Medium-risk security reports
99,068 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,180001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
21,851–21,900 of 99,068
Energy · Austria
64Medium
NIS2 2 · GDPR 43
NIS2 2 · GDPR 43
ECK Elektroinstallation, a division of Stadtwerke Kufstein, is a reputable electrical installation service provider in Austria, targeting both businesses and private customers. Their offerings include comprehensive electrical services such as smart home solutions, photovoltaic installations, lighting, and security technology. The company maintains a strong regional presence and benefits from its affiliation with Stadtwerke Kufstein, enhancing its market credibility. The website is professionally designed, providing clear navigation and relevant content that supports their business model effectively. Technically, the website is built on TYPO3 CMS with modern frontend technologies like Bootstrap and jQuery, ensuring a responsive and user-friendly experience. The use of Matomo analytics reflects a privacy-conscious approach to user tracking. Security measures such as HTTPS and script loading optimizations are in place, though there is room for improvement in security headers and explicit incident response disclosures. From a security perspective, the site demonstrates good practices with no visible vulnerabilities or exposed sensitive data. However, the absence of a security.txt file and explicit cookie consent mechanisms are areas for enhancement. Overall, the website's security posture is solid but could benefit from additional compliance and transparency features. The overall risk assessment is low, with the website showing strong business credibility and technical maturity. Strategic recommendations include implementing a formal vulnerability disclosure policy, enhancing cookie consent mechanisms, and improving accessibility compliance to further strengthen trust and security culture.
Stadtwerke Kufstein GmbHkufnet.at
Energy · Austria
63Medium
NIS2 10 · GDPR 43
NIS2 10 · GDPR 43
KufNet, operated by Stadtwerke Kufstein GmbH, is a regional telecommunications provider in Tirol, Austria, offering bundled services including digital TV, ultrafast broadband internet, and cost-effective fixed-line telephony. The company emphasizes personal consultation and local service without binding contracts, serving over 15,000 customers across 16 municipalities. The website reflects a professional and consistent brand image with clear service offerings and customer support channels. Technically, the website is built on TYPO3 CMS with modern frontend frameworks like Bootstrap and jQuery, and employs privacy-conscious analytics via Matomo. The site is mobile-optimized and well-structured, though performance is moderate. Security posture is adequate with HTTPS enforced, but lacks explicit security headers and published security policies. Cookie consent mechanisms are not active despite cookie usage. Overall, the security posture is solid but could be improved with better header implementation and transparency on incident response. The domain WHOIS data aligns well with the business, indicating legitimacy and trustworthiness. No adult or questionable content is present, making the site safe for general audiences. Strategic recommendations include enhancing security headers, implementing cookie consent, publishing security and incident response policies, and maintaining regular security audits to strengthen compliance and trust.
First Music Contactmusicfromireland.org
Media · Ireland
57Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Music From Ireland is a non-profit organization dedicated to promoting Irish musical talent on the global stage. It operates under the management of First Music Contact and receives funding from Culture Ireland. The website serves as a platform to showcase Irish artists at international events and provides information about upcoming activities and archives of past events. The organization targets musicians, industry professionals, and international event organizers, positioning itself as a key promoter of Irish music culture worldwide. Technically, the website is built on the Squarespace platform, leveraging modern web technologies such as Google Fonts, Typekit, and Google reCAPTCHA for form security. The site is mobile-optimized with good design quality and clear navigation, although accessibility features are basic. Performance is moderate, typical of CMS-hosted sites. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms, but lacks important security headers and visible privacy or cookie policies, which are critical for compliance and user trust. No WHOIS data was retrievable, likely due to privacy protection, but the website content and social media presence support its legitimacy. Overall, the site is professional and trustworthy but could improve privacy compliance and security best practices.
- LALA Slovak Music Export
musicexport.sk
Media · Slovakia
67Medium
NIS2 2 · GDPR 33
NIS2 2 · GDPR 33
LALA Slovak Music Export is a small non-profit organization dedicated to promoting Slovak music internationally. Their primary mission is to support and present the Slovak music scene abroad, targeting music industry professionals and artists. The website serves as an official platform for news, events, and information related to Slovak music export. Technically, the site is built on WordPress using common frameworks like Bootstrap and jQuery, with integrations for Google Analytics, Facebook Pixel, and Plausible Analytics. The hosting provider appears to be Websupport, a Slovak hosting company. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, but lacks advanced security headers and published security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism despite tracking scripts. Overall, the website is professional, trustworthy, and well-branded, serving its niche cultural purpose effectively.
- PPRS Foundation
prsfoundation.com
Media · United Kingdom
68Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
PRS Foundation is a UK-based charitable organization dedicated to funding new music and talent development across all genres. Established in 2000 and operating under the parent organization PRS for Music Foundation, it has awarded over £44 million to more than 8,500 projects. The foundation targets music creators, performers, promoters, and organizations, providing various funding opportunities and partnerships to support the UK music ecosystem. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to its audience. Technically, the site is built on WordPress with modern frameworks like Bootstrap and integrates common analytics and social media tools, ensuring a good user experience and mobile optimization. Security posture is adequate with HTTPS and domain transfer protections, though improvements like DNSSEC and security headers are recommended. Privacy compliance is strong with comprehensive policies and cookie consent mechanisms. Overall, the website demonstrates high trustworthiness and business credibility within its sector.
- Vvideociety GmbH
videociety.de
Technology · Germany
51Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Videociety GmbH operates a professional B2B video-on-demand streaming platform targeting enterprises seeking customized and scalable streaming solutions. The company offers content aggregation from global partners and white-label streaming services, positioning itself as a specialized provider in the technology and media sectors. The website reflects a consistent and professional brand image with good content quality and clear navigation tailored for business clients. Technically, the website is built on the Squarespace platform, leveraging modern web technologies including Google Fonts, Plyr video player, and Google reCAPTCHA for form security. The site is mobile optimized and performs moderately well, with good SEO practices and basic accessibility features. Hosting is managed by Squarespace CDN, ensuring reliable delivery. From a security perspective, the site enforces HTTPS with HSTS enabled, uses reCAPTCHA to protect forms, and follows some security best practices. However, it lacks several important security headers and does not publish privacy or terms of service policies, which are critical for GDPR compliance and user trust. The absence of WHOIS data due to EURid privacy restrictions limits domain trust assessment but is common for European domains. Overall, the website presents a moderate risk profile with no critical vulnerabilities detected. Strategic improvements in privacy compliance, security headers, and transparency around company and security policies would enhance trust and compliance posture.
Horizon Europe Community Österreichhorizon-europe-community.at
Government · Austria
63Medium
NIS2 17 · GDPR 28
NIS2 17 · GDPR 28
The Horizon Europe Community Österreich website serves as a specialized networking and collaboration platform for researchers, organizations, and citizens engaged with Horizon Europe funding in Austria. It facilitates matchmaking, event participation, and dissemination of funding opportunities, positioning itself as a niche community hub supported by the b2match platform. The site is well-structured, content-rich, and targets a professional audience interested in European research funding and cooperation. Technically, the site leverages modern web technologies including React with Next.js, Google OAuth for authentication, and WebSocket for real-time features, hosted on Google Cloud infrastructure. It demonstrates good digital maturity with mobile optimization and accessibility considerations. Security-wise, the site enforces HTTPS, employs standard security headers, and integrates cookie consent mechanisms compliant with GDPR. However, explicit security policies and incident response contacts are not published, representing an area for improvement. Overall, the site is trustworthy, professionally maintained, and aligned with its business purpose, with no signs of malicious content or vulnerabilities.
Rat auf Drahtelternseite.at
Non-profit · Austria
70Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
The website Elternseite.at is a professionally designed non-profit platform offering free online video counseling and educational resources for parents and caregivers in Austria. It leverages the expertise of the parent organization Rat auf Draht and partners with the Austrian Federal Ministry of Education to provide trusted content and services. The site features articles, webinars, podcasts, and booking for counseling sessions, targeting parents seeking support in child-rearing and school-related topics. Technically, it is built on modern frameworks like Nuxt.js and uses reputable third-party services such as Mailchimp for newsletter management. Security posture is strong with HTTPS and security headers implemented, though explicit privacy and cookie policies are missing. The WHOIS data confirms the legitimacy and consistency of the domain registration with the organization's identity. Overall, the site is trustworthy, user-friendly, and content-rich, but could improve privacy compliance and incident response transparency.
- WeNet Group S.A.
akademiaemarketingu.pl
Education · Poland
52Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Akademia e-marketingu, operated by WeNet Group S.A., is a well-established Polish educational platform providing free e-marketing training targeted at small and medium-sized business owners and managers. The website demonstrates a strong market position supported by strategic and media partners, offering workshops, expert consultations, and SEO audits. Technically, the site is built on Joomla CMS with modern frameworks like Bootstrap and integrates Google Tag Manager and reCAPTCHA for security and analytics. The security posture is solid with HTTPS and consent-based cookie management, though improvements in security headers and DNSSEC are recommended. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.
Other
65Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
The website www.standaard.be is currently inaccessible due to a Cloudflare Turnstile CAPTCHA security challenge page. This prevents access to any meaningful content, metadata, or business information. The domain WHOIS data is restricted and returns a 'NOT ALLOWED' status, providing no registrar, creation, expiry, or registrant details. The site is protected by Cloudflare's security infrastructure, indicating an intent to mitigate automated access or attacks but also limiting external analysis. Due to the lack of accessible content, no business description, contact information, or compliance policies are available for review. The technical infrastructure is limited to Cloudflare's security challenge with no visible CMS or analytics technologies. Security posture cannot be fully assessed but the presence of Cloudflare WAF is a positive indicator. Overall, the site is currently blocked from analysis and scores low on content quality, privacy compliance, and business credibility.
- Virtualisers, BV.
virtualisers.be
Technology · Belgium
58Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Virtualisers, BV. is a Belgium-based digital consulting firm established in 2002, specializing in platform building, demand generation, scaling internet businesses, event moderation, coaching, technology strategy, ICT audits, and MVP launchpad services. The company targets startups, enterprises, and technology companies seeking sustainable growth through expert consulting and management. Their market position is strengthened by over 20 years of experience and more than 300 successful projects, supported by strong trust indicators such as client testimonials and professional team profiles. Technically, the website employs modern frontend technologies including Bootstrap 5.3, Bootstrap Icons, and AOS for animations, hosted likely behind Cloudflare. The site is mobile-optimized, fast-loading, and accessible, with a clean and professional design. However, explicit security headers are not detected, and privacy and cookie policies are absent, indicating areas for compliance improvement. From a security perspective, the site uses HTTPS and embeds secure third-party contact forms, but lacks published security policies, incident response contacts, and vulnerability disclosure mechanisms. No vulnerabilities or suspicious content were found. The domain WHOIS data is consistent with the business claims, showing a long-established presence since 2002. Overall, Virtualisers presents a professional and trustworthy online presence with excellent content quality and business credibility. To enhance security posture and compliance, the company should implement privacy and cookie policies, add security headers, and publish incident response and vulnerability disclosure information.
Sabam CV/SCsabam.be
Media · Belgium
65Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
Sabam CV/SC is a Belgian copyright society dedicated to managing and safeguarding the rights of authors, composers, and publishers across various creative disciplines including music, audiovisual works, visual arts, theatre, dance, and literature. With a large membership base exceeding 14,000 members from 87 nationalities, Sabam plays a critical role in licensing creative works, distributing royalties, and supporting cultural initiatives in Belgium. The organization maintains a professional online presence with clear navigation, multilingual support, and active engagement through social media platforms. Technically, the website is built on Drupal 8 with modern frameworks such as Bootstrap and Font Awesome, ensuring good mobile optimization and accessibility. The use of Google Tag Manager indicates a moderate level of analytics and user tracking.
Amploamplo.be
Media · Belgium
70Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
Amplo is a specialized HR partner catering to the creative and cultural sectors in Belgium, providing tailored HR solutions such as interim contracts, project contracts, and flexi-jobs for freelancers and organizations. The website is professionally designed with clear navigation and content relevant to its target audience of creative professionals and cultural organizations. Technically, the site employs modern technologies including Alpine.js, Google Tag Manager, TikTok Pixel, and CookiePro for consent management, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and explicit incident response policies are absent. The WHOIS data is restricted, limiting transparency but the website content and external links suggest legitimacy. Overall, the site presents a trustworthy and professional digital presence with moderate tracking and good privacy compliance.
Assistgrc-assist.com
Technology
60Medium
NIS2 55 · GDPR 65
NIS2 55 · GDPR 65
Assist is a newly launched compliance management platform (established 2024) that offers an all-in-one solution for managing compliance, audits, risks, and documents. The platform targets businesses of all sizes, providing modular and scalable SaaS and on-premise deployment options. The website is built on WordPress with modern frontend technologies and presents a professional, business-focused image with clear service descriptions and calls to action. Technically, the site uses standard plugins and libraries but lacks advanced SEO and accessibility features. Security posture is moderate with HTTPS enabled and domain protections in place, but missing DNSSEC and security headers. Privacy compliance is partial with a privacy policy and terms of service present but no cookie consent mechanism. Contact is primarily via web forms, with no direct emails or phone numbers visible. Overall, the site is legitimate and appropriate for a new business but could improve in security and privacy transparency.
- KKMSTUDIO
kmstudio.it
Media · Italy
52Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
KMSTUDIO is a well-established Italian multimedia communication agency specializing in graphic design, motion graphics, brand identity, website design, and AI integration services. Founded in 1998 and based in Rome, the company serves a diverse clientele including notable media and entertainment companies. Their website reflects a professional and modern digital presence built on WordPress with a focus on user experience and clear navigation. The integration of Iubenda for privacy and cookie compliance demonstrates a commitment to GDPR and user privacy standards. Security posture is solid with HTTPS and cookie consent mechanisms, though there is room for improvement in security headers and incident response transparency. Overall, KMSTUDIO presents a credible and trustworthy business profile with strong branding and client relationships.
- Forum Nazionale del Terzo Settore ETS
forumterzosettore.it
Non-profit · Italy
63Medium
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
Forum Nazionale del Terzo Settore ETS is a prominent Italian non-profit organization dedicated to representing and supporting the third sector in Italy. The website serves as a comprehensive platform offering news, documents, events, and resources relevant to non-profit organizations, volunteers, and social stakeholders. It maintains strong partnerships with recognized institutions and media outlets, enhancing its credibility and reach within the sector. Technically, the website is built on WordPress with a modern tech stack including Bootstrap and jQuery, optimized for mobile devices and SEO. It employs Google Analytics and Tag Manager for user tracking, balanced with GDPR-compliant privacy and cookie policies featuring user consent mechanisms. The site demonstrates good performance and accessibility, though some improvements could be made in accessibility features. From a security perspective, the site enforces HTTPS, implements key security headers, and uses nonce tokens in AJAX forms to prevent CSRF attacks. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of a dedicated security policy or incident response page suggests room for enhancement in transparency and preparedness. Overall, the website presents a low-risk profile with strong business credibility and compliance posture. Strategic recommendations include publishing a formal security policy, adding incident response contact details, and enhancing accessibility and vulnerability disclosure mechanisms to further strengthen trust and security culture.
Other
58Medium
NIS2 17 · GDPR 15
NIS2 17 · GDPR 15
The website statoregioni.it is currently inaccessible, returning a 503 Service Unavailable error indicating no server is available to handle requests. Due to this, no meaningful content, metadata, or business information is available for analysis. The domain is long-registered since 2003, suggesting an established presence, but the lack of accessible content limits assessment of the business or its market position. Technically, the site lacks visible security headers, privacy policies, or contact information, and DNSSEC is not enabled, indicating a weak security posture. Overall, the site scores very low on content quality, technical implementation, security, privacy compliance, and business credibility. Strategic recommendations include restoring website availability, implementing HTTPS and security headers, publishing privacy and cookie policies, and providing clear contact and business information to improve trust and compliance.
- WWaiting for the redirectiron...
engineering.it
Other
59Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
The website engineering.it is currently inaccessible beyond a security challenge page that performs browser integrity checks and automatic redirects, indicating the presence of a Web Application Firewall or similar security mechanism. The domain is well-established, created in 1996, and DNSSEC is enabled, which supports its legitimacy. However, the visible content is minimal and outdated, referencing Joomla 1.5 and WordPress 2.5 CMS versions, both of which are obsolete and pose significant security risks. No privacy, cookie, or terms of service policies are present, and no contact or business information is available on the page. The only external link points to bitninja.io, a security service provider, suggesting the site is protected by third-party security solutions.
Achillesachilles.com
Energy
66Medium
NIS2 25 · GDPR 83
NIS2 25 · GDPR 83
Achilles is a global enterprise specializing in supply chain risk management, sustainability, and compliance solutions. With over 30 years of experience and a presence in 140 countries, Achilles offers a comprehensive platform that integrates data validation, supplier prequalification, auditing, carbon accounting, and AI-enabled reporting. The company serves a wide range of industries including energy, transport, and finance, targeting procurement teams, compliance officers, sustainability leads, and executives. Technically, the website is built on WordPress with multilingual support and integrates modern marketing and analytics tools such as HubSpot and Google reCAPTCHA Enterprise. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. The WHOIS data is unavailable publicly, likely due to privacy protection, which slightly reduces transparency but is common for enterprises. Overall, the website is professional, well-structured, and trustworthy, reflecting a mature digital presence.
Alber SpAyourbrandsmiling.it
Manufacturing · Italy
53Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Your Brand’s Smiling is a medium-sized Italian manufacturing company specializing in socks, tights, and underwear private label production with over 60 years of experience. The company emphasizes sustainability, quality certifications, and offers comprehensive services including product development, logistics, packaging design, and point-of-sale support. The website is built on WordPress using the Avada theme and integrates multiple marketing and analytics tools, reflecting a mature digital presence. Security posture is good with HTTPS and cookie consent mechanisms, though some security headers could be improved. WHOIS data confirms the legitimacy and consistency of the business. Overall, the website is professional, compliant with GDPR, and trustworthy.
Filifollifilifolli.it
Retail · Italy
75Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
Filifolli is a niche Italian e-commerce business specializing in luxury women's legwear, including silk pants, capris, leggings, shorts, and culottes adorned with lace and embroidery. The website positions itself as a premium brand targeting women seeking high-quality, made-in-Italy fashion products. The digital infrastructure is built on WordPress with WooCommerce, leveraging a variety of marketing and analytics tools to support a mature online presence. The site demonstrates good SEO practices and mobile optimization, contributing to a positive user experience. Security measures such as HTTPS and Google reCAPTCHA are implemented, though explicit security and privacy policies are not published, representing an area for improvement. Overall, the website is professional and trustworthy, with no signs of blocking or malicious activity.
Alber'salbers.it
Retail · Italy
68Medium
NIS2 2 · GDPR 73
NIS2 2 · GDPR 73
Alber's is an Italian textile company specializing in the production and retail of OEKO-TEX certified textile products, focusing on comfort and quality for the autumn/winter 2025-26 season. The website is built on WordPress with WooCommerce, indicating a mature e-commerce infrastructure. The technical setup includes a variety of marketing and analytics tools, demonstrating a strong digital marketing orientation. Security posture is adequate with HTTPS enabled and cookie consent mechanisms in place, but lacks explicit security headers and published privacy policies, which are areas for improvement. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and security disclosures to improve compliance and user trust.
Other
69Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
The domain utt.pm is registered since 2018 and currently active with a registration expiry in 2026. The website content accessible is primarily an XML listing of files stored in a bucket, likely used for backend or development purposes rather than a public-facing website. There is no visible user interface, metadata, or marketing content. The technical infrastructure appears to be hosted on Hetzner servers, with no detected CMS or frameworks. Security posture is weak due to lack of HTTPS and security headers. No privacy or cookie policies are present, and no contact or business information is available, limiting trust and compliance. Overall, the site appears to be a technical resource or storage endpoint rather than a commercial or consumer-facing site.
digidor GmbHdigidor.de
Finance · Germany
73Medium
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
digidor GmbH is a German-based company specializing in providing professional online tools and digital marketing platforms tailored for insurance intermediaries, insurers, and distribution networks. Their business model focuses on enabling insurance brokers and financial service providers to enhance their online presence, automate marketing, and increase customer engagement through a SaaS platform. The company holds a solid market position with thousands of users and partnerships with over 50 insurers and distributors. The website content is well-structured, professionally designed, and targets a B2B audience in the finance sector. Technically, the website employs a modern technology stack including Bootstrap 4, jQuery, FriendlyCaptcha for bot protection, and Google Tag Manager for analytics. The site is mobile-optimized and uses HTTPS with good SSL configuration. The presence of cookie consent mechanisms and a comprehensive privacy policy indicates a mature approach to privacy compliance. However, some security headers are missing, and no explicit security or incident response policies are published. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and CAPTCHA integration on login forms, but lacks published security policies and vulnerability disclosure mechanisms. No critical vulnerabilities or suspicious patterns were detected. The domain WHOIS data is consistent with the website's business claims, supporting legitimacy. Overall, digidor.de presents a trustworthy, professional digital platform with a strong focus on the insurance and finance sectors. Strategic improvements in security headers and transparency around incident response could further enhance trust and compliance.
Börsenmedien AGboersenmedien.de
Media · Germany
68Medium
NIS2 2 · GDPR 45
NIS2 2 · GDPR 45
Börsenmedien AG operates a professional e-commerce platform specializing in financial media products including magazines, newsletters, stock reports, books, and merchandise. The company targets German-speaking investors and financial enthusiasts, maintaining a strong market position with multiple well-known brands. The website is well-structured, mobile-optimized, and provides clear navigation and relevant content for its audience. Technically, the site uses modern JavaScript libraries and a privacy management platform to ensure GDPR compliance. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and explicit security policies are absent. Overall, the site demonstrates a mature digital presence with good privacy compliance and business credibility.
SALTOsalto.bz
Technology · Italy
74Medium
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
SALTO is a well-established technology company specializing in electronic locking and access control solutions, targeting businesses and organizations requiring advanced security systems. The website is professionally designed using Drupal 10 and Bootstrap, with good mobile optimization and clear navigation. The technical infrastructure includes modern analytics and advertising tools managed with a robust cookie consent mechanism, ensuring GDPR compliance. Security posture is strong with HTTPS, security headers, and no detected vulnerabilities, although DNSSEC is not enabled and no explicit security policy or incident response contacts are published. Overall, the website reflects a mature digital presence with a focus on privacy and user experience.
Biosozialhof Vintlerhofvintlerhof.it
Other · Italy
57Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
Biosozialhof Vintlerhof is a small, regionally focused social agricultural enterprise located in Brixen, Italy. It integrates organic farming with social work integration projects, offering services such as holiday farm accommodations, a farm shop with organic products, and a forest kindergarten. The website is built on WordPress with Elementor and uses modern web technologies including Google reCAPTCHA and Stripe for payments. The site is well-structured, mobile-optimized, and provides clear contact information and multilingual support. Security posture is good with HTTPS and reCAPTCHA, but lacks advanced security headers and incident response disclosures. Privacy compliance is basic with a privacy policy and cookie information but no explicit consent mechanism. Overall, the business appears legitimate and trustworthy with consistent WHOIS data and a clear mission.
Legalcommunitylegalcommunity.it
Media · Italy
64Medium
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
Legalcommunity is a well-established Italian legal media publishing group founded in 2011, operating under LC Publishing Group. The website serves legal professionals and related stakeholders by providing news, reports, awards, events, and multimedia content focused on the legal industry. It maintains a strong market position with multiple international sister sites, indicating a broad and diversified presence in legal media across different regions. Technically, the site is built on WordPress with Elementor and Yoast SEO, leveraging modern web technologies and plugins to deliver a professional and responsive user experience. Security posture is solid with HTTPS, DNSSEC, and bot protection via Google reCAPTCHA, although it lacks explicit published security policies and vulnerability disclosure mechanisms. Privacy compliance is partially implemented with cookie consent but missing a clear privacy policy and terms of service. Overall, the website is professional, trustworthy, and content-rich, suitable for its target audience.
- endo7 gmbh - IT Agency
endo7.com
Technology · Italy
71Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
endo7 gmbh is a small IT agency based in Italy specializing in Linux and Open Source software solutions, with a strong focus on e-learning platforms, web development, and Linux services. As a premium partner of the ILIAS LMS project, they provide tailored IT solutions to businesses and organizations, emphasizing cost-effectiveness and sustainability. The website is professionally designed using Drupal 9 and modern web technologies, offering a good user experience and mobile optimization. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and cookie consent mechanisms. WHOIS data confirms a longstanding and legitimate domain registration consistent with the business claims. Overall, the company presents a credible and trustworthy profile with room for improvement in privacy compliance and security transparency.
Pixels Brandpixelsbrand.de
Technology · Germany
50Medium
NIS2 2 · GDPR 43
NIS2 2 · GDPR 43
Pixels Brand is a creative digital communication agency specializing in web development, design, and digital marketing services with a strong focus on delivering measurable results. The company targets businesses seeking to enhance their online presence through modern websites, e-commerce solutions, branding, and marketing strategies. The website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive service descriptions. Multiple language versions indicate an international approach, primarily targeting German and Portuguese-speaking markets. Technically, the website is built on WordPress with a modern tech stack including Bootstrap, jQuery, and various analytics and marketing tools such as Google Tag Manager, Google Analytics, Facebook Pixel, and Calendly for scheduling. Hosting appears to be managed by Pressidium, a reputable WordPress hosting provider. The site implements GDPR-compliant cookie consent mechanisms with multi-language support, demonstrating a commitment to privacy compliance. From a security perspective, the site uses HTTPS with good SSL configuration and employs cookie consent to manage tracking scripts. However, no explicit security headers were detected in the HTML content, and no published security or incident response policies were found. No vulnerabilities or exposed sensitive data were identified. The WHOIS data shows consistent domain usage, though hosting DNS suggests Portuguese infrastructure while the site targets Germany, which aligns with the company's international presence. Overall, Pixels Brand presents a trustworthy, professional digital agency with a solid technical foundation and good privacy practices. Strategic improvements in security headers and published security policies could further enhance their security posture and trustworthiness.
- T.A.C.T. srl.
lacloud.it
Technology · Italy
56Medium
NIS2 17 · GDPR 95
NIS2 17 · GDPR 95
LaCloud, operated by T.A.C.T. srl., is a technology company based in Italy specializing in AI-driven chatbot solutions designed to enhance business operations through automation, data security, accessibility, and GDPR compliance. The website presents a professional and consistent brand image, targeting businesses seeking smart working and compliance solutions. The technical infrastructure leverages modern web technologies including Bootstrap and jQuery, with a strong emphasis on accessibility features and responsive design. Security posture is adequate with HTTPS implied and GDPR compliance mechanisms in place, though explicit security policies and incident response contacts are absent. Overall, the site demonstrates a mature digital presence with good privacy compliance and user experience.
Other
63Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website lwshosting.name is currently inaccessible due to a 403 Forbidden error, indicating that access to the content is blocked or restricted. The page served is a generic error page with minimal content and no business or contact information. The only external link present points to ISPConfig, a hosting control panel software, suggesting the site is managed via this platform. Due to the lack of accessible content, no meaningful business description, services, or market positioning can be determined. The domain WHOIS data is privacy protected, limiting the ability to verify registrant legitimacy or business claims. From a technical perspective, the site lacks visible modern technologies, scripts, or analytics tools. There is no evidence of HTTPS or security headers, which raises concerns about the security posture. The site does not provide privacy, cookie, or terms of service policies, indicating poor compliance with data protection regulations. The overall website quality is poor, with no content, poor design, and no user engagement features. Security-wise, the site is effectively blocked from public access, which may be intentional or due to misconfiguration. No vulnerabilities or security best practices can be assessed due to lack of content. The privacy protection in WHOIS is common but limits trust analysis. The overall risk is elevated due to lack of transparency and accessibility. Strategic recommendations include enabling HTTPS, providing clear business and contact information, publishing privacy and cookie policies, improving website accessibility and content quality, and implementing security best practices to enhance trust and compliance.
- dental bauer
dentalbauer.de
Healthcare · Germany
65Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Dental Bauer is a specialized dental supply company based in Germany, offering a wide range of dental consumables, pharmaceuticals, and equipment including instrument reprocessing devices, X-ray and CAD/CAM technology, treatment units, and dental practice brokerage services. The website targets dental professionals and practices, positioning itself as a trusted supplier in the healthcare sector. The digital infrastructure includes modern JavaScript libraries, Cookiebot for consent management, and Google Tag Manager for analytics, reflecting a moderate level of digital maturity. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in security headers and explicit security policies. Overall, the website is professional, compliant with GDPR, and provides a good user experience with clear navigation and relevant content.
- someday Fashion
someday-fashion.com
Retail · Germany
75Medium
NIS2 2 · GDPR 65
NIS2 2 · GDPR 65
someday Fashion is a German-based e-commerce retailer specializing in sophisticated and sustainable women's fashion. The brand emphasizes timeless designs, high-quality materials, and environmental responsibility, targeting women who value style and sustainability. The website is professionally designed, mobile-optimized, and offers a seamless shopping experience with multiple payment options and international shipping. Technically, the site leverages modern frameworks such as Spryker and Vue.js, with content managed via Storyblok CMS. Security is well-implemented with HTTPS and security headers, complemented by a GDPR-compliant cookie consent mechanism. However, the absence of WHOIS data for the subdomain is typical and does not detract from the site's legitimacy. Overall, someday Fashion presents a trustworthy and professional online presence in the retail fashion sector.
Heelheel.de
Healthcare · Germany
63Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
Heel Deutschland is a pharmaceutical company specializing in the development, production, and distribution of healthcare products based on natural ingredients for both humans and animals. The website presents a professional and well-structured digital presence, targeting healthcare consumers and veterinary professionals primarily in Germany. The company offers a range of products and health-related content, demonstrating a clear business focus and market positioning within the healthcare sector. Technically, the website employs modern frameworks such as Alpine.js, Kentico CMS, and integrates consent management via Usercentrics, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforced and privacy consent mechanisms in place, although explicit privacy policies and terms of service pages are not detected in the provided content. Overall, the site is trustworthy and professionally maintained, with room for improvement in transparency and accessibility.
Sourcenginesourcengine.com
Technology
68Medium
NIS2 2 · GDPR 70
NIS2 2 · GDPR 70
Sourcengine operates a leading electronic components marketplace targeting professional buyers and engineers. The platform aggregates over 3,500 traceable or vetted suppliers, offering a vast catalog of parts with worldwide shipping and a 3-year warranty. Key services include RFQ submission, BOM management via Quotengine, and API integrations enabling seamless ERP system connectivity. The website demonstrates strong market positioning within the technology and manufacturing sectors, supported by consistent branding and trust indicators such as certifications and warranties. Technically, the site is built on Webflow CMS with modern JavaScript libraries and integrates tracking and marketing tools like Apollo.io and Jetboost. The infrastructure appears performant and mobile-optimized, with HTTPS enforced and service workers implemented. However, explicit security headers are not detected, and no vulnerability disclosure or incident response information is provided, representing areas for security enhancement. From a security and compliance perspective, the site includes comprehensive privacy and cookie policies with GDPR compliance. Contact information is primarily via email and web forms, with no phone numbers or physical addresses explicitly listed. The WHOIS data is missing or privacy protected, which slightly reduces trust but is mitigated by the professional presentation and business legitimacy. Overall, Sourcengine presents a mature, well-maintained e-commerce platform with strong business credibility and technical implementation. Strategic improvements in security headers, incident response transparency, and WHOIS data clarity would further enhance trust and security posture.
Amann Girrbach North Americaamanngirrbach.com
Manufacturing
65Medium
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Amann Girrbach North America operates as a specialized manufacturer and supplier in the dental technology sector, focusing on high-quality materials, precision machines, and process management solutions. The company targets dental professionals and laboratories, offering training and academy services to support their products. The website reflects a professional and consistent brand presence with a clear business model centered on B2B manufacturing and distribution. Technically, the site is built on WordPress with modern technologies including jQuery and Cookiebot for consent management, ensuring compliance with privacy regulations. The site demonstrates good SEO, accessibility, and mobile optimization, contributing to a positive user experience. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. The absence of WHOIS data limits transparency but does not detract from the overall legitimacy indicated by the website content. Overall, the site presents a trustworthy and professional digital presence aligned with its business objectives.
- SSWISS KRONO Tec AG
swisskrono.com
Manufacturing · Switzerland
71Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
SWISS KRONO Tec AG operates as a global manufacturer specializing in wood-based panel products, serving architects, builders, distributors, and end customers in the construction and interior design sectors. The company maintains a strong market position with a comprehensive product portfolio and digital tools such as product configurators and sample ordering. The website reflects a mature digital presence with a modern CMS (TYPO3), integrated analytics, and marketing technologies. Security posture is robust with HTTPS enforcement, security headers, and cookie consent mechanisms, although no explicit security policy or incident response information is published. WHOIS data is unavailable, which limits domain trust verification, but the website content and structured data support legitimacy. Overall, the site is professional, secure, and compliant with privacy regulations.
- K.D. Feddersen GmbH & Co. KG
kdfeddersen.com
Manufacturing · Germany
60Medium
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
K.D. Feddersen GmbH & Co. KG is a well-established distributor and service provider specializing in engineering plastics, serving primarily European and Asian markets. The company offers a comprehensive portfolio of polymers and related services including application advice and supply chain management, positioning itself as a premium supplier with over 70 years of corporate history through its parent group. The website reflects a mature digital presence with modern technologies such as React and Next.js, and is supported by a CMS (Storyblok) that enables rich content delivery and multilingual support. Security posture is solid with HTTPS enforced and domain transfer protections, though DNSSEC is not enabled and explicit security policies are not publicly disclosed. Privacy compliance is strong, with clear privacy and cookie policies and consent mechanisms in place. Overall, the site demonstrates high professionalism, trustworthiness, and business credibility, making it a reliable digital asset for the company.
Elmer Dienstleistungs GmbH & Co KGelmer-digital.de
Other · Germany
54Medium
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
Elmer Dienstleistungs GmbH & Co KG operates the website elmer-digital.de, focusing on digital B2B trade services and recruitment for developer roles. The company is positioned as a regional player in Germany with a clear business model targeting B2B customers and potential employees. The website presents professional content with consistent branding and provides comprehensive contact and legal information, including a detailed privacy policy in German. Technically, the site uses Bootstrap for responsive design and integrates Google Analytics and Tag Manager for marketing and analytics purposes. While the site is mobile-optimized and well-structured, it lacks a cookie consent mechanism and explicit security headers, which are areas for improvement. Security posture is moderate with no critical vulnerabilities detected, but enhancements in security policies and incident response disclosures are recommended. Overall, the website is trustworthy, compliant with GDPR, and professionally maintained, supporting the company's business credibility and digital presence.
- KKollex GmbH
kollex.de
Energy · Germany
64Medium
NIS2 17 · GDPR 28
NIS2 17 · GDPR 28
Kollex GmbH is a specialized energy trading and portfolio management company based in Germany. The website presents a professional and modern interface built with React and Gatsby, hosted on AWS infrastructure. The company targets energy market participants and professionals seeking efficient energy trading solutions. The site content is relevant and well-structured, though it lacks explicit privacy, cookie, and terms of service policies. Security posture is moderate with no visible security headers or incident response contacts. Overall, the website is functional and professional but would benefit from enhanced privacy compliance and security best practices.
Pistor AGpistor.ch
Retail · Switzerland
65Medium
NIS2 22 · GDPR 53
NIS2 22 · GDPR 53
Pistor AG is a well-established Swiss wholesale partner specializing in bakery, gastronomy, hospital, and home care supplies. The company operates a comprehensive product range and offers expert consulting and reliable delivery services, supported by a unique specialist network. Their market position is strong within Switzerland, serving multiple sectors with a large partner network and a history spanning over 100 years. Technically, the website is built on Drupal 10, uses modern web technologies, and includes analytics and cookie consent mechanisms, reflecting a mature digital infrastructure. Security posture is good with HTTPS and basic best practices, though it lacks explicit security headers and public incident response policies. Overall, the website is professional, trustworthy, and well-optimized for users, but could improve privacy transparency and security disclosures.
- IIC-INTERSPORT International Corporation GmbH
intersport.com
Retail
74Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Intersport International Corporation GmbH operates a global sports retail platform with a strong presence across multiple countries, as evidenced by the extensive country-specific links on their website. The company positions itself as a leader in the sports retail sector, offering products and services tailored to diverse markets. The website is professionally designed, mobile-optimized, and provides clear navigation to localized shops and corporate information. Technically, the site leverages WordPress CMS with a modern JavaScript stack and is hosted behind Cloudflare, ensuring good performance and security. Privacy compliance is well addressed with visible cookie consent mechanisms and comprehensive legal pages. However, explicit security policies and incident response contacts are not published, representing an area for improvement. Overall, the site demonstrates a mature digital presence with a solid security posture and trustworthy business credibility.
- TURCK GmbH
turck.com
Manufacturing · Germany
63Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
TURCK GmbH is a well-established global leader in industrial automation, specializing in smart sensor technology, decentralized automation, and Industry 4.0/IIoT solutions. The company operates a global production network and serves diverse industries including manufacturing, logistics, and process automation. Their website reflects a mature digital presence with comprehensive content, multimedia, and compliance with privacy regulations. Technically, the site uses modern JavaScript libraries and Google Tag Manager for analytics, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers are not detected and no direct contact information is visible on the main site. WHOIS data is missing, which is unusual and should be verified for domain legitimacy. Overall, TURCK presents a professional and trustworthy business profile with room for minor security and transparency improvements.
- SSennheiser
sennheiser.com
Technology · Germany
75Medium
NIS2 2 · GDPR 73
NIS2 2 · GDPR 73
Sennheiser is a globally recognized leader in the audio technology industry, specializing in the design and manufacture of high-quality headphones, microphones, and wireless systems. With a legacy spanning over 75 years, the company serves a diverse audience including professional audio users, consumers, and businesses requiring advanced audio solutions. The website reflects a mature digital presence with comprehensive product information, support resources, and a global dealer network. Technically, the site leverages modern frameworks such as Next.js and React, ensuring good performance and mobile optimization. Security posture is strong with HTTPS enforcement and appropriate security headers, although explicit security policies and vulnerability disclosure mechanisms are not publicly detailed. Overall, the site demonstrates high professionalism and trustworthiness, supporting Sennheiser's market position as a premium audio brand.
Riese & Müller GmbHr-m.de
Transportation · Germany
71Medium
NIS2 17 · GDPR 55
NIS2 17 · GDPR 55
Riese & Müller GmbH operates a premium e-bike and cargo bike brand with a strong global presence and a network of over 1,400 dealers. The company focuses on high-quality, innovative electric bicycles designed for various use cases including trekking, city, and cargo transport. Their website reflects a mature digital infrastructure with modern technologies such as Google Analytics 4, CookieFirst consent management, and Mollie payment integration, hosted behind Cloudflare DNS services. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanisms. Security posture is solid with HTTPS enforcement and secure form handling, though explicit security headers and incident response information are absent. Overall, the website is professional, trustworthy, and user-friendly, targeting consumers and business customers interested in premium e-bikes.
- Fiera Bolzano Spa
fierabolzano.it
Hospitality · Italy
55Medium
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
Fiera Bolzano Spa is a well-established exhibition center located in South Tyrol, Italy, with a history dating back to 1948. The company organizes 16 trade shows annually and offers extensive exhibition space along with coworking, studio, hotel, and gastronomy services. Positioned as a regional leader in the hospitality and events industry, Fiera Bolzano targets exhibitors, visitors, and event organizers, emphasizing sustainability and quality service. The website reflects a professional and consistent brand image with comprehensive content and multilingual support. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and integrates analytics and marketing tools such as Google Analytics, Facebook Pixel, and LinkedIn Insight Tag. The presence of Cloudflare Turnstile captcha indicates proactive bot protection. The site is mobile-optimized, accessible, and SEO-friendly, though no explicit CMS was detected. Hosting appears to be behind Cloudflare, enhancing performance and security. Security posture is strong with HTTPS enforced, CSRF tokens in forms, and no exposed sensitive data. However, some security headers like Content-Security-Policy and X-Frame-Options are not explicitly observed and should be implemented for enhanced protection. Privacy compliance is robust, with clear privacy and cookie policies, GDPR adherence, and consent mechanisms in place. Overall, the website demonstrates high business credibility, technical maturity, and security awareness. No critical vulnerabilities or suspicious activities were detected. Strategic recommendations include enhancing security headers, publishing a formal security policy, and continuous monitoring of third-party scripts to maintain security and compliance.
Elpoelpo.eu
Energy · Italy
63Medium
NIS2 2 · GDPR 100
NIS2 2 · GDPR 100
Elpo is a well-established electrical engineering company based in Bruneck, South Tyrol, with a history spanning approximately 70 years. The company specializes in electrical installations for industrial and craft businesses, green energy solutions including photovoltaics, automation systems, switchgear construction, and e-mobility charging solutions. Their website reflects a professional regional business with a focus on quality and reliability in the energy sector. The digital infrastructure is built on WordPress with the Avada theme, incorporating modern web technologies such as LayerSlider and Cookiebot for cookie consent management. Google Tag Manager is used for analytics with consent mode enabled, indicating a basic level of privacy compliance. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, but lacks advanced security headers and explicit security policies. WHOIS data is unavailable, which limits full trust verification, but the website content and social media presence support legitimacy. Overall, the site is well-designed, mobile-optimized, and provides relevant business information, though it would benefit from publishing explicit privacy and security policies and improving security headers.
- ICE Hockey League
ice.hockey
Media · Austria
73Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
The ICE Hockey League website serves as the official digital platform for the win2day ICE Hockey League, providing comprehensive information including schedules, standings, player and team statistics, news, and multimedia content. The site targets ice hockey fans, players, teams, and media stakeholders, positioning itself as a central hub for league-related information and engagement. The business model revolves around sports media and fan engagement, supported by partnerships and sponsorships prominently displayed on the site. Technically, the website is built on Joomla CMS and utilizes modern web technologies such as Smart Slider 3 and jQuery, with Matomo analytics for user tracking. The site is mobile-optimized and presents a professional design with clear navigation, though accessibility features are basic. Performance is moderate, with no major technical issues detected. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, explicit security headers are not evident, and there is no published security policy or vulnerability disclosure mechanism. Privacy compliance is limited, with no visible privacy or cookie policies or consent mechanisms, which could be improved to meet GDPR standards. Overall, the website is trustworthy and professional, with a strong brand presence and social media integration. The domain WHOIS data is privacy protected, which is common but limits transparency. Strategic recommendations include enhancing privacy compliance, implementing security headers, and publishing incident response information to strengthen security posture and user trust.
- RegioCrowd
regiocrowd.com
Non-profit · Germany
59Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
RegioCrowd is a German non-profit platform dedicated to facilitating community participation in nature and environmental conservation projects across the regions of Saxony, Saxony-Anhalt, and Thuringia. The platform enables individuals and companies to engage in various activities such as volunteering and crowdfunding to support biodiversity and environmental protection. The website is professionally designed, mobile-optimized, and built on the TYPO3 CMS framework, indicating a mature digital infrastructure. Privacy and cookie policies are present and GDPR compliant, reflecting a commitment to user data protection. However, the absence of WHOIS registration data raises concerns about domain legitimacy, which should be addressed to enhance trust. Security posture is good with HTTPS enforced and secure form handling, though additional security headers and a vulnerability disclosure policy would strengthen the security framework. Overall, RegioCrowd presents a trustworthy and well-structured platform for environmental engagement with room for improvement in domain transparency and security disclosures.