Low-risk security reports
14,261 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,165001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
2,101–2,150 of 14,261
ExpiredDomains.commariestumpfova.com
Technology
78Low
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
ExpiredDomains.com operates as a specialized online platform aggregating expired and expiring domain listings from multiple TLDs, providing domain investors, SEOs, and marketers with comprehensive data and filtering tools. The platform does not directly sell domains but facilitates purchases through trusted partners like GoDaddy, positioning itself as a valuable resource in the domain aftermarket space. Technically, the website employs modern web standards with responsive design and integrates SVG icons and JavaScript for enhanced user experience. Hosting and DNS are managed via reputable providers including Cloudflare and GoDaddy, ensuring reliable uptime and performance. Security posture is adequate with HTTPS enforced and CSRF protections in place, though additional security headers and explicit policies could improve resilience. Privacy compliance is well addressed with clear privacy and cookie policies, including consent mechanisms. Business credibility is supported by consistent branding, user testimonials, and active social media engagement. Overall, the site is accessible, professional, and trustworthy with no indications of malicious or adult content.
HELLENiQ ENERGYhelleniqenergy.gr
Energy · Greece
78Low
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
HELLENiQ ENERGY is a leading energy group operating in Southeastern Europe with activities spanning six countries. The company focuses on refining, supply, and sales of petroleum products and petrochemicals, positioning itself as a key player in the energy sector. Their website reflects a professional corporate presence with clear branding and comprehensive business information. The target audience includes industry stakeholders, partners, and customers interested in energy solutions with a focus on low carbon emissions. Technically, the website is built on Drupal 9, leveraging modern web technologies such as jQuery UI and Slick Carousel for UI components. It integrates Google Tag Manager and Cookiebot for analytics and cookie consent management, demonstrating a mature digital infrastructure. The site is mobile-optimized, accessible, and SEO-friendly, providing a good user experience. From a security perspective, the site enforces HTTPS and implements multiple security headers, contributing to a strong security posture. Cookie consent mechanisms comply with GDPR requirements, offering users granular control over cookie categories. However, explicit security policies, incident response contacts, and vulnerability disclosure information are absent, representing areas for improvement. Overall, the website is trustworthy, professionally maintained, and compliant with privacy regulations. Strategic enhancements in transparency around security policies and incident handling would further strengthen its security and compliance posture.
- Fost Plus
fostplus.be
Non-profit · Belgium
76Low
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Fost Plus is a Belgian non-profit organization dedicated to promoting sustainable packaging management through sorting, recycling, reuse, and reduction initiatives. It serves a broad audience including households, businesses, schools, healthcare, horeca, and event sectors, positioning itself as a key player in Belgium's circular packaging economy. The website is professionally designed, multilingual, and rich in relevant content, reflecting a mature digital presence. Technically, the website is built on Drupal CMS with modern frameworks like Bootstrap and integrates advanced marketing and analytics tools such as HubSpot, Google Tag Manager, and Usercentrics for consent management. The site is mobile-optimized, accessible, and SEO-friendly, indicating a well-maintained technical infrastructure. From a security perspective, the site enforces HTTPS and implements consent mechanisms, though it lacks explicit security headers in the provided data. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is restricted due to .be domain policies, but the overall domain legitimacy is supported by consistent business information and professional web presence. Overall, Fost Plus demonstrates a strong security posture, good privacy compliance, and high business credibility, making it a trustworthy and authoritative source in its domain.
- Atos
atos.com
Manufacturing
81Low
NIS2 17 · GDPR 85
NIS2 17 · GDPR 85
Atos is a specialist company in the electrohydraulic sector, offering innovative solutions for industrial, hazardous, and corrosive environments. The company targets industrial clients and engineering professionals, providing a broad range of products including proportional valves, cylinders, pumps, and complete hydraulic systems. The website reflects a professional and consistent brand image with multi-language support and a product configurator tool, indicating a mature digital presence. Technically, the site uses modern web technologies such as Google Tag Manager, reCAPTCHA, and Akamai performance monitoring, hosted likely on a CDN infrastructure. However, the absence of WHOIS registration data and lack of visible privacy and cookie policies represent gaps in transparency and compliance. Security posture is moderate with some best practices observed but missing security headers and incident response information. Overall, the site is functional and professional but would benefit from improved compliance and security transparency.
NIBEnibe.cz
Energy · Czech Republic
84Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
NIBE is a well-established European company specializing in sustainable heating and cooling solutions, primarily through advanced heat pump technology. The website targets the Czech market with localized content and offers a comprehensive product range including heat pumps, water heaters, ventilation units, and related accessories. The company positions itself as a leader in energy-efficient home comfort solutions. Technically, the website is built on the SiteVision CMS platform, utilizing modern web technologies such as jQuery, Uikit, and Google Tag Manager, ensuring a responsive and user-friendly experience. Security measures include HTTPS enforcement, reCAPTCHA integration, and a robust cookie consent mechanism via OneTrust, reflecting good privacy compliance and user data protection. The absence of exposed sensitive data and the use of security best practices contribute to a strong security posture. Overall, the website demonstrates professionalism, compliance with GDPR, and a trustworthy digital presence, although WHOIS data is privacy protected and unavailable. Strategic recommendations include publishing explicit security policies and incident response information to further enhance trust and transparency.
Non-profit · United States
85Low
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
National Breast Cancer Foundation, Inc. is a well-established non-profit organization dedicated to providing help and hope to those affected by breast cancer through early detection, education, and support services. The organization has a strong market position supported by recognized certifications such as Four Star Charity and Platinum Transparency awards. Their website reflects a professional and trustworthy presence with comprehensive content targeting individuals affected by breast cancer and supporters. Technically, the website is built on WordPress with modern technologies and optimized for performance, mobile, and SEO. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although formal security policies and incident response information are not publicly available. Overall, the website demonstrates high credibility and trustworthiness, with a moderate risk due to lack of WHOIS transparency but justified by privacy protection for a non-profit entity.
Nej.czpb.cz
Telecommunications · Czech Republic
85Low
NIS2 2 · GDPR 100
NIS2 2 · GDPR 100
Nej.cz is a Czech telecommunications provider offering internet, digital television, and telephone services primarily targeting personal and business customers within the Czech Republic. The company operates as part of the O2 group, leveraging its infrastructure and service platforms. The website presents a professional and consistent brand image with clear service offerings and customer support channels. Technically, Nej.cz employs modern web technologies including Google Tag Manager, Google Analytics, Cookiebot for consent management, Hotjar for user behavior analytics, and reCAPTCHA for form security. The site is well-optimized for mobile devices and includes comprehensive cookie consent mechanisms aligned with GDPR requirements. Security posture is strong with HTTPS enforcement and appropriate security headers, though explicit security policies and incident response contacts are not published. The absence of WHOIS data reduces transparency but does not detract significantly from the site's legitimacy given the business context and content quality. Overall, Nej.cz demonstrates a mature digital presence with good security and privacy compliance, suitable for its telecommunications market segment.
Ingram Content Groupingramcontent.com
Retail · United States
79Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Ingram Content Group is a leading enterprise in the book industry, providing comprehensive solutions and services to publishers, authors, retailers, and libraries worldwide. Their business model focuses on B2B content distribution and publishing tools, supported by a network of subsidiary platforms such as CoreSource, Ingram iD, and Lightning Source. The website reflects a mature digital presence with professional design, clear navigation, and extensive content relevant to their target audience. Technically, the website is built on the Webflow CMS platform, leveraging modern web technologies including Google Fonts, jQuery, Google Tag Manager, and Facebook Pixel for analytics and marketing. Hosting is via a CDN (Amazon CloudFront), ensuring moderate performance and good mobile optimization. SEO and accessibility are adequately addressed, though accessibility could be improved. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, indicating compliance with privacy regulations such as GDPR. However, no explicit security policy or incident response information is published, and security headers are not explicitly detected. The absence of WHOIS registration data is a concern but does not currently undermine the site's legitimacy given the professional presentation and ecosystem. Overall, the website presents a low-risk profile with strong business credibility and good privacy compliance. Strategic recommendations include publishing a dedicated security policy, adding a security.txt file, enhancing accessibility, and implementing additional HTTP security headers to further strengthen security posture.
UCLA Healthuclahealth.org
Healthcare · United States
81Low
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
UCLA Health is a leading healthcare provider and academic medical center based in Southern California, affiliated with the University of California. The website serves patients, healthcare professionals, and the community by providing information about its hospitals, clinics, cancer center, and academic departments. It holds a strong market position as a top-ranked hospital system with a comprehensive range of healthcare services. Technically, the site is built on Drupal 11, leveraging modern web technologies including Font Awesome, Google Tag Manager, and Vimeo API, with good mobile optimization and accessibility features. Security posture is strong with HTTPS, multiple security headers, and no visible vulnerabilities, though explicit security policies and vulnerability disclosures are absent. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with privacy regulations, making it a reliable digital presence for UCLA Health.
- DDemcon
careersatdemcon.com
Technology
80Low
NIS2 17 · GDPR 95
NIS2 17 · GDPR 95
Demcon is a technology company focused on attracting and recruiting technology professionals through its careers website. The site is designed to showcase career opportunities and engage talent interested in technology sectors. The company appears to be medium-sized and founded in 2018, with a consistent domain registration and hosting setup. The technical infrastructure leverages modern JavaScript frameworks such as Nuxt.js, integrates Google Tag Manager and YouTube APIs, and uses Cookiebot for cookie consent management, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and explicit security policies. Privacy compliance is partial, with cookie consent present but no visible privacy policy or terms of service in the provided content. Overall, the website is professional and functional, but could improve transparency and security practices to enhance trust and compliance.
Ville de Saint-Étiennesaint-etienne.fr
Government · France
80Low
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
The website www.saint-etienne.fr is the official digital portal for the city government of Saint-Étienne, France. It serves as a comprehensive resource for residents and visitors, offering access to municipal services, news, cultural and sporting events, administrative procedures, and employment opportunities. The site is well-positioned as an authoritative source for local information and community engagement. Technically, the site is built on Drupal 10, leveraging modern web technologies including Google Tag Manager, Google Analytics (GA4), Matomo Analytics, and OneSignal for push notifications. It employs a robust cookie consent mechanism via Tarteaucitron, ensuring GDPR compliance. The site demonstrates good mobile optimization, accessibility, and SEO practices, contributing to a positive user experience. From a security perspective, the site enforces HTTPS with strong SSL configuration and includes essential security headers. No critical vulnerabilities or exposed sensitive data were detected. However, the site lacks a publicly available security policy or incident response contact, which could enhance transparency and trust. Overall, the website presents a low-risk profile with strong business credibility and technical maturity. Strategic recommendations include publishing a formal security policy, incident response information, and a vulnerability disclosure program to further strengthen security posture and user trust.
vFairsvfairs.com
Technology
82Low
NIS2 17 · GDPR 85
NIS2 17 · GDPR 85
vFairs operates a comprehensive event management platform specializing in hybrid, in-person, and virtual events. The company offers a broad suite of services including event registration, ticketing, mobile apps, virtual event hosting, and engagement tools such as gamification and networking. Their market position is strong, supported by a large user base and high customer satisfaction ratings. Technically, the website is built on WordPress with modern integrations for analytics, marketing, and multilingual support, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though some security headers and explicit incident response policies could be improved. Overall, the website is professional, user-friendly, and trustworthy, but the lack of WHOIS registration data introduces some uncertainty regarding domain legitimacy.
- ZZměnit jazyková nastavení a měnu
amazon.cz
—
83Low
NIS2 25 · GDPR 100
NIS2 25 · GDPR 100
Název školyissziv.cz
Education · Czech Republic
76Low
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
The website represents an educational institution, the Integrovaná střední škola živnostenská, providing secondary vocational education in the Czech Republic. It offers various study programs, practical training, and public services such as salons and courses. The site is well-structured with clear navigation and professional design, targeting students and prospective students. Technically, it is built on WordPress with Elementor and uses modern web technologies including Google Fonts and WP Rocket for performance optimization. Security posture is adequate with HTTPS enforced and cookie consent implemented, though security headers are missing and no incident response information is provided. The absence of WHOIS data is a concern for domain legitimacy but the website content and structure suggest a legitimate educational entity. Overall, the site is compliant with GDPR and provides a good user experience.
- Diplomeo
diplomeo.com
Education · France
77Low
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
Diplomeo is a well-established French educational orientation platform founded in 2011, serving over 300,000 students annually. It specializes in helping users find suitable diplomas, schools, and career paths in France. The platform offers comprehensive services including diploma and school searches, career guidance, event listings, and school reviews, positioning itself as a market leader in educational orientation within France. Technically, the website employs modern web technologies such as Turbo Frames and StimulusJS, with a moderate performance profile and good mobile optimization. Security posture is adequate with HTTPS enabled and domain transfer protections, but lacks advanced security headers and formal security policies. Privacy compliance is basic, with cookie consent mechanisms present but no explicit privacy or terms of service pages detected. Overall, the website is professional, trustworthy, and content-rich, though improvements in security and privacy transparency are recommended.
GoDaddy Operating Company, LLCarawa.com
E-commerce · Germany
78Low
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
This website is a professional domain sales landing page operated by GoDaddy, offering the premium domain 'arawa.com' for purchase. It targets individuals and businesses interested in acquiring premium domain names, providing secure transactions, multiple payment options, and customer support. The site is well-branded and consistent with GoDaddy's domain aftermarket business model. Technically, the site uses modern web technologies including React and Next.js, hosted on GoDaddy infrastructure, and demonstrates good performance and mobile optimization. Security posture is strong with HTTPS, security headers, and reCAPTCHA integration, although explicit incident response and vulnerability disclosure information are not present. Privacy and cookie policies are comprehensive and GDPR compliant, reflecting good privacy compliance. Overall, the site is trustworthy and professionally maintained, serving as a reliable platform for domain sales.
Metaswitch Networksopencloud.com
Telecommunications
80Low
NIS2 2 · GDPR 95
NIS2 2 · GDPR 95
Metaswitch Networks is a cloud native communications software provider specializing in voice core, unified communications, and robocall blocking solutions primarily targeting telecommunications operators and service providers. The company is positioned as a pioneering network software vendor and is now part of the parent company Alianza, which is prominently referenced throughout the website. The business model focuses on B2B software solutions that enable operators to modernize and expand their communications services. The website content is professionally presented with clear branding and consistent messaging aligned with the telecommunications industry.
Mozillamozilla.com
Technology
82Low
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Mozilla operates the Firefox web browser, a leading privacy-focused and open-source browser available across multiple platforms including Windows, Mac, Linux, Android, and iOS. The website serves as a central hub for downloading Firefox, learning about its features, and accessing support resources. Mozilla's non-profit status and commitment to internet health and privacy position Firefox as a trusted alternative to mainstream browsers. The site demonstrates a mature digital presence with excellent content quality, mobile optimization, and user experience. Technically, the site uses modern JavaScript frameworks, Sentry for error monitoring, and Google Tag Manager for analytics, reflecting a robust and well-maintained infrastructure. Security posture is strong with HTTPS enforced and privacy mechanisms like cookie consent banners implemented, though explicit security policies and incident response contacts are not published on the site. WHOIS data for the domain is unavailable, which is unusual but does not detract significantly from the site's legitimacy given Mozilla's global reputation and consistent branding. Overall, the site is professional, secure, and privacy-conscious, serving a broad audience effectively.
Capgeminicapgemini.no
Technology · Norway
86Low
NIS2 55 · GDPR 88
NIS2 55 · GDPR 88
Capgemini is a global leader in consulting, technology services, and digital transformation, offering integrated services that combine technology expertise with deep sector knowledge. The company targets enterprise clients seeking to innovate and transform their business operations digitally. The website reflects a mature digital presence with a professional design, comprehensive content, and strong branding consistency. Technical infrastructure leverages WordPress CMS with modern JavaScript frameworks like React, supported by marketing and analytics tools such as Pardot and Google Tag Manager. Security posture is robust, with HTTPS enforced and multiple security headers implemented, alongside clear privacy and cookie policies indicating GDPR compliance. The absence of WHOIS data is notable but likely due to privacy protection or query limitations, not detracting from the overall legitimacy of the site. Strategic recommendations include maintaining up-to-date security practices and enhancing incident response visibility.
- HOSTEUR SA
hosteur.com
Technology · Switzerland
77Low
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
HOSTEUR SA is a Swiss-based technology company specializing in web hosting, domain registration, cloud services, and IT management with over 20 years of experience. The company emphasizes European data sovereignty, operating datacenters exclusively in Europe, and holds multiple ISO certifications (27001, 9001, 14001) that attest to its commitment to security, quality, and environmental responsibility. The website is professionally designed, mobile-optimized, and provides comprehensive service information targeting businesses and individuals seeking secure hosting solutions. Technically, the website employs modern web technologies including Bootstrap, jQuery, Owl Carousel, and Google Fonts, with a cookie consent mechanism implemented via Tarteaucitron. The site is served over HTTPS with no visible security vulnerabilities in the HTML content. However, no explicit HTTP security headers were detected, and no CMS or hosting provider details are disclosed. Performance is moderate with good mobile optimization and basic accessibility features. From a security perspective, HOSTEUR demonstrates strong compliance with recognized standards through its ISO certifications and cookie consent implementation. The absence of WHOIS data for the domain is a notable anomaly that slightly reduces trustworthiness, though the website content and certifications support legitimacy. No incident response or vulnerability disclosure information is publicly available, indicating an area for improvement. Overall, HOSTEUR presents as a credible and professional hosting provider with a solid security posture and compliance focus. Strategic recommendations include enhancing transparency around incident response, publishing vulnerability disclosure policies, implementing additional security headers, and clarifying domain registration details to improve trust and compliance further.
- WTR
worldtrademarkreview.com
Media
78Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
World Trademark Review (WTR) operates as a specialized media and intelligence service focused on trademark law and its business implications. The website provides timely news, legal analysis, and business impact assessments targeted at trademark professionals and legal practitioners. The business model appears to be subscription-based, delivering expert content to a niche audience. The site maintains a professional and consistent brand presence with good content quality and user experience. Technically, the website employs modern web technologies including React, Bootstrap, and Font Awesome, alongside marketing and analytics tools such as Pardot and Hotjar. The site is mobile-optimized and implements cookie consent mechanisms, reflecting a mature digital infrastructure. Performance is moderate with good SEO and accessibility features. From a security perspective, the site enforces HTTPS and uses cookie consent banners, but lacks explicit security headers and a public security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS registration data is a concern, slightly reducing trustworthiness, but the overall security posture is solid. Overall, WTR presents a credible and professional online presence with room for improvement in transparency of domain registration and security disclosures. Strategic recommendations include enhancing security headers, publishing a security.txt file, and providing clear incident response contacts to strengthen trust and compliance.
- CCrowe LLP
crowe.com
Finance · United States
78Low
NIS2 55 · GDPR 95
NIS2 55 · GDPR 95
Crowe LLP is a large, established public accounting and consulting firm specializing in audit, tax, and consulting services for public and private entities. The website reflects a mature digital presence with comprehensive service descriptions, industry insights, and a strong emphasis on client engagement. The technical infrastructure leverages modern web technologies, including JavaScript frameworks, Google Tag Manager, and TrustArc for privacy compliance, hosted likely behind Cloudflare for performance and security. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers could be improved. The absence of WHOIS data is notable but does not detract from the professional presentation and trustworthiness of the site. Overall, Crowe LLP demonstrates a high level of digital maturity and compliance with privacy regulations.
AMC+amcplus.com
Media · United States
82Low
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
AMC+ is a subscription-based streaming service operated by AMC Networks, offering access to popular TV shows, movies, and live channels. The service targets a general audience interested in entertainment content, particularly fans of AMC's original programming and affiliated brands. The website is professionally designed, mobile-optimized, and integrates modern analytics and marketing technologies such as Google Tag Manager, Google Analytics, and mParticle. Cookie consent mechanisms are implemented, reflecting a basic level of privacy compliance. However, explicit privacy policy and terms of service pages were not found on the analyzed page, which is a compliance gap. The security posture is generally good with HTTPS enforced and no visible vulnerabilities, but lacks explicit security headers and published security policies or incident response contacts. WHOIS data is missing or unavailable, which raises some concerns about domain registration transparency, though the website branding and content strongly indicate legitimacy as part of AMC Networks. Overall, the site scores well on content quality and business credibility but should improve privacy and security disclosures to enhance trust and compliance.
AMC Networksamc.com
Media · United States
82Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
AMC Networks operates a prominent media streaming platform offering a wide range of TV shows and movies, including popular series such as The Walking Dead and Better Call Saul. The website serves a broad audience interested in entertainment content, providing streaming, video extras, blogs, and e-commerce merchandise. The platform is well-positioned in the media industry with a strong brand presence and partnerships with related streaming and merchandise sites. Technically, the site leverages modern web technologies including React and integrates multiple analytics and advertising tools, reflecting a mature digital infrastructure. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, although explicit security policies and incident response contacts are not publicly detailed. Privacy compliance is evident with GDPR-aligned policies and cookie management. Overall, the site demonstrates high professionalism and trustworthiness, though the absence of WHOIS data is notable but likely due to privacy or registry configurations. Strategic recommendations include enhancing transparency around security policies and incident response, and adding vulnerability disclosure mechanisms.
Omidyar Networkomidyar.com
Technology
79Low
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Omidyar Network is a well-established philanthropic organization focused on shaping the digital future through investments and advocacy in technology culture, governance, and business. The website reflects a mature digital presence with professional design, clear messaging, and comprehensive content aligned with its mission. Technically, the site is built on WordPress with modern frameworks and analytics tools, hosted with reputable providers and secured with HTTPS and domain locking mechanisms. Security posture is strong though lacking explicit published security policies or incident response contacts. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site presents a low-risk profile with high trustworthiness and professionalism.
VGN Medien Holding GmbHvgn.at
Media · Austria
82Low
NIS2 2 · GDPR 80
NIS2 2 · GDPR 80
VGN Medien Holding GmbH is Austria's leading magazine publisher, established in 1992 with a strong portfolio of print and digital media brands. The company targets the Austrian population with content spanning politics, society, lifestyle, business, and entertainment. Their business model integrates traditional publishing with digital innovation and content marketing services, positioning them as a market leader in the Austrian media sector. Technically, the website employs modern web technologies including Google Tag Manager, Google Analytics, and OneTrust for cookie consent, ensuring a compliant and user-friendly experience. The site is mobile-optimized and SEO-conscious, reflecting a mature digital infrastructure. Security-wise, the website enforces HTTPS and uses cookie consent mechanisms, but lacks explicit security policy pages and incident response contacts, which are recommended for enhanced transparency and readiness. Overall, the website is professional, trustworthy, and compliant with GDPR, with no detected critical vulnerabilities or suspicious content.
Derendinger AGderendinger.ch
Transportation · Switzerland
81Low
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Derendinger AG is the largest supplier of automotive spare parts and consumables in the Swiss aftermarket, serving professional garages and workshops. The company offers a wide range of products including parts for passenger cars, commercial vehicles, motorcycles, tires, lubricants, and workshop equipment, supported by consulting and training services. Their market position is strong as a key player within the Swiss Automotive Group. Technically, the website is built on Neos CMS with modern JavaScript libraries such as Swiper.js and integrates analytics and consent management tools, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced and privacy compliance evident through clear policies and consent mechanisms, though formal security policies and incident response contacts are not publicly disclosed. Overall, the website is professional, trustworthy, and well-optimized for user experience and SEO, supporting the company's business credibility and market presence.
Produktgenusspodcasten.de
Media · Germany
76Low
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Podcasten.de is a German-based small business specializing in full-service podcast production, distribution, and consulting. The company, operated under the parent brand Produktgenuss, offers end-to-end podcast services including editing, hosting via a partner platform LetsCast.fm, and strategic consulting for new podcasters. Their market position is niche-focused, targeting podcast creators and aspiring podcasters with a professional and consistent brand presence. The website is well-structured, mobile-optimized, and provides clear contact channels including email, phone, and a secure contact form. Social media presence is robust with multiple platforms linked for key team members. Technically, the website is built on a Ruby on Rails framework with modern front-end technologies like Turbolinks and FontAwesome. Hosting is provided by Variomedia, a German hosting provider, which aligns with the business location. Performance is moderate with good SEO and accessibility basics. Security posture is adequate with HTTPS enforced and CSRF protection on forms, but lacks explicit security headers and publicly available security policies. Privacy compliance is good with a GDPR-compliant privacy policy and cookie consent mechanism. Overall, the security posture is solid for a small service provider but could be improved by adding security headers and incident response information. No vulnerabilities or suspicious patterns were detected. The business credibility is high given the professional content, clear contact information, and trust signals such as client showcases and team bios. The website content is safe for general audiences with no adult or questionable content detected.
F5, Inc.f5.com
Technology · United States
86Low
NIS2 14 · GDPR 73
NIS2 14 · GDPR 73
F5, Inc. is a well-established enterprise technology company specializing in application delivery, security, and multicloud networking solutions. Founded in 1996 and headquartered in Seattle, USA, F5 serves a global enterprise audience including IT professionals and security teams. The company offers a broad portfolio of services such as application delivery controllers, API security, bot management, and DDoS protection, positioning itself as a leader in the technology sector. The website reflects this with professional design, comprehensive content, and clear navigation tailored to enterprise users. Technically, the website leverages modern technologies including Adobe Experience Manager CMS, Tealium tag management, and Adobe Helix RUM for performance monitoring. It integrates third-party platforms like YouTube and Coveo for media and search functionality. The site is mobile-optimized, accessible, and SEO-friendly, indicating a mature digital infrastructure supporting a global user base. From a security perspective, F5 demonstrates strong posture with HTTPS enforcement, multiple security headers, and recognized certifications such as ISO 27001 and SOC 2. The presence of a vulnerability disclosure program and incident response contacts further underscores their commitment to security and compliance. No vulnerabilities or suspicious content were detected in the analysis. Overall, the website and business exhibit high trustworthiness and professionalism. The absence of WHOIS data is mitigated by consistent business information and strong security and privacy practices. Strategic recommendations include maintaining up-to-date third-party components, enhancing transparency on data retention, and continuing proactive security monitoring to sustain their leadership position.
- Keepit A/S
keepit.com
Technology · Denmark
86Low
NIS2 60 · GDPR 100
NIS2 60 · GDPR 100
Keepit A/S operates a professional cloud data protection service focused on SaaS applications, positioning itself as a cost-effective and experienced provider with over 20 years in the market. The website is well-structured, with clear branding and comprehensive privacy and cookie policies, indicating a mature approach to data protection and user privacy. Technically, the site leverages modern cloud infrastructure and reputable third-party services such as Cloudflare, Microsoft Azure, and HubSpot, ensuring reliable performance and security. The security posture is strong with HTTPS enforced and use of Cloudflare for protection, though explicit security headers and public security policies could be improved. The absence of WHOIS data limits domain trust analysis, but the overall digital presence and compliance measures suggest a legitimate and professional business. Strategic recommendations include enhancing transparency with explicit security policies, publishing contact and incident response information, and improving domain registration visibility.
GoDaddy Operating Company, LLCarivela.com
Technology · United States
81Low
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
This website is a domain sales landing page for the domain arivela.com, hosted on a GoDaddy subdomain (forsale.godaddy.com). It serves as a marketplace interface allowing potential buyers to make offers on the domain. The platform is part of GoDaddy's extensive domain aftermarket ecosystem, leveraging their infrastructure and trusted brand. The site is professionally designed with clear calls to action, secure payment options, and a visible contact phone number, targeting individuals and businesses interested in premium domain acquisition. Technically, the site uses modern web technologies including React (Next.js), secure HTTPS, and integrates Google reCAPTCHA for bot protection. Security posture is strong with no visible vulnerabilities and good SSL configuration. Privacy and cookie policies are present on the parent domain, indicating compliance with GDPR and other regulations. Overall, the site is trustworthy and well-positioned within the domain aftermarket industry.
Fürstentum Liechtensteinliechtenstein.li
Government · Liechtenstein
76Low
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
The website www.liechtenstein.li serves as the official online presence of the Principality of Liechtenstein, providing comprehensive information about the country's government structure, economic environment, tourism opportunities, cultural offerings, and educational institutions. It targets a broad audience including residents, tourists, businesses, and investors. The site is built on the concrete5 CMS platform and employs modern web technologies such as jQuery, Swiper.js for sliders, Matomo for analytics, and Usercentrics for cookie consent management, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced and privacy compliance well addressed through clear privacy and cookie policies. However, the site lacks explicit security policy and incident response information, which could be enhanced to improve transparency and trust. Overall, the website is professional, trustworthy, and well-optimized for user experience and accessibility.
Hospitality
77Low
NIS2 2 · GDPR 95
NIS2 2 · GDPR 95
The website www.visiticeland.com serves as an official travel information portal for Iceland, showcasing the country's natural wonders such as glaciers, northern lights, hot springs, and cultural heritage. The site targets tourists and travelers interested in exploring Iceland, providing rich content about attractions and travel tips. The business model focuses on tourism promotion and information dissemination, positioning itself within the hospitality industry. Technically, the site is built using modern web technologies including Gatsby and React, with good mobile optimization and SEO practices. However, the absence of WHOIS registration data raises concerns about domain legitimacy. Security posture is weak due to lack of security headers, privacy policies, and contact information for incident response. Overall, the site is functional and content-rich but requires improvements in security and compliance to enhance trustworthiness.
Regjeringen.noregjeringen.no
Government · Norway
78Low
NIS2 17 · GDPR 65
NIS2 17 · GDPR 65
Regjeringen.no is the official Norwegian government website providing comprehensive insights into the work of the government and its ministries. It serves as a trusted platform for citizens to access news, official documents, and information about government officials and policies. The site is authoritative and well-positioned as the primary source of governmental information in Norway. Technically, the website employs modern JavaScript libraries, analytics tools like Matomo and Microsoft Application Insights, and implements a cookie consent mechanism aligned with GDPR requirements. The site is accessible, mobile-optimized, and demonstrates good SEO practices. Security-wise, the site uses HTTPS and monitoring tools but could improve by adding explicit security headers and publishing a security policy. Overall, the domain is highly legitimate despite the absence of WHOIS data due to Norid's privacy policies, consistent with the nature of a government domain.
Government · Switzerland
76Low
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
The European Free Trade Association (EFTA) website serves as the official online presence of the intergovernmental organization comprising Iceland, Liechtenstein, Norway, and Switzerland. It provides comprehensive information about EFTA's role in promoting free trade and economic integration within Europe and globally. The site targets government officials, trade professionals, and policy makers, offering detailed resources on trade relations, legal texts, statistical cooperation, and organizational structure. The website is well-established, reflecting the organization's long history since 1997, and maintains a professional and authoritative tone.
- Mandarin Oriental Hotel Group
mandarinoriental.com
Hospitality
81Low
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
Mandarin Oriental Hotel Group is a globally recognized luxury hospitality brand offering premium hotel stays, fine dining, spa, wellness, and event services. The website reflects a high level of professionalism, targeting affluent travelers and business clients seeking luxury experiences worldwide. The company maintains a strong market position in the hospitality sector with a consistent and elegant brand presentation. Technically, the website employs modern technologies including Adobe Experience Platform, Google Tag Manager, and OneTrust for privacy compliance. Hosting and performance are optimized via Akamai CDN services, ensuring fast load times and excellent mobile responsiveness. The site includes comprehensive cookie consent mechanisms and privacy policies aligned with GDPR requirements. From a security perspective, the site enforces HTTPS, implements key security headers, and avoids exposing sensitive data. However, the absence of a public security policy or incident response information and the lack of WHOIS domain registration transparency are notable gaps. No vulnerabilities or malicious content were detected, indicating a mature security posture overall. The overall risk is moderate with recommendations to improve domain registration transparency and publish explicit security policies. The website is safe for general audiences and demonstrates strong trustworthiness and business credibility.
- Suzuki Deutschland GmbH
suzuki.de
Transportation · Germany
77Low
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Suzuki Deutschland GmbH operates as the German subsidiary of the global Suzuki brand, providing information and access to automobiles, motorcycles, and marine products tailored for the German market. The website serves as a corporate and product portal with a professional design and consistent branding. The technical infrastructure leverages modern JavaScript frameworks (likely Vue.js), modular scripts, and a cookie consent management system that complies with GDPR requirements. Hosting is managed via Adacor, a reputable provider, and the site uses HTTPS with good SSL configuration. Security posture is solid with no visible vulnerabilities, though some security headers could be improved. Privacy compliance is well addressed through a comprehensive cookie consent mechanism and a linked privacy policy. However, the site lacks explicit terms of service and security policy disclosures. Overall, the website is trustworthy, well-maintained, and aligned with the business's market position.
- MMedicom
medicom.de
E-commerce · Germany
81Low
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
Medicom is a well-established German e-commerce company specializing in the sale of vitamins and high-quality dietary supplements. With over 30 years of expertise, the company positions itself as a trusted provider offering scientifically validated products, free shipping within Germany for orders over €15, and a 90-day money-back guarantee. The website reflects a professional and user-friendly online shopping experience tailored primarily for German-speaking consumers. The business model focuses on direct-to-consumer online retail leveraging Shopify's robust platform.
sailfishsailfish.com
Retail · Germany
79Low
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
The website www.sailfish.com is a professionally designed e-commerce platform specializing in premium triathlon wetsuits, swimwear, and related accessories. It targets triathlon athletes and enthusiasts, offering competition equipment and leisurewear. The site is built on the Shopify platform, leveraging modern technologies such as Google Analytics, Microsoft Clarity, Klaviyo, and Cookiebot for analytics and consent management. The presence of structured data and SEO optimizations indicates a mature digital presence. Security posture is strong with HTTPS enforced and consent mechanisms in place, though explicit security headers and policies could be improved. The absence of WHOIS registration data raises some concerns about domain legitimacy, but the active and professional nature of the site suggests it is a legitimate business. Overall, the site demonstrates good technical and business maturity with room for enhanced privacy and security transparency.
- Die Johanniter
johanniter.de
Healthcare · Germany
78Low
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Die Johanniter is a large, established non-profit organization in Germany focused on healthcare, social support, education, and volunteering. Their website offers comprehensive information about their services, including medical help, social assistance, child and youth programs, and fundraising opportunities. The organization targets a broad audience including individuals seeking care, volunteers, and donors. Technically, the website is built on TYPO3 CMS and integrates modern tools such as Usercentrics for consent management, Google Tag Manager, Hotjar for analytics, and Yext Answers for search functionality. The site is well-optimized for mobile and accessibility, with a professional design and clear navigation. Security posture is good with HTTPS and consent mechanisms in place, though explicit security headers and a published security policy are absent. WHOIS data is minimal but consistent with the organization's profile, showing no suspicious patterns. Overall, the website is trustworthy, professional, and compliant with privacy norms, though it lacks explicit privacy and terms of service pages in the provided content.
enercity Erneuerbare GmbHenercity-erneuerbare.de
Energy · Germany
84Low
NIS2 2 · GDPR 100
NIS2 2 · GDPR 100
enercity Erneuerbare GmbH is a German renewable energy company specializing in the development and operation of wind energy parks, photovoltaic installations, and energy storage solutions. The company targets municipalities, landowners, and investors interested in sustainable energy projects, positioning itself as a reliable partner in advancing Germany's energy transition. Their website reflects a professional and modern digital presence, leveraging Next.js and React technologies, with good mobile optimization and accessibility features. The site includes GDPR-compliant cookie consent mechanisms and integrates Google Tag Manager for analytics. Security posture is solid with HTTPS enforced and no exposed sensitive data, though explicit security policies and incident response information are not published. Overall, the website is trustworthy, well-designed, and compliant with privacy regulations, supporting the company's credibility in the energy sector.
Costa Navarinocostanavarino.com
Hospitality · Greece
76Low
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
Costa Navarino is a premier luxury hospitality and real estate destination located in Messinia, Greece. The website showcases multiple 5-star resorts, golf courses, spa centers, and real estate offerings, positioning itself as a sustainable and authentic Mediterranean travel experience. The business is part of TEMES S.A., a known entity in the hospitality sector. Technically, the website is built on WordPress with modern plugins and tracking tools, providing a good user experience with mobile optimization and SEO best practices. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though it lacks a publicly available security policy or incident response information. The absence of WHOIS data for the domain is a notable concern, requiring further verification. Overall, the site is professional, trustworthy, and targets affluent travelers and investors seeking luxury and sustainability.
Leipziger Messe GmbHmanga-comic-con.de
Media · Germany
77Low
NIS2 2 · GDPR 100
NIS2 2 · GDPR 100
Manga Comic Con is a well-established event organized by Leipziger Messe GmbH, held in conjunction with the Leipzig Book Fair. It targets manga, anime, comics, cosplay enthusiasts, and industry participants, positioning itself as a leading spring event in Germany for this niche. The website provides comprehensive event information, exhibitor services, and community engagement through social media and multimedia content. Technically, the site uses modern web technologies including Google Tag Manager and a consent management platform, hosted likely by Leipziger Messe infrastructure. Security posture is strong with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are absent. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.
fidentity AGfidentity.ch
Technology · Switzerland
78Low
NIS2 2 · GDPR 85
NIS2 2 · GDPR 85
fidentity AG is a Swiss-based technology company specializing in certified digital identification and electronic signature solutions tailored primarily for banks, financial institutions, and regulated industries. The company offers modular products such as IDENT for identity verification, SIGN for legally valid digital signatures, and ONBOARD for onboarding processes, positioning itself as a trusted provider with strong compliance and certification credentials. Their market position is reinforced by partnerships with reputable banks and government entities, and certifications from KPMG and adherence to Swiss and European regulations such as ZertES and eIDAS. Technically, the website is built on modern frameworks like Astro and TailwindCSS, with strong mobile optimization and performance. The infrastructure leverages Swiss hosting partners and integrates advanced analytics and marketing tools while maintaining privacy compliance. Security posture is robust, featuring HTTPS, penetration testing, bug bounty programs, and compliance with GDPR and FINMA guidelines. Overall, the website and business demonstrate high professionalism, trustworthiness, and a mature digital presence.
Bauhaus-Archiv GmbHbauhaus-shop.de
E-commerce · Germany
80Low
NIS2 2 · GDPR 100
NIS2 2 · GDPR 100
Bauhaus-Shop is an e-commerce platform operated by Bauhaus-Archiv GmbH, offering design products associated with the Bauhaus-Archiv Museum in Berlin. The website targets general consumers interested in Bauhaus design merchandise, positioning itself as a niche cultural museum shop. The business model focuses on online retail through a Shopify-based storefront, leveraging Shopify's infrastructure and payment systems. The site is professionally branded and consistent with the museum's identity, providing a good user experience and clear navigation.
SHARPsharphome.eu
Retail
80Low
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
SHARP's website is a professionally designed e-commerce platform focused on retailing home appliances such as cooling, freezing, cooking, dishwasher, and laundry products. The site leverages Shopify's robust infrastructure and modern web technologies to deliver a fast, mobile-optimized shopping experience. The presence of structured data and comprehensive privacy and cookie policies indicates a mature approach to digital compliance and SEO. However, the absence of explicit terms of service and security policy pages suggests areas for improvement in transparency and user trust. Security measures such as HTTPS, security headers, and CAPTCHA integration demonstrate a solid security posture, though incident response details are lacking. Overall, the site is trustworthy and well-positioned in its retail niche, with room to enhance compliance and contact transparency.
ActionAidactionaid.ie
Non-profit · Ireland
76Low
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
ActionAid Ireland is a well-established international charity focused on empowering women and girls living in poverty, with a strong presence in Ireland. The organization provides humanitarian aid, economic justice advocacy, climate change campaigning, and fundraising programs including child sponsorship. The website reflects a mature digital presence built on WordPress with modern plugins and integrations such as Gravity Forms and Stripe for secure donations. The site is well-branded, professionally designed, and optimized for SEO and mobile devices. Security posture is good with HTTPS and Cloudflare DNS/CDN, though DNSSEC is not enabled and no explicit security or incident response policies are published. Privacy and cookie policies are comprehensive and GDPR compliant. Overall, the website demonstrates high trustworthiness and professionalism suitable for a non-profit charity.
Sharpsharp.eu
Technology
79Low
NIS2 60 · GDPR 73
NIS2 60 · GDPR 73
Sharp Europe is a well-established technology company specializing in secure, sustainable, and smart workplace technology solutions. Their offerings include multifunction printers, managed IT services, audio visual equipment, and cybersecurity solutions targeted primarily at SMBs and enterprises across Europe. The website demonstrates a strong market position with comprehensive service coverage and a professional digital presence. Technically, the site is built on Drupal CMS with modern web standards, optimized for mobile and SEO, and integrates Google Tag Manager for analytics and marketing. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although explicit security policies and incident response contacts are not published. Overall, the domain is privacy protected but consistent with a legitimate business entity. The site is safe for general audiences and shows high professionalism and trustworthiness.
SPONSER SPORT FOOD AGsponser.ch
E-commerce · Switzerland
80Low
NIS2 17 · GDPR 85
NIS2 17 · GDPR 85
SPONSER SPORT FOOD AG operates a professional e-commerce platform specializing in sports nutrition products, emphasizing Swiss quality. The website targets athletes and health-conscious consumers, leveraging the Shopify platform with a modern Flex theme and multiple marketing and analytics integrations. The technical infrastructure is robust, with HTTPS enforced, security headers present, and a moderate to fast performance profile. However, the site lacks explicit privacy and cookie policies, which impacts privacy compliance scores. Security posture is strong with no visible vulnerabilities, but incident response details are absent. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.
Finance
78Low
NIS2 25 · GDPR 83
NIS2 25 · GDPR 83
The International Association of Insurance Supervisors (IAIS) is a globally recognized voluntary membership organization comprising insurance supervisors and regulators from over 200 jurisdictions. Established in 1994, it serves as the global standard-setting body for insurance supervision, aiming to promote effective, consistent supervision to ensure fair, safe, and stable insurance markets worldwide. The IAIS provides key services including standard setting, capacity building, implementation assessments, and financial stability monitoring, positioning itself as a leader in the insurance regulatory space. Technically, the IAIS website is built on a modern WordPress CMS platform utilizing Elementor and Revolution Slider for content presentation. It employs Google reCAPTCHA for form security and Matomo for privacy-conscious analytics. The site is well-optimized for mobile devices, features good SEO practices, and maintains a professional design and user experience. From a security perspective, the website enforces HTTPS with a strong SSL configuration and uses reCAPTCHA to protect forms. While explicit security headers are not fully evident, no vulnerabilities or exposed sensitive data were detected. Privacy and cookie policies are comprehensive and GDPR compliant, though the site lacks a published security policy or incident response contact details. Overall, the IAIS website demonstrates a high level of professionalism, security, and compliance appropriate for an international regulatory organization. The lack of WHOIS data is mitigated by the site's strong trust indicators and consistent branding. Strategic recommendations include enhancing security headers, publishing security policies, and improving accessibility compliance to further strengthen the site's security posture and user trust.