Medium-risk security reports
99,068 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,179001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
17,851–17,900 of 99,068
- Gemeinde Wila
wila.ch
Government · Switzerland
72Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
Gemeinde Wila operates as a local government entity providing administrative and community services to residents of Wila, Switzerland. The website serves as an information hub and service portal, offering access to online administrative functions, news, events, and official communications. The site targets local citizens and stakeholders seeking municipal information and services. Technically, the site is built on the Swiss eGovernment CMS GOViS, leveraging modern JavaScript libraries such as jQuery and Font Awesome for UI elements, and employs Matomo for privacy-conscious analytics tracking. The website demonstrates good mobile responsiveness, accessibility, and SEO practices, ensuring a positive user experience. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms compliant with GDPR, though it lacks explicit security policies or incident response disclosures. Overall, the site is trustworthy, professionally maintained, and aligned with the expectations for a municipal government portal.
Healthcare · Germany
57Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Else Kröner-Fresenius-Stiftung (EKFS) is a well-established German non-profit foundation founded in 1983, dedicated to funding medical research and supporting humanitarian projects. The website clearly communicates the foundation's mission, funding opportunities, and recent news, targeting medical researchers and humanitarian stakeholders. The organization maintains a professional online presence with comprehensive content and clear navigation, supporting its credibility and outreach efforts. Technically, the website is built on Drupal 10, leveraging modern web technologies including Matomo for privacy-conscious analytics and AddToAny for social sharing. The site is mobile-optimized, accessible, and performs moderately well. Hosting appears stable with consistent domain and DNS configurations. From a security perspective, the site enforces HTTPS, implements cookie consent mechanisms aligned with GDPR, and respects user privacy by disabling tracking cookies unless consented. No critical vulnerabilities or exposed sensitive data were detected. However, the site lacks explicit security policy documentation and incident response contacts, which are recommended for enhanced trust and compliance. Overall, EKFS demonstrates a strong digital maturity and trustworthy online presence suitable for its non-profit healthcare sector role. Strategic improvements in security transparency and formal policies would further strengthen its posture.
Haufe X360haufe-x360.ch
Technology · Switzerland
52Medium
NIS2 25 · GDPR 85
NIS2 25 · GDPR 85
Haufe X360 is a cloud-based ERP software platform designed specifically for small and medium-sized enterprises (KMU) primarily in Switzerland and the German-speaking DACH region. The company leverages strong technology partnerships with Acumatica and Microsoft Azure to deliver a scalable, modular ERP solution that integrates core business functions such as finance, CRM, production, and e-commerce. The website presents a professional and comprehensive overview of their offerings, targeting mid-market companies seeking digital transformation and process automation. Technically, the site is built on TYPO3 CMS, uses modern consent management via Usercentrics, and integrates Google Tag Manager for analytics. Hosting is implied to be on Microsoft Azure, ensuring robust cloud infrastructure. Security posture is strong, supported by ISO 27001 certification and encrypted data storage in German data centers. However, the site lacks a publicly accessible privacy policy and explicit incident response or vulnerability disclosure information, which are areas for improvement. Overall, the website is well-designed, content-rich, and trustworthy, with no signs of blocking or WAF interference.
Popershowpopup.com
Technology · India
75Medium
NIS2 47 · GDPR 83
NIS2 47 · GDPR 83
Poper is a technology company offering an AI-powered onsite engagement platform that enhances user interactions, retention, and conversion rates through smart popups, widgets, notifications, and gamification tools. The company targets website owners, e-commerce stores, and marketers seeking to improve engagement and sales. Their market position is supported by serving over 2000 brands and providing a comprehensive suite of AI-driven marketing tools. Technically, the website is built on modern frameworks such as Next.js and React, with good SEO, mobile optimization, and performance. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although no explicit security policy or incident response contacts are published. Overall, the website is professional, trustworthy, and well-structured, with privacy and cookie policies in place. WHOIS data is privacy protected, which is justified for this SaaS business, but limits registrant transparency.
- Francesco Diani
bibbia.net
Other · Italy
58Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
The website www.lachiesa.it/bibbia/ is a niche religious platform offering the Italian Bible in three versions with synoptic comparison and search capabilities. It targets Italian-speaking Christian audiences seeking easy and free access to biblical texts and audio files. The business is small-scale and informational, managed by an individual named Francesco Diani. Technically, the site uses basic HTML, CSS, and JavaScript with integrations for Google Tag Manager and Iubenda cookie consent. The design and user experience are functional but basic, with moderate performance and limited mobile optimization. Security posture is adequate with HTTPS and cookie consent but lacks advanced security headers and incident response information. Privacy compliance is partial due to the absence of a privacy policy and terms of service pages. Overall, the domain registration data is consistent and trustworthy, supporting the legitimacy of the site.
- Francesco Diani
santiebeati.it
Other · Italy
61Medium
NIS2 17 · GDPR 28
NIS2 17 · GDPR 28
The website santiebeati.it is an Italian-language religious encyclopedia dedicated to saints, blessed individuals, and witnesses of faith. It offers extensive biographical content, images, and indexes for over 14,500 entries, targeting users interested in Catholic hagiography and religious studies. The site is operated by Francesco Diani and includes newsletter subscription and advertising as key components of its business model. Technically, the site uses standard web technologies including Google Analytics, Google Tag Manager, and Ezoic for advertising and consent management. While the site is accessible and functional, it lacks advanced security headers and formalized security or incident response policies. Privacy compliance is basic, with a privacy policy hosted externally and cookie consent managed via Gatekeeper Consent and Ezoic scripts. Overall, the site is a niche informational resource with moderate technical maturity and basic security posture.
- Jungwacht Blauring Schweiz
jubla.ch
Non-profit · Switzerland
58Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Jungwacht Blauring Schweiz is a well-established non-profit youth organization focused on providing meaningful leisure activities and camps for children and adolescents in the German-speaking part of Switzerland. The organization operates through a large network of approximately 400 local groups, offering structured programs and volunteer opportunities. The website reflects a professional and consistent brand image, targeting families and youth participants. Technically, the site leverages modern web technologies including Google Tag Manager, Hotjar, and Google Maps API, built on the TYPO3 Neos CMS framework. The site is mobile-optimized with good SEO and accessibility basics. Security posture is solid with HTTPS and some security best practices, though explicit security headers and policies are not fully implemented. Privacy compliance is limited due to the absence of visible privacy and cookie policies. Overall, the domain registration aligns well with the organization's claims, supporting legitimacy and trustworthiness.
Baufragen Software GmbHbaufragen-software.com
Technology · Germany
54Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Baufragen Software GmbH is a specialized software provider focused on the construction industry, offering platforms such as Baufragen.de and Bauspot.de that serve as expert knowledge bases and social media platforms for construction professionals. The company targets a broad audience including architects, planners, craftsmen, real estate professionals, and building authorities, positioning itself as a key player in digital transformation within the construction sector. Founded in 2016 and based in Germany, the company maintains a professional online presence with over 270,000 users engaged in its digital community. Technically, the website employs modern web technologies including jQuery, Cookiebot for GDPR-compliant cookie consent, and Google Tag Manager for analytics and marketing. The site is hosted by Cronon GmbH and uses HTTPS, ensuring secure communications. While the site demonstrates good mobile optimization and SEO practices, there is room for improvement in accessibility and security headers implementation. From a security perspective, the site benefits from HTTPS and a robust cookie consent mechanism but lacks visible security policies or incident response information. No critical vulnerabilities or suspicious activities were detected. The WHOIS data aligns well with the business claims, indicating a legitimate and consistent domain registration. Overall, Baufragen Software GmbH presents a trustworthy and professional digital footprint with good compliance to privacy regulations and a solid technical foundation. Strategic improvements in security headers, incident response transparency, and contact information visibility could further enhance trust and security posture.
Baufragen Software GmbHbaufragen.de
Real Estate · Germany
60Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
Baufragen Software GmbH operates a specialized online platform, Baufragen.de, offering free expert consultation in the construction sector via chat. The platform connects users such as architects, planners, craftsmen, and housing companies with over 200 experts across more than 40 competence areas. This unique service aims to streamline research and planning processes in construction projects by providing direct access to product and planning advice online. The company positions itself as an independent, transparent, and cost-free service provider within the German construction industry. Technically, the website employs modern web technologies including JavaScript and Vue.js frameworks, with responsive design optimized for mobile devices. The hosting is managed via rzone.de nameservers, indicating a professional hosting environment. SEO and accessibility are adequately addressed, though some improvements could be made in accessibility features and performance optimization. From a security perspective, the site uses HTTPS and includes CSRF tokens, but lacks visible security headers and explicit cookie consent mechanisms. No direct contact information or security policies are prominently displayed, which could be improved to enhance trust and compliance. WHOIS data aligns well with the business identity, supporting legitimacy. Overall, Baufragen.de presents a professional and trustworthy platform with good content quality and business credibility. However, enhancements in privacy compliance, security headers, and contact transparency would strengthen its security posture and user trust.
Media
65Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
TVGuide.asia is a specialized online media platform offering detailed TV guide and scheduling information primarily for the Australia ACT, Canberra region, with multi-genre and multi-language support. The website targets TV viewers seeking comprehensive and up-to-date channel listings and program schedules. The business model appears to be advertising-supported, leveraging Google Adsense and other ad networks to monetize traffic. The platform also maintains partnerships with related TV guide services such as tvepg.eu and americatvguide.com. Technically, the website employs modern web technologies including Google Fonts, FontAwesome, Google Tag Manager, and Facebook SDK, hosted behind Cloudflare DNS services. The site is mobile-optimized with good navigation and content relevance, though accessibility features are basic. Security posture is adequate with HTTPS enforced and domain transfer protection enabled, but lacks advanced security headers and DNSSEC. Privacy compliance is partial, with a cookie consent mechanism present but no explicit privacy or terms of service pages detected. Overall, the website is functional and professional but could improve in security and compliance documentation.
AmericaTVGuide.comamericatvguide.com
Media · United States
53Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
AmericaTVGuide.com is a niche media website providing comprehensive TV guide and schedule listings primarily for the United States, with multi-language and multi-country support. The site aggregates channel and program data from various partners and sources, offering users detailed listings across genres such as movies, sports, music, and documentary. The business model appears to be content aggregation monetized through advertising. Technically, the site uses modern web technologies including FontAwesome, Google Fonts, Google Adsense, and Facebook SDK, hosted behind Cloudflare DNS and CDN services. The website is mobile-optimized and offers a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enabled and domain locks in place, but lacks DNSSEC and security headers, and does not provide privacy or cookie policies, which are compliance gaps. Overall, the domain registration is consistent and legitimate, supporting the business claims. The site is safe for general audiences with no adult or questionable content detected.
Alexis Regnaudalexisregnaud.com
Technology · France
64Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Alexis Regnaud is a freelance web and mobile developer with over 10 years of experience, including 5 years at Samsung. The website showcases his expertise in creating custom web and mobile interfaces using modern technologies such as React, Next.js, and React Native. The business model is focused on freelance services with collaboration from trusted partners, targeting clients seeking high-quality digital solutions. Technically, the site is built on a modern stack with excellent performance and mobile optimization. Security posture is good with HTTPS and reCAPTCHA integration, though it lacks some security headers and formal privacy policies. The absence of WHOIS registration data is a concern for domain legitimacy but does not detract from the professional presentation of the site. Overall, the site is trustworthy and professional but would benefit from enhanced compliance and security documentation.
Vigicorpvigicorp.fr
Technology · France
59Medium
NIS2 17 · GDPR 28
NIS2 17 · GDPR 28
Vigicorp is a Nantes-based digital agency specializing in bespoke web development and comprehensive digital transformation services. The company positions itself as an expert in creating and optimizing e-commerce platforms (B2B and B2C), custom business applications, and marketing solutions. Their client portfolio and detailed service offerings indicate a strong market presence in the technology sector, targeting businesses seeking to enhance their digital capabilities. Technically, the website leverages modern CMS platforms such as WordPress, Symfony, Drupal, Prestashop, and Shopify, reflecting a mature and versatile technology stack. The site is well-optimized for performance, mobile responsiveness, and SEO, supported by structured data and comprehensive metadata. Analytics and marketing tools like Matomo and Google Analytics are used with appropriate consent mechanisms, demonstrating digital maturity and privacy awareness. From a security perspective, the site enforces HTTPS, employs security headers, and integrates cookie consent management, indicating a solid security posture. However, explicit security policies and incident response contacts are not found, suggesting areas for improvement. The absence of WHOIS data due to privacy protection is typical for professional agencies and does not detract from the site's legitimacy. Overall, Vigicorp's website reflects a professional, trustworthy, and secure digital presence suitable for its business model. Strategic recommendations include publishing a dedicated security policy, incident response information, and a vulnerability disclosure policy to further enhance trust and compliance.
Intimate Private Equity Events in Europe0100conferences.com
Finance
68Medium
NIS2 55 · GDPR 68
NIS2 55 · GDPR 68
Zero One Hundred Conferences operates as a niche event organizer specializing in intimate private equity networking events across Europe. The website positions itself as a premier platform for private market professionals seeking exclusive conference experiences. The business model centers on event facilitation and networking services tailored to private equity stakeholders. Technically, the website employs modern web technologies including Vue.js/Nuxt.js frameworks, and integrates multiple third-party analytics and marketing tools such as Google Analytics, HubSpot, Facebook Pixel, and LinkedIn Insight Tag. Hosting is via Amazon CloudFront CDN, supporting moderate performance and good mobile optimization. Security posture is moderate with HTTPS likely enabled but lacking visible security headers and formal privacy or cookie policies, which are critical for compliance and trust. The absence of WHOIS registration data raises concerns about domain legitimacy and registration status, impacting overall trustworthiness. No contact emails or phone numbers are explicitly provided, limiting direct communication channels. Overall, the site is professional and content-rich but requires improvements in security, compliance, and transparency to enhance credibility and risk posture.
100% SPORT100prozent-sport.at
Non-profit · Austria
59Medium
NIS2 17 · GDPR 33
NIS2 17 · GDPR 33
100% SPORT is an Austrian non-profit organization dedicated to promoting gender competence and safe sport within the Austrian sports community. Established by the Austrian Ministry of Sport as an autonomous association, it serves as a national center for advancing gender equality and safe sport agendas. The organization offers training, advisory services, and networking opportunities to sports organizations, athletes, and stakeholders. The website reflects a professional and consistent brand presence, supported by government and partner logos, and targets sports organizations and individuals interested in gender and safety issues in sports.
- NNaturfreunde Österreich
naturfreunde.at
Non-profit · Austria
59Medium
NIS2 17 · GDPR 33
NIS2 17 · GDPR 33
Naturfreunde Österreich is a well-established non-profit organization dedicated to promoting nature, environmental protection, and outdoor activities across Austria. The website serves as a comprehensive portal for members and the public, offering information on memberships, events, educational courses, insurance, and merchandise. The organization maintains a strong regional presence with multiple subsidiary domains representing Austrian states. Technically, the website is built on the SilverStripe CMS and employs modern JavaScript libraries such as AngularJS and jQuery, ensuring a responsive and user-friendly experience. Security measures include HTTPS enforcement and standard security headers, contributing to a solid security posture. Privacy and cookie policies are present with consent mechanisms, reflecting GDPR compliance. However, explicit incident response and vulnerability disclosure information are not publicly available, which could be improved. Overall, the website is professional, trustworthy, and well-aligned with the organization's mission.
Action paquets de Noëlpaquetsdenoel.ch
Non-profit · Switzerland
55Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website www.paquetsdenoel.ch represents a Swiss non-profit initiative called 'Action paquets de Noël' focused on collecting and distributing Christmas gift packages to needy populations in Eastern and Southeastern Europe. It is a collaborative project involving four established charitable organizations, providing a strong trust foundation and community engagement. The site offers information on participation, collection points, sponsorship, and related events, targeting individuals and groups interested in charitable giving and solidarity. Technically, the website is built on WordPress with modern plugins like Yoast SEO and Divi Builder, ensuring good SEO and mobile responsiveness. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers and policies could be improved. Privacy compliance is basic, lacking cookie consent mechanisms and detailed GDPR indicators. Overall, the site is professional, trustworthy, and well-positioned within its charitable niche.
Licht im Osten Schweizlio.ch
Non-profit · Switzerland
73Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Licht im Osten Schweiz is a well-established non-profit organization founded in 1920, dedicated to providing humanitarian aid and missionary support in Eastern Europe and Central Asia. The organization focuses on alleviating material, medical, and spiritual needs through various projects including child sponsorship, aid distribution, and community development. Their market position is strong within the charitable sector, supported by a consistent brand and clear communication of their mission and services. Technically, the website is built on the Webflow platform, utilizing modern web technologies such as jQuery, Google Tag Manager, and Adobe Typekit fonts. The site is well-optimized for performance, mobile responsiveness, and accessibility, reflecting a mature digital infrastructure suitable for their audience. From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA to protect forms, but lacks some advanced security headers and explicit security policies. Privacy compliance is partially addressed with a comprehensive GDPR privacy policy, though cookie consent mechanisms are absent despite the use of tracking scripts. No incident response or vulnerability disclosure policies are evident. Overall, the website presents a low-risk profile with high trustworthiness and professionalism. Strategic improvements in security headers, cookie consent, and transparency policies would enhance their security posture and compliance standing.
- Christliche Ostmission
ostmission.ch
Non-profit · Switzerland
71Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Christliche Ostmission is a Swiss-based non-profit organization dedicated to combating human trafficking, promoting education and business development, and providing direct aid in emergency situations primarily in Eastern Europe. The organization has a strong market position supported by over 50 years of history and recognized certifications such as the Ehrenkodex SEA. Their website reflects a professional and trustworthy presence with clear calls to action for donations and volunteer engagement. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and includes a consent management platform for GDPR compliance. Security posture is solid with HTTPS and privacy-conscious analytics, though there is room for improvement in security headers and incident response transparency. Overall, the website is well-structured, accessible, and compliant with privacy regulations, supporting the organization's credibility and donor confidence.
- AVC Schweiz
avc-ch.org
Non-profit · Switzerland
59Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
AVC Schweiz is an established international non-profit organization founded in 2009, dedicated to supporting persecuted Christians and people in need worldwide. The organization operates in over sixty countries and engages local partners to deliver humanitarian aid, advocacy, and community support. Their website reflects a professional and consistent brand presence, offering multilingual content, event information, donation options, and volunteer opportunities. Technically, the site is built on Joomla CMS with modern frameworks like Bootstrap and integrates Matomo for analytics, ensuring a moderate to good performance and mobile optimization. Security posture is adequate with HTTPS enforced and CSRF protections in forms, but lacks advanced security headers and DNSSEC. Privacy compliance is basic with privacy and cookie policies present but no active consent mechanism. Overall, AVC Schweiz demonstrates a credible and trustworthy online presence aligned with its mission.
- Sport Austria
sportaustria.at
Government · Austria
74Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Sport Austria is a prominent non-profit interest representation and service organization dedicated to organized sports in Austria. The website serves as a central hub for information, services, and communication targeted at sports organizations and stakeholders within Austria. It offers extensive resources including news, training, event information, and policy advocacy, positioning itself as a key player in the Austrian sports ecosystem. Technically, the website is built on the TYPO3 CMS platform, leveraging modern web technologies and Google Tag Manager for analytics. The site demonstrates good mobile optimization, accessibility basics, and SEO practices, providing a user-friendly experience. Privacy compliance is well addressed with a comprehensive cookie consent mechanism and detailed privacy policy. From a security perspective, the site enforces HTTPS and employs cookie consent but lacks explicit published security policies or incident response contacts. No critical vulnerabilities or suspicious content were detected. The WHOIS data aligns well with the website's claims, indicating a trustworthy and legitimate domain. Overall, the website presents a professional and secure digital presence suitable for its audience, with recommendations to enhance security transparency and incident response readiness to further strengthen trust and compliance.
Club Aktiv Gesundclubaktivgesund.at
Healthcare · Austria
59Medium
NIS2 17 · GDPR 48
NIS2 17 · GDPR 48
Club Aktiv Gesund is a small regional health and fitness service provider based in Salzburg, Austria. The organization focuses on promoting health and movement for all, offering state-certified health-promoting exercise programs, tests, and lectures on sports nutrition. The website is built on the Wix platform, leveraging standard Wix technologies and polyfills to ensure compatibility and moderate performance. The content is primarily in German and targets a general audience interested in health and fitness in the Salzburg region. The business model centers on service provision in the healthcare and wellness sector with a local market focus. Technically, the website is moderately optimized for mobile devices and has basic SEO features but lacks advanced accessibility and comprehensive privacy compliance mechanisms. Security posture is good with HTTPS enforced and some security hardening scripts, but explicit security headers and incident response information are missing. Overall, the domain registration data aligns well with the business claims, supporting legitimacy. However, the absence of privacy and cookie policies, limited contact information, and lack of terms of service reduce privacy compliance and user trust. Strategic improvements in these areas would enhance the website's security and compliance profile.
Venuzlevenuzle.at
Other · Austria
53Medium
NIS2 2 · GDPR 33
NIS2 2 · GDPR 33
Venuzle is an Austrian-based online platform specializing in the discovery and booking of sports venues, courses, and camps. It serves sports enthusiasts and local communities by providing a comprehensive directory and booking system for various sports facilities such as football fields, tennis courts, gyms, and specialized courses. The platform is supported by local government and regional partners, enhancing its credibility and reach within Austria. Technically, the website is built on WordPress with WooCommerce and WP Job Manager plugins, integrating Google Analytics and Facebook Pixel for marketing and analytics purposes. While the site is well-structured and offers a good user experience with mobile optimization, it uses outdated WordPress and WooCommerce versions, which may pose security risks. Security posture is moderate with HTTPS enforced but lacking some modern security headers and cookie consent mechanisms. Overall, the website is trustworthy, professionally maintained, and compliant with GDPR, but would benefit from technical updates and enhanced security practices.
WAT - Wiener Arbeiter Turn- und Sportverbandwienlaeuft.at
Non-profit · Austria
51Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
Wienläuft is a community-focused running and sports initiative operated by the Wiener Arbeiter Turn- und Sportverband (WAT) in Vienna, Austria. The organization provides running events, training sessions, and community sports activities targeting local sports enthusiasts and runners. The website serves as an information hub for upcoming events, news, and partner collaborations, positioning Wienläuft as a key local non-profit sports organizer in Vienna. Technically, the website is built on the Internetkonzepte.at CMS platform and utilizes common web technologies such as jQuery, Font Awesome, and Google Fonts. It features responsive design elements and moderate performance, with basic SEO and accessibility implementations. The site integrates social media plugins and cookie consent mechanisms, reflecting a moderate level of digital maturity. From a security perspective, the website enforces HTTPS and avoids exposing sensitive data. However, it lacks advanced security headers and a formal security policy or vulnerability disclosure mechanism. Privacy compliance is addressed through a GDPR-compliant privacy policy and cookie consent banner. Contact information is clearly provided, enhancing business credibility. Overall, Wienläuft presents a trustworthy and professional online presence suitable for its community sports mission. Strategic improvements in security headers, accessibility, and formal security policies would further strengthen its posture and compliance.

Other · Austria
66Medium
NIS2 10 · GDPR 55
NIS2 10 · GDPR 55
ASKÖ Tirol is a regional sports organization in Austria offering a wide range of sports courses, workshops, and health promotion services targeted at individuals and companies in Tirol. Their website demonstrates a mature digital presence with comprehensive content, clear navigation, and professional design. The technical infrastructure leverages modern web technologies including Alpine.js, Tailwind CSS, and Matomo analytics, hosted by a local provider with good performance and mobile optimization. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is strong with a detailed GDPR-compliant privacy policy and terms of service. Overall, the website reflects a trustworthy and credible organization with transparent contact information and legal disclosures.
ASKÖ Tirolaskoe-vereine.at
Other · Austria
66Medium
NIS2 2 · GDPR 43
NIS2 2 · GDPR 43
ASKÖ Tirol operates a Vereinsdatenbank platform targeted at clubs and existing customers in the Tirol region of Austria. The website provides login and registration functionality for club data management. The business is positioned as a regional service provider supporting sports and club organizations. Technically, the site uses modern frontend technologies including Laravel Livewire, Alpine.js, and Tailwind CSS, delivering a responsive and user-friendly experience. Security posture is solid with HTTPS and CSRF protections, though security headers are not evident and could be improved. Privacy compliance is strong with clear cookie consent and GDPR-aligned policies. Overall, the website is professional, trustworthy, and well-suited for its audience, though WHOIS data unavailability limits full domain trust verification.
- Sportzentrum Niederösterreich
sportzentrum-noe.at
Hospitality · Austria
72Medium
NIS2 2 · GDPR 85
NIS2 2 · GDPR 85
Sportzentrum Niederösterreich operates as a regional sports center in Austria, providing sports facilities and services primarily to athletes and sports enthusiasts within Niederösterreich. The website is built on WordPress and employs standard plugins such as Contact Form 7 and Complianz GDPR for cookie consent management. The site demonstrates a moderate level of digital maturity with good design quality, mobile optimization, and basic SEO practices. Security measures include HTTPS enforcement and Google reCAPTCHA integration, but lack explicit security policies and comprehensive contact details for incident response. Overall, the domain registration data aligns well with the website's regional focus, indicating legitimacy and trustworthiness.
ARBÖarboe.at
Transportation · Austria
59Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
ARBÖ is a well-established Austrian automobile club providing roadside assistance, vehicle inspections, legal advice, and various automotive-related services. The website targets vehicle owners and drivers in Austria, offering membership benefits and technical services. The digital infrastructure is built on TYPO3 CMS with modern frontend technologies including Bootstrap and jQuery, and integrates Google Tag Manager for analytics and marketing. The site is mobile optimized and presents a professional user experience with clear navigation and relevant content. Security posture is good with HTTPS enforced and a comprehensive cookie consent mechanism, though it lacks explicit security policies and incident response contacts. WHOIS data confirms the legitimacy and consistency of the domain registration with the business claims. Overall, the website is trustworthy and professionally maintained, suitable for its audience and business model.
Internetkonzepte.at GmbHinternetkonzepte.at
Technology · Austria
53Medium
NIS2 17 · GDPR 28
NIS2 17 · GDPR 28
Internetkonzepte.at GmbH is a small Austrian technology company specializing in custom web and software development, content management systems, hosting, and related IT services. With over 20 years of experience and numerous client references, the company holds a solid market position in the Austrian and German-speaking business sectors. Their website reflects a professional and consistent brand image, targeting businesses seeking tailored internet solutions. The company emphasizes security and support, with a 24/7 support offering and a strong partnership with their hosting provider myNET.at. Technically, the website employs a modern tech stack including jQuery, Font Awesome, and Matomo analytics, running on a proprietary CMS developed by the company. The site is mobile-optimized, accessible, and SEO-friendly, though performance is moderate. Security posture is strong with HTTPS and no visible vulnerabilities, but lacks some advanced security headers and formal policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the security posture is good, with no detected vulnerabilities or blocking mechanisms. The WHOIS data confirms the legitimacy and consistency of the business registration. Strategic improvements include implementing cookie consent, publishing security and incident response policies, and adding security headers to enhance protection and compliance.
OstWestfalenLippe GmbHostwestfalen-lippe.de
Government · Germany
63Medium
NIS2 17 · GDPR 28
NIS2 17 · GDPR 28
OstWestfalenLippe GmbH is a regional development agency focused on promoting the OstWestfalenLippe region in North Rhine-Westphalia, Germany. The organization supports sustainable transformation, economic growth, education, and cultural initiatives, positioning itself as a key regional stakeholder. The website reflects a mature digital presence built on TYPO3 CMS, with modern design and good mobile optimization. Security posture is solid with HTTPS and spam-protected emails, though some advanced security headers and cookie consent mechanisms are missing. Overall, the site is professional, trustworthy, and well-aligned with the organization's mission.
Other
65Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
The website wp-content.com is currently a parked domain primarily used for domain resale purposes. It displays a prominent domain sale banner linking to Afternic, a known domain marketplace. There is no active business content, no privacy or cookie policies, and no contact information provided. The technical infrastructure relies on basic HTML, CSS, JavaScript, and third-party ad/tracking scripts served via Cloudfront CDN. The site embeds an iframe from an unrelated domain, which may pose security risks. Security posture is weak with no visible HTTPS enforcement or security headers. Overall, the site lacks professionalism, trust indicators, and compliance with privacy regulations. The domain is privacy protected in WHOIS, consistent with domain resale practices but limiting transparency.
Kloster Einsiedelnkloster-einsiedeln.ch
Non-profit · Switzerland
58Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Kloster Einsiedeln is a historic Benedictine abbey and the most significant pilgrimage site in Switzerland, hosting around fifty monks. The website serves as a comprehensive portal for religious services, cultural events, educational activities, and visitor information. It targets pilgrims, religious followers, and cultural visitors, offering live-streamed services, an online shop, and detailed information about the abbey's history and community. Technically, the site is built on TYPO3 CMS with modern web technologies, providing good mobile optimization and accessibility. Security posture is solid with HTTPS enforced, but lacks some security headers and cookie consent mechanisms. The domain registration aligns well with the abbey's identity, indicating high legitimacy. Overall, the website is professional, trustworthy, and well-suited for its audience.
Other
52Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website fcc.report is currently inaccessible due to a Cloudflare Turnstile CAPTCHA security challenge that blocks direct content access. This challenge page prevents extraction of meaningful business, contact, or policy information. The site appears to be protected by Cloudflare's security infrastructure, indicating a focus on mitigating automated threats. However, due to the lack of accessible content, no detailed business description, services, or market positioning can be determined. The technical infrastructure is limited to Cloudflare's security scripts and basic HTML/CSS, with no visible CMS or advanced frameworks. Security posture cannot be fully assessed beyond the presence of Cloudflare protection. Overall, the site is safe with no adult or explicit content detected, but the inability to access real content severely limits analysis and trust evaluation.
- E
Other
65Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website www.justia.com is currently inaccessible due to a 403 error generated by Amazon CloudFront, indicating that requests are blocked by a Web Application Firewall or configuration error. As a result, no actual website content, metadata, or business information could be retrieved or analyzed. The lack of accessible content prevents assessment of the company's services, technical infrastructure, or security posture. Without access, no evaluation of privacy policies, contact information, or compliance can be made. This blockage severely limits the ability to perform a comprehensive security and compliance analysis.
- AAccess to this page has been denied
datanyze.com
Other
65Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website www.datanyze.com is currently inaccessible due to a PerimeterX security challenge page blocking access. This indicates the presence of a Web Application Firewall (WAF) or bot mitigation system preventing automated or suspicious traffic from viewing the actual website content. As a result, no direct information about the company's business, services, or policies can be extracted from the page. The only visible element is a security captcha script and a logo image URL. Without access to the real content, a comprehensive analysis of business operations, technical infrastructure, or security posture is not possible. From the technical perspective, the site employs PerimeterX for bot protection, which is a recognized security technology. However, no further details on hosting, CMS, or frameworks can be determined. The lack of visible metadata, forms, or contact information limits the ability to assess privacy compliance or user experience. Security-wise, the presence of a WAF is a positive indicator of proactive defense, but the inability to access the site content prevents evaluation of security headers, SSL configuration, or vulnerability exposure. No privacy policies, cookie banners, or terms of service are detectable, which may be present on the actual site but are inaccessible due to the block. Overall, the site is currently rated low in accessibility and content quality due to the block. For a full security and compliance assessment, access to the unblocked site content is necessary. Strategic recommendations include ensuring that legitimate users can access the site without undue friction and providing clear privacy and security documentation once accessible.
미디어펜mediapen.com
Media · South Korea
60Medium
NIS2 17 · GDPR 70
NIS2 17 · GDPR 70
미디어펜 is a Korean news media company providing comprehensive news coverage across multiple sectors including economy, industry, politics, global affairs, entertainment, sports, and real estate. The website is well-structured with a professional design and consistent branding, targeting a general Korean-speaking audience interested in current affairs. The business model is primarily advertising-driven, supported by partnerships and sponsored content. The company appears to be medium-sized with a founding date around 2008, operating from a physical office in Seoul, South Korea. Technically, the website employs modern web technologies such as Google Tag Manager, Swiper.js for UI components, and Google Publisher Tags for advertising. The site uses HTTPS and includes a consent management platform for cookie and privacy compliance, although mobile optimization and accessibility are basic. The site loads multiple external resources from trusted domains, indicating a mature digital infrastructure. From a security perspective, the site uses HTTPS but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the content. Privacy compliance is basic with visible cookie consent mechanisms and a privacy policy page, but GDPR compliance is uncertain. The absence of WHOIS registration data is a notable concern, reducing the domain's trustworthiness despite the professional appearance of the website. Overall, the site is a credible and professional news media platform with moderate technical maturity and basic privacy compliance. The main risk lies in the missing WHOIS data, which should be investigated further to confirm domain legitimacy and ownership. Strategic improvements in security headers, mobile optimization, and transparency around security policies would enhance trust and compliance.
(주)비즈니스포스트businesspost.co.kr
Media · South Korea
63Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
비즈니스포스트 is a well-established Korean economic media company founded in 2013, providing business news, corporate profiles, and economic insights primarily targeting Korean-speaking business professionals and investors. The website is professionally designed with a consistent brand presence and offers a broad range of content including articles, interviews, and forums. Technically, the site uses modern web technologies such as jQuery, Google Tag Manager, and Microsoft Clarity for analytics and user tracking, hosted likely on AWS infrastructure. The site is accessible, moderately performant, and has basic mobile optimization. Security posture is adequate with HTTPS enforced but lacks some security headers and cookie consent mechanisms, indicating room for improvement in compliance and security best practices. WHOIS data is transparent and consistent with the business identity, supporting high legitimacy and trustworthiness.
Scottish Funding Councilsfc.ac.uk
Education · United Kingdom
73Medium
NIS2 2 · GDPR 80
NIS2 2 · GDPR 80
The Scottish Funding Council (SFC) is Scotland’s national authority responsible for funding and overseeing tertiary education and research. The organization supports colleges and universities across Scotland to sustain a world-leading education and research system that benefits students and society. The website reflects a mature, government-backed entity with a clear mission and comprehensive service offerings including funding, assurance, skills development, and research innovation. The target audience includes educational institutions, students, researchers, and policy makers within Scotland. Technically, the website is built on WordPress with modern plugins and SEO optimizations, delivering a responsive and accessible user experience. Security posture is strong with HTTPS, cookie consent mechanisms, and no visible vulnerabilities, although explicit security headers could be enhanced. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with GDPR and UK regulations.
Government · Austria
72Medium
NIS2 17 · GDPR 28
NIS2 17 · GDPR 28
The Allgemeine Unfallversicherungsanstalt (AUVA) is a key Austrian government institution providing accident insurance, prevention, treatment, rehabilitation, and financial compensation services. The website serves as the official portal for AUVA, targeting Austrian residents and workers who require accident-related social insurance services. The site is professionally designed, primarily in German, and uses modern web technologies including Vue.js and the Umbraco CMS platform. It demonstrates good digital maturity with mobile optimization, accessibility features, and SEO best practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms implemented, though explicit security policies and incident response contacts are not found in the provided content. WHOIS data confirms the domain's legitimacy and consistency with the institution's government affiliation. Overall, the website is trustworthy and serves its public service function effectively.
- DDeutscher Verkehrssicherheitsrat
sicher-in-meiner-region.de
Transportation · Germany
56Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
The website 'Sicher in meiner Region - Regio Protect UVT' is operated by the Deutscher Verkehrssicherheitsrat and focuses on providing regional traffic safety information and educational content about accident hotspots in Germany. It targets young drivers and the general public interested in traffic safety, offering interactive maps and videos for self-learning. The platform is positioned as a niche educational resource supported by reputable German traffic safety organizations. Technically, the site uses standard web technologies including HTML5, CSS3, JavaScript, SVG for interactive maps, and Matomo for privacy-conscious analytics. The site is mobile optimized and provides a clear navigation structure, although accessibility features are basic. Performance is moderate with no major technical issues detected. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms aligned with GDPR. However, it lacks explicit security headers and formal security or incident response policies. No vulnerabilities or exposed sensitive data were found. The absence of a terms of service and vulnerability disclosure policy are areas for improvement. Overall, the website is trustworthy, professional, and compliant with privacy regulations, serving its educational mission effectively. Strategic recommendations include enhancing security headers, publishing security policies, improving accessibility, and adding terms of service to strengthen compliance and user trust.
Education · United Kingdom
74Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
STEP (Scotland’s Tertiary Enhancement Programme) is a nationally recognized programme designed to enhance the quality of tertiary education across Scotland by fostering collaboration between colleges and universities. Managed jointly by The Quality Assurance Agency for Higher Education (QAA) and the College Development Network (CDN), STEP operates on a four-year cycle focusing on discovery, implementation, and reflection phases to improve learning, teaching, and staff development. The programme is well-positioned within the Scottish educational landscape, supported by key partners including the Scottish Funding Council.
The Quality Assurance Agency for Higher Educationenhancementthemes.ac.uk
Education · United Kingdom
73Medium
NIS2 25 · GDPR 68
NIS2 25 · GDPR 68
Enhancement Themes is a well-established educational program managed by The Quality Assurance Agency for Higher Education in Scotland, focusing on collaborative quality enhancement in higher education from 2003 to 2023. The website serves as an information hub for staff, students, and stakeholders, providing news, events, and resources related to educational improvement. The organization holds recognized certifications such as ISO 27001 and Cyber Essentials, reinforcing its commitment to security and quality standards. Technically, the site is built on the Sitefinity CMS platform, leveraging modern JavaScript libraries and Google Analytics for user insights. The design is professional, accessible, and mobile-optimized, ensuring a positive user experience. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. Privacy compliance is robust with clear policies and cookie consent mechanisms. Overall, the website reflects a credible, trustworthy educational entity with a strong market position in the Scottish higher education sector.
- 아아이아크 iarc
iarc.net
Other
60Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website at iarc.net is minimalistic and currently displays a message indicating the site is private, with no publicly accessible content or business information. The domain is well-aged, registered since 2002, and hosted on the Cargo Collective platform, which suggests a small or personal project rather than a commercial enterprise. The technical infrastructure is basic, relying on jQuery 2.1.3 and Foundation CSS framework, with no advanced SEO or accessibility features detected. Security posture is weak due to lack of HTTPS confirmation, absence of security headers, and no DNSSEC enabled. There are no visible privacy, cookie, or terms of service policies, nor any contact or incident response information, which limits trust and compliance assessment. Overall, the site appears inactive or private with limited business or security maturity.
- 한한미글로벌 (HanmiGlobal)
kimjonghoon.com
Energy · South Korea
57Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
KimJongHoon.com is the official website of Kim Jong-hoon, Chairman of HanmiGlobal, a leading Korean construction project management company with a strong focus on nuclear power and global expansion. The website serves as a platform to share management stories, speeches, contributions, and corporate news, targeting Korean-speaking professionals and stakeholders in the construction and energy sectors. The business model centers on providing project management and consulting services with a growing international presence. The site reflects a mature and established business with a domain age since 2004 and multiple subsidiary and partner companies linked.
baoo Technologies GmbHyourhomie.ai
Retail · Germany
67Medium
NIS2 17 · GDPR 65
NIS2 17 · GDPR 65
homie AI, operated by baoo Technologies GmbH, is a modern SaaS platform providing AI-powered chat assistants designed to enhance customer communication and sales conversion for online retailers and enterprises. The platform emphasizes quick integration, GDPR compliance, and enterprise readiness, positioning itself as a trusted solution for European retail businesses. The website content is professional and well-structured, targeting online shops seeking AI-driven customer support and upselling capabilities. Technically, the website is built on Webflow CMS with integrations including Google Fonts and Google Tag Manager for analytics. The site is mobile-optimized and performs moderately well, though accessibility features are basic. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers, which are recommended for enhanced protection. From a security and compliance perspective, the site claims GDPR compliance and hosts data within the EU. However, it lacks a visible cookie consent mechanism and explicit security or incident response policies. No vulnerabilities or suspicious content were detected. WHOIS data shows privacy protection usage, consistent with a new tech startup founded in 2024, and domain registration aligns with the business timeline. Overall, homie AI presents a credible, professional online presence with room for improvement in security headers, cookie consent, and incident response transparency. The risk level is low, but addressing these gaps will strengthen trust and compliance.
Dedronededrone.com
Technology · United States
73Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Dedrone is a leading provider of AI-driven counter-drone defense solutions, offering a comprehensive suite of products and services designed to protect airspace from unauthorized UAVs. As a part of Axon, Dedrone leverages advanced machine learning and multi-sensor integration to deliver highly accurate drone detection and mitigation capabilities. The company serves a broad range of sectors including government, military, airports, critical infrastructure, and enterprises, positioning itself as a global leader in airspace security technology. The website reflects a mature digital presence with professional design, clear navigation, and extensive content showcasing their technology and customer success stories. Technically, the site employs modern web frameworks, analytics, and marketing tools, ensuring good performance and mobile optimization. Security posture is strong with HTTPS, privacy policies, and secure forms, although explicit security headers and incident response information could be improved. Overall, Dedrone demonstrates a high level of business credibility and digital maturity, though the lack of WHOIS transparency slightly impacts domain trustworthiness.
Set-One-by-Musterringset-one-by-musterring.de
Retail · Germany
58Medium
NIS2 2 · GDPR 95
NIS2 2 · GDPR 95
Set-One-by-Musterring operates a professional e-commerce website specializing in modern furniture and interior design products targeted at young adults and families in Germany. The site leverages the Shopware platform, integrating advanced marketing and analytics tools such as HubSpot and Google Analytics, reflecting a mature digital infrastructure. The business model focuses on online retail with product customization options and dealer locator services, positioning itself as a trusted furniture brand with a 5-year guarantee. Technically, the website is well-structured, mobile-optimized, and secure with HTTPS, though it lacks some security headers and explicit privacy documentation. Security posture is solid with no visible vulnerabilities, but improvements in transparency and compliance documentation are recommended. Overall, the site is safe, professional, and trustworthy, with moderate tracking and marketing practices.
OstWestfalenLippe GmbHstartklar-owl.de
Government · Germany
63Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
OstWestfalenLippe GmbH operates a professional and well-structured website promoting the startklar Businessplan-Wettbewerb, a biennial business plan competition aimed at supporting startups and entrepreneurs in the Ostwestfalen-Lippe region of Germany. The competition offers workshops, mentoring, and prizes to foster innovation and regional economic development. The website is built on TYPO3 CMS, uses Matomo for analytics, and demonstrates good SEO and mobile optimization. Contact information is clearly provided with anti-spam measures. Security posture is adequate with HTTPS and obfuscated emails, though improvements in security headers and cookie consent mechanisms are recommended. The domain WHOIS data aligns with the website's regional and organizational claims, indicating legitimacy and consistency. Overall, the site reflects a credible, government-affiliated entity focused on regional startup support.
ARTe Kunstmessen GmbHarte-kunstmesse.de
Other · Germany
66Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
ARTe Kunstmessen GmbH is a small German company specializing in organizing contemporary and classical modern art fairs across multiple cities in Germany. Their website presents a professional and well-structured platform showcasing upcoming events, galleries, and artists, targeting art collectors and enthusiasts. The business model revolves around event organization and ticket sales, positioning them as a regional leader in art fair hosting. Technically, the website is built on WordPress using the Bricks builder theme, hosted by Raidboxes, and employs modern web technologies with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enforced but lacks advanced security headers and cookie consent mechanisms, indicating room for improvement in GDPR compliance and security best practices. Overall, the domain registration and hosting details align well with the business claims, supporting legitimacy and trustworthiness.
ASKÖ Oberösterreichaskoe-ooe.at
Non-profit · Austria
53Medium
NIS2 17 · GDPR 28
NIS2 17 · GDPR 28
ASKÖ Oberösterreich is a regional non-profit sports association dedicated to promoting diverse sports activities and supporting sports clubs in Upper Austria. The organization provides a wide range of services including club support, sports education, fitness and health programs, and competitive sports event organization. It serves sports clubs, athletes, and community members, positioning itself as a key regional player in sports promotion. The website reflects a professional and consistent brand image aligned with its mission. Technically, the website uses a moderate technology stack including jQuery, FontAwesome, Owl Carousel, and a proprietary CMS by Internetkonzepte.at. The site is mobile optimized and performs moderately well, with basic SEO and accessibility features. Privacy and cookie policies are present and GDPR compliant, though explicit security policies and incident response contacts are not found. From a security perspective, the site enforces HTTPS and uses secure external scripts but lacks advanced security headers and a vulnerability disclosure policy. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent with the website's claims, indicating a legitimate and established organization. Overall, the website is trustworthy, professionally maintained, and compliant with privacy regulations. Strategic improvements in security headers, incident response transparency, and accessibility could enhance its security posture and user trust.