Medium-risk security reports
99,068 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,179001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
16,451–16,500 of 99,068
S-Markt & Mehrwert GmbH & Co. KGs-reisewelt.de
Hospitality · Germany
74Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
S-Reisewelt is a German travel portal operated by S-Markt & Mehrwert GmbH & Co. KG, affiliated with the Sparkasse banking group. The website offers a wide range of travel services including package holidays, cruises, hotels, flights, car rentals, and travel insurance. It targets German-speaking travelers seeking quality and affordable travel options with a focus on customer service and personalized recommendations. The platform integrates multiple partners such as Booking.com, GetYourGuide, and PAYBACK to enhance user experience and loyalty benefits. Technically, the website is built using modern web technologies like React and Apollo GraphQL, hosted likely on T-Systems infrastructure, and optimized for mobile devices with good SEO practices. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although no dedicated security policy or incident response contacts are published. Privacy and cookie policies are comprehensive and GDPR compliant. Overall, the site is professional, trustworthy, and well-positioned in the German travel market.
Simple Plan Foundationsimpleplanfoundation.org
Non-profit · Canada
64Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
The Simple Plan Foundation website represents a small non-profit organization established in 2005 by the band Simple Plan to support young people in need and victims of life-threatening illnesses. The foundation operates primarily in Canada and targets youth and charitable supporters. The website is built on the Squarespace platform, leveraging modern web technologies including Google Tag Manager and Facebook Pixel for analytics and marketing. The site is mobile-optimized with good design quality and clear navigation, though it lacks visible privacy and cookie policies, which impacts privacy compliance scores. Security posture is strong with HTTPS and HSTS enabled, but additional security headers could enhance protection. The absence of public WHOIS data suggests privacy protection, which is reasonable for a non-profit entity. Overall, the site is professional and trustworthy but could improve transparency and compliance documentation.
Band T-Shirtsbandtshirts.com.au
Retail · Australia
66Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Band T-Shirts is an Australian e-commerce retailer specializing in official licensed band merchandise including T-shirts, hoodies, vinyl, and other music-related products. The website is professionally designed with a clear focus on music fans seeking authentic merchandise from a wide range of artists. The business operates under LP/ATM Pty Ltd, part of the Mushroom Group, indicating a solid market position within the music merchandising niche. The site demonstrates a commitment to sustainability through carbon neutral shipping partnerships. Technically, the website uses modern JavaScript libraries and tracking tools, hosted likely on AWS infrastructure, with good mobile optimization and SEO practices. Security posture is strong with HTTPS and secure payment integrations, though improvements are recommended in security headers and privacy compliance mechanisms. Overall, the site is trustworthy and professionally maintained, though WHOIS data is unavailable due to privacy protection, limiting full domain trust analysis.
artlistartlist.net
—
54Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
Reformierte Kirche Kanton Luzernreflu.ch
Government · Switzerland
67Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
The website www.reflu.ch serves as the official online presence of the Reformed Church of the Canton of Luzern, Switzerland. It provides information about church services, pastoral care, community events, and regional church congregations. The site targets local German-speaking community members seeking spiritual support and church-related activities. The business model is non-profit and government-affiliated, focusing on community and religious services. The website is well-branded and consistent with the church's identity, featuring event calendars and news updates that demonstrate active engagement with its audience. Technically, the site employs modern web technologies including HTML5, CSS3, JavaScript, and integrates tracking pixels from TikTok, Facebook, and Google Tag Manager. The site is mobile-optimized and offers a good user experience with clear navigation and relevant content. However, it lacks explicit privacy and cookie policies, which is a notable compliance gap. Security posture is generally good with HTTPS enforced, but the absence of security headers and explicit incident response contacts reduces the overall security maturity. From a security and compliance perspective, the site does not present critical vulnerabilities or exposed sensitive data. The WHOIS data aligns well with the website's claims, showing consistent registrant information appropriate for a regional church organization. No WAF or blocking mechanisms were detected, allowing full content access. The site does not contain any adult or NSFW content, making it safe for general audiences. Overall, the website is credible and professionally maintained but would benefit from enhanced privacy compliance measures and improved security headers. Adding clear contact information for security incidents and a vulnerability disclosure policy would further strengthen trust and compliance.
Stämpfli Kommunikationstaempfli.com
Other
52Medium
NIS2 17 · GDPR 65
NIS2 17 · GDPR 65
The website staempfli.com currently serves a 404 error page, indicating that the main content is inaccessible. The domain is long-established, created in 1997, and registered with Network Solutions, LLC, which suggests a legitimate and stable domain ownership. The website uses TYPO3 CMS and Font Awesome for its technical infrastructure. However, the lack of accessible content, absence of privacy and cookie policies, and missing contact information significantly reduce the website's usability and trustworthiness. No security headers or HTTPS information were detected, indicating potential security posture weaknesses. Overall, the site is not currently functional for end users and requires remediation to restore content and improve security and compliance.
- TTSV Littau
tsvlittau.ch
Other · Switzerland
55Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
TSV Littau is a local, politically and religiously neutral sports club based in Luzern, Switzerland, focused on supporting its members in various sporting activities. The website provides information about the club's events, departments, and contact details, targeting members and interested parties in the local community. The business model is non-profit and community-oriented, with a small organizational size and a clear focus on sports and social engagement. Technically, the website is built using the SIQUANDO Web 10 CMS and utilizes jQuery for client-side scripting. The site has a basic mobile optimization and accessibility level, with moderate performance. SEO and meta information are present but minimal. No advanced frameworks or hosting details are evident from the provided data. From a security perspective, the website lacks HTTPS, security headers, and cookie consent mechanisms, which lowers its security posture. No forms or data collection points are present on the main page, reducing exposure to input-based vulnerabilities. The WHOIS data aligns well with the website's claims, indicating a legitimate and consistent registration. However, the absence of a published security policy or incident response contact limits transparency. Overall, the website is functional and serves its purpose as a local sports club portal but requires improvements in security, privacy compliance, and technical modernization to enhance trust and user safety.
- SSt. Niklausgesellschaft Littau
samichlaus-littau.ch
Non-profit · Switzerland
72Medium
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
St. Niklausgesellschaft Littau is a small non-profit organization dedicated to preserving and promoting the traditional Sankt Nikolaus customs in the Littau region of Luzern, Switzerland. Their website serves as an informational platform for local families and community groups, offering details about Samichlaus visits during Advent and related cultural activities. The organization maintains a modest but consistent online presence with clear navigation and community engagement via Facebook. Technically, the website is built on the Jimdo Creator CMS platform, utilizing standard web technologies including jQuery and Google Analytics for visitor tracking. The site is mobile-optimized and includes a cookie consent mechanism compliant with GDPR requirements. Hosting and infrastructure are provided by Jimdo GmbH, ensuring reliable HTTPS security. From a security perspective, the site enforces HTTPS and employs cookie consent controls, but lacks some advanced security headers such as Content-Security-Policy and X-Frame-Options. The use of an older jQuery version may pose minor risks. No explicit security policies or incident response contacts are published, which is typical for small non-profits but could be improved. Overall, the website is trustworthy, safe, and well-suited for its community-focused purpose. It demonstrates good privacy compliance and reasonable technical implementation, though there is room for security enhancements and more comprehensive policy disclosures.
Blauring Littaubrlittau.ch
Non-profit · Switzerland
72Medium
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Blauring Littau is a well-established non-profit youth organization based in Switzerland, focused on providing engaging activities and community events for girls and young women. The website serves as a communication platform for event announcements, group activities, and community engagement, reflecting a strong local presence and a 90-year history. Technically, the site is built on the Jimdo Creator CMS platform, leveraging modern web technologies and third-party widgets, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforcement, security headers, and cookie consent mechanisms, although explicit security policies and incident response contacts are not published. Overall, the site is trustworthy, professional, and compliant with GDPR requirements, though it lacks some formal documentation such as terms of service and security policies.
Freaking Dadfreaking-dad.de
Media · Germany
61Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
Freaking Dad is a German-language podcast platform focused on fatherhood, parenting, and family life, targeting parents with a special emphasis on fathers. The website hosts podcast episodes, blog content, and engages audiences via multiple social media channels. The business operates as a small media entity with a niche market position, leveraging LetsCast.fm for podcast hosting and distribution. The content is professionally presented with consistent branding and good quality, appealing to a general audience interested in parenting and related lifestyle topics. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and the Podlove Web Player for podcast playback. It uses Turbolinks for navigation and Tailwind CSS for styling. Hosting is via LetsCast.fm and domain DNS is managed through rzone.de. The site is mobile-optimized with good SEO practices but lacks some accessibility features. Performance is moderate with no major technical issues detected. From a security perspective, the site uses HTTPS and includes CSRF tokens in forms, indicating basic security hygiene. However, no explicit security headers were detected, and there is no published security policy or incident response information. Privacy compliance is partial, with a privacy policy linked to the podcast host but no cookie consent mechanism on the main site. Contact information is available via email and a contact form with anti-spam measures. Overall, the website is safe, professional, and trustworthy for its intended audience. It does not contain adult or explicit content. Recommendations include enhancing security headers, implementing cookie consent, and publishing security and incident response policies to improve compliance and trust.
Headlockheadlock.de
Media · Germany
56Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
Headlock is a specialized German-language media outlet focusing on professional wrestling content, including podcasts, reviews, interviews, and premium episodes. The site targets wrestling fans primarily in Germany and operates a content-driven business model supported by donations and merchandise sales. Technically, the site runs on WordPress with a modern theme and integrates social sharing and analytics tools, demonstrating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though improvements in security headers and privacy compliance are recommended. Overall, the site is professional, content-rich, and trustworthy with a niche audience focus.
Carxpert Automotivecarxpert.ch
Transportation · Switzerland
75Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Carxpert Automotive operates a network of independent quality garages in Switzerland, offering comprehensive automotive services including consultation, diagnosis, maintenance, and repair for all vehicle brands. The website positions itself as a trusted network with ongoing partner additions and a focus on quality service. Technically, the site is built on the Neos CMS platform using the Flow PHP framework, integrating modern tools such as Google Tag Manager and Usercentrics for analytics and consent management. The site is multilingual and mobile-optimized, providing a good user experience with clear navigation and professional design. Security-wise, the site enforces HTTPS and includes cookie consent mechanisms but lacks explicit security policies or incident response information. No critical vulnerabilities or exposed sensitive data were detected, indicating a solid security posture. Overall, the website is trustworthy, compliant with GDPR, and well-positioned in its market niche.
- PPfarrei St. Theodul Littau
pfarrei-littau.ch
Government · Switzerland
65Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Pfarrei St. Theodul Littau is a local parish community serving the Littau-Luzern area in Switzerland. The website provides comprehensive information about religious services, community events, social projects, and educational offerings targeted at families, youth, seniors, and the broader local community. The organization operates as a non-profit religious entity with a strong focus on community engagement and spiritual support. Technically, the website uses modern web technologies including Google Tag Manager and OpenStreetMap, with a responsive design and moderate performance. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers and explicit policies are missing. Overall, the site is trustworthy, professionally presented, and compliant with basic privacy regulations.
- Associazione svizzera delle organizzazioni giovanili (SAJV)
congedogiovanile.ch
Non-profit · Switzerland
57Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
The website congedogiovanile.ch serves as an informational platform dedicated to promoting and explaining the youth leave rights (congedo giovanile) in Switzerland. It targets young employees and apprentices under 30 engaged in volunteer activities within cultural, sports, or social organizations. The site provides downloadable forms, informational brochures, legislative references, and a chatbot for user assistance. The organization behind the site is the Swiss Association of Youth Organizations (SAJV), positioning itself as a trusted non-profit resource in this niche. Technically, the site is built on a Redaxo CMS platform, utilizing standard web technologies such as HTML5, CSS3, JavaScript, jQuery, and Swiper.js for UI components. While the site is well-structured and mobile-optimized, it lacks critical privacy and cookie policies and does not expose security headers, which are areas for improvement. No contact emails or phone numbers are explicitly provided, which may affect user trust and compliance. Overall, the site is legitimate, safe, and serves its informational purpose effectively but would benefit from enhanced security and privacy compliance measures.
Finance · Italy
60Medium
NIS2 17 · GDPR 15
NIS2 17 · GDPR 15
The website bancagenerali.it appears to represent a well-established banking institution in Italy, as supported by the WHOIS data indicating domain creation in 1998 and consistent registration information. However, the provided HTML content is completely empty, indicating that the website content is either blocked, restricted, or not accessible for analysis. This prevents extraction of metadata, contact information, security policies, or any business-related content. The lack of visible content severely limits the ability to assess the website's technical infrastructure, security posture, and compliance status. The domain registration data is consistent and legitimate, supporting the business credibility despite the lack of accessible content. Overall, the site likely uses security mechanisms or WAF that block content scraping or automated analysis.
- VolonTerra
volonterra.ch
Non-profit · Switzerland
55Medium
NIS2 2 · GDPR 73
NIS2 2 · GDPR 73
VolonTerra is a Swiss non-profit organization focused on promoting voluntary engagement among youth groups across Switzerland, particularly through environmental and community projects scheduled for September 2026. The website serves as a platform for project registration, information dissemination, and local leadership recruitment, supported by partnerships such as with SAJV. The digital infrastructure is built on REDAXO CMS with modern JavaScript libraries, providing a good user experience and mobile optimization. Security posture is solid with HTTPS and standard security headers, though lacking explicit security policies and vulnerability disclosures. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism or terms of service. Overall, the site is trustworthy and professionally presented, targeting youth volunteers and community participants.
- SAJV (Schweizerische Arbeitsgemeinschaft der Jugendverbände)
jugendsession.ch
Government · Switzerland
58Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
Jugendsession.ch is the official website for the Eidgenössische Jugendsession, a prominent Swiss non-profit youth political participation project organized by the Schweizerische Arbeitsgemeinschaft der Jugendverbände (SAJV). The platform facilitates annual gatherings of 200 young people from across Switzerland to discuss political issues and formulate demands, aiming to strengthen youth political engagement. The website is professionally designed, multilingual, and supported by numerous Swiss cantons and federal offices, reflecting a strong market position within the government and non-profit sectors. Technically, the website employs modern web technologies including jQuery, Swiper.js, and FontAwesome, with image optimization via ImageKit. It is likely powered by the Contao CMS. The site is mobile-optimized and performs moderately well, with good SEO and basic accessibility features. Security posture is strong with HTTPS enforced and appropriate security headers present, though there is room for improvement in privacy compliance and incident response transparency. Security-wise, the site shows no critical vulnerabilities or exposed sensitive data. However, it lacks a cookie consent mechanism and a vulnerability disclosure policy, which are recommended for compliance and transparency. Contact information is clearly provided, but no dedicated security or incident response contacts are visible. Overall, jugendsession.ch is a trustworthy, well-maintained government-affiliated site with a clear mission and solid technical foundation. Strategic enhancements in privacy compliance and security transparency would further strengthen its risk profile and user trust.
Non-profit · Switzerland
51Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The Federazione svizzera delle associazioni giovanili (FSAG) is a well-established Swiss non-profit organization founded in the 1930s, serving as an umbrella for over 60 youth organizations representing more than 500,000 children and young people. The website clearly communicates its mission to advocate for youth interests politically and socially, with key projects focused on youth engagement, future participation, and inclusion. The organization maintains a strong presence across multiple social media platforms, enhancing its outreach and engagement. Technically, the website is built on the REDAXO CMS platform, utilizing modern JavaScript libraries such as jQuery and Swiper.js for interactive elements. The site is served over HTTPS with appropriate security headers, indicating a good security posture. Performance and mobile optimization are adequate, providing a positive user experience. Security-wise, the site implements HTTPS and standard security headers but lacks published security policies, incident response information, and vulnerability disclosure mechanisms. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism or terms of service page. Contact information is limited to a phone number, with no verified company emails publicly listed. Overall, the website is professional, trustworthy, and aligned with the organization's mission. However, improvements in privacy compliance, security transparency, and user data protection practices are recommended to enhance trust and regulatory adherence.
- Schweizerische Arbeitsgemeinschaft der Jugendverbände (SAJV)
jugendurlaub.ch
Non-profit · Switzerland
57Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
Jugendurlaub.ch is a Swiss non-profit informational website dedicated to promoting and facilitating youth leave rights for employees and apprentices under 30 years old engaged in voluntary youth work. The site is closely associated with the Schweizerische Arbeitsgemeinschaft der Jugendverbände (SAJV), providing authoritative information, downloadable forms, and FAQs to support its target audience. The website is well-branded, consistent, and provides clear contact details, enhancing its trustworthiness and user accessibility. Technically, the site uses modern web technologies including jQuery, Swiper.js, and the Redaxo CMS platform, delivering a good user experience with mobile optimization and multilingual support. Security posture is adequate with HTTPS enforced, but lacks explicit security headers and formal security policies. Privacy compliance is a notable gap due to the absence of privacy and cookie policies. Overall, the site is legitimate, trustworthy, and serves a clear non-profit advocacy purpose in Switzerland.
Non-profit · Switzerland
59Medium
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
The Schweizerische Arbeitsgemeinschaft der Jugendverbände (SAJV) is a well-established Swiss non-profit umbrella organization representing approximately 60 youth organizations and over 500,000 children and young people. The organization focuses on political advocacy, youth engagement, inclusion, and social projects. Their website reflects a professional and consistent brand image, with clear navigation and relevant content tailored to their target audience of youth and political stakeholders. Technically, the site uses modern web technologies including jQuery and Swiper.js, and is built on the Redaxo CMS platform. The site is mobile-optimized and performs moderately well, though there is room for improvement in accessibility and SEO.
MS Management-Service GmbHms-agrarversicherungen.de
Other · Germany
63Medium
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
MS Management-Service GmbH is a specialized insurance broker based in Gießen, Germany, focusing on agricultural and private insurance products. Their offerings include liability insurance, building insurance, crop damage coverage, and services for seasonal workers, among others. The company targets agricultural businesses and private clients within Germany, positioning itself as a niche regional broker with a comprehensive portfolio tailored to the agricultural sector. Technically, the website is built on the cm Homepage-Baukasten CMS platform, hosted via transmit.de, and employs modern web technologies including HTTPS, JavaScript, and FriendlyCaptcha for form protection. The site is moderately performant, mobile-optimized, and includes basic accessibility features. SEO and technical implementation are adequate but could benefit from enhancements such as improved security headers and accessibility compliance. From a security perspective, the site enforces HTTPS and uses captcha mechanisms to prevent spam. However, it lacks explicit security policies, incident response contacts, and advanced security headers. Privacy compliance is strong with clear GDPR-aligned privacy and cookie policies and user consent mechanisms. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website presents a professional and trustworthy front for a small insurance brokerage firm. Strategic improvements in security headers, incident response transparency, and accessibility would enhance the security posture and user trust further.
- Buchkatalog
buchkatalog.de
Retail · Germany
70Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
Buchkatalog.de is a German online bookstore offering millions of books with options for local pickup and shipping. It operates a large network of bookstores and provides advanced search capabilities for customers. The website uses modern web technologies including Next.js and React, and integrates Google Tag Manager for analytics. The site is well-structured, mobile-optimized, and provides a good user experience with clear navigation and professional design. However, it lacks visible privacy and cookie policies, security headers, and explicit contact information such as emails or phone numbers, which are important for trust and compliance. The domain appears legitimate with active registration and appropriate name servers, though registrant details are not fully disclosed. Overall, the site is functional and professional but could improve its privacy compliance and security posture.
Hessens Bauernhessens-bauern.de
Other · Germany
62Medium
NIS2 2 · GDPR 80
NIS2 2 · GDPR 80
Hessens Bauern is a regional agricultural information platform representing farms and agricultural activities in Hessen, Germany. The website provides comprehensive information about local farms, plants, animals, products, and educational opportunities, targeting consumers, schools, and local communities. It promotes sustainable agriculture and regional products while fostering community engagement through events and social media. Technically, the website is built on Drupal 10 CMS, utilizing modern JavaScript libraries such as Leaflet for maps and Matomo for privacy-conscious analytics. The site is mobile-optimized with good SEO practices and a professional design, ensuring a positive user experience. From a security perspective, the site enforces HTTPS, uses cookie consent mechanisms, and disables cookies in analytics to enhance privacy. However, it lacks explicit security headers and dedicated security or incident response policies. No vulnerabilities or exposed sensitive data were detected. Overall, the website is trustworthy, well-maintained, and compliant with GDPR requirements. It effectively serves its regional agricultural audience with quality content and good technical implementation. Strategic improvements in security headers and incident response transparency could further enhance its security posture.
Government · Germany
69Medium
NIS2 17 · GDPR 33
NIS2 17 · GDPR 33
The SVLFG website represents the Sozialversicherung für Landwirtschaft, Forsten und Gartenbau, a German government social insurance institution focused on agricultural, forestry, and horticultural sectors. The organization provides statutory insurance services including accident insurance, pension schemes, health and nursing care insurance, and prevention programs. The website is professionally designed, well-structured, and targets a broad audience including farmers, employers, employees, medical professionals, and related institutions. It offers comprehensive information and digital services tailored to its sector. Technically, the website is built on the Scrivito CMS platform, utilizing modern web technologies such as JavaScript and CSS. It includes accessibility features, mobile optimization, and SEO best practices. The site uses HTTPS with strong SSL configuration and security headers, ensuring secure communication. Tracking is implemented via etracker, with a cookie consent mechanism in place, reflecting good privacy compliance. Security posture is solid with no visible vulnerabilities or exposed sensitive data. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are absent, which could be improved to enhance transparency and trust. The WHOIS data aligns with the website's claims, indicating a legitimate and consistent domain registration. Overall, the website scores highly in content quality, technical implementation, security, privacy compliance, and business credibility, making it a trustworthy and professional digital presence for a government social insurance entity.
easyvoteeasyvote.ch
Education · Switzerland
67Medium
NIS2 17 · GDPR 95
NIS2 17 · GDPR 95
easyvote.ch is a Swiss non-profit educational platform focused on providing neutral, easily understandable political information and voting guidance to Swiss citizens, students, and educators. The website offers a variety of resources including voting recommendations, educational materials, explainer videos, and a dedicated app to assist voters. It maintains a strong market position as a trusted source for political education in Switzerland, supported by partnerships such as with the Swiss Youth Parliament Association (DSJ). The platform targets a broad audience including the general public and schools, emphasizing accessibility and neutrality in political content. Technically, the site is built on the Neos CMS and Flow PHP framework, leveraging modern web technologies with moderate performance and good mobile optimization. The site implements privacy and cookie policies with consent mechanisms, uses plausible analytics for minimal tracking, and integrates newsletter services via CleverReach. Security posture is solid with HTTPS enforced and mail obfuscation to protect contact information, though additional security headers could enhance protection. Overall, easyvote.ch presents a professional, trustworthy, and user-friendly digital presence aligned with its educational mission.
Government · Switzerland
73Medium
NIS2 17 · GDPR 65
NIS2 17 · GDPR 65
The Fédération Suisse des Parlements des Jeunes (FSPJ) is a Swiss non-profit organization dedicated to youth political education and participation. It serves as a neutral competence center supporting 65 youth parliaments across Switzerland and Liechtenstein. The website provides comprehensive information about its mission, services, and offers tailored for young people, educators, and local governments. Multilingual support and partnerships with organizations like easyvote.ch and engage.ch enhance its outreach and impact. Technically, the site is built on WordPress with modern plugins and optimizations, delivering a responsive and accessible user experience. Security posture is solid with HTTPS, cookie consent, and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is well addressed with detailed policies and consent mechanisms. Overall, the site reflects a professional, trustworthy, and mission-driven organization with a strong digital presence.
skyPixX GmbHskypixx.ch
Other · Switzerland
50Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
skyPixX GmbH is a Swiss-based small business specializing in graphic design and advertising technology services. Their offerings include direct printing, vehicle wrapping, signage, interior design, milling and cutting, POS displays, illuminated advertising, privacy and sun protection films, and logistics/montage services. The company targets local businesses and organizations seeking professional advertising and design solutions. The website presents a professional and consistent brand image with clear contact information and multimedia content such as videos and maps to enhance user engagement. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, jQuery, Google Analytics, Google Maps API, Video.js, Lightbox2, and Typekit fonts. The site is mobile optimized with good navigation and user experience, although accessibility features are basic. Performance is moderate with no critical errors or broken elements detected. From a security perspective, the site uses HTTPS and does not expose sensitive data in the HTML. However, it lacks visible security headers such as Content-Security-Policy and Strict-Transport-Security, and no security or incident response policies are published. The absence of privacy and cookie policies and consent mechanisms indicates compliance gaps with GDPR and related regulations. Google Analytics is used without visible user consent, which may pose privacy compliance risks. Overall, the website is safe, professional, and business-focused with moderate security posture and privacy compliance. Strategic improvements in security headers, privacy policies, and cookie consent would enhance trust and regulatory compliance.
Bosch Energy and Building Solutionsgo-to-bosch.com
Energy · Germany
58Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Bosch Energy and Building Solutions is a large, well-established business entity operating in Germany, specializing in integrated building technologies including security systems, energy efficiency, building automation, and digital services. The website reflects a professional and comprehensive digital presence with strong Bosch branding, targeting commercial building operators, planners, and partners. The company offers a broad portfolio of services and maintains active engagement through events and webinars. Technically, the site uses modern web technologies, including Google Tag Manager and custom Bosch frameworks, with good mobile optimization and accessibility. Security posture is solid with HTTPS and consent management, though some security headers could be improved. WHOIS data is unavailable, which slightly impacts trust but is mitigated by the strong brand presence and professional content. Overall, the site is trustworthy, well-maintained, and compliant with GDPR regulations.
- Landwirtschaftsverlag Hessen GmbH
lv-hessen.de
Media · Germany
53Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
Landwirtschaftsverlag Hessen GmbH is a specialized media company based in Friedrichsdorf, Germany, focusing on publishing professional magazines and books related to agriculture, wine production, wine marketing, and equestrian sports. The company serves a niche audience including farmers, vintners, breeders, and horse sports enthusiasts, maintaining a strong regional and national presence through its portfolio of print and digital publications. Their business model centers on content creation, distribution, and associated book retail through their partner Landmedia platform. Technically, the website employs a modern but stable technology stack including jQuery, Bootstrap, and Matomo analytics, hosted on transmit.de infrastructure. The site is well-structured, mobile-optimized, and includes a comprehensive cookie consent mechanism aligned with GDPR requirements. Security posture is solid with HTTPS enforced and privacy-respecting analytics, though explicit security headers and incident response policies are absent. Overall, the website projects professionalism and trustworthiness with clear business information and consistent branding.
- activeMind AG
activemind.de
Technology · Germany
75Medium
NIS2 30 · GDPR 60
NIS2 30 · GDPR 60
activeMind AG is a German-based consulting and technology firm specializing in data protection, information security, and artificial intelligence. The company positions itself as a strong partner for businesses seeking expert guidance in these critical areas, leveraging certifications such as ISO 27001 to establish trust and credibility. Their website reflects a professional and modern digital presence, targeting business clients requiring compliance and security consulting services. The firm operates primarily in the technology sector with a medium-sized organizational footprint.
Maschinenringe Deutschland GmbHmr-wetter.de
Other · Germany
69Medium
NIS2 17 · GDPR 28
NIS2 17 · GDPR 28
Maschinenringe Deutschland GmbH operates a specialized agricultural weather service website providing reliable weather forecasts, precipitation data, wind speed, and other meteorological information tailored for the German agricultural sector. The website serves farmers and agricultural professionals by offering free, accessible weather-related services to support plant protection and farming activities. The company maintains a strong market position in Germany with a medium-sized business profile and consistent branding across its digital presence. Technically, the website is built on modern frameworks such as Gatsby and React, ensuring fast performance and good mobile optimization. The use of consent management tools indicates attention to privacy compliance. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers are not explicitly detected. No critical vulnerabilities or exposed sensitive data were found. Overall, the website is professional, trustworthy, and well-aligned with its business objectives.
Hessischer Bauernverband e. V.hessischerbauernverband.de
Non-profit · Germany
64Medium
NIS2 2 · GDPR 80
NIS2 2 · GDPR 80
The Hessischer Bauernverband e. V. is a regional agricultural association representing approximately 18,000 agricultural enterprises in Hessen, Germany. The organization focuses on advocating for agricultural, economic, social, educational, and cultural interests of people working in agriculture and forestry. Their website serves as an information hub for members and the public, offering news, events, educational resources, and member services. The association maintains a strong presence on multiple social media platforms and partners with numerous related organizations.
Maschinenringe Deutschland GmbHmaschinenringe.de
Energy · Germany
69Medium
NIS2 17 · GDPR 28
NIS2 17 · GDPR 28
Maschinenringe Deutschland GmbH operates as a cooperative organization serving the agricultural sector in Germany. It provides a range of services including energy supply specialized for agriculture (LandEnergie), digital farming solutions (MeinAcker), purchasing advantages, professional services, and educational programs through its academy. The company has a strong market presence with over 230 regional offices, targeting farmers and agricultural businesses. The website reflects a mature digital infrastructure built on modern technologies like Gatsby and React, with good performance and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are not found. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.
Wasserverband Nettelnburgnettelnburg.com
Government · Germany
71Medium
NIS2 2 · GDPR 80
NIS2 2 · GDPR 80
Wasserverband Nettelnburg is a public law entity responsible for maintaining the drainage ditches in the Nettelnburg district of Hamburg, Germany. The website serves as an official information portal providing details about the association's tasks, legal framework, events, and member responsibilities. It targets local residents and members of the water association, focusing on community engagement and regulatory compliance. The business operates in the government sector with a small organizational size and a history dating back to the 1920s. Technically, the website is built on WordPress using the Avada theme and employs the Complianz GDPR plugin for cookie consent management. The site is moderately optimized for performance and mobile devices, with basic accessibility and good SEO practices. No advanced analytics or marketing tools are detected, indicating a focus on privacy and minimal user tracking. From a security perspective, the site uses HTTPS and has implemented cookie consent mechanisms, but lacks visible security headers and explicit security policies. No vulnerabilities or exposed sensitive data were found in the content. However, the absence of WHOIS registration data for the domain raises concerns about domain legitimacy, although the website content itself appears professional and trustworthy. Overall, the website presents a solid digital presence for a local government entity with good content quality and privacy compliance. The main risk lies in the missing WHOIS data, which should be investigated further to confirm domain ownership and registration legitimacy.
Government · Germany
71Medium
NIS2 2 · GDPR 43
NIS2 2 · GDPR 43
The Landesverband der Wasser und Bodenverbände Mecklenburg-Vorpommern is a regional non-profit association representing water and soil associations in Mecklenburg-Vorpommern, Germany. The website serves as an information portal for members and stakeholders, providing job postings, publications, and organizational details. The site is professionally designed with consistent branding and clear navigation, targeting members and professionals in water and soil management sectors. Technically, the site is built on the Contao CMS platform, utilizing modern JavaScript libraries such as jQuery and Rocksolid Slider, with good mobile optimization and moderate performance. Security posture is solid with HTTPS enforced and visible security badges, though some HTTP security headers and formal security policies are absent. Privacy compliance is well addressed with a cookie consent mechanism and a linked privacy policy. Overall, the website is trustworthy and professionally maintained, suitable for its governmental and non-profit role.
Landeswasserverbandstag Brandenburg e.V.lwt-brandenburg.de
Government · Germany
50Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
The Landeswasserverbandstag Brandenburg e.V. (LWT) is a regional non-profit organization serving as the umbrella association for public water management entities in Brandenburg, Germany. The website provides information about the organization's mission, events, and member services, targeting stakeholders in water supply, wastewater management, and water body maintenance. The site is built on Joomla CMS with Yootheme and UIkit frameworks, offering a responsive and well-structured user experience. Technical infrastructure is modern and adequate for the organization's needs, hosted on a regional provider with secure HTTPS connections. Security posture is solid with HTTPS and CSRF protections, but lacks advanced security headers and cookie consent mechanisms, which are recommended for compliance and enhanced protection. Overall, the website is professional, trustworthy, and safe, with no signs of malicious content or blocking mechanisms.
- Wasser- und Bodenverbände Hessen - Maschinenringe Hessen e.V.
wbl-mr-hessen.de
Other · Germany
51Medium
NIS2 30 · GDPR 45
NIS2 30 · GDPR 45
Wasser- und Bodenverbände Hessen - Maschinenringe Hessen e.V. is a regional non-profit association focused on agricultural machinery sharing, water and soil management, and supporting farmers in Hessen, Germany. The organization provides consultation services, organizes events such as the Smart Farming Day, and disseminates relevant agricultural and environmental information. Their market position is strong within the regional agricultural sector, serving a medium-sized audience of farming professionals and stakeholders. The website is built on Joomla CMS and integrates various multimedia and interactive components to engage its audience. Technically, the site uses a mix of modern and legacy technologies, with room for improvement in script security and performance. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks advanced security headers and vulnerability disclosure policies. Privacy compliance is strong, with a comprehensive GDPR-aligned privacy policy and cookie management. Contact information is clearly presented, enhancing business credibility. Overall, the website is professional and trustworthy, though technical and security enhancements are recommended.
meister-boxx GmbHfachkraft-boerse.de
Other · Germany
59Medium
NIS2 2 · GDPR 100
NIS2 2 · GDPR 100
FACHKRAFT-BÖRSE is a German online recruitment platform operated by meister-boxx GmbH, focusing on connecting employers with skilled professionals across various sectors such as industry, healthcare, and services. The platform offers job seekers the ability to create profiles and receive job offers anonymously, while employers can post jobs and search for candidates. The website is well-structured, professionally designed, and targets a German-speaking audience with localized content. Technically, the site uses modern JavaScript libraries including jQuery and integrates Google Tag Manager for analytics, alongside a robust cookie consent mechanism compliant with GDPR requirements. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security policies and incident response contacts are absent. Overall, the site demonstrates a mature digital presence suitable for its niche market.
BX1bx1.be
Media · Belgium
63Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
BX1 is a French-language regional media company focused on delivering news, culture, sports, traffic, and weather information for the Brussels Capital Region. The website offers a variety of content including news articles, TV broadcasts, radio and podcasts, and live streaming services. It targets residents and French-speaking audiences in Brussels, positioning itself as a key regional media outlet. The business appears medium-sized, founded in 2015, and maintains a consistent brand presence across multiple social media platforms. Technically, BX1 uses WordPress CMS with popular plugins such as Yoast SEO and Elementor, hosted on OVH and assets served via DigitalOcean. The site is moderately performant, mobile-optimized, and SEO-friendly. Security posture is good with HTTPS enabled and reCAPTCHA implemented, though explicit security headers and a published security policy are lacking. Privacy compliance is partial, with a GDPR cookie consent mechanism present but no explicit privacy or terms of service pages found. Overall, BX1 demonstrates a professional and trustworthy online presence with room for improvement in privacy and security transparency.
meister-boxx GmbHfortbildung24.com
Education · Germany
57Medium
NIS2 2 · GDPR 100
NIS2 2 · GDPR 100
FORTBILDUNG24, operated by meister-boxx GmbH, is a German-language online platform specializing in the comparison of seminars, further education courses, master schools, and professional training. The website serves individuals and companies seeking to enhance their skills and qualifications by providing a comprehensive comparison and search assistant service. The platform positions itself as a trusted intermediary connecting learners with educational providers across various sectors including industry, health, IT, and management. Technically, the website employs a modern tech stack including jQuery, Bootstrap, Font Awesome, and integrates Google Tag Manager and Analytics for tracking. It uses consentmanager.net for GDPR-compliant cookie consent management, ensuring user privacy and regulatory adherence. The site is mobile-optimized and features structured data for SEO enhancement, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS and provides a granular cookie consent mechanism. However, it lacks explicit security headers and a published security policy or incident response page. No vulnerabilities or exposed sensitive data were detected in the content. The absence of WHOIS data is a minor concern but is mitigated by the professional presentation and compliance indicators. Overall, FORTBILDUNG24 presents a low-risk profile with a solid business model focused on education services. Strategic recommendations include enhancing security headers, publishing a security.txt file, and improving accessibility compliance to further strengthen trust and security posture.
Fernstudium Direktfernstudium-direkt.de
Education · Germany
63Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Fernstudium Direkt operates as a leading German online comparison portal specializing in distance learning and continuing education. The platform offers comprehensive information on courses, providers, costs, prerequisites, and user reviews, targeting individuals seeking flexible educational opportunities. It partners with over 120 educational providers, providing a broad catalog of nearly 5,000 courses and 1,200 study programs, positioning itself strongly in the German education market. Technically, the website is built on Drupal 10, leveraging modern web technologies including Google Tag Manager and Usercentrics for consent management, ensuring GDPR compliance. The site is well-optimized for mobile devices, fast loading, and accessible, with a professional design and clear navigation enhancing user experience. From a security perspective, the site enforces HTTPS and integrates consent-based script loading, but could improve by implementing explicit security headers like Content-Security-Policy and publishing a security.txt file. No critical vulnerabilities or exposed sensitive data were detected. Privacy policies and cookie consent mechanisms are present and comprehensive, supporting regulatory compliance. Overall, Fernstudium Direkt demonstrates a mature digital presence with strong business credibility and trust indicators. The absence of direct contact emails or phone numbers on the homepage slightly limits immediate contact transparency but is mitigated by extensive social media presence and legal pages. Strategic improvements in security policy transparency and incident response information would further enhance trust and security posture.
Stiftung Erwachsenenbildung Liechtensteinweiterbildungsgutschein.li
Education · Liechtenstein
75Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
Stiftung Erwachsenenbildung Liechtenstein is a non-profit foundation focused on supporting adult education in Liechtenstein, notably through the Weiterbildungsgutschein program which provides financial aid for continuing education courses. The organization collaborates with government bodies and benefits from EU Erasmus+ co-financing, positioning itself as a key regional player in educational support. The website offers comprehensive information about the program, course offerings, and application procedures, targeting adults in Liechtenstein, especially those with limited financial resources. Technically, the website employs modern JavaScript libraries such as jQuery and Slick Slider, integrates a privacy-compliant consent management platform (Usercentrics), and uses self-hosted Matomo analytics to minimize privacy risks. The site is mobile-optimized with good SEO and accessibility basics, though some security headers are missing. HTTPS is enforced, ensuring secure communications. From a security perspective, the site demonstrates good practices with encrypted connections and privacy-focused analytics but lacks published security policies and incident response contacts. No vulnerabilities or suspicious activities were detected. Privacy compliance is strong with clear policies and consent mechanisms. Overall, the website is professional, trustworthy, and well-aligned with its educational mission. Strategic improvements in security headers and transparency around security policies would enhance its posture further.
pso vertriebsprogramme GmbHpso-vertrieb.de
Energy · Germany
52Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
pso vertriebsprogramme GmbH is a German-based company specializing in digital referral marketing and incentivization solutions, boasting over 20 years of experience and more than one million recommendations. The company targets businesses seeking to enhance customer acquisition and retention through innovative digital sales programs, including referral programs, sales partner solutions, and omnichannel sales strategies. Their market position is that of an established medium-sized B2B service provider with a strong reputation and a consistent brand presence. Technically, the website is built on WordPress using Elementor and Gravity Forms, optimized with WP Rocket for performance, and integrates Usercentrics for GDPR-compliant consent management. The use of Matomo analytics indicates a preference for privacy-conscious tracking. The site is mobile-optimized, fast-loading, and SEO-friendly, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS, employs anti-spam measures, and monitors CSP violations, indicating a good security posture. However, explicit security policies and incident response contacts are not published, representing an area for improvement. No vulnerabilities or exposed sensitive data were detected. Overall, the website is professional, trustworthy, and compliant with privacy regulations, making it a reliable digital presence for the company. Strategic recommendations include enhancing security transparency, publishing a vulnerability disclosure policy, and continuing to maintain GDPR compliance and technical modernization.
Other
73Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website www.canalplus.com is currently inaccessible due to a security or WAF mechanism that blocks content delivery, presenting an 'Access Denied' message with minimal page content. This prevents any meaningful extraction of business, contact, or policy information. The domain WHOIS data is unavailable or protected, further limiting trust and verification capabilities. The site uses a minimal technical setup with a custom font and localized messaging script but lacks visible analytics, tracking, or security headers. Overall, the digital maturity and security posture cannot be properly assessed due to access restrictions.
- Portes Ouvertes Suisse
portesouvertes.ch
Non-profit · Switzerland
71Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
Portes Ouvertes Suisse is a well-established Swiss non-profit organization dedicated to supporting persecuted Christians worldwide since 1955. The website serves as a comprehensive portal for information, prayer campaigns, donation facilitation, and awareness raising, primarily targeting French-speaking audiences. It maintains a strong market position within the non-profit sector focused on religious freedom and humanitarian aid. Technically, the site leverages modern frameworks such as Bootstrap and Microsoft PowerApps Portal, integrating multiple analytics and marketing tools including Google Tag Manager, Microsoft Clarity, and Facebook Pixel. The hosting and telemetry suggest a robust Microsoft Azure infrastructure. Security posture is solid with HTTPS enforcement, security headers, and consent management, though explicit security policies and incident response contacts are absent. Overall, the site demonstrates good digital maturity, professional design, and trustworthy content aligned with its mission.
- OpenSesame
opensesame.com
Technology · United States
75Medium
NIS2 55 · GDPR 73
NIS2 55 · GDPR 73
OpenSesame is a well-established online training platform founded in 2011, offering a vast catalog of expert-led courses aimed at helping businesses close skill gaps and develop their workforce. The company leverages AI-powered recommendations and curated content to deliver scalable learning solutions. Their market position is strong within the corporate training and e-learning sectors, supported by a professional website with rich multimedia and comprehensive resources. Technically, the site uses WordPress CMS with integrations including HubSpot, Wistia, and Google Tag Manager, reflecting a mature digital infrastructure. Security posture is solid with HTTPS, security headers, and secure forms, though public vulnerability disclosure and incident response information are lacking. Overall, the website is professional, trustworthy, and well-optimized for SEO and user experience, but WHOIS data is incomplete or protected, slightly reducing transparency.
- Tricept AG
tricept.de
Technology · Germany
60Medium
NIS2 10 · GDPR 48
NIS2 10 · GDPR 48
Tricept AG is a medium-sized German technology company specializing in IT consulting and software solutions primarily for the finance, education, and sports sectors. With over 25 years of experience, the company offers governance, risk, and compliance software (RIMAGO), IT consulting, digital solutions for schools (ONLINE GTS), and sports association management software (IT4SPORT). The website is professionally designed using TYPO3 CMS and incorporates privacy-respecting Matomo analytics. It features a cookie consent mechanism but lacks explicit privacy policy and terms of service pages. Contact information is primarily via a contact form, with no direct emails or phone numbers visible. The domain uses standard DNS services and HTTPS with good SSL configuration, but security headers are not detected. Overall, the website is well-structured, mobile-optimized, and trustworthy, though it could improve transparency on privacy and security policies.
willy.telwillytel.de
Telecommunications · Germany
59Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
willy.tel is a regional telecommunications company based in Hamburg, Germany, with a history dating back to 1960. The company operates its own independent fiber optic network serving over 160,000 households and businesses, offering internet, telephone, TV (IPTV), and mobile services. It targets private customers, business clients, and the housing industry, positioning itself as a regional leader with comprehensive service offerings and customer portals. Technically, the website is built on TYPO3 CMS with Bootstrap, providing a responsive and accessible user experience. Security posture is strong with HTTPS and security headers implemented, though there is room for improvement in cookie consent and explicit security policies. Overall, the website is professional, trustworthy, and compliant with GDPR, reflecting a mature digital presence.
- wilhelm.tel
wilhelm-tel.de
Telecommunications · Germany
73Medium
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
Wilhelm.tel is a regional telecommunications provider in Germany offering bundled services including fixed-line telephony, internet, and HD-TV. The website is professionally designed using TYPO3 CMS and incorporates modern privacy and cookie consent management through Cookiebot, ensuring GDPR compliance. The company targets private customers in its regional fiber optic network area, positioning itself as a comprehensive communication service provider. Technically, the site uses Matomo analytics with user consent, and the infrastructure appears stable and moderately performant with good mobile optimization. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. No contact information or terms of service pages were found, which could be enhanced for better business credibility and user trust. Overall, the website is safe, professional, and compliant with privacy regulations, reflecting a trustworthy telecommunications business.
SYNVIA mediasynvia.de
Telecommunications · Germany
53Medium
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
SYNVIA media operates as a German telecommunications provider offering bundled services including highspeed internet, telephone, and HDTV primarily via fiber optic technology. The website targets end customers in Germany seeking integrated telecommunications solutions. The business appears to be a small regional player with a clear focus on bundled digital communication services. Technically, the website is built on WordPress using modern plugins such as Elementor, Yoast SEO, and CleanTalk anti-spam, indicating a moderate level of digital maturity. Performance and mobile optimization are good, with proper SEO and accessibility features in place. Security posture is solid with HTTPS enforced and cookie consent mechanisms implemented via Cookiebot, although explicit security headers and incident response information are lacking. Overall, the website is professional and trustworthy, with no signs of blocking or WAF interference, and no adult or explicit content detected.