Critical-risk security reports
332 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,148001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
151–200 of 332
- Hhttps://www.engie-axima.fr – My WordPress Blog
engie-axima.fr
Other
25Partial
DNS & email only
DNS & email only
The website https://www.engie-axima.fr is a minimal WordPress blog with very limited content, primarily consisting of a default 'Hello world!' post. There is no clear business description, contact information, or security and privacy policies published on the site. The technical infrastructure is based on WordPress CMS with standard JavaScript and CSS assets, and the site is served over HTTPS, indicating basic security configuration. However, advanced security headers and compliance mechanisms are absent. The lack of business and contact details, privacy policies, and security disclosures suggests the site is either under development or not actively maintained as a professional business presence. Overall, the site exhibits a low level of digital maturity and trustworthiness.
—
25Partial
DNS & email only
DNS & email only
—
25Partial
DNS & email only
DNS & email only
—
13Partial
DNS & email only
DNS & email only
GrowthHackersgrowthhackers.com
Technology
21Critical
NIS2 10 · GDPR 68
NIS2 10 · GDPR 68
GrowthHackers.com operates as a premier invite-only community for growth leaders, marketers, product managers, and innovators focused on scalable business growth. The platform offers a comprehensive ecosystem including growth services, educational courses, webinars, certifications, and community engagement. It is positioned as an authentic and pioneering growth hacking ecosystem trusted by major global brands. Technically, the website is built on WordPress with Elementor, leveraging modern analytics and marketing tools such as Google Analytics, Facebook Pixel, HubSpot, and Sendinblue. The site is well-optimized for SEO, mobile responsiveness, and user experience. Security posture is strong with HTTPS, reCAPTCHA v3 on forms, and asynchronous loading of scripts, though explicit security headers and policies could be improved. Privacy compliance is evident with clear privacy and cookie policies and GDPR indicators. Overall, the website demonstrates a mature digital presence with high professionalism and trustworthiness.
Lifestyle financial plannerslifestylefinancialplanners.ie
Financial services · Ireland
23Partial
DNS & email only
DNS & email only
- AArena financial services
arenafinancial.ie
Financial services · Ireland
10Partial
DNS & email only
DNS & email only
Perpetual Coachingperpetualcoaching.com
Technology · Ireland
24Critical
NIS2 5 · GDPR 10
NIS2 5 · GDPR 10
Perpetual Coaching is a small Irish-based company specializing in performance coaching services tailored primarily for technology teams, with an emphasis on reducing burnout, driving performance, and improving results. The company also offers health and wellness promotion coaching focusing on mental, physical, and emotional well-being. Their market position is niche, targeting tech organizations and businesses seeking to enhance team productivity and well-being. The website is built on WordPress using modern plugins such as Elementor and Yoast SEO, indicating a moderate level of digital maturity. While the site is well-structured and professionally designed, it lacks critical privacy and cookie policies, which impacts compliance. Security posture is basic with HTTPS enabled but missing security headers and explicit security policies. Contact information is clearly presented, including phone, email, and a contact form, enhancing business credibility. Overall, the website is functional and professional but requires improvements in privacy compliance and security best practices.
- Faucets Ltd
faucets.co.uk
Retail · United Kingdom
23Critical
NIS2 0 · GDPR 10
NIS2 0 · GDPR 10
Faucets Ltd is a well-established UK-based independent stockist and distributor specializing in quality bathroom brassware and sanitary products since 1983. The company positions itself as a leading supplier in the UK bathroom fittings market, offering a comprehensive range of products and technical consultancy services. Their target audience includes customers and professionals seeking reliable bathroom fittings and accessories. The website reflects a professional and consistent brand image with clear navigation and relevant content supporting their business model.
- MMoney Advice
brokercrm.com
Finance · Ireland
23Critical
NIS2 0 · GDPR 25
NIS2 0 · GDPR 25
The website brokercrm.com currently serves as a transitional landing page announcing that Money Advice, an Irish financial advice service, has been acquired by OnlineApplication and is being rebranded as OA Life + CRM. The content is minimal, primarily consisting of a countdown timer and a redirect script to onlineapplication.io. The technical infrastructure is basic, utilizing Bootstrap and JavaScript without advanced CMS or analytics integrations. Security posture is weak, with no HTTPS or security headers detected in the provided data, and no privacy or cookie policies present. Contact information and business details are absent, limiting trust and credibility. Overall, the site appears to be a placeholder during a rebranding phase, with significant improvements needed in security, compliance, and content richness to support business operations effectively.
- Goodbody / Figurplan
goodbody.de
Other · Germany
25Critical
NIS2 5 · GDPR 3
NIS2 5 · GDPR 3
Goodbody / Figurplan is a small German fitness consultancy specializing in personalized training plans aimed at weight loss, muscle gain, and fitness improvement. The website content is primarily in German and targets individuals seeking customized fitness coaching, particularly in the Nuremberg area. The business model revolves around creating tailored training plans and providing studio-based and online coaching services. The site content is basic and lacks modern digital marketing or e-commerce features. Technically, the website is simple, built with static HTML and CSS without modern frameworks or CMS. It lacks HTTPS, security headers, and mobile optimization, indicating a low level of digital maturity. No analytics or tracking technologies are present, and no forms are available for user interaction or data collection. From a security perspective, the absence of HTTPS and security headers is a significant vulnerability. The site does not provide clear privacy or cookie policies beyond a basic Datenschutz page, and no incident response or security policies are published. The lack of contact information and security best practices reduces trustworthiness and compliance with GDPR requirements. Overall, the website presents moderate business credibility but poor technical and security posture. Strategic improvements in security, privacy compliance, and technical modernization are recommended to enhance trust and user experience.
Alfakraft Fonder ABalfakraft.se
Finance · Sweden
24Critical
NIS2 5 · GDPR 0
NIS2 5 · GDPR 0
Alfakraft Fonder AB is a Swedish financial services company specializing in capital and fund management, targeting institutions, companies, and private individuals. Their business model centers on offering high-quality portfolio management and trading strategies across multiple asset classes, aiming for good risk-adjusted returns. The website presents a professional image with clear descriptions of their funds and services, supported by links to fund fact sheets and prospectuses, indicating transparency and regulatory compliance. Technically, the site is built on WordPress using the Uncode theme and several plugins, including privacy management and analytics tools. The infrastructure supports HTTPS with good SSL configuration and moderate performance. Security posture is solid with no visible vulnerabilities or exposed sensitive data, though security headers and explicit security policies are absent. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy policy or terms of service pages. Contact information is clearly provided, enhancing business credibility. Overall, Alfakraft demonstrates a mature digital presence suitable for its niche in financial services, though improvements in privacy and security disclosures are recommended.
CEE Tax Groupceetax.com
Finance · Malta
21Critical
NIS2 5 · GDPR 10
NIS2 5 · GDPR 10
CEE Tax Group is a small, boutique tax law firm based in Malta, founded in 2004. The firm specializes in tax and legal business solutions including international taxation, digital companies, trust and estate planning, and accounting and compliance services. Their business model emphasizes fixed fee and success fee billing, aiming to provide tailored and practical advice to a diverse client base. The website presents a professional and consistent brand image with clear service offerings and a focus on client accessibility. Technically, the site is built on WordPress using the Divi theme and jQuery libraries, with moderate performance and good mobile optimization. However, there is a lack of visible security headers and no explicit HTTPS confirmation from the provided data. Privacy and cookie policies are absent, and no contact emails or phone numbers are listed, which impacts privacy compliance and user trust. Social media presence is limited to Facebook with inactive links for other platforms. Overall, the site is functional and professional but could improve in security and compliance transparency.
Energy
23Critical
NIS2 0 · GDPR 10
NIS2 0 · GDPR 10
RECC Group is a small consultancy specializing in renewable energy and cleantech projects, focusing on structuring public-private partnerships to enable governmental agencies and investors to deploy energy efficiency and infrastructure projects. The website is built on WordPress using the Genesis framework and Expose theme, with basic technical implementation and moderate performance. Security posture is weak due to lack of HTTPS, absence of security headers, and missing privacy and cookie policies. Contact information is limited to an email address and LinkedIn profile, with no phone or physical address provided. Overall, the site provides basic business information but lacks critical security and compliance features, which poses risks to trust and user data protection.
Hospitality · United States
24Critical
NIS2 0 · GDPR 10
NIS2 0 · GDPR 10
Brewhausbar.com represents a small hospitality business specializing in German American pub cuisine and craft brews, operating since 2011 in Chattanooga, Tennessee. The website effectively communicates the business's offerings, including food and drink menus, customer testimonials, and social media presence, positioning it as a local niche pub with a casual dining experience. Technically, the site is built on WordPress with Elementor and Yoast SEO, providing a modern and SEO-friendly infrastructure with moderate performance and good mobile optimization. Security posture is basic with HTTPS enabled but lacking advanced security headers and formal security policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the site is functional and professional but would benefit from enhanced security and compliance features.
Other
23Critical
NIS2 5 · GDPR 3
NIS2 5 · GDPR 3
The website hoteltropicana.es is a parked domain landing page primarily serving advertising content and affiliate links. There is no substantive business information, contact details, or service descriptions present. The site appears to be monetizing traffic through third-party ad networks such as Google Adsense and Youseasky. The technical infrastructure relies on common JavaScript libraries and Amazon Cloudfront CDN for asset delivery, but lacks modern security and privacy features such as HTTPS, security headers, and cookie consent mechanisms. The WHOIS data is privacy protected, which combined with the lack of business content, suggests the domain is not actively used by a legitimate hospitality business. Overall, the site has poor content quality, minimal technical sophistication, and a weak security posture.
Meridon Fundsmeridon.com
Finance · Malta
25Critical
NIS2 0 · GDPR 10
NIS2 0 · GDPR 10
Meridon Funds operates as a collective investment scheme focused on capital markets and private equity investments. The company is structured as a multi-fund limited liability company under Maltese law and is licensed by the Malta Financial Services Authority, positioning it as a regulated financial entity. The website presents a professional and consistent brand image with clear fund offerings targeting investors interested in alternative assets and long-term capital preservation. Technically, the website is built on Drupal 7 CMS and uses jQuery 1.9.1 along with Google Analytics for visitor tracking. The site is mobile optimized and has a moderate performance profile. However, the use of an outdated jQuery version and lack of visible security headers indicate technical debt and potential security risks. SEO and accessibility features are basic but functional. From a security perspective, the site lacks explicit privacy, cookie, and terms of service policies, which impacts compliance posture. No incident response or vulnerability disclosure information is provided. Google Analytics is configured with IP anonymization, which is a positive privacy measure. The absence of direct contact emails or phone numbers limits user trust and transparency. The domain uses privacy protection in WHOIS, which is common but reduces transparency. Overall, the website is functional and professional but requires improvements in privacy compliance, security hardening, and transparency to enhance trustworthiness and regulatory adherence.
Nederlands Wijngildenederlandswijngilde.nl
Other · Netherlands
25Critical
NIS2 0 · GDPR 3
NIS2 0 · GDPR 3
Nederlands Wijngilde is a well-established non-profit wine tasting association in the Netherlands, founded in 1981, with approximately 300 members across 13 regional clubs. The organization focuses on wine education, monthly tastings, masterclasses, and member benefits such as discounts on wine-related products and services. The website reflects a mature digital presence built on WordPress with modern SEO and analytics tools. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security best practices like security headers and cookie consent mechanisms could be improved. Privacy compliance is basic but present, with a clear privacy policy in Dutch. Overall, the site is professional, trustworthy, and serves its niche audience effectively.
Prosecure LTDprosecureltd.com
Technology · Malta
23Critical
NIS2 0 · GDPR 10
NIS2 0 · GDPR 10
Prosecure LTD is a Malta-based security solutions provider specializing in a wide range of sectors including aviation, critical infrastructure, medical cannabis, border security, law enforcement, and digital business. The company offers products and solutions in defence, security, forensic, scientific, and ICT fields, targeting government agencies, law enforcement, and private sector clients. Their market position is that of a niche provider with a broad sector focus and a strong partnership ecosystem. The website reflects a professional business model with clear contact information and partner affiliations. Technically, the website uses a combination of ASP.NET WebForms and WordPress plugins, leveraging technologies such as jQuery, Bootstrap, WooCommerce, and Google Analytics. The site is moderately optimized for mobile and performance but lacks some modern security headers and privacy compliance features. The presence of Google Analytics indicates moderate user tracking without visible cookie consent mechanisms. From a security perspective, the website does not display critical vulnerabilities but lacks essential security headers and published privacy or cookie policies, which are compliance gaps. No incident response or vulnerability disclosure information is provided. The WHOIS data is consistent with the business claims, showing no privacy protection or suspicious registration patterns. Overall, the website is functional and professional but requires improvements in privacy compliance and security best practices to enhance trust and regulatory adherence.
AQSaqsmed.com
Energy · Malta
24Critical
NIS2 13 · GDPR 28
NIS2 13 · GDPR 28
AQS is a Malta-based company specializing in renewable energy solutions including solar photovoltaic systems, smart home automation, EV chargers, and energy storage. The company targets both residential and commercial customers, offering a range of products and services with leasing and revenue sharing options. Their market position is supported by a significant installed base of over 50,000 panels and a portfolio of notable projects. Technically, the website is built on WordPress with modern plugins and SEO tools, providing a good user experience and mobile optimization. Security posture is adequate with HTTPS enforced but lacks comprehensive security headers and explicit security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the website is professional and trustworthy with room for improvement in security and privacy compliance.
Arkadia Grouparkadiagroup.fr
Energy · France
24Critical
NIS2 0 · GDPR 0
NIS2 0 · GDPR 0
Arkadia Group is a French independent engineering consulting company specializing in project management and engineering services across key industrial sectors including energy, transport, aerospace, defense, and life sciences. The company emphasizes a human-centered and sustainable engineering approach, supported by multiple ISO certifications (ISO 9001, ISO 19443, MASE, CERFI) that reinforce its commitment to quality and security. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content tailored to industrial clients in France and internationally. Technically, the site is built on WordPress with modern plugins and tools such as Yoast SEO, Google Tag Manager, and reCAPTCHA, ensuring good performance, SEO, and security practices. Security posture is strong with HTTPS, form protections, and cookie consent mechanisms, although explicit security policies and incident response contacts are not published. Overall, the domain registration and website content are consistent and trustworthy, indicating a legitimate and credible business.
- CCyberspace Console :: Login
bee.com.mt
Other
18Critical
NIS2 0 · GDPR 0
NIS2 0 · GDPR 0
The website bee.com.mt presents a minimalistic login page titled 'Cyberspace Console :: Login' with no substantive business content or policies. The page includes a login form that posts user credentials to an external domain (konsoleh.your-server.de), which raises significant security concerns including potential phishing risks. The site lacks HTTPS on its main domain, has no privacy or cookie policies, and does not provide verified contact emails or physical addresses, only a phone number labeled as support. Branding is inconsistent, using an external logo from cyberlobby.com, and the technical implementation relies on outdated JavaScript libraries without modern security headers or protections. Technically, the site uses basic HTML, CSS, and jQuery 1.10.2, hosted on a dedicated server under your-server.de. Performance and mobile optimization are basic, with poor accessibility and SEO. Security posture is weak due to lack of HTTPS, missing security headers, and insecure form handling. No analytics or marketing tools are detected, and no GDPR compliance indicators are present. Overall, the site exhibits low trustworthiness and poor business credibility, with critical security issues that significantly reduce its reliability. The domain registration is privacy protected, which combined with the suspicious form action and lack of business information, further undermines legitimacy. Strategic recommendations include implementing HTTPS, securing form submissions, adding security headers, updating libraries, and publishing privacy and cookie policies to improve trust and compliance.
Camilleri & Cuschieri Consulting Engineerscamilleriandcuschieri.com
Energy · Malta
11Critical
NIS2 0 · GDPR 28
NIS2 0 · GDPR 28
Camilleri & Cuschieri Consulting Engineers is a well-established Maltese engineering consultancy firm specializing in building engineering services and industrial controls since 1979. The company serves a diverse clientele including banks, universities, and property developers, offering services such as project design, surveys, testing, certification, and energy audits. Their market position is strong within Malta, supported by client testimonials and a professional online presence. Technically, the website is built on WordPress using popular plugins like WPBakery Page Builder and Slider Revolution, with a moderate performance and good mobile optimization. However, the site lacks HTTPS, which is a significant security shortfall. The presence of cookie consent and analytics tools indicates some level of privacy awareness, though no explicit security or incident response policies are published. Security posture is moderate but impacted by the absence of HTTPS and security headers, exposing the site to potential risks. The site collects user data via contact forms and uses third-party services like Google Analytics and Tawk.to chat, which require careful privacy management. Overall, the website is professional and credible but requires urgent security improvements, especially implementing HTTPS and enhancing security headers. Privacy policies are present but could be more comprehensive. Strategic recommendations include upgrading security infrastructure, formalizing incident response, and improving accessibility and compliance documentation.
Moga International Ltd.mogaisrael.com
Manufacturing · Israel
24Critical
NIS2 5 · GDPR 10
NIS2 5 · GDPR 10
Moga International Ltd. is a leading Israeli company specializing in the import and export of high-quality products for the food and chemical industries. The company offers a wide range of products including dried vegetables, leaves, spices, and food additives, with a focus on providing solutions that comply with Kashrut Le’Mehadrin standards. Their market position is strong within Israel, serving various sectors such as food manufacturing, beverages, wineries, dairy farms, meat industry, pharmaceutics, cosmetics, and toiletries. The website is professionally designed, multilingual, and includes comprehensive product catalogs and contact options.
RedOrangeredorange.com
Government · United States
15Critical
NIS2 0 · GDPR 10
NIS2 0 · GDPR 10
RedOrange is a small-sized, globally networked government contracting company specializing in procurement, base operating services, heavy equipment services, hospitality and events management, and global logistics. The company primarily serves federal government agencies and related organizations in the United States, United Kingdom, and European Union. Their business model focuses on providing tailor-made solutions through strategic partnerships and a global supply chain network. The website presents a professional image with detailed service descriptions and client testimonials, positioning RedOrange as a trusted partner in government contracting. Technically, the website uses modern web technologies including HTML5, CSS3, JavaScript, Google Fonts, and Swiper.js for interactive sliders. The site is moderately optimized for mobile devices and performance, though accessibility and SEO optimizations are basic. The presence of Google Analytics indicates some level of user tracking, but no advanced privacy compliance mechanisms such as cookie consent banners or privacy policies are present. From a security perspective, the site lacks visible HTTPS enforcement in the provided URL, and no security headers are detected. The contact form uses POST but lacks CAPTCHA or anti-bot protections. These gaps present moderate security risks and compliance issues, especially regarding GDPR and data protection best practices. The absence of privacy and cookie policies further weakens privacy compliance. Overall, the website is functional and professional but requires improvements in security posture and privacy compliance to enhance trustworthiness and reduce risk. Strategic recommendations include implementing HTTPS, adding security headers, deploying privacy policies and cookie consent mechanisms, and enhancing form security.
- SSAVANA
savana.co.mz
Media · Mozambique
12Critical
NIS2 5 · GDPR 10
NIS2 5 · GDPR 10
SAVANA is a well-established independent weekly newspaper in Mozambique, founded in 1994 and operated by Mediacoop. The website serves as a digital platform for news in Portuguese, covering a broad range of topics including politics, economy, society, sports, culture, and international affairs. It targets Portuguese-speaking audiences interested in current affairs and provides subscription-based access to premium content. The site is built on WordPress with Elementor, leveraging modern web technologies and analytics tools such as Google Analytics and Jetpack Stats. The design is professional and mobile-optimized, offering a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enforced and some content protection mechanisms, but lacks advanced security headers and explicit privacy and cookie policies, which are compliance gaps. Overall, the site is credible and trustworthy, with consistent WHOIS data supporting its legitimacy.
Other · United States
19Critical
NIS2 5 · GDPR 10
NIS2 5 · GDPR 10
The Association of Marketing Service Providers (AMSP) is a well-established trade association serving the commercial printing, quick copy printing, label converting, mailing, fulfillment, marketing, and SEO industries. Founded in 1921 and merged with related associations in 2014, AMSP provides advocacy, professional development, industry resources, and events to its members. The website reflects a professional and consistent brand presence targeting industry leaders and professionals. Technically, the site is built on WordPress with Bootstrap and common JavaScript libraries, offering moderate performance and good mobile optimization. Security posture is solid with HTTPS enforced, but lacks some security headers and visible privacy or cookie policies. No forms or direct contact emails are present, though phone numbers and physical addresses are clearly provided. Overall, the site is functional and credible but could improve privacy compliance and security best practices.
ESPRIT St.Gallenstgallenbusinessreview.com
Media · Switzerland
23Critical
NIS2 0 · GDPR 10
NIS2 0 · GDPR 10
St. Gallen Business Review is a student-run business magazine published by ESPRIT St.Gallen, affiliated with the University of St.Gallen. It provides independent journalism focused on business, entrepreneurship, finance, economics, politics, and sustainability. The website features a membership program (SGBR+) offering exclusive early access to content. Technically, the site is built on WordPress with modern plugins and libraries, delivering a good user experience with mobile responsiveness and clear navigation. Security posture is adequate with HTTPS enabled but lacks security headers and explicit privacy or cookie policies. No direct contact emails or phone numbers are provided, but a contact form is available. The domain registration details align with the business claims, supporting legitimacy.
Branded Juicebrandedjuice.com
Other · Malta
24Critical
NIS2 0 · GDPR 10
NIS2 0 · GDPR 10
Branded Juice is a small creative agency based in Malta specializing in branding, identity, print, signage, vehicle wrapping, and web design services. The website showcases a diverse portfolio of projects, targeting businesses seeking comprehensive branding and promotional solutions. The company maintains an active social media presence and provides clear contact information, including a phone number and company email. Technically, the website is built on WordPress using the Enfold theme and Avia framework, incorporating common tracking tools such as Google Analytics and Facebook SDK. While the site is mobile optimized and presents content professionally, it lacks critical privacy and cookie policies, as well as security headers, which impacts its overall security posture. No forms are present on the homepage, reducing immediate data collection risks but also limiting user engagement options. The domain uses privacy protection for WHOIS data, which is typical for small agencies and does not raise immediate concerns. Overall, the website is functional and professional but would benefit from enhanced privacy compliance and security hardening.
Convista Group ABconvistagroup.se
Technology · Sweden
23Critical
NIS2 0 · GDPR 0
NIS2 0 · GDPR 0
Convista Group AB is a Swedish company specializing in digital marketing solutions with a focus on digital signage systems and advertising spaces. Their offerings include hardware such as large display screens for indoor and outdoor use, software for content management, and graphic production services. The company targets businesses like retail stores, restaurants, workshops, and offices seeking digital signage solutions. The website is built on WordPress using the Jupiter theme and Visual Composer, indicating a moderate level of digital maturity with a professional design and good user experience. However, the site lacks explicit privacy and cookie policies, which impacts compliance and trust. Security posture is adequate with HTTPS enabled but lacks advanced security headers and incident response information. Overall, the website presents a legitimate small business with a moderate security and privacy posture.
- ProQoda AB
proqoda.com
Technology · Sweden
23Critical
NIS2 0 · GDPR 10
NIS2 0 · GDPR 10
ProQoda AB is a small digital marketing agency based in Sweden, specializing in web development, mobile app development, digital marketing, and branding services. The company positions itself as an accessible partner for businesses of all sizes, including startups and governmental organizations, emphasizing democratizing marketing. Their website reflects a professional and consistent brand image with clear service offerings and client showcases. Technically, the site uses modern frameworks like Bootstrap and integrates popular analytics and tracking tools such as Google Analytics and Facebook Pixel. However, there is a lack of visible privacy and cookie policies, and no explicit consent mechanisms are present, which may impact compliance with GDPR and other privacy regulations. Security headers are not detected, and SSL configuration details are not explicit in the content, suggesting room for improvement in security posture. Overall, the website is functional and professional but would benefit from enhanced privacy compliance and security best practices.
PC AddOn ABpcaddon.se
Technology · Sweden
25Critical
NIS2 13 · GDPR 15
NIS2 13 · GDPR 15
PC AddOn AB is a Swedish IT service provider specializing in flexible and reliable IT solutions with a focus on functionality and user-friendliness. The company offers a broad range of services including IT consultancy, infrastructure design, Microsoft 365 administration, backup solutions, network services, and IT security training. With over 30 years of industry experience and partnerships with major technology vendors such as Intel, Lenovo, HP, and Jabra, PC AddOn positions itself as a trusted IT partner for businesses of various sizes. The website reflects a professional and consistent brand image, targeting business customers seeking comprehensive IT support and solutions. Technically, the site is built on WordPress with modern SEO and analytics tools, including Yoast SEO and Google Analytics, and employs a comprehensive cookie consent mechanism to comply with GDPR requirements. Security-wise, the site uses HTTPS and includes cookie consent and reCAPTCHA protections, but lacks explicit security policies and some recommended security headers. Overall, the website is well-structured, user-friendly, and trustworthy, though it could improve transparency by adding privacy and security policies and enhancing accessibility features.
Lundberg & Colundberg-co.com
Media · Sweden
21Critical
NIS2 0 · GDPR 10
NIS2 0 · GDPR 10
Lundberg & Co is a Swedish full-service communications agency established in 1993, specializing in creating relevant and long-term marketing concepts that connect brands emotionally with consumers. The company positions itself as an award-winning agency with a strong focus on consumer relevance and brand connection. Their website is built on WordPress using Elementor, featuring modern web technologies and a professional design optimized for mobile devices. While the site is well-structured and visually appealing, it lacks explicit privacy, cookie, and security policies, which are critical for compliance and trust. The security posture is moderate with HTTPS enabled but missing important security headers and incident response information. Analytics tracking is minimal due to an unconfigured Google Analytics plugin. Contact information is clearly presented, enhancing business credibility.
- Ortic AB
ortic.se
Manufacturing · Sweden
24Critical
NIS2 5 · GDPR 0
NIS2 5 · GDPR 0
Ortic AB is a Swedish manufacturing company specializing in advanced roll forming machinery and related services. With over 40 years of experience, the company positions itself as a trusted expert in the roll forming industry, offering machines, aftermarket products, process optimization, training, and service. The website reflects a professional and consistent brand presence targeting manufacturing businesses seeking high-quality roll forming solutions. Technically, the site uses a custom CMS with common JavaScript libraries and integrates Google Analytics and Tag Manager for user tracking. The cookie consent mechanism is implemented, indicating awareness of privacy compliance, although no explicit privacy policy or terms of service pages were found. Security posture is moderate with no visible critical vulnerabilities but lacks advanced security headers and incident response information. Overall, the website is accessible, well-structured, and credible, with clear contact information and social media presence supporting trust.
- FFiction
detonate.se
Other
23Critical
NIS2 5 · GDPR 0
NIS2 5 · GDPR 0
The website detonate.se currently serves as a minimal placeholder page announcing the rebranding of the agency Detonate to Fiction, with a redirect to the new domain fictionreal.com. The page contains very limited content, no interactive elements, and lacks any privacy, cookie, or terms of service policies. There is no contact information or business details provided, which limits the ability to assess the company's market position or services from this domain alone. Technically, the site is minimal with no detected scripts, analytics, or security headers, and no HTTPS status was provided, indicating a potentially insecure setup. The security posture is weak due to the absence of HTTPS and security best practices. Overall, the site appears to be a transitional redirect page rather than a fully developed business website.
The Compadres + Cordovan |cordovan.se
Other · Sweden
25Critical
NIS2 0 · GDPR 0
NIS2 0 · GDPR 0
The website 'The Compadres + Cordovan' is a minimalistic single-page site primarily featuring a fullscreen video background and a single call-to-action button linking to gritti.se. There is no detailed business description, contact information, or policy documentation present. The site is built on WordPress using the Divi theme and includes standard JavaScript libraries such as jQuery and MediaElement.js. HTTPS is enabled, but no advanced security headers are detected. The absence of privacy, cookie, and terms of service policies, as well as contact details, indicates low privacy compliance and business transparency. Overall, the site appears to be a small-scale or early-stage project with limited digital maturity and security posture.
Bilverkstaden som ger säker bilservicelindgrenbil.se
Transportation · Sweden
22Critical
NIS2 0 · GDPR 0
NIS2 0 · GDPR 0
The website lindgrenbil.se is a Swedish-language car workshop and vehicle maintenance service site focused on providing safe car service and related automotive information. It targets vehicle owners in Sweden with blog content covering topics such as vehicle inspections, tire problems, oil changes, and common car faults. The business model is that of a small local automotive service provider, with no explicit corporate or parent company information available. Technically, the site is built on WordPress using standard themes and jQuery libraries, with moderate performance and good mobile optimization. However, it lacks advanced SEO and accessibility features. Security posture is basic, with no visible security headers or incident response contacts, and no privacy or cookie policies are present, indicating low privacy compliance. The site does not expose sensitive data or use vulnerable libraries but would benefit from improved security and compliance measures. Overall, the site is functional and informative but lacks critical trust and compliance elements.
Candelux ABcandelux.se
Energy · Sweden
24Critical
NIS2 0 · GDPR 0
NIS2 0 · GDPR 0
Candelux AB is a Swedish company specializing in LED lighting and lighting components with over 30 years of industry experience. They serve primarily business customers, offering a wide range of products from small wattage home lighting to large-scale lighting installations. Their business model focuses on wholesale distribution and OEM partnerships, emphasizing quality and long-term collaborations with European manufacturers. The website reflects a mature digital presence built on WordPress and WooCommerce, enhanced with the Divi theme and various marketing and analytics tools. Security posture is strong with HTTPS and security headers implemented, though explicit security policies and incident response information are not published. Privacy policies exist and indicate GDPR compliance, but cookie consent mechanisms could be improved. Overall, the website is professional, trustworthy, and well-structured, supporting the company's market position as a reliable lighting solutions provider.
Ryter kommunikationsbyrå ABryter.se
Media · Sweden
23Critical
NIS2 0 · GDPR 0
NIS2 0 · GDPR 0
Ryter kommunikationsbyrå AB is a Swedish communications agency that merged with Baringo reklam & kommunikation in November 2022, forming a robust team of senior communication consultants. The company offers services including communication consultancy, graphic design, branding, and web development, targeting businesses and organizations seeking professional marketing and communication solutions. The website is built on WordPress with modern plugins and uses Matomo analytics for privacy-conscious tracking. The technical infrastructure is solid with HTTPS and a moderate performance profile, though some security headers are missing. Contact information is clearly provided, but the absence of privacy and cookie policies indicates compliance gaps. Overall, the website presents a professional image consistent with a small to medium-sized agency in the media sector.
QRTECH ABendian.se
Technology · Sweden
23Critical
NIS2 0 · GDPR 0
NIS2 0 · GDPR 0
QRTECH AB is a Swedish technology consultancy and development company specializing in concept generation, product development, and industrialization of services and products. Positioned as a Technology Pathfinder, QRTECH serves companies at various stages of innovation, offering expertise in electronics development, embedded systems, Internet of Things, and digital solutions. The company targets organizations seeking to innovate and bring new technology products to market efficiently. The website reflects a professional and consistent brand image with comprehensive service descriptions and clear contact information. Technically, the site is built on WordPress using the Avada theme and several plugins, including LayerSlider and WP Rocket, indicating a modern and optimized infrastructure. SEO practices are well implemented, and the site is mobile responsive with good user experience. Security-wise, the site uses HTTPS and some best practices but lacks explicit security policies, vulnerability disclosures, and cookie consent mechanisms, which are areas for improvement. Overall, the domain registration details align well with the business information, supporting legitimacy and trustworthiness.
Retail · Hungary
22Critical
NIS2 25 · GDPR 0
NIS2 25 · GDPR 0
M3 Outlet is a retail outlet shopping center located in Polgár, Hungary, offering over 100 fashion brands with discounts ranging from 30% to 70%. The website targets regional shoppers interested in branded fashion products and provides multilingual support including Hungarian, English, Romanian, and Slovak. Key services include retail shopping, promotions, customer amenities such as free wifi, and tourism-related offerings like tax-free shopping. The business operates under M3 PARK SERVICE Kft., positioning itself as a significant regional outlet center with a medium-sized footprint. Technically, the website is built on Concrete CMS 9.3.2 and utilizes modern frontend technologies such as jQuery, Bootstrap 5, and Owl Carousel. Google Tag Manager is used for analytics and marketing tracking. However, the site lacks a valid SSL certificate and does not support HTTPS, which is a critical security deficiency. Performance data is missing, but inferred to be slow. Mobile optimization and SEO are good, but accessibility is basic. Security posture is weak due to the absence of HTTPS, lack of HSTS, and missing advanced security headers. No explicit privacy or cookie consent mechanisms are implemented, and no security or incident response policies are visible. Contact information is clearly provided, enhancing business credibility. Overall, the site is functional and professionally designed but requires urgent security improvements, especially SSL/TLS configuration, to protect user data and improve trust. Implementing privacy compliance features and enhancing security headers would further strengthen the security posture.
- PPOLIZEI Tecnologia
polizei.com.br
Technology · Brazil
23Critical
NIS2 0 · GDPR 10
NIS2 0 · GDPR 10
POLIZEI Tecnologia is a Brazilian technology consulting and advisory service provider as indicated by the website title and minimal content. The website currently serves primarily as a redirect to a subdirectory, with very limited content and no visible business or contact information. The technical infrastructure is minimal, relying on Google Analytics for visitor tracking but lacking modern security features such as HTTPS and security headers. The site shows basic mobile optimization and accessibility but overall poor design and user experience. Security posture is weak due to absence of HTTPS and security policies, and no privacy or cookie policies are present, indicating poor compliance with data protection regulations. Overall, the website appears to be either under development or a placeholder, limiting its credibility and trustworthiness.
Other · Australia
24Critical
NIS2 0 · GDPR 15
NIS2 0 · GDPR 15
The website selfsustain.com.au is currently parked with minimal content indicating no active business presence. The site only displays a placeholder message 'Self Sustain is Parked' and contains no business descriptions, contact information, or policies. The technical infrastructure is basic, using simple HTML5, CSS, and JavaScript without any advanced frameworks or CMS. There is no evidence of HTTPS or security headers, and no analytics or advertising scripts are present. The security posture is weak due to lack of HTTPS and absence of privacy or cookie policies. Overall, the site does not provide sufficient information to assess business operations or security maturity. Strategic recommendations include implementing HTTPS, adding privacy and cookie policies, providing clear business contact information, and enhancing website content and structure to improve trust and compliance.
- Palla-Tech Kft.
pallatech.hu
Hungary
7Critical
NIS2 0 · GDPR 0
NIS2 0 · GDPR 0
Filmmuseum - Startseitefilmmuseum.at
Austria
18Critical
NIS2 0 · GDPR 18
NIS2 0 · GDPR 18
—
6Critical
NIS2 0 · GDPR 10
NIS2 0 · GDPR 10
—
21Critical
NIS2 0 · GDPR 43
NIS2 0 · GDPR 43
- wysiwyn - what you see is what you need
wysiwyn.com
—
17Critical
NIS2 0 · GDPR 28
NIS2 0 · GDPR 28
- Wwww.doma.ag
domadesign.com.br
Other
25Critical
NIS2 5 · GDPR 25
NIS2 5 · GDPR 25
The website domadesign.com.br currently serves an HTTP 403 Access Denied error page, indicating that the content is blocked or inaccessible to the user. The page is a generic Chromium offline error page with no visible business content, contact information, or policies. This severely limits the ability to assess the company's market position, services, or technical infrastructure. The technical scripts present relate to Chromium's offline error page and embedded game functionality, not the actual business website. Due to the lack of accessible content and privacy-protected WHOIS data, the domain's legitimacy and business credibility cannot be confidently established. Security posture is minimal with no visible HTTPS or security headers information, and privacy compliance is absent.
- KkonsoleH :: Login
statec-binder.at
Technology · Germany
25Critical
NIS2 5 · GDPR 0
NIS2 5 · GDPR 0
The website statec-binder.at serves as a login portal for konsoleH, a server and account management interface provided by Hetzner Online GmbH, a well-known German hosting provider. The site offers access to webmail and account administration services, targeting users of Hetzner's hosting infrastructure. The portal is minimalistic, with basic content and limited user interface elements, primarily serving as a gateway to other Hetzner services. Technically, the site is built with simple HTML and CSS, hosted on Hetzner infrastructure. It lacks modern web features such as mobile optimization, accessibility enhancements, and SEO best practices. The absence of HTTPS on the domain is a significant technical and security shortfall, although the base URL points to a secure Hetzner server. No analytics or tracking technologies are detected, indicating minimal data collection. From a security perspective, the lack of HTTPS and security headers exposes users to potential risks. No privacy, cookie, or terms of service policies are present, which is a compliance gap especially under GDPR. The site does not provide contact or incident response information, limiting transparency and user trust. However, the external links and branding align with Hetzner, lending some credibility. Overall, the website is functional but basic, with critical security and compliance deficiencies. Strategic improvements in SSL implementation, security headers, privacy policies, and user experience are recommended to enhance trust and protect users.