is hosted on Microsoft Azure and built using ASP.NET Core with Episerver (Optimizely) CMS. It integrates multiple analytics platforms such as Matomo, Microsoft Application Insights, Piwik PRO, and Google Analytics, all managed with a GDPR-compliant cookie consent mechanism. The site demonstrates moderate performance and good mobile optimization, with a professional and consistent design. From a security perspective, the website enforces HTTPS and uses reputable cloud services, but lacks explicit security headers and published security policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is good regarding cookie consent, but the absence of a visible privacy policy and terms of service is a gap. No contact information or incident response details are provided in the analyzed content. Overall, the website is trustworthy, safe, and professionally maintained, with strong legitimacy and alignment between domain registration and business identity. Strategic improvements include publishing privacy and security policies, enhancing accessibility, and adding contact and incident response information to strengthen compliance and user trust.
- Friskis
friskissvettis.no
Non-profit · Norway
83Low
NIS2 70 · GDPR 59
NIS2 70 · GDPR 59
Friskis is a well-established non-profit fitness organization based in Norway, offering a variety of training and community activities aimed at inspiring movement and health throughout life. The website is professionally designed with a clear focus on user engagement, multilingual support, and accessibility. The technical infrastructure leverages modern web technologies including Tailwind CSS, Umbraco CMS, and integrates multiple analytics and marketing tools such as Google Analytics, Hotjar, and Cookiebot for consent management. Security posture is solid with HTTPS enforced and anti-CSRF cookies in place, though some security headers could be explicitly implemented for enhanced protection. Privacy compliance is partially addressed through a comprehensive cookie consent mechanism, but explicit privacy policy and terms of service documents are not clearly linked on the homepage. Overall, the website demonstrates a high level of professionalism and trustworthiness, supported by consistent WHOIS registration data and transparent domain ownership.
- 智邦生活館
url.tw
E-commerce · Taiwan
75Medium
NIS2 70 · GDPR 75
NIS2 70 · GDPR 75
智邦生活館 operates a mature e-commerce platform under the domain url.tw, offering comprehensive online store creation services primarily targeting Taiwanese small and medium businesses and entrepreneurs. The platform, branded as Jooshop, provides extensive features including product management, payment gateway integration, logistics support, and marketing tools, all accessible via a responsive web design optimized for multiple devices. The business model is SaaS-based, with additional value-added services such as enterprise email and hosting solutions, positioning the company as a significant player in Taiwan's e-commerce technology sector. The website content is professional, well-structured, and supported by 24/7 customer service, enhancing user trust and engagement.
—
69Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
Browsers refuse the HTTPS connection to cipg.org, so Guard could not load the page. Assessed: DNS, email security, network exposure, the TLS certificate and configuration; the website checks did not run.