Low-risk security reports
14,261 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,165001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
1,951–2,000 of 14,261
Alsicoalsico.com
Manufacturing · Belgium
76Low
NIS2 14 · GDPR 83
NIS2 14 · GDPR 83
Alsico is a large European manufacturer specializing in workwear, cleanroom clothing, and protective clothing, with a global production footprint. The company positions itself as a leader in the workwear industry, emphasizing design innovation and sustainability. Their website reflects a professional digital presence with clear branding, comprehensive privacy and cookie policies, and active engagement on social media platforms. Technically, the site uses modern frameworks such as Astro, integrates multiple analytics and marketing tools, and implements strong security practices including HTTPS and security headers. However, the absence of WHOIS data and lack of published security policies or incident response contacts represent areas for improvement in transparency and trust. Overall, Alsico demonstrates a mature digital infrastructure suitable for its market position but should enhance its security communication and domain registration transparency.
WhistleSystem ApSwhistlesystem.com
Technology · Denmark
76Low
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
WhistleSystem ApS is a Danish technology company founded in 2020, specializing in providing secure, simple, and compliant whistleblower systems primarily targeting businesses seeking to implement whistleblower compliance solutions. The website is professionally designed using WordPress with the Divi theme and integrates multiple marketing and analytics tools such as HubSpot, Google Analytics, and Cookiebot for GDPR compliance. The company positions itself as a trusted provider in the whistleblower compliance market with a focus on security and simplicity. Technically, the website is hosted with Amazon Registrar and uses AWS DNS servers, with HTTPS enabled and a moderate performance profile. Security posture is generally good, though improvements can be made by enabling DNSSEC and adding explicit security headers. Privacy compliance is supported by a cookie consent mechanism, but no explicit privacy policy or terms of service pages were found in the provided content. Overall, the website is safe, professional, and trustworthy with no adult or questionable content detected.
- Reed Exhibitions Limited
rxglobal.com
Other
81Low
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
RX Global, operated by Reed Exhibitions Limited, is a leading global events organizer with over 350 events across 25 countries and 43 industry sectors. The company focuses on creating impactful business experiences and has a strong market position as a large enterprise in the event management industry. Their services include event organization, sales support, event technology, and sustainability initiatives. The website reflects a mature digital presence with a modern Drupal CMS infrastructure, responsive design, and integration of marketing and analytics tools such as Google Tag Manager and OneTrust for cookie consent management. Security posture is strong with HTTPS enforced and domain transfer protections in place, though DNSSEC is not enabled. Privacy and cookie policies are comprehensive and GDPR compliant, supporting user consent mechanisms. Contact is primarily via web forms, with no direct emails or phone numbers publicly listed. Overall, the website demonstrates professionalism, trustworthiness, and compliance with relevant regulations.
Der Domderdom.de
Media · Germany
78Low
NIS2 17 · GDPR 95
NIS2 17 · GDPR 95
Der Dom is a German-language regional religious news magazine operated under the Bonifatius GmbH publishing group. It provides independent, high-quality journalism focused on the Erzbistum Paderborn community, offering subscription-based print and digital content, newsletters, and event information. The website demonstrates a mature digital infrastructure built on WordPress with modern SEO and accessibility features. Security posture is solid with HTTPS, cookie consent management, and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site is professional, trustworthy, and well-positioned in its niche market.
- SSFNCM
sfncm.org
Healthcare · France
77Low
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
SFNCM is a French professional association dedicated to clinical nutrition and metabolism, providing healthcare professionals with training, scientific publications, events, and practical resources. The website is well-structured, professionally designed, and targets healthcare practitioners interested in nutrition clinical care. The technical infrastructure leverages modern JavaScript libraries and a reputable CMS platform (AssoConnect), with good mobile optimization and SEO practices. Security posture is solid with HTTPS, cookie consent management, and nonce-based script loading, though explicit security headers could be improved. WHOIS data is unavailable, likely due to privacy protection, which is common for non-profit organizations. Overall, the site presents a trustworthy and professional front for its audience.
Peterson Technologiespetersontechnologies.com
Technology
83Low
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Peterson Technologies is a medium-sized technology company specializing in sustainability and agritech digital solutions. Operating globally across multiple industries, it offers services including geoservices, data analytics, software development, and ESG compliance solutions. The company is the technology arm of Peterson Solutions, supporting a large global workforce. The website is professionally designed, mobile-optimized, and uses modern technologies such as WordPress, HubSpot, and Google Tag Manager. Security posture is solid with HTTPS and domain transfer protections, though improvements like DNSSEC and security headers are recommended. Privacy compliance is partially addressed with a cookie consent banner but lacks explicit privacy and terms policies. Overall, the domain registration and website content indicate a legitimate and credible business presence.
Control Union Globalpetersoncontrolunion.com
Other
79Low
NIS2 47 · GDPR 80
NIS2 47 · GDPR 80
Control Union Global is a large international service provider specializing in testing, inspection, certification, laboratory services, collateral management, and pest control. Operating in over 80 countries, the company targets businesses requiring trustworthy trade and compliance services. The website reflects a professional and consistent brand image with comprehensive privacy and cookie policies, indicating a mature approach to privacy compliance. Technically, the site is built on WordPress with modern technologies including Bootstrap, jQuery, and various analytics and tracking tools such as Google Analytics, Hotjar, and Sentry. The security posture is good with HTTPS enforced and cookie consent implemented, though some security headers are not detected and no explicit security or incident response policies are published. The WHOIS data is unavailable or privacy protected, which slightly reduces trust but is common for global enterprises. Overall, the website is well-structured, mobile-optimized, and provides a good user experience with clear navigation and relevant content.
Fimlab Laboratoriot Oyfimlab.fi
Healthcare · Finland
81Low
NIS2 25 · GDPR 88
NIS2 25 · GDPR 88
Fimlab Laboratoriot Oy operates as a leading healthcare laboratory service provider in Finland, specializing in medical testing and diagnostics. The company targets healthcare professionals and patients, offering comprehensive laboratory services. The website reflects a mature digital presence with a WordPress CMS, WooCommerce integration for service offerings, and modern JavaScript libraries enhancing user experience. The site is well-optimized for mobile devices and accessibility, with clear navigation and professional design. Security posture is strong with HTTPS enforcement, security headers, and GDPR-compliant privacy and cookie policies. However, the absence of a public security policy and incident response information suggests room for improvement in transparency. WHOIS data confirms the domain's legitimacy and consistency with the business identity, supporting trustworthiness. Overall, the website demonstrates a solid balance of business credibility, technical implementation, and privacy compliance, suitable for a healthcare service provider.
Northstar Travel Groupnorthstartravelgroup.com
Media · United States
77Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Northstar Travel Group is a leading B2B information and marketing solutions company serving the business and sports travel industry globally. The company offers trusted news, data, research, and event services targeting corporate travel buyers, meeting planners, and travel professionals. It holds a strong market position with multiple well-known subsidiary brands and a comprehensive portfolio of industry events. Technically, the website employs modern technologies including Google Analytics 4, Google Tag Manager, Brightcove video player, and cookie consent mechanisms, hosted likely on AWS infrastructure. The site is well-optimized for mobile and SEO, with professional design and clear navigation. Security posture is good with HTTPS enforced and cookie consent implemented, though security headers and explicit incident response policies are absent. WHOIS data is missing, which raises some concerns but the website content and external references support legitimacy. Overall, the site is professional, trustworthy, and compliant with privacy regulations.
- GroundTruth
groundtruth.com
Media
83Low
NIS2 22 · GDPR 88
NIS2 22 · GDPR 88
GroundTruth operates as a sophisticated advertising platform specializing in location-based advertising and analytics. The company provides tools to drive in-store visits, enhance sales, and enable smarter forecasting decisions through the use of location data and ad technology software. Their market position is that of an established player in the media and advertising technology sector, targeting advertisers and businesses seeking to leverage location intelligence for marketing effectiveness. The website reflects a mature digital presence with professional design and comprehensive marketing integrations, including HubSpot, Google Tag Manager, and multiple tracking pixels. However, the absence of publicly available WHOIS data introduces some uncertainty regarding domain registration transparency. Security posture is generally strong with HTTPS and modern scripts, but the lack of explicit security headers and published privacy policies indicates room for improvement. Overall, the site is trustworthy and professional but would benefit from enhanced compliance documentation and clearer contact information.
Travel Weekly Asiatravelweekly-asia.com
Media
77Low
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
Travel Weekly Asia is a prominent B2B media platform delivering comprehensive travel industry news, analysis, and research focused on the Asian market. The website serves travel professionals, agents, and stakeholders in airlines, hotels, cruises, and related sectors. It operates under the Northstar Travel Group umbrella, leveraging digital magazines, event coverage, and advertising services to maintain a strong market presence. Technically, the site employs modern analytics and advertising technologies including Google Analytics 4, Facebook SDK, and OneTrust for cookie consent, hosted on AWS infrastructure. The site is well-structured with good SEO and mobile optimization, providing a professional user experience. Security-wise, the site uses HTTPS and cookie consent mechanisms but lacks publicly visible security policies or vulnerability disclosure information. The absence of WHOIS data for the domain raises some concerns about registration transparency, though the website content and branding appear legitimate and professional. Overall, the site is a reliable resource for travel industry professionals but would benefit from enhanced privacy disclosures and security transparency.
PhocusWirephocuswire.com
Media
77Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
PhocusWire is a specialized media platform delivering news and analysis focused on travel technology, distribution, and the digital economy within the travel, tourism, and hospitality sectors. It serves industry professionals and stakeholders by providing timely content, event coverage, and podcasts. The website demonstrates a mature digital presence with a professional design, mobile optimization, and structured data implementation, reflecting a solid technical infrastructure based on ASP.NET and integrated with modern analytics and advertising technologies such as Google Tag Manager, RudderStack, and Omeda Olytics. From a security perspective, PhocusWire enforces HTTPS and employs cookie consent mechanisms aligned with GDPR requirements, although explicit privacy policies and security contact information are not clearly presented in the analyzed content. The site lacks a published security.txt file and detailed vulnerability disclosure processes, which are recommended for enhanced transparency and incident response readiness. No critical vulnerabilities or exposed sensitive data were detected, and the site maintains good security hygiene with room for improvement in security headers and accessibility compliance. Overall, PhocusWire presents a trustworthy and professional online presence with moderate to good scores in content quality, technical implementation, security posture, and business credibility. The absence of WHOIS registration data suggests privacy protection or recent registration, which is not uncommon for media entities. Strategic recommendations include publishing comprehensive privacy and security policies, enhancing accessibility features, and establishing clear incident response contacts to further strengthen trust and compliance.
Northstar Travel Media, LLCphocuswrightconference.com
Hospitality · United States
82Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
The Phocuswright Conference website represents a well-established annual event organized by Northstar Travel Media, LLC, targeting travel industry professionals including founders, C-suite executives, and innovators. The conference focuses on delivering cutting-edge travel research, networking opportunities, and strategic insights shaping the future of travel. The site is professionally designed with comprehensive content including program details, speaker profiles, news updates, and registration information, reflecting a mature digital presence. Technically, the website employs modern JavaScript libraries and third-party services such as Google Tag Manager, Intercom, RudderStack, and Omeda Olytics for analytics and marketing, alongside a robust consent management system via OneTrust. The site is mobile optimized, accessible, and SEO-friendly, although explicit CMS or hosting details are not evident. Performance is moderate with room for optimization. From a security perspective, the site uses HTTPS and consent management but lacks visible security headers and published security policies. No critical vulnerabilities or exposed sensitive data were detected in the analyzed content. The absence of WHOIS registration details is a concern but is mitigated by the professional branding and content quality. Privacy compliance is basic, with cookie consent mechanisms in place but no explicit privacy policy found in the provided content. Overall, the website presents a low-risk profile with strong business credibility and technical implementation. Strategic recommendations include enhancing security headers, publishing clear privacy and security policies, and improving transparency around data protection and incident response to further strengthen trust and compliance.
Broadcom Inc.wavefront.com
Technology · United States
88Low
NIS2 47 · GDPR 88
NIS2 47 · GDPR 88
Broadcom Inc. is a leading enterprise technology company specializing in semiconductor and software solutions, including cloud monitoring and analytics products such as Tanzu Observability. The company targets enterprise IT organizations and DevOps teams with advanced observability and AIOps solutions to manage multi-cloud environments effectively. Broadcom's market position is strong, supported by a consistent brand presence and comprehensive product offerings in the technology sector. Technically, the website demonstrates a mature digital infrastructure utilizing modern frameworks like React, integrated analytics via Google Tag Manager, and robust cookie consent management through OneTrust. The site is well-optimized for performance, mobile responsiveness, and accessibility, reflecting a high level of digital maturity. From a security perspective, the site enforces HTTPS, employs multiple security headers, and integrates privacy and cookie policies aligned with GDPR compliance. However, explicit public security policies and incident response contacts are not prominently available, indicating areas for improvement in transparency and security communication. Overall, the website and business exhibit a high level of professionalism and trustworthiness, with no signs of blocking or malicious activity. The absence of WHOIS data is likely due to registry restrictions rather than privacy concerns, and does not detract from the site's legitimacy. Strategic recommendations include publishing detailed security policies, incident response information, and vulnerability disclosure mechanisms to enhance trust and compliance further.
- Chaos
chaos.com
Technology
82Low
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
Chaos is a technology company specializing in advanced design and visualization software that empowers artists and designers to create photorealistic imagery and animations across various creative industries. The company positions itself as an industry leader with a strong focus on innovation and quality in visualization technologies. Their website reflects a mature digital presence with professional design, clear navigation, and comprehensive content tailored to creative professionals. The technical infrastructure leverages modern web technologies including React, Google Tag Manager, and OneTrust for privacy compliance, indicating a commitment to user experience and regulatory adherence. Security posture is strong with HTTPS enforcement and standard security headers, though explicit security policies and incident response information are not publicly disclosed. Overall, the website demonstrates a high level of professionalism and trustworthiness, though the absence of WHOIS data introduces some uncertainty regarding domain registration transparency.
- Open Grid Europe GmbH
oge.net
Energy · Germany
82Low
NIS2 47 · GDPR 50
NIS2 47 · GDPR 50
Open Grid Europe GmbH operates as a leading gas transmission system operator in Germany, focusing on natural gas, biogas, hydrogen, and CO2 infrastructure. The company provides a broad range of services including transportation, technical services, and market information to shippers, network operators, and connection customers. Their website reflects a strong commitment to sustainability and climate protection, with detailed reporting and active communication channels. Technically, the site is built on Neos CMS with modern libraries such as jQuery and Bootstrap, offering good performance and mobile optimization. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though DNSSEC is not enabled and security headers are not explicitly detected. Overall, the website is professional, trustworthy, and compliant with GDPR requirements.
Higher Logicinformz.net
Technology · United States
82Low
NIS2 2 · GDPR 95
NIS2 2 · GDPR 95
Higher Logic is an enterprise-level technology company specializing in powerful online community software that connects organizations and people to foster real conversations and engagement. Their market position is that of an established SaaS provider in the online community software space, targeting organizations seeking to build and manage digital communities. The website reflects a mature digital presence with professional design, comprehensive content, and strong branding consistency. Technically, the site is built on WordPress with a modern tech stack including Yoast SEO, Google Tag Manager, Hotjar, and Piwik PRO analytics. The site is mobile-optimized, accessible, and SEO-friendly, indicating a high level of digital maturity. Performance is moderate, with extensive use of third-party scripts for analytics and marketing. From a security perspective, the website enforces HTTPS, uses security headers, and implements CSRF protection tokens. Cookie consent is managed via a robust mechanism compliant with GDPR. However, the absence of published security policies, incident response plans, and vulnerability disclosure reduces transparency. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website presents a low-risk profile with strong business credibility and privacy compliance. The main risk factor is the lack of publicly available WHOIS registration data, which slightly impacts trustworthiness. Strategic recommendations include publishing explicit security and incident response policies and adding a vulnerability disclosure program to enhance security posture and trust.
Blueprint - KOSMASqlp.at
Technology · Austria
82Low
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
qlp is a Vienna-based digital agency specializing in web design and online marketing services. The company positions itself as a creative and efficient partner for businesses seeking to enhance their digital presence with customized branding, web development, and marketing strategies. Their website reflects a professional and modern digital infrastructure built on WordPress, enhanced with modern CSS frameworks and Cloudflare for DNS and CDN services. The agency demonstrates a strong digital maturity with good SEO, mobile optimization, and accessibility features. Security posture is solid with HTTPS, security headers, and cookie consent mechanisms in place, although explicit security policies and incident response details are absent. Overall, qlp presents a trustworthy and credible business with a clear focus on client success and digital innovation.
Northstar Travel Groupnorthstartravelmedia.com
Media
77Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Northstar Travel Group is a leading B2B information and marketing solutions company serving the business and sports travel industry globally. The company operates multiple trusted media brands and hosts industry events, positioning itself as a key player in the $1.4 trillion business travel market. Their services include news, data, analysis, research, and marketing solutions tailored to travel professionals and corporate buyers. The website reflects a mature digital presence with professional design, multimedia content, and clear navigation. Technically, the site uses modern analytics and video delivery technologies, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and incident response policies are not publicly visible. WHOIS data is missing, which raises some concerns about domain registration transparency. Overall, the site is professional and trustworthy but could improve transparency and security disclosures.
- Electric Ireland
electricireland.com
Energy · United Kingdom
84Low
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
Electric Ireland is a prominent electricity supplier serving Northern Ireland, offering a range of services including electricity supply, online account management, keypad meter top-ups, and direct debit setups. The website targets residential and business customers in Northern Ireland and positions itself as a leading energy provider in the region. The digital infrastructure is built on Sitefinity CMS with modern technologies such as jQuery, Bootstrap, and Google Tag Manager, providing a good user experience with mobile optimization and accessibility features. Security posture is strong with HTTPS enforcement, security headers, and cookie consent mechanisms, although explicit security policies and incident response information are not published. The absence of WHOIS data reduces domain trustworthiness, but the overall website professionalism and business presence indicate legitimacy. Strategic recommendations include publishing security policies, vulnerability disclosure, and verifying domain registration details.
- Anura Solutions LLC
anura.io
Technology
77Low
NIS2 47 · GDPR 83
NIS2 47 · GDPR 83
Anura Solutions LLC operates a leading cybersecurity platform specializing in ad fraud detection and prevention. Their flagship product offers unmatched accuracy in identifying bots, malware, and human fraud to protect digital advertising assets and improve campaign performance. The company is recognized with multiple industry certifications and trusted by over 2 million domains, positioning it as a market leader in ad fraud technology. The website is professionally designed, mobile-optimized, and powered by HubSpot CMS, leveraging modern web technologies and marketing automation tools. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities. Privacy compliance is robust with clear policies and consent mechanisms. WHOIS data is privacy protected, which is common for cybersecurity firms, but the website's trust signals and certifications support its legitimacy. Overall, Anura demonstrates a mature digital presence with a strong focus on security, privacy, and business credibility.
Richpanelrichpanel.com
E-commerce
80Low
NIS2 47 · GDPR 80
NIS2 47 · GDPR 80
Richpanel is a technology company specializing in AI-powered customer service platforms tailored for ecommerce businesses. Their platform consolidates multiple communication channels such as email, chat, and social media into a unified dashboard, enabling automation and self-service to reduce support costs and improve customer satisfaction. Positioned as a leader in AI for ecommerce support, Richpanel offers competitive pricing and guarantees cost savings and ticket reduction within 60 days. The website demonstrates a mature digital presence with modern technologies, strong branding, and extensive customer testimonials. Technically, the site is built on Webflow with integrations of analytics and marketing tools like HubSpot, Facebook Pixel, and Google Tag Manager, ensuring good performance and SEO optimization. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security headers could be improved. Privacy compliance is addressed with clear policies and cookie consent mechanisms. Overall, Richpanel presents a professional, trustworthy, and technically sound platform with a strong market position in ecommerce customer service solutions.
Bravidabravida.fi
Energy · Finland
77Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Bravida is a large Nordic technical service provider specializing in building installations and maintenance, with a strong presence in Finland and neighboring countries. The company offers a broad range of technical services that support building life systems, targeting property owners and facility managers. Their website reflects a mature digital presence with multilingual support and comprehensive cookie consent management, indicating compliance with GDPR and privacy best practices. Technically, the site leverages modern analytics tools including Microsoft Application Insights and Google Analytics, hosted likely on Microsoft Azure, and uses a CMS inferred to be EPiServer. Security posture is strong with HTTPS enforced, anti-CSRF protections, and security headers implemented, though explicit security policies and incident response information are not published. Overall, the site is professional, trustworthy, and well-structured, with room for improvement in accessibility and explicit security disclosures.
Legality Srlwhistleblowing.software
Government · Italy
78Low
NIS2 47 · GDPR 83
NIS2 47 · GDPR 83
Legality Srl operates the website whistleblowing.software, providing specialized whistleblowing software solutions tailored for public authorities and private companies. The company positions itself as a market leader in compliance and secure reporting technology, emphasizing data security and regulatory adherence such as GDPR and ISO 27001 standards. The website reflects a mature digital presence with professional branding and clear target audience focus. Technically, the site is built on WordPress with modern plugins and frameworks, ensuring good SEO and mobile responsiveness. Security posture is strong with HTTPS, security headers, and use of Google reCAPTCHA Enterprise, although some security policy disclosures could be improved. Overall, the domain's WHOIS data is unavailable, which limits full trust verification, but the business and website content indicate a legitimate and professional operation.
DigitalPAdigitalpa.it
Technology · Italy
78Low
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
DigitalPA is a well-established Italian company specializing in software and services tailored for businesses and public administration, focusing on procurement, compliance, and digital transformation. Their market position is strong within Italy, offering a comprehensive suite of solutions including eProcurement, whistleblowing, risk management, and institutional communication platforms. The website reflects a mature digital presence with professional design, clear navigation, and extensive content targeting their core audience of public entities and enterprises. Technically, the site employs modern web technologies such as Bootstrap, jQuery, and lazy loading, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though some improvements in security headers and incident response transparency are recommended. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.
—
79Low
NIS2 2 · GDPR 100
NIS2 2 · GDPR 100
Van Oordvanoord.com
Energy · Netherlands
77Low
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Van Oord is a globally recognized marine contractor specializing in marine infrastructure, offshore wind, coastal protection, and land reclamation with over 155 years of experience. The company positions itself as a leader in delivering innovative and sustainable marine solutions, targeting clients in energy, transportation, and infrastructure sectors worldwide. The website reflects a mature digital presence with professional design, multilingual support, and active engagement through social media channels. Technically, the site leverages modern technologies including React, Drupal CMS, and integrates Google Analytics and Tag Manager for data insights. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and incident response information are absent. The WHOIS data is missing or inaccessible, which raises some concerns about domain registration transparency, but the overall business credibility remains high based on website professionalism and trust signals. Strategic recommendations include enhancing security headers, publishing security policies, and improving transparency around domain registration and incident response.
- HHeerema
heerema.com
Energy
76Low
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Heerema is a well-established company specializing in offshore marine contracting, fabrication, and engineering solutions primarily serving the energy and transportation sectors. The company offers a broad range of services including offshore wind projects, transport and installation, decommissioning, and fabrication services. The website reflects a professional corporate presence with consistent branding and a focus on quality, safety, and social responsibility. The domain age and registration details support the legitimacy and maturity of the business. Technically, the website is built on the HubSpot CMS platform, leveraging modern web technologies such as Google Analytics, Google Tag Manager, and RequireJS. The site is moderately optimized for performance and mobile responsiveness, with basic SEO and accessibility features. However, some improvements could be made in accessibility and SEO optimization. From a security perspective, the website uses HTTPS with a good SSL configuration but lacks DNSSEC and visible security headers, which are recommended for enhanced security. There is no publicly available security policy or incident response information, which could be improved to increase trust and compliance. Privacy and cookie policies are present with a consent mechanism, but GDPR compliance indicators are basic. Overall, the website presents a trustworthy and professional image with moderate technical and security maturity. Strategic improvements in security headers, DNSSEC, and published security policies would enhance the security posture and compliance standing.
AF Gruppenafgruppen.com
Energy · Norway
78Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
AF Gruppen is a leading contracting and industrial group listed on the Oslo Stock Exchange, specializing in sectors such as offshore decommissioning and circularity. The website reflects a professional corporate presence with a focus on business clients and investors. The technical infrastructure is modern, leveraging Microsoft Azure cloud services, ASP.NET Core framework, and integrated analytics and marketing tools such as Google Analytics and Optimizely. The site implements GDPR-compliant cookie consent mechanisms and uses security best practices including HTTPS and security headers. However, the absence of WHOIS data and lack of visible contact information on the homepage slightly reduce trustworthiness. Overall, the website is well-structured and secure, supporting the company's market position as a large energy sector player.
Barf Boxbarf-box.de
E-commerce · Germany
76Low
NIS2 2 · GDPR 100
NIS2 2 · GDPR 100
Barf-Box.de is a German e-commerce website specializing in premium raw dog food products, including BARF Komplettmenüs, snacks, and training treats. The site targets dog owners seeking natural and high-quality nutrition options for their pets. The business operates primarily online, leveraging WooCommerce on WordPress with Elementor for site design and user experience. The company emphasizes express shipping and sustainable packaging, positioning itself as a niche leader in the German premium pet food market. Technically, the website uses a modern WordPress stack with WooCommerce and Elementor, integrated with Google Tag Manager and Borlabs Cookie for consent management and tracking. The site is mobile-optimized and employs structured data (JSON-LD) for SEO enhancement. Performance is moderate, with good SEO and accessibility basics in place. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms, but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the analysis. Privacy compliance is partially addressed via cookie consent, but no privacy policy or terms of service pages were found in the provided content. Overall, Barf-Box.de presents a professional and trustworthy e-commerce platform with solid technical foundations and good business credibility. Strategic improvements in security headers, privacy documentation, and incident response transparency would enhance its security posture and compliance standing.
- UUnicorn University
unicornuniversity.net
Education · Czech Republic
77Low
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Unicorn University is a private higher education institution specializing in information technology, data analysis, and business education. Established in 2013, it targets students and professionals seeking specialized education in these fields. The website presents a professional and consistent brand image with good content quality and user experience. Technically, the site leverages modern JavaScript frameworks such as React and UU5, hosted on a platform associated with Plus4U, and integrates Google Tag Manager for analytics. Security posture is moderate with HTTPS enabled and domain registration consistent and legitimate; however, there is room for improvement in security headers and privacy compliance. No blocking or WAF mechanisms were detected, and the site content is accessible and safe for general audiences.
- AAalborg Kommune
aalborg.dk
Government · Denmark
85Low
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
Aalborg Kommune operates as the official municipal government website for the Aalborg region in Denmark, providing a comprehensive range of services and information for citizens, businesses, tourists, and the press. The site offers self-service solutions, contact information, and updates on local governance and community events, positioning itself as a trusted and authoritative source for local government services. The website is well-branded and professionally maintained, reflecting its role as a public sector entity. Technically, the website leverages modern web technologies including Matomo for analytics, Monsido for heatmaps, Cludo for search functionality, and is hosted on Microsoft Azure. The use of a custom CMS (Moliri) and various JavaScript libraries indicates a mature digital infrastructure. Performance and mobile optimization are good, with accessibility features implemented to support a broad user base. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms aligned with GDPR requirements. While explicit security headers are not fully visible, the overall posture is strong with no evident vulnerabilities or exposed sensitive data. Privacy compliance is robust, supported by a comprehensive privacy policy and cookie management system. Overall, the website demonstrates a high level of professionalism, security, and compliance appropriate for a government entity. The lack of WHOIS data is mitigated by strong trust signals on the site itself. Strategic recommendations include enhancing security header implementation and publishing a vulnerability disclosure policy to further strengthen trust and security posture.
- SSilkeborg Kommune
silkeborg.dk
Government · Denmark
83Low
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
Silkeborg Kommune operates as the official municipal government website for the Silkeborg region in Denmark, providing a comprehensive range of public services and information to residents, businesses, and visitors. The site covers diverse topics such as waste management, employment, housing, family services, culture, environment, and local democracy, positioning itself as a central digital hub for municipal engagement and service delivery. The website is well-branded and consistent with the identity of a government entity, targeting a broad audience within the municipality. Technically, the website leverages modern web technologies including JavaScript, CSS, and HTML5, with a CMS platform identified as Moliri CMS and hosting on Microsoft Azure. It integrates advanced components such as BUI (Bleau UI) for UI elements, Cludo for search functionality, and Azure Application Insights for monitoring. The site demonstrates good mobile optimization, accessibility, and SEO practices, contributing to a positive user experience. From a security perspective, the website enforces HTTPS and implements a detailed cookie consent mechanism compliant with GDPR. However, it lacks visible security headers and explicit security or incident response policies. No vulnerabilities or sensitive data exposures were detected in the content. The domain registration is consistent and longstanding, reinforcing the site's legitimacy. Overall, Silkeborg Kommune's website is a professionally maintained government portal with strong content quality, technical infrastructure, and privacy compliance. Strategic improvements in security headers, incident response transparency, and DNSSEC implementation would further enhance its security posture and trustworthiness.
Other · United States
76Low
NIS2 17 · GDPR 95
NIS2 17 · GDPR 95
Mintz, Levin, Cohn, Ferris, Glovsky and Popeo, P.C. is a large, well-established Am Law 100 law firm with a global presence and a broad range of legal services including corporate law, litigation, and intellectual property. The firm maintains a professional and content-rich website built on Drupal 10, integrating modern analytics and marketing technologies while ensuring GDPR and cookie compliance. The security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response contacts are not publicly available. Overall, the website reflects a mature digital presence consistent with a top-tier legal services provider.
Peterson Solutionspeterson-solutions.com
Energy
78Low
NIS2 2 · GDPR 80
NIS2 2 · GDPR 80
Peterson Solutions is a global consultancy specializing in technology, sustainability, and logistics services primarily targeting the energy and transportation sectors. The company operates through multiple regional subsidiaries and partner companies, offering consultancy, technology solutions, sustainability services, certification support, and training via its academy. The website reflects a mature digital presence with professional design, clear navigation, and multimedia content that supports its business positioning. Technically, the website is built on WordPress with modern libraries and tools such as jQuery, Bootstrap, WP Rocket for performance optimization, and integrates analytics and user behavior tracking via Google Tag Manager and Hotjar. The site is mobile-optimized and SEO-friendly, with structured data enhancing search engine understanding. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks visible security headers and explicit incident response or vulnerability disclosure information. No sensitive data exposure or vulnerabilities were detected in the HTML content. The absence of WHOIS registrant data slightly reduces trust but does not outweigh the professional presentation and global footprint. Overall, the website presents a low-risk profile with strong business credibility and good privacy compliance. Strategic improvements in security headers, incident response transparency, and explicit contact information would enhance trust and security posture further.
—
82Low
NIS2 2 · GDPR 100
NIS2 2 · GDPR 100
- SSSE Airtricity
sseairtricity.com
Energy · Ireland
82Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
SSE Airtricity is Ireland’s largest provider of cleaner, greener energy, offering electricity, gas, and combined energy services primarily targeting residential and business customers in Ireland. The company operates a modern, well-structured website built on Next.js with integrations for analytics and cookie consent, reflecting a mature digital presence. The technical infrastructure includes Google Tag Manager, Google Analytics, reCAPTCHA, and New Relic monitoring, indicating a focus on performance and security monitoring. Security posture is generally good with HTTPS enforced and bot protection in place, though improvements are recommended in security headers and publishing formal security policies. Privacy compliance is partially addressed with a cookie consent mechanism but lacks explicit privacy and terms of service documentation in the analyzed content. The domain registration is consistent and appropriate for the business, supporting legitimacy. Overall, the website is professional, trustworthy, and well-positioned in its market segment, with room for enhanced privacy and security transparency.
SSE Thermalssethermal.com
Energy · United Kingdom
77Low
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
SSE Thermal is a UK-based energy company focused on providing flexible thermal energy solutions to support the country's transition to net zero emissions. The company emphasizes low-carbon technologies including carbon capture and hydrogen power projects. The website positions SSE Thermal as a key player in the energy sector with a strong commitment to sustainability and innovation. Technically, the website is built on the Umbraco CMS platform, uses modern web technologies, and includes a cookie consent mechanism compliant with GDPR. However, the absence of WHOIS registration data raises concerns about domain legitimacy, although the professional presentation and links to SSE plc suggest authenticity. Security posture is generally good with HTTPS enforced and no exposed sensitive data, but the lack of security headers and formal security policies indicates room for improvement. Overall, the site is well-designed and trustworthy but would benefit from enhanced transparency in domain registration and security disclosures.
Flotation Energyflotationenergy.com
Energy
76Low
NIS2 17 · GDPR 65
NIS2 17 · GDPR 65
Flotation Energy is a specialized global offshore wind developer focusing on pioneering floating wind projects in deep waters. The company aims to accelerate the transition to renewable energy by delivering large-scale offshore wind farms, with a strong track record in project development, consenting, construction, and operations. Their market position is that of a leader at the forefront of floating offshore wind technology, targeting international markets with a medium-sized organizational footprint. Technically, the website is built on WordPress with modern optimization tools such as NitroPack and uses Google Analytics for tracking. The site is well-structured, mobile-optimized, and performs well, reflecting a mature digital infrastructure. However, some security best practices like DNSSEC and security headers could be improved. From a security perspective, the site uses HTTPS with a secure domain registration status but lacks published security policies or incident response contacts. Cookie consent is implemented, indicating basic GDPR compliance, but privacy and terms of service pages are missing, which could be improved for better compliance and user trust. Overall, the website presents a professional and trustworthy image with good content quality and technical implementation. Strategic recommendations include enhancing security headers, publishing privacy and security policies, and improving transparency around incident response and data protection roles.
- Laboratoire Gallia
laboratoire-gallia.com
Healthcare · France
79Low
NIS2 2 · GDPR 65
NIS2 2 · GDPR 65
Laboratoire Gallia is a French specialist in infant nutrition products, providing both commercial products and extensive parental support content. The website targets parents and healthcare professionals with expert advice, calculators, and a dedicated professional portal. The brand is associated with Danone, as indicated by hosting and media assets. The digital infrastructure is modern, leveraging Adobe Experience Manager CMS and multiple analytics and marketing tools. The site is well-structured, mobile-optimized, and includes comprehensive privacy and cookie policies with consent mechanisms. However, the absence of WHOIS data for the domain is a notable anomaly that requires further verification. Security posture is generally good with HTTPS and cookie consent but lacks explicit security policies and some security headers. Overall, the website is professional, trustworthy, and content-rich, serving its audience effectively.
- Blédina
bledina.com
Retail · France
79Low
NIS2 2 · GDPR 65
NIS2 2 · GDPR 65
Blédina is a well-established French baby food brand offering a wide range of products, recipes, and parenting advice targeted at infants and toddlers aged 4/6 to 36 months. The website demonstrates a strong market position with a focus on natural ingredients, sustainability, and consumer engagement through an e-commerce platform and a dedicated mobile app. The brand holds a B Corp certification, underscoring its commitment to social and environmental responsibility. Technically, the website is built on WordPress with modern frameworks like Bootstrap 4 and uses popular JavaScript libraries such as jQuery and Glide.js for UI components. The site is mobile-optimized and provides a good user experience with clear navigation and rich content. Security posture is generally good with HTTPS enforced and cookie consent mechanisms in place, though security headers could be improved. WHOIS data is not publicly available, likely due to privacy protection, but the website's professionalism and transparency, including product recall notices and contact options, support its legitimacy. Overall, the site scores well on content quality, technical implementation, privacy compliance, and business credibility.
La Salvetatlasalvetat.fr
Other · France
77Low
NIS2 2 · GDPR 55
NIS2 2 · GDPR 55
La Salvetat is a French brand specializing in natural mineral sparkling water with low sodium content, targeting health-conscious consumers. The website is professionally designed, hosted on Adobe Experience Manager Cloud, and integrates modern web technologies and marketing tools. Privacy and cookie policies are well implemented, reflecting GDPR compliance. However, the absence of WHOIS data and lack of explicit contact details on the site slightly reduce trustworthiness. Security posture is adequate with HTTPS enforced but could be improved by adding security headers and explicit security policies. Overall, the site presents a credible and professional digital presence aligned with its parent company Danone.
Volvicvolvic.fr
Retail · France
78Low
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
Volvic is a well-established French brand specializing in natural mineral water and flavored beverages, operating under the parent company Danone. The website presents a professional and consistent brand image with comprehensive product information, environmental commitments, and visitor experience offerings. The technical infrastructure is modern, leveraging Adobe Experience Manager CMS and cloud hosting, with good performance and mobile optimization. Security posture is strong with HTTPS, security headers, and privacy compliance mechanisms in place, although explicit security policy and incident response information are absent. The domain WHOIS data is unavailable, limiting direct verification of domain registration legitimacy, but the website content and branding strongly indicate a legitimate enterprise. Overall, the site is trustworthy, user-friendly, and compliant with privacy regulations.
Les 2 Vachesles2vaches.com
Retail · France
80Low
NIS2 2 · GDPR 65
NIS2 2 · GDPR 65
Les 2 Vaches is a French organic dairy product brand emphasizing environmental sustainability and social responsibility, as evidenced by their B Corp certification and commitment to bio and fair trade principles. The website is built on WordPress CMS and uses modern JavaScript libraries such as jQuery, GSAP, and Lottie for animations and interactivity. The site is well-structured, mobile-optimized, and provides a good user experience with clear navigation and relevant content focused on organic dairy products. Security posture is solid with HTTPS enabled, though there is room for improvement by adding security headers and enhancing form protections. Privacy compliance is moderate, with a cookie consent mechanism present but no visible privacy policy or terms of service pages. The absence of WHOIS data for the domain is a concern and should be investigated further to confirm domain legitimacy. Overall, the website presents a trustworthy and professional image suitable for its target audience.
Pixl8 Group Limitedpixl8.co.uk
Technology · United Kingdom
79Low
NIS2 47 · GDPR 100
NIS2 47 · GDPR 100
Pixl8 Group Limited is a well-established digital agency specializing in technology solutions for membership organisations, associations, and charities. With over 20 years of experience, the company offers a broad range of services including web design, CRM systems, event management software, and digital consultancy. Their market position is strong within the non-profit sector, serving over 200 organizations globally. The company operates multiple offices worldwide, indicating a medium-sized enterprise with international reach. Technically, the website is built on modern frameworks and platforms such as Bootstrap and Preside CMS, with robust analytics and marketing integrations managed through consent mechanisms. Security-wise, Pixl8 demonstrates a mature posture with ISO 27001 certification, HTTPS enforcement, and cookie consent compliance, though some security headers could be improved. Overall, the website is professional, trustworthy, and compliant with GDPR, making it a credible digital partner in its niche.
- SCM Hänssler
scm-haenssler.de
Retail · Germany
76Low
NIS2 2 · GDPR 73
NIS2 2 · GDPR 73
SCM Hänssler operates as a Christian-focused e-commerce retailer specializing in books, music, and related products. The website serves a German-speaking audience with a broad catalog of Christian literature and media, positioning itself as a trusted provider within this niche. The business model centers on online retail with a strong emphasis on customer service and compliance with European data protection regulations. Technically, the site is built on the Magento platform, leveraging modern web technologies and analytics tools such as Google Analytics and Matomo. The site demonstrates good mobile optimization, accessibility, and SEO practices, contributing to a positive user experience. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though there is room for improvement in security headers and incident response transparency. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.
Energy · United Kingdom
76Low
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Scottish and Southern Electricity Networks (SSEN) operates as a major electricity distribution network operator in the United Kingdom, serving customers primarily in Scotland and southern England. The company provides essential services including electricity distribution, power cut reporting, and customer support. SSEN is a subsidiary of SSE plc, a well-established energy company. The website reflects a professional and customer-focused approach, offering 24/7 contact centers and real-time power outage information. The target audience includes residential and business electricity consumers within their service regions. From a technical perspective, the website leverages modern technologies such as Episerver CMS, Microsoft Azure Application Insights for analytics, Google Tag Manager, and OneTrust for cookie consent management. The site is hosted likely on Microsoft Azure infrastructure, ensuring reliable performance and scalability. The website demonstrates good mobile optimization and basic accessibility features, with a moderate performance profile. Security posture is strong with HTTPS enforcement, appropriate security headers, and no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies, GDPR adherence, and consent mechanisms. However, the site lacks a publicly available security policy and incident response contact details, which could enhance transparency and trust. Overall, SSEN's website is a trustworthy and professional platform that effectively supports its business operations and customer engagement. Strategic improvements in security transparency and accessibility could further strengthen its digital maturity and risk management.
Visit Brusselsvisit.brussels
Hospitality · Belgium
78Low
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Visit Brussels operates as the official tourism website for the city of Brussels, providing rich content about the city's history, architecture, gastronomy, culture, and visitor services. The website targets tourists and visitors seeking information about Brussels, positioning itself as a key resource for travel planning and cultural engagement. The business model focuses on destination marketing and tourism promotion, supported by a medium-sized organizational structure likely linked to government or public tourism bodies. Technically, the website leverages modern web technologies including Adobe Experience Manager CMS, Cookiebot for cookie consent management, Google Tag Manager, and LinkedIn Insight Tag for analytics and marketing. The site is hosted likely behind Cloudflare, ensuring good performance and security. The website demonstrates good mobile optimization, accessibility, and SEO practices, contributing to a positive user experience. From a security perspective, the site enforces HTTPS and employs a robust cookie consent mechanism compliant with GDPR. However, explicit security headers and detailed security policies are not publicly visible, indicating room for improvement in security transparency and incident response readiness. No critical vulnerabilities or exposed sensitive data were detected. Overall, Visit Brussels presents a trustworthy and professional online presence with strong compliance to privacy regulations and effective use of marketing and analytics tools. Strategic recommendations include enhancing security header implementation, publishing security and incident response policies, and adding a terms of service page to improve legal clarity and user trust.
- FreeWheel
freewheel.tv
Media
80Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
FreeWheel operates as a leading technology platform that connects advertisers directly to streaming video inventory from top publishers, eliminating intermediaries to maximize working media dollars. Their offerings include suites tailored for media buyers and sellers, facilitating programmatic video advertising and monetization strategies. The website demonstrates a mature digital infrastructure with WordPress CMS, integrated analytics, and marketing tools such as Google Analytics, Facebook Pixel, and OneTrust for cookie consent, reflecting a high level of digital maturity and compliance awareness. Security posture is solid with HTTPS enforced and cookie consent implemented, though the absence of visible security headers and a public security policy suggests room for improvement. The WHOIS data is unavailable, which slightly impacts transparency but the professional website and consistent branding support the company's legitimacy. Overall, FreeWheel presents a trustworthy and professional online presence suitable for enterprise-level media advertising clients.
Weboramaweborama.com
Technology · France
80Low
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Weborama is a European leader in AdTech specializing in Semantic Artificial Intelligence solutions for agencies, publishers, and advertisers. The company focuses on addressing technological challenges in digital advertising while maintaining respectful user relationships. The website reflects a mature business with a domain registered since 2000 and a professional online presence. Technically, the site is built on WordPress using the Divi theme and common JavaScript libraries such as jQuery and Owl Carousel, hosted on AWS infrastructure. SEO optimization is good, with proper meta tags and structured data. Security posture is moderate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. Privacy compliance is weak due to missing explicit privacy and cookie policies. Overall, the site is professional and trustworthy but could improve transparency and security practices.