Skip to main content

Security Directory

Explore comprehensive security analyses from websites around the world. Filter by industry, location, risk level, and more.

Live Guard activity

Security teams are checking their sites with Guard right now

Run your domain before the queue fills up

157326
Websites
130
Industries
113
Countries
52
Avg Score
Page 33 of 101|Showing 1601-1650 of 5032
heycargroup.com favicon

Mobility Trader UK Limited

heycargroup.com

64
TransportationUnited KingdommediumMEDIUM

Heycar UK, operated by Mobility Trader UK Limited, is a reputable online marketplace specializing in used car sales and car finance services within the United Kingdom. The platform offers thousands of quality-checked used cars, either directly or through trusted dealers, backed by a 10-day money-back guarantee. The website targets UK consumers seeking reliable used vehicles and financing options, positioning itself as a trusted intermediary in the automotive resale market. The company was founded in 2019 and leverages a mature domain registered since 2008, indicating a stable online presence. Technically, the website is built on modern frameworks such as Next.js and React, hosted on Amazon AWS infrastructure, and integrates multiple third-party services including Stripe for payments, Google Maps for location services, and a consent management platform for GDPR compliance. The site demonstrates good performance, mobile optimization, and SEO practices, contributing to a positive user experience. From a security perspective, heycar.com enforces HTTPS, employs clientTransferProhibited domain status to prevent unauthorized transfers, and uses reCAPTCHA and CMP scripts to enhance security and privacy compliance. However, it lacks explicit security policies, incident response contacts, and DNSSEC, which are areas for improvement. No critical vulnerabilities or suspicious activities were detected. Overall, heycar.com presents a professional, trustworthy, and user-friendly platform with a solid technical foundation and moderate privacy compliance. Strategic enhancements in transparency around privacy, security policies, and DNS security would further strengthen its security posture and user trust.

90
85
2
65
-
85
100
usedcarscarfinanceukautomotiveonlinemarketplace
ReactNext.jsStripeGoogle Maps API+4

Partner Domains:

app.carsale24.com
partner
cmp.inmobi.com
partner

+1 more partners

2025-10-11T15:20:12.716Z
heycar.com favicon

Mobility Trader UK Limited

heycar.com

78
TransportationUnited KingdommediumLOW

heycar UK, operated by Mobility Trader UK Limited, is a well-established online marketplace specializing in quality checked used cars from trusted dealers across the United Kingdom. Founded in 2019, the company leverages a modern digital platform to provide car buyers with extensive listings, dealer access, car valuation tools, finance information, and expert reviews. The website demonstrates a strong market position within the UK automotive sector, targeting consumers seeking reliable used vehicles with transparent dealer relationships. The technical infrastructure is robust, utilizing Next.js and React frameworks hosted on AWS, integrating multiple third-party services such as Stripe for payments, Google Maps for location services, and advanced analytics platforms including Snowplow and Quantcast. The site is optimized for performance, mobile responsiveness, and accessibility, reflecting a mature digital presence. From a security perspective, heycar enforces HTTPS with a solid SSL configuration and employs a comprehensive cookie consent mechanism compliant with GDPR. While explicit security policies and incident response contacts are not publicly found, the domain registration is consistent and trustworthy, with no suspicious indicators. The absence of DNSSEC is a minor security gap. Overall, the security posture is strong but could be enhanced by publishing formal security and vulnerability disclosure policies. The overall risk assessment is low, with the website presenting a professional, secure, and user-friendly experience. Strategic recommendations include enabling DNSSEC, publishing privacy and security policies, and enhancing transparency around incident response to further strengthen trust and compliance.

90
85
17
80
82
85
100
usedcarscarsalesukautomotiveonlinemarketplace+3 more
ReactNext.jsStripeGoogle Maps API+4

Partner Domains:

app.carsale24.com
partner
cmp.inmobi.com
partner

+1 more partners

2025-10-11T15:19:52.631Z
freshservice.com favicon

Freshworks Inc.

freshservice.com

80
TechnologyUnited StatesenterpriseLOW

Freshworks Inc. operates the Freshservice platform, an AI-powered IT service management solution designed for enterprises seeking scalable and efficient ITSM capabilities. Positioned as a leader in the ITSM market, Freshservice emphasizes ease of deployment, AI assistance, and integration with existing technology stacks to improve IT team productivity and employee satisfaction. The company targets IT departments across various industries, offering a SaaS subscription model with enterprise-grade features and certifications such as ISO 27001 and SOC 2. Technically, the website leverages modern frameworks like React and Next.js, integrates multimedia content via Wistia, and employs robust analytics and consent management tools including Google Tag Manager and OneTrust. The site demonstrates excellent performance, mobile optimization, and SEO practices, reflecting a mature digital infrastructure. From a security perspective, Freshservice enforces HTTPS, implements comprehensive security headers, and maintains privacy and cookie policies aligned with GDPR requirements. While WHOIS data is unavailable, possibly due to privacy protection, the overall security posture is strong with no evident vulnerabilities or exposed sensitive data. The company also maintains a vulnerability disclosure policy and provides contact for its Data Protection Officer. Overall, Freshservice presents a trustworthy, professional, and secure online presence suitable for enterprise customers. The main risk lies in the lack of publicly available WHOIS data, which should be monitored for legitimacy confirmation. Strategic recommendations include publishing a dedicated security policy page and enhancing incident response contact visibility.

65
100
27
95
77
85
100
itsmaienterprisesoftwareitservicemanagementfreshservice+1 more
ReactNext.jsGoogle Tag ManagerWistia video embed+2
2025-10-11T14:17:44.851Z
korvo.co favicon

Korvo

korvo.co

62
E-commerceTurkeysmallMEDIUM

Korvo is a specialized SaaS platform providing e-commerce infrastructure tailored for educators and content creators. It enables users to create and manage live workshops, digital products, online courses, and paid communities, integrating payment processing through iyzico. The platform targets experts and educators seeking to monetize their knowledge and scale their passion businesses. Korvo positions itself as a niche player with a comprehensive suite of tools for event and product management, customer tracking, and income reporting. Technically, the website is built on modern frameworks such as Next.js and React, with strong mobile optimization and good SEO practices. It employs multiple analytics and tracking services including Google Analytics, Hotjar, Microsoft Clarity, and Facebook Pixel, all managed via Google Tag Manager. Security posture is solid with HTTPS enforced and secure payment integration, though some security headers and explicit security policies could be improved. Privacy compliance is well addressed with comprehensive privacy and cookie policies and a consent mechanism. No direct contact emails or phone numbers are provided, which may affect user trust slightly. Overall, Korvo demonstrates a mature digital presence with a strong focus on user experience and business functionality.

15
83
17
40
77
75
100
e-commerceeducationcontentcreatorsonlinecoursesdigitalproducts+3 more
ReactNext.jsGoogle AnalyticsHotjar+3

Partner Domains:

iyzico.com
partner
etbis.eticaret.gov.tr
partner
2025-10-11T14:09:46.641Z
C

Contember Limited

contember.com

62
TechnologyN/asmallMEDIUM

Contember Limited offers a secure, reliable, and customizable business application platform that leverages an open-source full-stack framework combined with an AI-powered editor. Their solution targets businesses seeking scalable and adaptable apps without requiring coding skills, positioning themselves as a niche provider in the technology sector focused on business app development. The company provides ready-to-use templates and cloud hosting options, emphasizing flexibility and user empowerment. Technically, the website is built on modern technologies including React, Next.js, GraphQL, and PostgreSQL, demonstrating a mature and performant infrastructure. The platform supports seamless integration with existing tools and offers built-in authentication and authorization features, enhancing security and ease of use. The site is well-optimized for mobile and accessibility, with a professional design and clear navigation. From a security perspective, Contember employs HTTPS and role-based access controls, but lacks some explicit security headers and formal incident response or vulnerability disclosure policies. Privacy compliance is addressed with a comprehensive privacy policy, though cookie consent mechanisms are absent. The absence of WHOIS data reduces transparency but does not detract significantly from the overall trustworthiness given the open-source presence and professional web presence. Overall, Contember presents a strong business and technical profile with good security fundamentals. Strategic improvements in security headers, cookie consent, and transparency around incident response would enhance their posture and trust further.

35
53
2
75
72
80
100
businessappsaieditoropen-sourceframeworkcloud+4 more
ReactGraphQLPostgreSQLTypeScript+1
2025-10-11T11:55:20.117Z
bosch-home.ie favicon

Bosch

bosch-home.ie

60
ManufacturingIrelandlargeMEDIUM

Bosch Home Appliances Ireland operates a professional and comprehensive website showcasing a wide range of home appliances including cooking, dishwashing, laundry, refrigeration, and coffee machines. The company is positioned as a leading manufacturer and retailer in the home appliance sector, targeting consumers in Ireland with a focus on quality, reliability, and precision. The website reflects strong brand consistency aligned with Bosch's global identity and offers extensive product information and customer support resources. Technically, the website leverages modern web technologies such as React and Next.js, ensuring fast performance and excellent mobile optimization. The presence of Adobe Launch and ConsentManager indicates a mature approach to marketing and privacy compliance. Security best practices are observed with HTTPS enforcement and appropriate security headers, contributing to a robust security posture. While WHOIS data is unavailable, limiting domain registration verification, the website's professional presentation and comprehensive policies suggest a legitimate and trustworthy business operation. Privacy and cookie policies are present and GDPR compliant, with consent mechanisms implemented. No critical vulnerabilities or security issues were detected during analysis. Overall, Bosch Home Appliances Ireland demonstrates a strong digital presence with good security and privacy practices, supporting its market position as a reputable home appliance provider. Continued monitoring and enhancement of security policies and public vulnerability disclosures are recommended to maintain and improve trust.

40
25
17
70
80
65
100
homeappliancesboschkitchenlaundrydishwashing+2 more
ReactNext.jsAdobe LaunchConsentManager+1
2025-10-11T10:44:05.870Z
thebal.com favicon

NBA Media Ventures, LLC

thebal.com

72
MediaN/alargeMEDIUM

The Basketball Africa League (BAL) website, hosted as a subdomain of nba.com, serves as the official digital platform for the BAL, a professional basketball league featuring 12 teams across Africa. The site provides comprehensive content including news, schedules, team information, statistics, videos, and merchandise, targeting basketball fans and the African basketball community. Affiliated with NBA Media Ventures, LLC, the site benefits from strong brand recognition and a large organizational backing. Technically, the website employs modern web technologies such as React and Next.js, integrates advanced analytics and marketing tools including Google Tag Manager, Adobe DTM, and Facebook Pixel, and ensures a fast, mobile-optimized user experience. The site is well-structured with good SEO and accessibility practices, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS, implements key security headers, and includes privacy and cookie policies aligned with GDPR requirements. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not present, representing areas for improvement. The absence of WHOIS data for the subdomain is expected given it is part of the nba.com domain, which is a trusted and established entity. Overall, the BAL website demonstrates a high level of professionalism, security, and compliance, with strong business credibility and user trust. Strategic recommendations include publishing detailed security policies, adding vulnerability disclosure information, and enhancing contact transparency for security incidents.

25
95
17
85
82
85
100
sportsbasketballafricanbabal+5 more
ReactNext.jsAdobe DTMGoogle Tag Manager+3

Partner Domains:

nba.com
parent
wnba.com
partner

+2 more partners

2025-10-11T09:35:47.191Z
W

Women's National Basketball Association

wnba.com

74
MediaUnited StateslargeMEDIUM

The Women's National Basketball Association (WNBA) official website serves as the authoritative digital platform for the league, providing comprehensive information including schedules, standings, player stats, team details, news, ticket sales, and merchandise. The site targets basketball fans and sports enthusiasts, positioning itself as a key media outlet for women's professional basketball in the United States. The website is well-branded, professionally designed, and consistently maintained, reflecting the league's stature and market presence. Technically, the site leverages modern web technologies such as React and Next.js, ensuring fast performance, mobile responsiveness, and good accessibility. It integrates various third-party services for analytics, advertising, and consent management, demonstrating a mature digital infrastructure. The presence of comprehensive privacy and cookie policies with active consent mechanisms indicates a strong commitment to privacy compliance, including GDPR. From a security perspective, the website enforces HTTPS with excellent SSL configuration and implements multiple security headers, contributing to a robust security posture. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of a publicly accessible security.txt or incident response information suggests room for improvement in transparency and vulnerability management. Overall, the website presents a low-risk profile with high trustworthiness and professionalism. The main limitation is the lack of publicly available WHOIS data, likely due to privacy protection, which does not detract from the site's legitimacy given its official branding and content. Strategic recommendations include publishing security and incident response policies and enhancing contact transparency to further strengthen trust and security culture.

30
100
17
85
90
85
100
sportsbasketballwnbawomenssportsmedia+3 more
ReactNext.jsJavaScriptCSS+3

Partner Domains:

wnbacleveland.com
partner
wnbaexperiences.com
partner

+1 more partners

2025-10-11T09:35:36.824Z
xyflow.com favicon

xyflow

xyflow.com

60
TechnologyGermanysmallMEDIUM

xyflow is a small Berlin-based technology company specializing in the development and maintenance of open source libraries for building node-based user interfaces with React and Svelte. Their flagship products, React Flow and Svelte Flow, are widely adopted by developers and companies such as Stripe and Typeform, positioning xyflow as a key player in the niche of interactive diagram and workflow UI components. The company operates an informative and professionally designed website that serves both as a marketing platform and a community hub. Technically, the website is built using modern web technologies including Next.js, React, and Svelte, hosted on alwaysdata.com. It demonstrates excellent performance, mobile optimization, and SEO practices. The site integrates minimal user tracking via Fathom Analytics, respecting user privacy without intrusive cookie consent mechanisms. The technical infrastructure reflects a mature digital presence suitable for a small but focused software development team. From a security perspective, the site enforces HTTPS and employs domain transfer protection. However, it lacks some advanced security headers and does not publicly disclose a security policy or incident response contacts. No vulnerabilities or suspicious activities were detected in the content or WHOIS data. The domain registration is consistent with the company's history and transparent, enhancing trustworthiness. Overall, xyflow presents a low-risk profile with a strong business credibility and technical foundation. Strategic improvements in security headers, cookie consent, and public security policies would further enhance their security posture and compliance standing.

30
53
2
55
72
80
100
xyflownode-baseduireactsvelteopensource+5 more
ReactSvelteNext.jsJavaScript+1

Partner Domains:

reactflow.dev
partner
svelteflow.dev
partner
2025-10-11T08:31:32.691Z