Medium-risk security reports
99,068 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,180001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
20,351–20,400 of 99,068
Rewritersrewriters.it
Media · Italy
71Medium
NIS2 17 · GDPR 95
NIS2 17 · GDPR 95
Rewriters is a small Italian cultural media platform and movement founded in 2019 by Eugenia Romanelli. It focuses on contemporary culture, arts, social issues, and sustainability, offering editorial content, events, and an online shop. The website is built on WordPress with a modern tech stack including SEO and donation plugins, and integrates multiple advertising and tracking services. The site demonstrates good technical maturity with HTTPS, DNSSEC, and cookie consent mechanisms in place. Security posture is strong with standard security headers and no critical vulnerabilities detected. Privacy compliance is well addressed with comprehensive policies and consent banners. Overall, the site is professional, trustworthy, and well-positioned in its niche cultural media market.
- WWaiting for the redirectiron...
liberopensiero.eu
Other
63Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
The website liberopensiero.eu is currently inaccessible beyond a security challenge page that performs a browser integrity check and automatic redirect. The visible content is minimal, showing a loading spinner and a message indicating a redirect in 4 seconds. The site appears to be running outdated CMS versions (Joomla 1.5 and WordPress 2.5), which are known to have multiple security vulnerabilities. No privacy, cookie, or terms of service policies are present, nor is there any contact or business information visible. The only external link is to bitninja.io, a security service provider, indicating some level of security protection is in place. Overall, the site lacks professional content and trust indicators, and the security posture is weak due to outdated software and missing compliance elements.
Media · Italy
53Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
EMI - Editrice Missionaria Italiana is a well-established Italian publishing company specializing in books, cultural events, and educational materials with a mission-oriented focus. The company operates under Società editoriale Il Portico Spa and has a strong market presence in Italy, targeting a general audience interested in literature and cultural content. The website reflects a professional and consistent brand image, offering a variety of services including book sales, event promotion, and newsletter subscriptions. Technically, the site employs modern web technologies such as Bootstrap, jQuery, and Swiper.js, with good mobile optimization and SEO practices. Security-wise, the site uses HTTPS with DNSSEC enabled and implements cookie consent via Iubenda, though it lacks explicit security headers and a published security policy. Overall, the site is trustworthy, compliant with GDPR, and provides clear contact information and social media integration.
Non-profit · Italy
58Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
Centro Nuovo Modello di Sviluppo is an Italian non-profit association focused on social, economic, and environmental advocacy, including campaigns on debt, peace, and critical consumption. The website serves as an informational and educational platform targeting socially conscious Italian-speaking audiences. Technically, the site is built on Joomla CMS using older JavaScript libraries such as MooTools and jQuery, with moderate performance and basic mobile optimization. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks modern security headers and updated libraries. Privacy compliance is basic with a privacy policy and cookie banner present, though no terms of service or incident response information is available. Overall, the site is functional and trustworthy for its niche but could benefit from technical and security improvements.
Young European Greensfyeg.org
Non-profit · Belgium
68Medium
NIS2 17 · GDPR 58
NIS2 17 · GDPR 58
Young European Greens is a European non-profit youth political organization focused on green and progressive activism. The organization operates a well-structured website hosted on Squarespace, providing information about its campaigns, events, and member organizations. The technical infrastructure is modern and leverages standard web technologies and third-party services such as Google Tag Manager and social media integrations. Security posture is solid with HTTPS and HSTS enabled, though DNSSEC is not implemented. Privacy compliance is weak due to the absence of explicit privacy and cookie policies or consent mechanisms. No contact emails or phone numbers are explicitly provided on the site, which may impact user trust and compliance. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and security disclosures.
ARCOarcolab.org
Other · Italy
70Medium
NIS2 22 · GDPR 85
NIS2 22 · GDPR 85
ARCO is a small Italian consultancy and research organization specializing in social economy, local and inclusive development, impact evaluation, and sustainable food systems. The website is professionally designed using WordPress with a range of plugins and marketing tools such as MailerLite and Google Analytics. The content is primarily in Italian with English language support, targeting stakeholders interested in social and sustainable development in Italy. The technical infrastructure is moderate in performance and mobile optimized, but lacks visible security headers and explicit privacy or cookie policies. WHOIS data is unavailable, limiting domain trust verification. Overall, the site presents a professional image but would benefit from enhanced security and compliance transparency.
Associazione Laudato si’laudatosi-alleanza-clima-terra-giustizia-sociale.it
Other · Italy
52Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Associazione Laudato si’ is a small Italian non-profit organization dedicated to climate, environmental, and social justice inspired by Pope Francis' encyclical Laudato si’. The organization engages in advocacy, education, and community activities, including seminars, publications, and workshops. Their website is built on WordPress using the Avada theme and integrates SEO and analytics tools, reflecting a moderate level of digital maturity. The site is well-structured, mobile-optimized, and provides relevant content for its target audience. Security posture is adequate with HTTPS enforced, but lacks some security headers and formal privacy and cookie policies, which are important for compliance and trust. The WHOIS data is incomplete and shows an unusual domain status, which slightly detracts from the overall trustworthiness. Strategic recommendations include adding privacy and cookie policies, improving security headers, and clarifying domain registration details to enhance credibility and compliance.
Earth4Allearth4all.life
Other
73Medium
NIS2 17 · GDPR 95
NIS2 17 · GDPR 95
Earth4All is a non-profit advocacy and research initiative focused on transforming economic systems to prioritize wellbeing and planetary stability. The organization leverages scientific research, cultural engagement, and policy advocacy to promote sustainable development globally. The website is built on WordPress with modern tools like Elementor and integrates Google Analytics and CookieYes for tracking and compliance. Security posture is good with HTTPS and bot protection, though explicit security policies and privacy documentation are lacking. The domain WHOIS data is privacy protected, which is common for such organizations but limits transparency. Overall, the site presents a professional and trustworthy front with room for improvement in privacy and security disclosures.
- WWaiting for the redirectiron...
colloquidimartinafranca.it
Other
60Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
The website colloquidimartinafranca.it currently serves a security challenge page that blocks direct access to its content, indicating the presence of a Web Application Firewall or similar security mechanism. The domain is registered since 2014 with DNSSEC enabled, suggesting a legitimate registration. However, the visible website content is minimal, outdated, and primarily shows a redirect and browser integrity check page. The detected CMS versions, Joomla 1.5 and WordPress 2.5, are significantly outdated and pose serious security risks. No privacy, cookie, or terms of service policies are present, nor is there any contact or business information visible on the page. The only external link is to bitninja.io, a security service provider, indicating some level of security protection is in place.
- WWaiting for the redirection...
rete-ries.it
Technology
55Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
The website at rete-ries.it currently serves as a security challenge page implemented by BitNinja, designed to block and verify visitors via CAPTCHA before granting access. This indicates the site is protected against automated or malicious traffic. The domain is registered since 2020 with a valid expiry in 2025 and no privacy protection, suggesting legitimate ownership. However, the actual website content is minimal and does not provide business or contact information, privacy policies, or terms of service. The technical stack includes AngularJS and jQuery, with legacy CMS references in meta tags, but the site is primarily a security gateway. Security posture shows basic best practices like CAPTCHA and IP greylisting but lacks DNSSEC and security headers. Overall, the site is currently inaccessible without passing the security challenge, limiting full content and compliance analysis.
ISDE Italiaisde.it
Healthcare · Italy
64Medium
NIS2 2 · GDPR 80
NIS2 2 · GDPR 80
ISDE Italia is a well-established non-profit association of medical professionals dedicated to environmental health advocacy in Italy. The organization provides campaigns, scientific publications, events, and public awareness initiatives targeting medical professionals and the general public interested in environmental and health issues. The website reflects a medium-sized organization with consistent branding and a clear mission, supported by active social media channels and a GDPR-compliant newsletter subscription system. Technically, the site is built on WordPress using modern plugins and frameworks such as Bootstrap and Elementor, ensuring a good user experience and mobile optimization. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, though formal security policies and incident response contacts are absent. Overall, the website is professional, trustworthy, and compliant with privacy regulations, making it a reliable resource for its audience.
Ultima Generazioneultima-generazione.com
Non-profit · Italy
58Medium
NIS2 2 · GDPR 85
NIS2 2 · GDPR 85
Ultima Generazione is a non-profit climate activism organization founded in 2021 in Italy, focused on nonviolent civil resistance against climate and social crises. The website serves as a platform for campaigns such as supermarket boycotts, events, and donations, targeting environmentally and socially conscious Italian citizens. Technically, the site is built on WordPress using the Divi theme, integrating analytics tools like Matomo, Google Tag Manager, and Hotjar, and hosted by Infomaniak Network SA. Security posture is solid with HTTPS enforced and domain transfer protections, though DNSSEC is not enabled and some security headers could be improved. Privacy compliance is strong with clear cookie and privacy policies and consent mechanisms. Overall, the website is professional, content-rich, and trustworthy, supporting the organization's mission effectively.
Club of Romeclubofrome.org
Non-profit
58Medium
NIS2 10 · GDPR 68
NIS2 10 · GDPR 68
The Club of Rome is a well-established non-profit organization dedicated to addressing global systemic challenges such as climate emergency, economic reform, and youth leadership. The website serves as a platform for disseminating research, policy briefs, and hosting events, targeting policymakers, academics, and activists. Technically, the site is built on WordPress with a modern tech stack including Divi theme, Bootstrap, and various plugins for events and social sharing. The site is moderately performant, mobile-optimized, and SEO-friendly. Security posture is solid with HTTPS, hCaptcha integration, and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is strong with clear policies and consent mechanisms. Overall, the site projects high professionalism and trustworthiness, though WHOIS data is privacy protected, which is typical for non-profits.
- AAssociazione Pensare Insieme
pensareinsieme.it
Non-profit · Italy
65Medium
NIS2 47 · GDPR 95
NIS2 47 · GDPR 95
Associazione Pensare Insieme operates as a non-profit think tank and cultural association based in Italy, focusing on political, social, economic, and cultural discourse. The organization publishes articles, organizes events, and distributes newsletters to engage a general audience interested in these topics. The website is professionally designed using WordPress, with good SEO and mobile optimization, reflecting a moderate level of digital maturity. Security measures include HTTPS enforcement, security headers, and a cookie consent mechanism, though explicit security policies and incident response contacts are absent. Overall, the site presents a trustworthy and professional image with room for enhancement in security transparency and accessibility.
Friends of the Earth Europefriendsoftheearth.eu
Other
73Medium
NIS2 22 · GDPR 45
NIS2 22 · GDPR 45
Friends of the Earth Europe is a large grassroots environmental justice network campaigning for people-powered solutions to climate and ecological crises. The website positions itself as Europe's biggest network in this sector, focusing on advocacy and community mobilization. Technically, the site is built on WordPress with a modern theme and plugins, including privacy-focused Matomo analytics and SEO optimizations. Security posture is moderate with HTTPS enabled and some security plugins active, but lacks explicit security headers and formal policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is professional, trustworthy, and content is safe for general audiences.
Non-profit · Belgium
68Medium
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
The European Environmental Bureau (EEB) is a well-established non-profit organization founded in 1974, serving as Europe’s largest network of environmental citizens’ organizations. It represents over 190 member organizations across 41 countries, advocating for environmental sustainability and policy influence at the European level. The website reflects a mature digital presence with comprehensive content, clear navigation, and active engagement channels including social media and newsletters. The organization’s market position is strong within the environmental advocacy sector, supported by EU funding and a broad membership base. Technically, the website is built on WordPress with modern plugins and frameworks such as Elementor and Contact Form 7, hosted by OVH sas. The site is mobile-optimized and employs standard web technologies including jQuery and Slick Slider. Performance is moderate with good SEO and accessibility basics in place. Security posture is solid with HTTPS enforced, domain locking, and cookie consent mechanisms, though DNSSEC is not enabled and some advanced security headers are missing. From a security perspective, the site shows good compliance with GDPR and privacy regulations, featuring a comprehensive privacy policy and cookie management. Incident response contact is provided via a complaints email. No critical vulnerabilities or suspicious patterns were detected. The domain registration is consistent with the organization’s history and legitimacy is high. Overall, the EEB website is a professional, trustworthy, and content-rich platform that effectively supports its mission. Strategic improvements could include enabling DNSSEC, enhancing security headers, and publishing a formal security policy to further strengthen trust and resilience.
Partners For A New Economyp4ne.org
Non-profit · Switzerland
55Medium
NIS2 17 · GDPR 65
NIS2 17 · GDPR 65
Partners For A New Economy (P4NE) is a small, international philanthropic fund focused on redesigning economic systems to better serve people and nature. Founded in 2015 and hosted by the Swiss Philanthropy Foundation, P4NE collaborates with multiple funding partners to support systemic change initiatives primarily in Europe. The website reflects a professional and consistent brand presence, providing clear information about their mission, grant-making activities, and field-building efforts. Technically, the site is built on WordPress with modern plugins and analytics tools, hosted by Infomaniak, and optimized for mobile and SEO. Security posture is good with HTTPS enabled and cookie consent mechanisms in place, though DNSSEC is not enabled and some security headers are missing. Privacy compliance is strong with comprehensive policies and GDPR-aligned consent. Overall, the domain registration and hosting details align well with the organization's claims, supporting legitimacy and trustworthiness.
Associazione per la Decrescitadecrescita.it
Non-profit · Italy
54Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
The website decrescita.it represents the Associazione per la Decrescita, a small Italian non-profit organization dedicated to promoting the philosophy and practice of degrowth, ecological sustainability, and social equity. The site serves as a platform for publishing articles, organizing events, and fostering community engagement around these themes. The organization has a well-established presence since 2005, supported by a domain with consistent WHOIS data and DNSSEC enabled for security. Technically, the website is built on WordPress 6.8.3, utilizing a range of plugins such as Events Manager, Photo Gallery, Contact Form 7, and Cookie Notice, alongside modern JavaScript libraries like jQuery and Owl Carousel. The site is hosted behind Cloudflare services, including the Turnstile captcha for form security, and employs HTTPS with good SSL configuration. Performance is moderate with good mobile optimization and basic accessibility features. From a security perspective, the site follows best practices including HTTPS enforcement, DNSSEC, and CAPTCHA protection on forms. However, it lacks explicit security policies, vulnerability disclosure mechanisms, and advanced security headers. Privacy compliance is well addressed with a cookie consent banner and a privacy policy page in Italian, indicating GDPR awareness. Overall, the website is trustworthy, professionally maintained, and focused on its niche audience. There are no indications of malicious activity or content safety concerns. Strategic recommendations include enhancing security policies, adding a security.txt file, and improving accessibility compliance to further strengthen the site's security posture and user experience.
Movimento per la Decrescita Felicedecrescitafelice.it
Other · Italy
55Medium
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
Movimento per la Decrescita Felice is a small Italian non-profit community focused on activism, research, and education around the concept of degrowth and sustainable living. The website serves as a hub for activists and practitioners sharing values of social justice and environmental sustainability. Technically, the site is built on WordPress using the Divi theme and several common plugins such as Yoast SEO and MonsterInsights for analytics. The site is moderately optimized for performance and mobile devices, with good SEO practices evident. Security posture is adequate with HTTPS and DNSSEC enabled, but lacks advanced security headers and explicit security policies. Privacy compliance is partial, with a cookie consent mechanism but no visible privacy policy or terms of service. Overall, the domain age and registration data support the legitimacy of the organization. Recommendations include improving security headers, publishing privacy and security policies, and adding clear contact information to enhance trust and compliance.
Renaisoft Solutionsrenaisoft.com
Technology
66Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Renaisoft Solutions is a technology company specializing in digital solutions including website development, e-commerce, ad networks, classifieds, social media marketing, and bespoke mobile applications. The company positions itself as a provider of expert-built solutions aimed at elevating the digital presence of businesses. The website is built on WordPress using the Elementor page builder and Astra theme, indicating a modern and flexible technical infrastructure. Hosting and domain registration are managed via GoDaddy and Cloudflare DNS services, ensuring reliable availability and basic security. The security posture is adequate with HTTPS enabled and domain status protections, but lacks advanced security headers and DNSSEC. Privacy and cookie policies are not found, indicating a gap in compliance with GDPR and related regulations. Analytics usage includes Google Analytics and Google Tag Manager, reflecting moderate user tracking. Overall, the website is professional and business-focused but would benefit from enhanced privacy compliance and security practices.
Class Act Productionsclassactproductions.org
Education · United States
55Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Class Act Productions is a well-established community theater organization based in The Woodlands, Texas, with a domain registered since 1999. The organization offers theatrical productions, auditions, and a School of Musical Theater, targeting local community members and youth interested in performing arts. Their business model is non-profit and community-focused, with clear calls for donations, volunteering, and ticket sales through external platforms. Technically, the website is built on RapidWeaver CMS with several plugins and uses older but functional JavaScript libraries. Hosting is provided by A2 Hosting, and the site is mobile optimized with good navigation and design quality. Security posture is moderate but could be improved by enabling DNSSEC, adding security headers, and enforcing HTTPS policies. Privacy compliance is lacking as no privacy or cookie policies are present. Contact information is clearly provided, enhancing business credibility. Overall, the website is professional and trustworthy but would benefit from improved security and privacy practices.
- YYourHead Software
yourhead.com
Technology
50Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
YourHead Software is a small, established software company specializing in Mac and RapidWeaver plugins, with a history dating back to the mid-1990s. Their website showcases a range of products focused on enhancing web development workflows for RapidWeaver users. The company maintains a consistent brand presence and offers support channels including Discord and FAQs, but lacks explicit privacy and cookie policies on the main site. Technically, the site uses standard web technologies such as jQuery, Bootstrap, and Owl Carousel, hosted on Bluehost, with moderate performance and good mobile optimization. Security posture is limited based on the available data, with no visible security headers or incident response policies, and DNSSEC is not enabled on the domain. Overall, the domain registration and hosting details align well with the business claims, indicating a legitimate and trustworthy entity.
Caritas Wiencarla-wien.at
Non-profit · Austria
73Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
carla Wien is a social enterprise operated by Caritas Wien, focused on running second hand shops that convert donated goods into employment opportunities and environmental benefits. The organization targets socially disadvantaged individuals and low-income customers, providing discounted goods and social integration services. The website is built on TYPO3 CMS with modern frontend technologies and includes accessibility features and a comprehensive cookie consent mechanism. Security posture is strong with HTTPS and error monitoring via Sentry, though some security headers could be improved. Privacy compliance is well addressed with clear policies and consent management. Overall, the site reflects a professional, trustworthy non-profit organization with a clear social mission.
Caritasinternationalerfreiwilligeneinsatz.at
Non-profit · Austria
71Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
The website www.ife-austria.at represents an Austrian non-profit organization affiliated with Caritas, focused on facilitating international volunteer deployments in social projects across Africa, Asia, Latin America, and Europe. It targets individuals interested in meaningful volunteer experiences abroad, providing program information, preparation guidance, and safety risk assessments. The site is well-branded, consistent, and offers a good user experience with clear navigation and accessibility features. Technically, the site is built on the TYPO3 CMS platform, leveraging modern JavaScript libraries such as jQuery and Swiper, and integrates third-party services including Google Analytics, Facebook Pixel, and Sentry for monitoring. The site is mobile-optimized and includes a comprehensive cookie consent mechanism aligned with GDPR requirements. From a security perspective, the site enforces HTTPS and uses Sentry for error tracking, but lacks explicit security policy documentation and incident response contact details. No critical vulnerabilities or suspicious content were detected. Privacy compliance is strong, with detailed cookie and privacy policies linked to the parent Caritas site. Overall, the website demonstrates a mature digital presence suitable for a medium-sized non-profit, with recommendations to enhance security transparency and incident response readiness to further strengthen trust and compliance.
Caritas der Diözese Graz-Seckaustreetfootball.at
Non-profit · Austria
73Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
streetfootball.at is a non-profit initiative under Caritas der Diözese Graz-Seckau focused on social inclusion through street football in Austria. The website presents a clear mission to provide free football trainings, tournaments, and workshops for socially disadvantaged individuals in multiple Austrian cities. The project is supported by reputable partners including government bodies and financial institutions, enhancing its credibility. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and includes GDPR-compliant cookie consent mechanisms. Security posture is good with HTTPS and error tracking via Sentry, though some security headers could be improved. Contact information is clearly provided, but explicit security policies and incident response details are absent. Overall, the website is professional, trustworthy, and well-aligned with its non-profit mission.
Caritas der Diözese Graz-Seckaubildungszentrumnord.at
Education · Austria
71Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Bildungszentrum Nord Rottenmann is an educational institution under Caritas Austria, specializing in social and care profession training in the Steiermark region. The website presents a professional and comprehensive digital presence, leveraging TYPO3 CMS and integrating modern web technologies and social media platforms. The organization targets students and adults seeking vocational education in social care, offering multiple school types and adult education programs. The website demonstrates strong GDPR compliance with detailed cookie consent mechanisms and a comprehensive privacy policy. Security posture is good with HTTPS and monitoring tools like Sentry, though some HTTP security headers could be improved. Overall, the site is trustworthy, well-branded, and provides clear navigation and relevant content.
Caritas Steiermarkdiesozialschule.at
Education · Austria
74Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
The website www.diesozialschule.at represents an educational institution under the Caritas Steiermark umbrella, focusing on social management and health professions education. It offers structured programs such as a five-year HLW with maturity exams and a three-year vocational school. The site targets students and prospective students interested in social and health careers, positioning itself as a regional leader in this niche. The business model is centered on providing practical and theoretical education with strong community and social values. Technically, the website is built on TYPO3 CMS, leveraging modern JavaScript libraries like jQuery and Swiper for UI components, and integrates Sentry for error monitoring. The site demonstrates good digital maturity with responsive design, accessibility features, and SEO optimization. Cookie consent and privacy mechanisms are well implemented, reflecting compliance with GDPR requirements. From a security perspective, the site enforces HTTPS, includes standard security headers, and uses third-party monitoring tools responsibly. No critical vulnerabilities or exposed sensitive data were detected. However, explicit security policies and incident response contacts are not publicly available, which could be improved to enhance trust and readiness. Overall, the website is professional, trustworthy, and well-aligned with its educational mission. It maintains a good balance between user experience, privacy compliance, and security posture, making it a reliable platform for its audience.
Caritas Steiermarkfachschule-grabenstrasse.at
Education · Austria
69Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
The Fachschule Grabenstraße für wirtschaftliche Berufe Graz is an educational institution operated by Caritas Steiermark, providing one- and three-year vocational training programs focused on economic professions. The website reflects a well-established regional non-profit educational provider with a clear mission to prepare students for the workforce with practical and theoretical knowledge. The institution maintains a consistent brand presence and offers comprehensive information about its programs, staff, and community involvement. Technically, the website is built on TYPO3 CMS and leverages modern JavaScript libraries such as jQuery and Swiper.js, along with integrations for accessibility (ReadSpeaker) and error monitoring (Sentry). The site is mobile-optimized, accessible, and SEO-friendly, with a cookie consent mechanism compliant with GDPR requirements. Social media integration is robust, supporting engagement across multiple platforms. From a security perspective, the site enforces HTTPS and uses standard security practices, including cookie consent and error tracking. However, explicit security headers like X-Frame-Options and X-Content-Type-Options are not clearly present and could be improved. No vulnerabilities or exposed sensitive data were detected. The absence of a published security policy or incident response contact is noted. Overall, the website presents a low-risk profile with strong business credibility and privacy compliance. Strategic recommendations include enhancing security headers, publishing a security policy, and maintaining up-to-date third-party libraries to sustain security posture.
Caritas Steiermarkmarienstueberl.at
Non-profit · Austria
73Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
The website www.marienstueberl.at represents the Marienstüberl, a social service initiative operated by Caritas Steiermark in Austria. It provides essential services such as daily warm meals, food packages, social support, and medical consultation for people facing poverty and social exclusion. The organization has a strong market position as a trusted non-profit entity established since 1995, with a clear focus on community aid and social inclusion. The website effectively communicates its mission and services to its target audience, which includes vulnerable and marginalized individuals in Graz and surrounding areas. Technically, the website is built on TYPO3 CMS with modern JavaScript libraries like jQuery and Swiper.js, and integrates accessibility tools such as ReadSpeaker. It employs Sentry for error tracking and Google Analytics for user behavior analysis, combined with a comprehensive cookie consent mechanism ensuring GDPR compliance. The site is mobile-optimized, accessible, and SEO-friendly, providing a good user experience. From a security perspective, the site uses HTTPS and secure session management, with no visible vulnerabilities or exposed sensitive data. However, explicit security policies and headers could be enhanced, and a formal incident response or vulnerability disclosure mechanism is not publicly available. The WHOIS data aligns well with the organization's identity, confirming legitimacy and transparency. Overall, the website demonstrates a solid security posture, good privacy compliance, and professional business credibility. Strategic improvements in security policy transparency and enhanced HTTP security headers would further strengthen its security maturity.
- Kadans Science Partner
kadans.com
Healthcare · Netherlands
75Medium
NIS2 25 · GDPR 88
NIS2 25 · GDPR 88
Kadans is a European company specializing in creating tailored laboratory and office spaces within over 30 science clusters across Europe, supporting more than 400 clients primarily in key research sectors such as healthcare and technology. The company positions itself as a leading science partner, providing specialized real estate solutions to research institutions and companies. The website reflects a professional and consistent brand image with a focus on its business offerings and market presence. Technically, the website is built on WordPress with modern frameworks like Bootstrap and integrates several analytics and marketing tools such as Hotjar, Google Tag Manager, and Visual Website Optimizer, indicating a mature digital infrastructure. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms, but lacks visible security headers and explicit security or incident response policies. The WHOIS data is incomplete, showing no registration details, which raises some concerns about domain legitimacy. Overall, the website is professional and trustworthy in content and design but would benefit from enhanced transparency in privacy, security policies, and domain registration information.
START HÜRTH Zentrum für Technologie und Existenzgründung GmbHstart-huerth.com
Technology · Germany
63Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
START HÜRTH is a German-based innovation and startup acceleration center focused on supporting entrepreneurs and startups in transforming innovative ideas into successful business ventures. The website presents a professional and consistent brand image, targeting startups and innovators primarily in the technology sector. The business model revolves around consulting, funding support, and growth acceleration services. Technically, the site is built on Squarespace, leveraging modern web technologies and is well-optimized for mobile devices with good performance and accessibility basics. Security posture is solid with HTTPS and HSTS enabled, though additional security headers and explicit privacy policies are lacking. The absence of WHOIS registration data raises some concerns about domain legitimacy, but the professional web presence and social media links mitigate immediate trust issues. Overall, the site is functional and credible but would benefit from enhanced privacy compliance and clearer domain registration transparency.
- Campus Berlin-Buch GmbH
campusberlinbuch.de
Healthcare · Germany
59Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
Campus Berlin-Buch GmbH operates a prominent biotechnology and biomedical research campus in Germany, providing modern laboratory and office spaces, supporting startups, and fostering innovation. The website reflects a well-established organization with a clear focus on life sciences and community engagement. Technically, the site uses modern frameworks like Bootstrap and jQuery, with Matomo analytics for user tracking. The site is mobile-optimized, accessible, and professionally designed, though some security headers are missing. Privacy policy is comprehensive, but cookie consent mechanisms are absent. The WHOIS data is limited due to DENIC policies but shows no red flags, and the domain appears legitimate and consistent with the business. Overall, the website presents a trustworthy and professional digital presence.
BioCampus Cologne & RTZ Kölnbiocampuscologne.de
Technology · Germany
63Medium
NIS2 17 · GDPR 28
NIS2 17 · GDPR 28
BioCampus Cologne & RTZ Köln operate as high-tech innovation hubs in Cologne, Germany, providing infrastructure and community support for startups, scaleups, and corporates in deep technology, high technology, and STEM fields. The website presents a professional and well-structured digital presence, highlighting over 70 knowledge-based companies, available office and lab spaces, and active community events. The technical infrastructure is modern, leveraging Webflow CMS, Google Tag Manager, and reCAPTCHA for security and analytics. Security posture is solid with HTTPS and form protections, though improvements in security headers and explicit incident response policies are recommended. Overall, the website reflects a credible and active business ecosystem with moderate to high digital maturity.
Other
64Medium
NIS2 17 · GDPR 15
NIS2 17 · GDPR 15
The website vmstart.de is currently inaccessible, returning a 503 Service Unavailable error indicating no server is available to handle requests. Due to the lack of accessible content, no business information, metadata, or structured data could be extracted. The domain is hosted by PlusServer as indicated by the name servers, but no registrant or contact details are available to verify legitimacy or business claims. The technical infrastructure appears minimal or offline, with no detectable technologies, scripts, or security headers. The security posture is weak due to the absence of HTTPS and security best practices. Overall, the site is not operational and provides no user or business value in its current state.
Gesundheitsregion Metropolregion Rhein-Neckarmrn-gesundheit.de
Healthcare · Germany
60Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Gesundheitsregion Metropolregion Rhein-Neckar is a cooperative regional health initiative focused on promoting health, prevention, and healthcare services within the Rhein-Neckar metropolitan area. The organization collaborates with over 80 experts and various partners to foster sustainable and innovative health solutions. The website reflects a strong regional presence with professional content and clear communication aimed at residents, healthcare professionals, and organizations in the region. Technically, the site uses modern web technologies including Matomo for privacy-respecting analytics and is built on the Kirby CMS platform. The site is mobile-optimized and accessible, with good SEO practices. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and explicit security policies could be improved. Privacy compliance is well addressed with a comprehensive privacy policy and cookie information, though no explicit consent mechanism is present. Overall, the site demonstrates high professionalism and trustworthiness, supporting its role as a regional health network.
markt.de GmbH & Co. KGmarkt.ch
E-commerce · Germany
71Medium
NIS2 2 · GDPR 43
NIS2 2 · GDPR 43
Markt.de GmbH & Co. KG operates a well-established online classifieds platform targeting private and commercial users in Germany. Founded in 2005 and part of the Markt Gruppe, the company offers a broad range of classified ad categories including vehicles, real estate, jobs, services, pets, and electronics. The platform supports free and paid ads, serving millions of listings with a focus on ease of use and comprehensive search capabilities. The website is professionally designed with consistent branding and good content quality, targeting a general audience without adult content exposure on the main domain.
Helmholtz KLIMAhelmholtz-klima.de
Government · Germany
60Medium
NIS2 17 · GDPR 43
NIS2 17 · GDPR 43
Helmholtz KLIMA operates as a Helmholtz-wide dialogue platform focused on climate-relevant research, bridging the Helmholtz community and political stakeholders. The platform provides expert networks, climate knowledge dissemination, and organizes events to foster dialogue on climate issues. It holds a recognized position within the German climate research ecosystem and targets policymakers, researchers, and the interested public. Technically, the website is built on Drupal 10, employs Matomo Analytics with privacy-conscious settings, and uses modern web technologies for performance and accessibility. Security posture is solid with HTTPS and cookie consent mechanisms, though it lacks explicit security headers and published security policies. Overall, the site is professional, trustworthy, and compliant with GDPR, with clear contact information and active social media presence.
- Diözese Innsbruck
dibk.at
Government · Austria
50Medium
NIS2 2 · GDPR 55
NIS2 2 · GDPR 55
The website www.dibk.at serves as the official online portal for the Diocese of Innsbruck, a regional religious authority in Austria. It provides comprehensive information about the Catholic Church's activities, faith-related events, educational resources, and community services targeted primarily at members of the Catholic community in Tirol and interested visitors. The site is well-branded, consistent, and offers a good user experience with clear navigation and mobile optimization. Technically, it is built on the Ibexa CMS platform, utilizing JavaScript and jQuery libraries, and employs HTTPS for secure communications. Security best practices are partially implemented, though some security headers are missing and no explicit security policy or incident response contacts are published. The site does not display advertising or tracking scripts, indicating a privacy-conscious approach. WHOIS data confirms the domain's legitimacy and consistency with the organization's identity. Overall, the site is professional, trustworthy, and suitable for its intended audience.
Katholische Jungschar Österreichsjungschar.at
Non-profit · Austria
56Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
Katholische Jungschar Österreichs is a well-established non-profit organization affiliated with the Catholic Church in Austria, focusing on child and youth engagement through various programs such as youth groups, altar serving, holiday camps, and children's liturgy. The website reflects a strong community orientation with comprehensive content and clear navigation, targeting children, families, and church members. Technically, the site is built on TYPO3 CMS and integrates modern analytics and privacy tools, demonstrating digital maturity. Security posture is good with HTTPS enforced and privacy compliance evident through cookie consent mechanisms. However, the absence of visible WHOIS data limits domain trust analysis. Overall, the site presents a professional, trustworthy, and user-friendly platform for its audience.
Welthaus Österreichwelthaus.at
Non-profit · Austria
55Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
Welthaus Österreich is a non-profit consortium of seven Catholic development organizations operating across multiple Austrian regions. The website serves as an educational platform offering workshops, materials, and guest encounters focused on global justice and development policy. It targets educators, activists, and the general public interested in development issues. The organization is small-sized, founded in 2017, and maintains a consistent brand presence across its regional partners. Technically, the site is built on WordPress with modern plugins like Yoast SEO and Matomo analytics, ensuring good SEO and moderate performance. Mobile optimization and accessibility are adequate but could be improved. Security posture is solid with HTTPS and cookie consent implemented, though lacks explicit security policies and incident response information. Overall, the site is trustworthy, professional, and compliant with basic privacy standards, though it could enhance transparency and security documentation.
Caritascaritas-pflege.at
Healthcare · Austria
75Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Caritas Pflege is a prominent Austrian non-profit organization specializing in elderly and dependent care services, including nursing homes, home care, and advisory services. The website reflects a well-established entity with a clear focus on healthcare and social support, targeting elderly individuals, their families, and caregivers. The organization benefits from its affiliation with Caritas Austria, enhancing its market position and trustworthiness. Technically, the website is built on TYPO3 CMS, leveraging modern JavaScript libraries and accessibility features, ensuring a good user experience across devices. Security posture is strong with HTTPS, security headers, and active error monitoring via Sentry. Privacy compliance is robust, featuring a comprehensive privacy policy and cookie consent mechanism aligned with GDPR requirements. However, explicit terms of service and incident response information are not found, representing areas for improvement. Overall, the website is professional, trustworthy, and well-optimized for its audience and purpose.
- WIDADO Marktplatz
widado.com
Retail
75Medium
NIS2 2 · GDPR 80
NIS2 2 · GDPR 80
WIDADO is an online marketplace specializing in second hand goods, promoting sustainable shopping primarily in the German language market. The platform offers a wide range of product categories including clothing, household items, media, electronics, and leisure products. The website demonstrates a well-structured and user-friendly design with clear navigation and product categorization, targeting general consumers interested in sustainable retail options. Technically, the site uses common JavaScript libraries such as jQuery and Glide.js to enhance user experience, with moderate performance and good mobile optimization. However, there is a lack of visible privacy and cookie policies, and no explicit security headers were detected, indicating room for improvement in security and compliance. The WHOIS data is notably missing or inaccessible, which raises concerns about domain legitimacy and trustworthiness. Overall, while the business model and website content are solid, the security posture and compliance aspects require attention to enhance trust and regulatory adherence.
Caritas Vorarlbergcaritas-vorarlberg.at
Non-profit · Austria
73Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Caritas Vorarlberg is a well-established non-profit organization operating in Austria, providing a broad spectrum of social services including family support, refugee assistance, addiction help, and community integration. The website reflects a professional and consistent brand identity aligned with the Caritas Austria network. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and includes proactive error monitoring via Sentry. The site is GDPR compliant with a comprehensive cookie consent mechanism and multilingual support. Security posture is good with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Overall, the website is trustworthy and serves its target audience effectively.
Caritas der Diözese Graz-Seckaucaritas-steiermark.at
Non-profit · Austria
75Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Caritas der Diözese Graz-Seckau operates as a leading regional non-profit social aid organization in the Austrian state of Steiermark. The website reflects a comprehensive portfolio of social services including financial and social counseling, housing support, youth and family aid, integration services for refugees and migrants, addiction support, and senior care. The organization is affiliated with the Catholic Church and serves a broad target audience of vulnerable and disadvantaged populations. The site is well-branded, professionally designed, and provides clear navigation and multilingual support to enhance accessibility. Technically, the website is built on the TYPO3 CMS platform, leveraging modern JavaScript libraries such as jQuery and Swiper for UI components. It integrates Sentry for error tracking and Google Analytics and Facebook Pixel for analytics and marketing purposes. The site implements a GDPR-compliant cookie consent mechanism with detailed cookie categorization and user control. Performance is moderate with good mobile optimization and accessibility features. From a security perspective, the site enforces HTTPS and uses Sentry for monitoring, but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the content. Privacy compliance is strong with clear privacy and cookie policies. The domain registration is consistent with the organization's identity, enhancing trustworthiness. Overall, the website demonstrates a mature digital presence suitable for a large non-profit organization, balancing user experience, privacy, and security effectively. Minor improvements in security headers and incident response transparency could further strengthen its posture.
Caritas Wiencaritas-wien.at
Non-profit · Austria
75Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Caritas Wien is a prominent non-profit organization dedicated to providing social services and support to vulnerable populations in Vienna and surrounding regions. Their website reflects a mature digital presence with comprehensive service offerings including counseling, housing, hospice care, family support, and integration services. The organization targets a broad audience including individuals in need, families, migrants, and people with disabilities. Technically, the site is built on TYPO3 CMS, leveraging modern JavaScript libraries and third-party integrations such as Google Analytics and Facebook Pixel, all managed with GDPR-compliant cookie consent mechanisms. Security posture is solid with HTTPS enforced and error monitoring via Sentry, though some security headers could be improved. Overall, the site demonstrates professionalism, accessibility, and trustworthiness consistent with a large, established non-profit entity.
Other
65Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website www.eversportsmanager.com is currently inaccessible, serving a 403 Forbidden error page that blocks access to any meaningful content. The domain WHOIS data is unavailable, indicating the domain may not be registered or the WHOIS information is not publicly accessible. Due to the lack of accessible content, no business information, contact details, or privacy policies are present. The technical infrastructure appears minimal with only Google Fonts loaded, and no analytics or security headers detected. This severely limits the ability to assess the company's market position, services, or compliance posture. The security posture is weak due to the lack of HTTPS confirmation and absence of security headers. Overall, the site is not operational for public users, representing a high risk for trust and credibility.
- RRobot Challenge Screen
eversportscorporate.com
Other
59Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website www.eversportscorporate.com is currently inaccessible beyond a robot challenge screen that implements a JavaScript proof-of-work captcha. This indicates the presence of a Web Application Firewall (WAF) or security mechanism blocking direct access to the site content. No business information, contact details, or policies are available on the page, and the WHOIS lookup failed to return any registration data, suggesting the domain may be unregistered or privacy-protected to an extreme degree. The technical infrastructure relies on JavaScript and AWS Cloudfront CDN for serving challenge assets, but no CMS or business platform is detectable. Security posture is weak due to lack of visible HTTPS confirmation, security headers, or compliance documentation. Overall, the site is not currently usable for business or customer engagement, and trustworthiness is low.
Eversports GmbHeversports.com
Other · Austria
62Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
Eversports GmbH operates a leading online platform in Austria for booking sports activities, classes, and venues. The website offers a comprehensive range of sports including yoga, pilates, tennis, and fitness, targeting sports enthusiasts seeking flexible and convenient booking options. The platform supports both online and on-site participation, with social features to connect users. Technically, the website is built on modern frameworks such as React and Apollo GraphQL, hosted behind Cloudflare, and integrates error monitoring via Rollbar. It is mobile optimized and performant, with good SEO and accessibility practices. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities. Privacy and cookie policies are present and GDPR compliant. Overall, the site demonstrates a mature digital presence with high professionalism and trustworthiness.
Information Solutions Limitedtheweborchard.com
Technology · United Kingdom
66Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
The Web Orchard is a creative web design and digital marketing agency based in Shrewsbury, Shropshire, operating under Information Solutions Limited. The company offers a comprehensive suite of services including bespoke web design, WordPress development, e-commerce solutions, SEO, PPC, content marketing, and hosting support. Positioned as a leading agency in the Shropshire region, it serves a diverse clientele including businesses, public sector organizations, and charities. The website reflects a professional and consistent brand image with strong client testimonials and certifications such as Cyber Essentials, reinforcing its market credibility. Technically, the website is built on WordPress with modern technologies including WPBakery Page Builder, jQuery, and integrates multiple analytics and marketing tools such as Google Analytics, Google Tag Manager, and Microsoft Clarity. The site is mobile-optimized with good SEO practices and moderate performance. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in implementing security headers and publishing explicit security policies. From a security and compliance perspective, the site demonstrates good privacy compliance with a comprehensive privacy policy and cookie consent banner. However, no explicit incident response or vulnerability disclosure information is publicly available. The absence of WHOIS data for the domain is a notable anomaly that slightly reduces trustworthiness, though the professional presentation and business information mitigate concerns. Overall, the site presents a low-risk profile with recommendations to enhance security headers and transparency. Strategically, the company should focus on improving its public security posture by publishing incident response details and security policies, and consider registering or updating WHOIS information to enhance domain legitimacy. Continued investment in technical modernization and accessibility will support sustained growth and client trust.
- BGO
bgo.com
Real Estate · Canada
75Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
BGO is a globally recognized real estate investment management firm operating across North America, Europe, and Asia. With over $89 billion USD in assets under management and a client base exceeding 750 institutional investors, BGO offers comprehensive services including investment management, lending, property management, and sustainable investing. The company is part of SLC Management under Sun Life, reinforcing its strong market position and credibility. The website reflects a mature digital presence built on the HubSpot CMS platform, leveraging modern web technologies and analytics tools to deliver a professional user experience. Security posture is strong with HTTPS, domain transfer protections, and cookie consent mechanisms in place, though DNSSEC is not enabled. No critical vulnerabilities or security issues were detected. Privacy compliance is well addressed with clear policies and consent banners. Overall, BGO's website demonstrates high professionalism, trustworthiness, and alignment with its business objectives.