Low-risk security reports
14,261 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,165001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
2,001–2,050 of 14,261
- Electric Ireland
electricireland.ie
Energy · Ireland
83Low
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
Electric Ireland is a leading energy supplier in Ireland providing electricity and gas services to residential and business customers. Their website offers comprehensive information on price plans, smart meters, solar PV solutions, and customer support, reflecting a mature and customer-focused business model. The company targets Irish energy consumers with a broad portfolio of energy products and services. Technically, the website is built on the Sitefinity CMS platform, uses modern web technologies including Google Tag Manager and OneTrust for cookie consent, and demonstrates good mobile optimization and accessibility. Security-wise, the site enforces HTTPS, implements key security headers, and manages cookie consent effectively, though explicit security policies and incident response information are not prominently published. The absence of WHOIS data limits domain trust verification, but the website's professional presentation and comprehensive content suggest legitimacy. Overall, the site scores well on content quality, technical implementation, security posture, and privacy compliance, with room for improvement in business credibility transparency and security disclosures.
- ESB Networks
esbnetworks.ie
Energy · Ireland
78Low
NIS2 25 · GDPR 88
NIS2 25 · GDPR 88
ESB Networks is the primary electricity distribution network operator in Ireland, providing essential services such as power outage management, connection services, meter management, and safety education. The website is designed to serve residential, commercial, and industrial customers with clear navigation and relevant content. Technically, the site uses a modern CMS (Sitefinity) and integrates common technologies such as jQuery, Google Tag Manager, and OneTrust for cookie consent, hosted partly on Microsoft Azure. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and published security policies are absent. The absence of WHOIS data limits domain legitimacy verification, but the professional presentation and official contact details support trustworthiness. Overall, the site is well-structured, compliant with privacy regulations, and suitable for its audience.
H₂ercules Initiativeh2ercules.com
Energy · Germany
83Low
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
The H₂ercules initiative website represents a collaborative project focused on developing a hydrogen infrastructure network in Germany, involving major energy companies such as RWE and Open Grid Europe. The site provides detailed information about hydrogen production, import options, transport, storage, and consumption, targeting industrial stakeholders and policymakers. The digital infrastructure is built on Sitecore CMS with modern frontend technologies and includes GDPR-compliant privacy and cookie management. Security posture is good with HTTPS and consent management, though explicit security policies and incident response information are absent. The missing WHOIS data for the domain is a notable concern for domain legitimacy verification, but the professional content and partner associations support trustworthiness. Overall, the website is well-designed, informative, and serves as a credible platform for the hydrogen initiative.
- RRWE AG
rwe-foundation.com
Energy · Germany
83Low
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
The RWE Foundation website represents a corporate social responsibility initiative by RWE AG, a major energy company based in Germany. The foundation focuses on sustainable social change through funding charitable projects, supporting education, and providing humanitarian aid. The website is professionally designed, multilingual (German and English), and provides clear navigation to key sections such as funding principles, projects, application forms, and contact information. The presence of an annual report and CEO statement adds to the trustworthiness and transparency of the foundation. Technically, the website is built on the Sitecore CMS platform, utilizing modern web technologies including JavaScript, CSS, and HTML5. It integrates Usercentrics for cookie consent management and Etracker for analytics, demonstrating compliance with GDPR and privacy best practices. The site is mobile-optimized and accessible, with good SEO and performance characteristics. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms effectively. However, it lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data for the domain is unusual but the website's professional presentation and corporate backing mitigate concerns. Overall, the site demonstrates a solid security posture with room for improvement in transparency and security policy publication. The overall risk assessment is low, with recommendations to enhance security headers, publish a security policy and incident response contacts, and consider adding a vulnerability disclosure or security.txt file to improve trust and security culture.
RWE AGrwe.asia
Energy · China
76Low
NIS2 2 · GDPR 80
NIS2 2 · GDPR 80
RWE AG is a major European energy company with a growing presence in China, focusing on renewable energy, energy trading, and technical advisory services. The website highlights its subsidiaries, RWE Supply & Trading (Shanghai) Co. Ltd. and RWE Technology International GmbH, emphasizing their roles in energy infrastructure and trading within China. The company targets industrial, commercial, and public sector clients, leveraging its extensive experience and global footprint. Technically, the website employs modern web technologies including jQuery, UIKit, and Usercentrics CMP for privacy compliance, with good mobile optimization and SEO practices. Security posture is strong with HTTPS enforced and secure forms, though additional security headers could enhance protection. Privacy policies and cookie consent mechanisms are present and GDPR compliant. WHOIS data is unavailable, likely due to privacy protection, but the website's branding and content strongly support legitimacy. Overall, the site is professional, trustworthy, and well-aligned with RWE's corporate identity.
North East Combined Authoritynortheast-ca.gov.uk
Government · United Kingdom
81Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
The North East Combined Authority (NECA) is a regional governmental body serving the North East England area, focusing on regional governance, economic development, and transport infrastructure. The website serves as an official portal for residents and stakeholders, providing information and resources related to the authority's activities. The site is positioned as a key regional government entity with a medium organizational size and a focus on public sector services. Technically, the website employs modern web technologies including Vue.js, jQuery, Google Tag Manager, Hotjar for analytics, and OneTrust for cookie consent management. The site demonstrates good mobile optimization, accessibility, and SEO practices, although some technical details such as hosting provider and CMS are not explicitly identified. Performance is moderate, with a professional design and clear navigation. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, but lacks visible security headers and published security policies or vulnerability disclosures. No critical vulnerabilities or exposed sensitive data were detected in the provided content. The WHOIS data is unavailable due to .gov.uk domain privacy policies, but the domain's legitimacy is supported by its official government TLD and consistent branding. Overall, the website presents a trustworthy and professional digital presence for a government authority, with recommendations to enhance security posture by adding security headers, publishing security policies, and improving privacy policy visibility to strengthen compliance and user trust.
Tiny Technologies Inc.tiny.cloud
Technology · United States
79Low
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Tiny Technologies Inc. operates the website tiny.cloud, offering the widely trusted TinyMCE WYSIWYG rich text editor, along with complementary products like MoxieManager and Drive for media and cloud file management. The company targets web developers and enterprises seeking advanced text editing solutions, positioning itself as a market leader with over 1.5 million developers relying on its technology. The business model combines SaaS offerings with licensing options, supported by comprehensive documentation and AI-powered tools to enhance user experience. Technically, the website is built on modern frameworks including React and Gatsby, hosted on AWS infrastructure, and integrates multiple marketing and analytics tools such as Google Tag Manager and Visual Website Optimizer. The site demonstrates excellent performance, mobile optimization, and SEO practices, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS, employs security headers, and uses CAPTCHA and consent management tools to protect user data and privacy. While DNSSEC is not enabled, the domain registration is consistent and secure, with clientTransferProhibited status preventing unauthorized transfers. No critical vulnerabilities or exposed sensitive data were detected, indicating a strong security posture. Overall, tiny.cloud presents a professional, trustworthy, and well-maintained online presence with strong business credibility and compliance with privacy regulations. Strategic recommendations include enabling DNSSEC, publishing a formal security policy, and establishing a vulnerability disclosure program to further enhance security transparency and resilience.
Equinorstatoil.com
Energy · Norway
86Low
NIS2 14 · GDPR 83
NIS2 14 · GDPR 83
Equinor is a large international energy company headquartered in Norway, employing approximately 25,000 people with offices in over 20 countries. The company focuses on delivering energy today while developing sustainable energy solutions for the future. The website reflects a mature digital presence with a professional design, modern technology stack including Next.js and React, and a comprehensive cookie consent mechanism indicating attention to privacy compliance. Security posture is strong with HTTPS enforced and no exposed sensitive data, though explicit security headers and detailed security policies are not evident. The absence of WHOIS data is a notable gap but does not detract significantly from the overall legitimacy given the professional website and branding. Strategic recommendations include publishing clear privacy and security policies, adding security headers, and providing direct contact information for security and privacy inquiries.
Cobotcobot.me
Technology · Germany
83Low
NIS2 2 · GDPR 95
NIS2 2 · GDPR 95
Cobot is a well-established technology company founded in 2010, specializing in coworking space management software. Their platform offers a comprehensive suite of tools including mobile apps, booking systems, invoicing, access control, analytics, and member management. Serving over 90 countries, Cobot positions itself as an intuitive and scalable solution for coworking operators. The website reflects a mature digital presence with professional design, clear navigation, and multilingual support. Technically, the site leverages modern web technologies and frameworks, including Ruby on Rails and Google Tag Manager, ensuring a responsive and accessible user experience. Security posture is strong with HTTPS, CSRF protections, and cookie consent mechanisms, though explicit security policies and vulnerability disclosure pages are absent. WHOIS data is unavailable due to query failure or privacy protection, but the website's consistency and trust signals support legitimacy. Overall, Cobot presents a credible and professional SaaS business with a solid market position in the coworking software industry.
- EEducational Testing Service
ets.org
Education · United States
84Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Educational Testing Service (ETS) is a globally recognized non-profit organization specializing in educational testing and talent solutions. The company provides a broad range of assessments and measurement services aimed at enabling lifelong learners to be future ready. ETS holds a leading market position in the education sector, serving educators, institutions, and test takers worldwide. Their website reflects a professional and comprehensive digital presence with clear branding and targeted content for their audience. Technically, the ETS website leverages modern technologies including Adobe Experience Manager as its CMS, Adobe Target for personalization, Google Tag Manager, and Segment Analytics for data collection and marketing optimization. The site is well-optimized for mobile devices, has good accessibility features, and employs strong SEO practices. Performance is moderate, with room for further optimization. From a security perspective, the site enforces HTTPS with excellent SSL configuration and implements key security headers such as Content Security Policy and Strict-Transport-Security. Privacy compliance is robust, featuring a comprehensive privacy policy, cookie consent mechanisms, and GDPR adherence. However, explicit security policy and incident response information are not publicly detailed, representing an area for improvement. Overall, ETS demonstrates a high level of trustworthiness and professionalism. The lack of WHOIS data is mitigated by the organization's established reputation and consistent branding. The website is safe for general audiences with no adult or questionable content. Strategic recommendations include publishing detailed security policies, incident response contacts, and a vulnerability disclosure program to further enhance security posture and transparency.
KEDGE Business Schoolkedgebs.com
Education · France
76Low
NIS2 2 · GDPR 65
NIS2 2 · GDPR 65
KEDGE Business School is a leading French business and management educational institution with campuses in Marseille, Bordeaux, Paris, and Toulon. It offers a range of programs including bachelor, master, and specialized master's degrees targeting students, professionals, and corporate clients. The school holds triple accreditation (AACSB, EQUIS, AMBA), reinforcing its market position and credibility. The website reflects a professional and comprehensive digital presence with clear navigation and multilingual support. Technically, the site employs modern analytics and marketing tools such as Google Tag Manager, Hotjar, and Kameleoon, ensuring data-driven insights and user experience optimization. Security posture is strong with HTTPS enforcement and appropriate security headers, although explicit security and incident response policies are not publicly detailed. Privacy compliance is robust, featuring cookie consent mechanisms and a comprehensive privacy policy aligned with GDPR requirements. Overall, the website demonstrates a mature digital infrastructure supporting the institution's business goals and reputation.
- ATPI
atpi.com
Transportation
78Low
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
ATPI is a globally recognized travel and event management company specializing in corporate travel solutions and event services. The company positions itself as a world leader in its sector, targeting corporate clients and event planners with tailored services. The website reflects a mature digital presence with multi-language support and professional branding. Technically, the site is built on WordPress with modern optimization tools such as Yoast SEO and Google Tag Manager, ensuring good performance, SEO, and mobile responsiveness. Security posture is solid with HTTPS and security headers implemented, though explicit security policies and incident response contacts are absent. The lack of WHOIS data is a notable gap, slightly impacting trust but mitigated by the professional site and clear business information. Overall, ATPI demonstrates a strong business and technical foundation with room for improvement in transparency around security and domain registration.
- Clarksons
clarksons.com
Transportation · United Kingdom
81Low
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Clarksons is a leading global maritime consultancy and shipping services provider, recognized as the world's biggest in this sector. Their comprehensive service portfolio includes ship broking, research, finance, digital tools, port services, and green transition advisory, serving clients across 24 countries. The website reflects a mature digital presence with professional design, clear navigation, and multimedia integration, supporting a strong brand image and user engagement. Technically, the site employs modern web technologies and analytics tools, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers are not evident and WHOIS data is missing, which warrants further investigation. Overall, the site demonstrates high professionalism and trustworthiness, with room for improvement in transparency of registrant data and security disclosures.
Damen Shipyards Groupdamen.com
Transportation · Netherlands
83Low
NIS2 29 · GDPR 58
NIS2 29 · GDPR 58
Damen Shipyards Group is a globally recognized family-owned maritime company established in 1927, specializing in shipbuilding, ship repair, and marine equipment supply. The company positions itself as a leader in sustainable and connected shipbuilding, serving diverse markets including defense, offshore energy, public transport, and dredging. Damen operates a large network of shipyards and service hubs worldwide, emphasizing client-driven innovation and lifecycle support services. Technically, the Damen website employs modern web technologies such as React and Next.js, ensuring a responsive and accessible user experience. The site features comprehensive content, multimedia elements, and clear navigation, reflecting a mature digital infrastructure. Privacy and cookie compliance are well implemented, with consent mechanisms and GDPR-aligned policies. From a security perspective, the website enforces HTTPS, utilizes robust security headers, and avoids exposing sensitive data. No critical vulnerabilities were detected in the visible content or scripts. However, the absence of WHOIS registration details is notable and warrants caution, although the website's professional presentation and extensive business information support its legitimacy. Overall, Damen Shipyards Group presents a strong business and digital presence with a high level of trustworthiness and security maturity. Continued vigilance on domain registration transparency and public vulnerability disclosure would further enhance their security posture.
VandeGrijpvandegrijp.com
Energy · Netherlands
76Low
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
VandeGrijp is a well-established Dutch company specializing in the production and rental of steel pipes, pipe constructions, and floating equipment primarily serving the offshore, maritime, and energy sectors. With a medium-sized workforce and a strong market position, the company offers manufacturing and rental services supported by project management and engineering expertise. The website reflects a professional and consistent brand image with clear communication of services and certifications. Technically, the site is built on WordPress with modern tracking and analytics tools, optimized for mobile use and SEO. Security measures include HTTPS, Google Invisible reCAPTCHA, and a comprehensive cookie consent mechanism, though additional security headers could enhance protection. Overall, the site demonstrates a mature digital presence with good privacy compliance and trustworthy business information.
- Copernica BV
copernica.com
Technology · Netherlands
81Low
NIS2 2 · GDPR 80
NIS2 2 · GDPR 80
Copernica BV is a Netherlands-based technology company specializing in marketing automation and email marketing software. Their platform offers a flexible multichannel marketing solution that enables organizations to create, manage, and optimize campaigns across email, SMS, web, and social channels. With over 20 years of experience, Copernica positions itself as a reliable and advanced provider in the marketing automation space, targeting marketing teams, CRM managers, and organizations focused on customer relationships. The company also owns subsidiary products such as MailerQ and SMTPeter, which cater to high-volume email delivery and cloud SMTP services respectively. Technically, the website demonstrates a mature digital infrastructure with modern JavaScript frameworks, Google Tag Manager, reCAPTCHA v3 for bot protection, and a well-structured SEO-friendly design. The site is mobile-optimized, fast-loading, and uses JSON-LD structured data to enhance search engine visibility. Security best practices are partially implemented, including HTTPS enforcement and cookie consent mechanisms, though explicit security policies and incident response contacts are not publicly available. From a security perspective, the website shows a good posture with no visible vulnerabilities or exposed sensitive data. However, the absence of WHOIS registration data raises some transparency concerns, though the overall legitimacy is supported by consistent business information and a professional online presence. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent. Overall, Copernica presents a trustworthy and professional business with a strong market position in marketing automation. Strategic improvements in security transparency and WHOIS data availability would further enhance trust and compliance.
DigitalPAsegnalazioni.net
Government · Italy
76Low
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
The website www.segnalazioni.net represents DigitalPA, a company offering whistleblowing software solutions tailored for public administration and private companies in Italy. The software is designed to comply with Italian laws (Legge 179/2017 and Legge 231/2001) and EU directives, emphasizing anonymity protection and regulatory compliance. The site positions itself as a specialized provider in the whistleblowing software market, targeting organizations needing lawful and secure illicit reporting tools. Technically, the website is built on WordPress with the Avada theme and integrates modern tools such as Yoast SEO, Google reCAPTCHA Enterprise, and Matomo Analytics, indicating a moderate level of digital maturity and focus on SEO and user interaction. Security-wise, the site enforces HTTPS and uses reCAPTCHA for form protection, but lacks visible security headers and explicit security policies, which could be improved. The absence of WHOIS registration data for the domain is a notable concern, potentially impacting trust and legitimacy perceptions. Overall, the site is professional and functional but would benefit from enhanced transparency and security disclosures.
Czech Space Portalczechspaceportal.cz
Government · Czech Republic
77Low
NIS2 17 · GDPR 55
NIS2 17 · GDPR 55
The Czech Space Portal serves as the official information and coordination platform for space activities in the Czech Republic, managed under the Ministry of Transport. It provides comprehensive news, event calendars, databases, and strategic information related to national and European space initiatives. The portal targets companies, academia, students, and the general public interested in space industry developments within the Czech Republic. The business model is government-coordinated information dissemination and industry support, positioning it as an authoritative national resource in the space sector. Technically, the website is built on WordPress with modern SEO and analytics tools such as Yoast SEO, Google Analytics, and Google Tag Manager. It employs Google reCAPTCHA for form security and implements GDPR-compliant cookie consent mechanisms. The site demonstrates good mobile optimization and accessibility, though some improvements in security headers and direct contact information could enhance its posture. Security-wise, the portal uses HTTPS with strong SSL configuration and has implemented cookie consent and anti-bot measures. However, the absence of WHOIS data and lack of explicit security headers slightly reduce its trust score. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the Czech Space Portal is a trustworthy, professional government site with good content quality and technical implementation. The main risk lies in the missing WHOIS data, which should be investigated to ensure domain legitimacy. Strategic recommendations include enhancing security headers, publishing explicit security policies, and providing clearer contact information to improve trust and compliance.
- Wilde Ganzen Partners
wildeganzenpartners.nl
Non-profit · Netherlands
79Low
NIS2 22 · GDPR 100
NIS2 22 · GDPR 100
Wilde Ganzen Partners is a Dutch non-profit organization dedicated to supporting hundreds of development projects annually across dozens of countries. The projects are initiated by Dutch and Belgian foundations in collaboration with local partners, focusing on sustainable community development such as clean water, education, healthcare, and financial independence. The organization holds multiple certifications and maintains a transparent presence with clear contact information and compliance with GDPR and cookie regulations. Technically, the website is built on WordPress with modern technologies including jQuery, Cookiebot for consent management, and Google Tag Manager for analytics. The site is well-optimized for mobile and SEO, with good performance and accessibility standards. Security posture is solid with HTTPS and DNSSEC enabled, though some security headers could be improved. Overall, the website reflects a professional, trustworthy, and compliant non-profit entity with a strong digital presence.
Finance · Germany
78Low
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
DKM Darlehnskasse Münster eG is a cooperative financial institution specializing in providing loan and banking services primarily to church organizations and Caritas partners in Germany. The website reflects a professional and consistent brand presence, targeting a niche audience within the non-profit and religious sectors. The business model centers on financial partnership and support for these organizations, positioning itself as a trusted regional financial partner. Technically, the website employs modern JavaScript frameworks, notably Angular, and integrates advanced analytics and monitoring tools such as Adobe Launch and Dynatrace Ruxit. The presence of a cookie consent mechanism via OneTrust indicates awareness of privacy compliance requirements, although explicit privacy and terms of service documents are not found in the provided content. The site is mobile-optimized with good SEO and accessibility basics, though some improvements could be made. From a security perspective, the website enforces HTTPS and uses security best practices like cookie consent and monitoring. However, the absence of published security policies, incident response contacts, and vulnerability disclosure mechanisms suggests room for maturity improvement. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website is trustworthy and professionally maintained but would benefit from enhanced transparency in privacy, terms, and security policies to improve compliance and user trust. Strategic recommendations include publishing comprehensive privacy and terms documents, adding incident response contacts, and enhancing accessibility and security disclosures.
Vimeovhx.tv
Technology · United States
82Low
NIS2 17 · GDPR 85
NIS2 17 · GDPR 85
Vimeo is a well-established technology company specializing in video hosting, streaming, and monetization services. The company offers a comprehensive OTT platform enabling content creators and businesses to launch subscription-based video streaming services. Vimeo holds a strong market position as a trusted provider of professional video solutions, targeting video professionals, marketers, educators, and enterprises. The website reflects a mature digital presence with a modern tech stack, including Next.js, AWS hosting, and advanced feature flagging tools, supporting a fast and responsive user experience across devices. Security posture is solid with HTTPS enforcement and domain lock statuses, though there is room for improvement in DNS security and explicit security policy disclosures. Privacy compliance is currently weak due to the absence of visible privacy and cookie policies or consent mechanisms. Overall, Vimeo's website demonstrates high professionalism and trustworthiness, with recommendations to enhance privacy transparency and security disclosures to further strengthen user trust and compliance.
Acasacas.org.uk
Government · United Kingdom
80Low
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
Acas is a UK government-affiliated organization providing free and impartial workplace advice, training, and dispute resolution services to employers and employees across England, Wales, and Scotland. The website reflects a mature digital presence with a clear focus on accessibility, user experience, and compliance with privacy regulations such as GDPR. The technical infrastructure is based on Drupal CMS, enhanced with modern consent management and analytics tools, ensuring a balance between functionality and user privacy. Security posture is strong with HTTPS enforcement and standard security headers, although explicit security policies and incident response contacts are not publicly detailed. Overall, the site demonstrates high professionalism and trustworthiness appropriate for a government service.
Krameskramesstore.com
Healthcare · United States
84Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Krames is a well-established healthcare company specializing in patient education materials, operating an e-commerce platform under the parent company WebMD Ignite. The website offers both digital and physical educational resources aimed at healthcare providers and patients, reflecting a mature market position since 1974. Technically, the site is built on Magento with a modern tech stack including RequireJS, jQuery, and integrations with marketing and analytics tools such as HubSpot, LinkedIn Insight, and New Relic. Security posture is solid with HTTPS enforced and domain protections in place, though improvements like DNSSEC and enhanced security headers are recommended. Privacy compliance is well addressed with cookie consent mechanisms and comprehensive policies. Overall, the site demonstrates a professional and trustworthy online presence with extensive marketing and analytics capabilities.
Nutricianutricia.fr
Healthcare · France
77Low
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
Nutricia is a specialized medical nutrition company operating under the Danone group, targeting patients with nutritional needs and healthcare professionals. The website reflects a professional and consistent brand presence with comprehensive product and service information. Technically, the site is built on WordPress with modern tracking and analytics tools, providing a good user experience and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies could be improved. The absence of WHOIS data limits domain trust verification but the site’s affiliation and content quality support legitimacy. Overall, the website is well-maintained and trustworthy for its intended audience.
- Danone
danone.fr
Retail · France
86Low
NIS2 17 · GDPR 65
NIS2 17 · GDPR 65
Danone is a large multinational food and beverage company with a strong presence in France, focusing on health through nutrition. The website reflects a mature digital presence using Adobe Experience Manager and modern web technologies, providing rich content about their brands, products, and corporate initiatives. Security posture is good with HTTPS and some security best practices, but lacks explicit security policies and incident response contacts. Privacy compliance is partial with a consent mechanism but no clear privacy or cookie policies found in the analyzed content. WHOIS data is missing or unavailable, which is unusual and slightly reduces trustworthiness, but the website content and branding strongly indicate legitimacy.
- Nutricia
nutricia.be
Healthcare · Belgium
83Low
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Nutricia is a well-established healthcare nutrition company focused on providing specialized medical nutrition products and support services in Belgium. Their website demonstrates a professional digital presence with comprehensive content targeting patients, caregivers, and healthcare professionals. The site leverages Adobe Experience Manager CMS and integrates modern marketing and analytics tools such as Google Tag Manager and Adobe Launch. Privacy and cookie compliance are well implemented, reflecting adherence to GDPR requirements. Security posture is good with HTTPS enforced and consent mechanisms in place, though there is room for improvement in security headers and explicit incident response policies. Overall, the website is trustworthy and professionally managed, supporting Nutricia's market position as a leading medical nutrition provider.
- Danone
danonebelgie.be
Manufacturing · Belgium
89Low
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Danone is a global leader in the food and beverage manufacturing sector, with a strong presence in Belgium and over 120 countries worldwide. The company focuses on delivering health through nutrition, offering a diverse portfolio including dairy, plant-based products, waters, beverages, and specialized nutrition. The website reflects a mature digital presence with comprehensive content, multimedia integration, and multilingual support. Technically, the site is built on Adobe Experience Manager with modern search and tracking technologies, providing a good user experience and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and incident response contacts are not clearly published. The absence of WHOIS data is unusual but does not detract from the site's legitimacy given the strong branding and content. Overall, the site is professional, trustworthy, and compliant with privacy regulations.
- Danone
danone.de
Retail · Germany
88Low
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Danone.de is the German-language corporate website for Danone, a large multinational enterprise specializing in food and beverage products including dairy, plant-based foods, mineral water, and medical nutrition. The site emphasizes sustainability, health, and corporate responsibility, reflecting Danone's global mission. The website is professionally designed with excellent content quality, clear navigation, and strong branding consistency. Technically, it leverages Adobe Experience Manager CMS, uses modern tracking and analytics tools, and is hosted on a professional DNS provider. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers and explicit security policies are not publicly visible. No critical vulnerabilities or privacy issues were detected. Overall, the site is trustworthy and well-aligned with Danone's corporate identity.
- Kenworth Mexicana
kenworth.com.mx
Transportation · Mexico
83Low
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Kenworth Mexicana operates as a prominent player in the transportation sector within Mexico, specializing in commercial trucks and related services. The company benefits from a long-established domain since 1999, indicating a mature market presence and stable operations. The website primarily targets businesses and professionals in logistics and transportation, offering products, after-sales services, and financing options. The brand is consistent and well represented digitally, with a professional design and clear branding elements. Technically, the website employs modern web technologies including JavaScript, Cookiebot for cookie consent management, and integrates major analytics and marketing platforms such as Google Analytics and Facebook Pixel. The site is mobile-optimized and performs moderately well, though there is room for improvement in SEO and accessibility features. Hosting and domain registration are managed by reputable providers, supporting a reliable infrastructure. From a security perspective, the website enforces HTTPS and uses a robust cookie consent mechanism, but lacks visible security headers and published security policies or incident response contacts. No critical vulnerabilities or exposed sensitive data were detected, but enhancements in security headers and transparency around security practices are recommended. Overall, the website presents a low-risk profile with good business credibility and compliance posture. Strategic improvements in privacy policy visibility, security headers, and accessibility would further strengthen the site’s trustworthiness and user experience.
- PacLease
paclease.com
Transportation
82Low
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
PacLease is a well-established commercial truck rental and leasing company, operating under the parent company PACCAR Inc. The website presents a professional image with clear branding and a focus on premium truck rental and leasing services. The target audience includes commercial fleet operators and businesses requiring medium to heavy-duty trucks. The company leverages multiple marketing and analytics tools such as Google Analytics, Facebook Pixel, and ClickDimensions to optimize user engagement and advertising effectiveness. Technically, the website uses modern JavaScript libraries like jQuery and integrates Cookiebot for GDPR-compliant cookie consent management. However, some areas such as explicit privacy policy, terms of service, and contact information are not clearly found in the analyzed content. Security posture is good with HTTPS enabled and domain protections in place, but could be improved by adding security headers and publishing security policies. Overall, the website is credible, secure, and professionally maintained, with room for enhanced transparency and compliance documentation.
PACCAR Financialpaccarfinancial.com
—
85Low
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
- Dynacraft
dynacraftnet.com
Transportation · United States
83Low
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Dynacraft, a subsidiary of PACCAR, operates as a specialized supplier of premium OEM components and assemblies primarily serving the transportation manufacturing sector. The company is well-established with a domain age dating back to 2000, reflecting a mature business presence. Their website emphasizes their role in supporting the PACCAR brand with quality manufacturing services targeted at OEM manufacturers and industry partners. The digital infrastructure incorporates modern analytics and consent management tools, indicating a moderate level of digital maturity and compliance with privacy regulations such as GDPR. Security posture is solid with HTTPS enabled and domain protections in place, though improvements could be made by enabling DNSSEC and publishing explicit security policies. Overall, the website presents a professional and trustworthy image consistent with its business model and market position.
Crown Estate Scotlandcrownestatescotland.com
Government · United Kingdom
81Low
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Crown Estate Scotland is a public body managing property, natural resources, and community assets in Scotland to generate lasting economic and social value. The website clearly communicates its roles, projects, and services, targeting Scottish public authorities, community organizations, tenants, and stakeholders. The organization positions itself as a key player in sustainable development, offshore wind projects, and community empowerment. Technically, the website is built on Drupal 10 with modern libraries and frameworks, offering good mobile optimization, accessibility, and SEO. Security posture is solid with HTTPS and cookie consent mechanisms, though DNSSEC is not enabled and explicit security policies are not published. Privacy compliance is well addressed with clear policies and GDPR adherence. Overall, the website is professional, trustworthy, and aligned with its public sector mission.
Ocean Windsoceanwinds.com
Energy
84Low
NIS2 10 · GDPR 100
NIS2 10 · GDPR 100
Ocean Winds is a well-established international company specializing in offshore wind energy, jointly owned by EDP Renewables and ENGIE. The company develops, finances, builds, and operates offshore wind farms worldwide, positioning itself as a global leader in the renewable energy sector. Their website reflects a mature digital presence with comprehensive content, professional design, and clear business focus. Technically, the site is built on WordPress with Elementor, leveraging modern SEO and analytics tools, and demonstrates good mobile optimization and accessibility. Security posture is solid with HTTPS, GDPR-compliant cookie consent, and use of reCAPTCHA, though additional security headers and policies could enhance protection. Overall, the domain age and WHOIS data support the legitimacy and credibility of the business.
ESBesb.ie
Energy · Ireland
81Low
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
ESB is a large, established Irish utility company operating across the electricity market including generation, transmission, distribution, and supply. The company also has diversified operations in telecommunications and electric vehicle charging infrastructure. The website reflects a mature digital presence with comprehensive corporate governance, sustainability, and investor relations content, targeting a broad audience including consumers, businesses, and investors. The business model is vertically integrated, supporting a strong market position in Ireland and internationally through subsidiaries.
RWErwe.com
Energy · Germany
78Low
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
RWE is a major global energy company with a strong focus on renewable energy and sustainability. With over 125 years of history, it has transformed into a leading supplier of clean, safe, and affordable electricity. The company operates a diversified portfolio including renewable energies such as solar, wind (onshore and offshore), hydrogen, battery storage, and bioenergy, alongside conventional energy sources. RWE also invests in energy transition projects and provides related services including energy trading and procurement portals. The website reflects a mature corporate presence with comprehensive information for investors, partners, and job seekers. Technically, the website employs modern web technologies including jQuery, UIkit framework, Google Tag Manager, and Usercentrics for consent management. The site is mobile-optimized, accessible, and SEO-friendly, with fast loading times and structured navigation. The CMS appears to be Progress Sitefinity, supporting a robust content management environment. From a security perspective, the site enforces HTTPS with strong SSL configuration and implements standard security headers. Consent management and privacy policies are comprehensive and GDPR compliant. However, explicit incident response contacts and vulnerability disclosure policies are not publicly visible, representing an area for improvement. No vulnerabilities or exposed sensitive data were detected. Overall, the site is professional, trustworthy, and well-maintained, supporting RWE's market position as a leading energy supplier. The absence of WHOIS data for the domain is unusual but does not detract significantly from the site's credibility given the corporate branding and content quality.
NOFnof.co.uk
Energy · United Kingdom
80Low
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
NOF is a UK-based business development membership organization focused on facilitating valuable connections within the global energy sector. The company positions itself as the strongest energy sector network in the UK, offering services such as business development support, industry introductions, events, and access to an offshore wind projects database. The website is professionally designed, mobile-optimized, and provides comprehensive information about its services and membership benefits. Contact details and social media presence reinforce its credibility. Technically, the website leverages modern technologies including Umbraco CMS, Bootstrap, Google Analytics, HubSpot, and Google reCAPTCHA for security. The site implements HTTPS with a Content Security Policy header, indicating a good security posture. However, additional security headers could enhance protection. The WHOIS data is unavailable due to domain registration constraints, but the website content and contact information strongly indicate a legitimate UK-based business. Security-wise, the site shows good practices such as secure forms with CAPTCHA and no exposed sensitive data. Privacy and cookie policies are present with consent mechanisms, supporting GDPR compliance. No vulnerabilities or suspicious domains were detected. Overall, the site is safe, professional, and trustworthy with a moderate to high security posture. The main risk is the lack of WHOIS data due to domain registration rules, which limits domain trust verification but does not indicate malicious intent. Strategic recommendations include enhancing security headers, publishing a security policy and incident response contacts, and considering a vulnerability disclosure policy to further improve trust and compliance.
Nej.czinternetpb.cz
Telecommunications · Czech Republic
85Low
NIS2 2 · GDPR 100
NIS2 2 · GDPR 100
Nej.cz is a Czech telecommunications provider offering internet, digital television, and telephone services primarily targeting personal and business customers. The company operates as part of the O2 group, indicating a strong market position within the Czech Republic. The website presents a professional and consistent brand image with clear service offerings and contact information. Technically, the site employs modern web technologies including Google Tag Manager, Google Analytics, Cookiebot for cookie consent, Hotjar for user behavior analytics, and reCAPTCHA for form security. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although some security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is well addressed with a comprehensive cookie policy and GDPR-aligned consent management. However, WHOIS data is unavailable, likely due to privacy protection, which is common for this business type. Overall, Nej.cz demonstrates a trustworthy and professional online presence with room for minor security enhancements.
Nice Ltd.incontact.com
Technology · Germany
77Low
NIS2 25 · GDPR 100
NIS2 25 · GDPR 100
NiCE is a leading enterprise technology company specializing in AI-driven customer service automation solutions. Their offerings focus on enhancing customer experience and operational efficiency for businesses globally. The company demonstrates a strong market position with comprehensive services tailored for enterprise clients. The website reflects a mature digital infrastructure leveraging modern web technologies such as Next.js, React, and advanced marketing and analytics tools including Marketo and Google Tag Manager. Security posture is robust with HTTPS enforcement, multiple security headers, and adherence to recognized standards like ISO 27001 and SOC 2. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, NiCE presents a professional, secure, and trustworthy online presence suitable for its enterprise audience.
KEDGE Business Schoolkedge.edu
Education · France
76Low
NIS2 2 · GDPR 65
NIS2 2 · GDPR 65
KEDGE Business School is a prominent French business and management school with campuses in Marseille, Bordeaux, Paris, and Toulon. It offers a range of academic programs including bachelor, master, and specialized master's degrees targeting students, professionals, companies, alumni, and candidates. The school holds triple accreditation (AACSB, EQUIS, AMBA), reinforcing its market position and reputation in higher education. The website reflects a mature digital presence with comprehensive content, clear navigation, and professional branding consistent with its educational mission. Technically, the site employs modern analytics and marketing tools such as Google Tag Manager, Hotjar, Kameleoon, and Plausible Analytics, integrated with a GDPR-compliant cookie consent mechanism via OneTrust. Security posture is strong with HTTPS enforced and appropriate security headers, though there is room for improvement in publishing explicit security policies and incident response information. WHOIS data aligns well with the business claims, showing transparency and legitimacy. Overall, the website is professional, secure, and compliant, supporting KEDGE's credibility as a leading educational institution.
Sparkasse Lüneburgsparkasse-lueneburg.de
Finance · Germany
78Low
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Sparkasse Lüneburg is a regional financial institution based in Germany, providing a broad range of banking and financial services to private and corporate customers. The website serves as a comprehensive online banking portal offering services such as account management, loans, credit cards, investments, insurance, and real estate services. The bank positions itself as a trusted local partner with a strong emphasis on customer service and accessibility. The site is well-structured to cater to different customer segments with clear navigation and dedicated sections for private and business clients. Technically, the website is built on a modern CMS platform, likely Adobe Experience Manager, and employs standard web technologies including JavaScript and CSS. It demonstrates good mobile optimization, accessibility features, and SEO practices. The site uses HTTPS and includes cookie consent mechanisms compliant with GDPR, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS, uses secure forms, and has a cookie consent banner indicating awareness of privacy regulations. While explicit security headers are not fully confirmed, the overall posture is strong with no visible vulnerabilities or exposed sensitive data. The absence of a published security policy or incident response contact is noted as an area for improvement. Overall, the website is professional, trustworthy, and compliant with relevant privacy laws. It effectively supports the bank's business model and customer engagement strategies. Strategic recommendations include enhancing security header implementation, publishing a security policy, and adding a vulnerability disclosure mechanism to further strengthen trust and security posture.
EDITELeditel.cz
Technology · Czech Republic
78Low
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
EDITEL is a technology company specializing in Electronic Data Interchange (EDI) solutions and digital transformation services, primarily targeting businesses seeking to automate data exchange and optimize supply chains. The website presents a professional image with consistent branding and a clear focus on B2B services in the Czech Republic. The technical infrastructure is based on the TYPO3 CMS platform, integrating modern tools such as Google Tag Manager, Cookiebot for cookie consent, and reCAPTCHA for bot protection, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enforced and consent mechanisms in place, but lacks some advanced security headers and explicit security policies. The absence of WHOIS data for the domain raises concerns about domain legitimacy and registration transparency, which should be addressed to improve trust. Overall, the website is functional, business-oriented, and safe for general audiences.
- Wilde Ganzen
wildeganzen.nl
Non-profit · Netherlands
78Low
NIS2 22 · GDPR 88
NIS2 22 · GDPR 88
Wilde Ganzen is a Dutch non-profit organization dedicated to fighting poverty worldwide by supporting local community projects. Their website reflects a mature digital presence with clear branding, comprehensive project information, and secure donation mechanisms. The organization targets donors and partners interested in contributing to sustainable development themes such as education, healthcare, and environmental sustainability. Technically, the site is built on WordPress with modern optimization and analytics tools, ensuring good performance and mobile responsiveness. Security posture is strong with HTTPS, security headers, and consent-based tracking, though a formal security policy and incident response details are not publicly available. Overall, the site is trustworthy, professional, and compliant with GDPR requirements.
Pelipeli.com
Manufacturing · Spain
85Low
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Peli is a well-established manufacturer and retailer specializing in protective cases, torches, and professional gear, with a strong presence in the European market supported by local manufacturing and distribution centers. The website reflects a mature digital infrastructure with modern technologies such as Bootstrap, Google Fonts, and advanced cookie consent management, indicating a commitment to user experience and privacy compliance. Security posture is solid with HTTPS enforcement and domain transfer protections, though DNSSEC is not enabled and explicit security policies are not published. The site uses multiple analytics and marketing tools, including Microsoft Clarity and HubSpot, with extensive user tracking balanced by a comprehensive cookie consent mechanism. Overall, the website is professional, trustworthy, and aligned with the business's market position and history.
PACCAR Incpaccar.com
Transportation · United States
80Low
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
PACCAR Inc is a leading global manufacturer of high-quality commercial trucks and related financial services. The company operates multiple well-known brands including Kenworth, Peterbilt, and DAF, serving a broad transportation market. Their website reflects a mature digital presence with comprehensive business, investor, and product information targeting industry professionals and investors. Technically, the site uses modern frameworks such as Foundation and Umbraco CMS, with integration of Google Analytics and Tag Manager for analytics and marketing. The site is mobile-optimized and well-structured, though performance is moderate. Security posture is solid with HTTPS and cookie consent mechanisms, but lacks explicit security policies and advanced security headers. Overall, PACCAR's website demonstrates strong business credibility and trustworthy digital infrastructure.
- Danone
danone.com
Manufacturing · France
89Low
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Danone is a globally recognized food and beverage company operating in over 120 countries, focusing on essential business lines such as Waters and Early Life Nutrition. The website reflects a mature digital presence with a professional design, comprehensive content, and clear navigation. Technically, the site leverages Adobe Experience Manager and modern technologies, ensuring good performance and mobile optimization. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms in place, although explicit security policies and incident response contacts are not published. The absence of WHOIS data limits domain registration trust verification but the overall branding and external links strongly support legitimacy. Privacy compliance is well addressed with clear policies and GDPR adherence. Overall, the site demonstrates a high level of digital maturity and business credibility.
MetroNews Televisionwvmetronewstv.com
Media · United States
78Low
NIS2 2 · GDPR 95
NIS2 2 · GDPR 95
MetroNews Television is a media streaming platform dedicated to providing comprehensive news, talk, and sports coverage for West Virginia. It offers a variety of programming including live and archived shows, sports broadcasts, and exclusive interviews, positioning itself as the only true statewide medium for the Mountain State. The platform targets West Virginia residents and sports enthusiasts, delivering content accessible across multiple devices without requiring a traditional TV provider. Technically, the website leverages modern web technologies such as React, Google Analytics 4, Google Tag Manager, and Google reCAPTCHA Enterprise for security and analytics. It is hosted likely on AWS infrastructure using Cloudfront CDN, ensuring fast performance and excellent mobile optimization. The site includes proper meta tags, SEO elements, and accessibility features, contributing to a positive user experience. From a security perspective, the site enforces HTTPS and uses bot protection mechanisms. While explicit security headers are not fully confirmed, the site demonstrates good security hygiene with CSRF tokens and no exposed sensitive data. Privacy and cookie policies are present with consent mechanisms, indicating compliance with GDPR and related regulations. However, the absence of WHOIS data for the domain raises concerns about domain legitimacy and transparency. Overall, MetroNews Television presents a professional and trustworthy media service with strong technical and security foundations. The main risk lies in the lack of publicly available domain registration information, which should be addressed to enhance trust and credibility.
Zimbrazimbra.com
Technology
83Low
NIS2 17 · GDPR 95
NIS2 17 · GDPR 95
Zimbra operates as a provider of cloud-hosted collaboration software and email platforms, emphasizing open standards, low-risk alternatives, and data sovereignty. The company targets enterprises and businesses seeking integrated collaboration solutions with productivity add-ons. The website reflects a medium-sized technology business with a professional online presence, offering downloadable products, documentation, and trial options. Technically, the site is built on WordPress and leverages modern JavaScript libraries and analytics tools such as HubSpot, Google Tag Manager, and New Relic for performance monitoring. The site is moderately optimized for mobile and SEO, with a good user experience and clear navigation. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, but lacks explicit security policies and headers. Privacy compliance is weak due to missing privacy and cookie policies. WHOIS data is unavailable, which raises some trust concerns despite the professional appearance. Overall, the site is functional and trustworthy but would benefit from enhanced transparency and security documentation.
MWAY DIGITAL GmbHmway.io
Technology · Germany
85Low
NIS2 2 · GDPR 100
NIS2 2 · GDPR 100
MWAY DIGITAL GmbH is a German-based technology company specializing in innovative software solutions for enterprises and educational institutions. Their offerings include mobile solutions, enterprise applications, device management, and building automation. The company positions itself as a digital pioneer with a strong focus on modern, intuitive software and partnership-driven business. The website reflects a professional and consistent brand image, targeting business and education sectors with clear messaging and client references from reputable companies.
Aflac Medicare Supplementaflacmedicaresupplement.com
Healthcare · United States
82Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
The website www.aflacmedicaresupplement.com represents a Medicare Supplement insurance offering underwritten by Tier One Insurance Company, a subsidiary of Aflac Incorporated, and administered by Aetna Life Insurance Company. It targets Medicare beneficiaries seeking supplemental insurance to cover gaps in Original Medicare. The site provides quote request forms, prominently displays contact phone numbers, and uses trusted branding and official Medicare resources. Technically, the site employs modern JavaScript frameworks (Vue.js), integrates multiple analytics and marketing tools, and demonstrates good mobile optimization and accessibility. Security posture is strong with HTTPS, security headers, and secure form handling, though explicit security policies and incident response information are absent. The WHOIS data is notably missing or unavailable, which raises concerns about domain registration legitimacy despite the professional appearance and affiliation with reputable insurance entities. Overall, the site is functional, professional, and trustworthy from a user perspective but requires verification of domain registration to fully confirm legitimacy.