Medium-risk security reports
99,068 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,180001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
23,701–23,750 of 99,068
Réseau Canopé / eTwinning Franceetwinning.fr
Education · France
66Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
eTwinning.fr is a professionally maintained educational support website operated under the auspices of Réseau Canopé and linked to the French Ministry of Education and Erasmus+. It serves as a community and resource hub for European schools and teachers to collaborate on educational projects. The site offers training, project management tools, and recognition programs to enhance educational collaboration across Europe. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and includes privacy-conscious analytics via Matomo. Security posture is strong with HTTPS and cookie consent mechanisms, though some security headers could be improved. The absence of WHOIS data limits domain registration trust verification, but the site’s official affiliations and professional presentation indicate legitimacy. Overall, the site is a high-quality, trustworthy resource for its target audience.
Education · France
60Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
The website www.e-inspe.fr is a public online educational platform dedicated to providing free training courses for teachers in France, from kindergarten through high school. It is supported by the French Ministry of Education and offers pedagogical resources and video-based learning modules designed by experts. The platform targets educators seeking to enhance their teaching skills with accessible, research-based content. Technically, the site is built on Drupal 10 CMS, uses Bootstrap for styling, and integrates Video.js for media playback. It employs Matomo analytics for user tracking with cross-domain capabilities. Security-wise, the site enforces HTTPS and secure login via SAML but lacks some security headers and explicit privacy and cookie policies. WHOIS data is unavailable, which is typical for .fr domains managed by AFNIC, and does not detract from the site's legitimacy. Overall, the site presents a professional, trustworthy, and well-structured educational resource with room for improvement in privacy transparency and security headers.
CanoTechcanotech.fr
Education · France
64Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
CanoTech is a French educational platform specializing in continuing education for primary and secondary school teachers and educational teams. The website offers training modules aimed at diversifying student learning experiences. The business operates in the education sector with a focus on teacher professional development. The website is built using modern web technologies including Angular and employs Matomo and Piwik Pro for analytics tracking. The site is responsive and well-structured, providing a good user experience for its target audience. However, the absence of WHOIS data for the domain and lack of visible privacy and cookie policies indicate areas for improvement in transparency and compliance. Security headers are not detected, and SSL configuration details are unknown, suggesting potential enhancements in security posture. Overall, the website appears legitimate and safe, but the missing WHOIS information and privacy compliance gaps reduce trustworthiness.
Laïta Professionnellaitapro.fr
Manufacturing · France
51Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Laïta Professionnel is a French B2B company specializing in dairy products for professionals in catering, food industry, bakery, and pastry sectors. The website presents a professional image with comprehensive product ranges and brand information. The company leverages the cooperative Laïta's expertise and brand recognition to serve its target audience effectively. Technically, the site is built on Drupal 10, uses modern JavaScript libraries, and implements cookie consent mechanisms to comply with privacy regulations. Security posture is good with HTTPS enforced and no visible vulnerabilities, though some security headers could be added for enhancement. WHOIS data is unavailable, likely due to privacy protection, but the website's professionalism and content quality support its legitimacy. Overall, the site is well-structured, user-friendly, and compliant with GDPR requirements.
- Jak déle žít
jakdelezit.cz
Healthcare · Czech Republic
61Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
Jakdelezit.cz is a Czech e-commerce website operated by inPHARM spol. s r.o., specializing in premium dietary supplements and health products, including their flagship lipozomal vitamin C. The site targets health-conscious consumers seeking scientifically validated supplements to support longevity and wellness. The business model focuses on direct online sales with a professional and consistent brand presence. Technically, the site is built on the Shoptet platform, leveraging common web technologies such as jQuery, Bootstrap, and Google Analytics, with good mobile optimization and SEO practices. Security posture is solid with HTTPS, CSRF protections, and cookie consent mechanisms, though some improvements like updated libraries and security headers are recommended. The absence of WHOIS data reduces domain registration transparency but does not detract significantly from the site's legitimacy given the professional content and contact information. Overall, the site presents a trustworthy and user-friendly platform for its niche market.
- FFlexisoftware s.r.o.
flexisoftware.cz
Technology · Czech Republic
55Medium
NIS2 22 · GDPR 25
NIS2 22 · GDPR 25
Flexisoftware s.r.o. is a Czech-based IT service provider specializing in professional server and network solutions, cloud services, and application development. With over 18 years of experience, the company positions itself as a reliable and professional partner for businesses seeking comprehensive IT infrastructure management and outsourcing. Their service portfolio includes server management, network design, web and application development, and specialist outsourcing, targeting primarily B2B clients. The website reflects a mature digital presence with clear branding, client testimonials, and a portfolio showcasing diverse projects. Technically, the site uses modern web technologies including Bootstrap, Swiper, and jQuery, and is hosted via WEDOS, a reputable Czech hosting provider. Security measures include HTTPS enforcement and Google reCAPTCHA v3 on forms, enhancing protection against automated abuse. However, the absence of a published privacy policy and terms of service pages represents a compliance gap. Overall, the website is professional, trustworthy, and well-structured, supporting the company's market position as a stable IT service provider.
- AAmicus Therapeutics, Inc.
amicusassist.com
Healthcare · United States
72Medium
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
AmicusAssist.com is a patient support website operated by Amicus Therapeutics, Inc., focusing on providing assistance to patients prescribed medications for Fabry disease and late-onset Pompe disease (LOPD). The site offers services such as insurance verification, prescription coordination, financial assistance identification, and personalized patient support. The target audience is US residents undergoing treatment with Amicus Therapeutics medications. The website is professionally designed with clear navigation, mobile optimization, and accessibility features, reflecting a medium-sized healthcare support operation. Technically, the site employs modern web technologies including Bootstrap, jQuery, Google Tag Manager, and OneTrust for cookie consent management. Hosting and DNS are managed via reputable providers, with domain registration through Squarespace Domains II LLC. The site demonstrates good performance and SEO practices, with a comprehensive cookie consent mechanism and privacy policy hosted on a related Amicus domain. From a security perspective, the website uses HTTPS and cookie consent mechanisms but lacks DNSSEC and explicit security headers. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of a published security policy or incident response contact is noted. The domain registration is consistent and appropriate for the business age and claims, enhancing trustworthiness. Overall, AmicusAssist.com presents a secure, compliant, and professional online presence for patient support in the rare disease healthcare sector. Strategic recommendations include enabling DNSSEC, implementing security headers, publishing a security policy, and adding a vulnerability disclosure mechanism to further strengthen security posture and trust.
Chiesiactionoverwords.org
Healthcare
74Medium
NIS2 17 · GDPR 85
NIS2 17 · GDPR 85
ActionOverWords.org is a professionally designed website operated by Chiesi, a healthcare company focused on addressing the climate crisis as a health crisis. The site highlights Chiesi's commitment to sustainability, carbon emission reduction, and patient health through innovative inhaler technologies and transparent reporting. The website targets healthcare professionals, patients, and environmental stakeholders, positioning Chiesi as a leader in climate-conscious healthcare solutions. Technically, the site is built on WordPress with Elementor and employs modern web technologies, including multilingual support and GDPR-compliant cookie management. Security posture is solid with HTTPS and privacy mechanisms, though some security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with privacy regulations.
Universal Media Limiteduniversalmedia365.com
Media · United Kingdom
50Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Universal Media Limited is a UK-based media group established in 2009, specializing in business and consumer media across the US, Canada, and Europe. The company operates multiple branded publications such as CEO Today, Finance Monthly, and Lawyer Monthly, targeting professional audiences. Their business model focuses on editorial publishing, marketing partnerships, and brand management within the media sector. The website presents a professional and consistent brand image with clear contact information and a moderate market position as an established media group. Technically, the website is built on WordPress 6.8.3 using the Oxygen builder framework, incorporating modern web fonts from Google Fonts and Adobe Typekit, and leveraging jQuery and AOS for interactivity and animations. The site is mobile optimized with good SEO practices but lacks advanced accessibility features. Performance is moderate, with no evident critical technical issues. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data in the HTML. However, it lacks important security headers such as Content-Security-Policy and X-Frame-Options, and no privacy or cookie policies are present, indicating gaps in compliance and security best practices. The absence of WHOIS data for the domain raises concerns about domain legitimacy and registration transparency, which impacts trustworthiness. Overall, the website is functional and professional but would benefit from enhanced security measures, privacy compliance, and domain registration transparency to improve its risk profile and trustworthiness.
- Ttechka s.r.o. & Tomáš Hlad
shoptak.cz
Technology · Czech Republic
57Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Shopťák.cz, operated by techka s.r.o. and Tomáš Hlad, is a specialized service provider focused on creating and customizing Shoptet e-commerce templates tailored for the Czech and Slovak markets. The company positions itself as a gold partner of Shoptet, boasting a significant client base utilizing their designs and add-ons. Their services emphasize UX/UI improvements and bespoke solutions beyond standard Shoptet offerings. Technically, the website employs modern JavaScript libraries such as jQuery, Slick Carousel, and AOS for animations, alongside Google Tag Manager and Facebook Pixel for analytics and marketing. The site is well-structured, mobile-optimized, and uses HTTPS, but lacks some security headers and formal privacy documentation. Security posture is moderate with room for improvement in headers and policy transparency. The absence of WHOIS data reduces domain trust, though the business information and client testimonials strongly support legitimacy. Overall, the website is professional and trustworthy but would benefit from enhanced compliance and security disclosures.
Other
68Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website at mountainlotusdigital.com/lander is a minimal landing page with very limited content, primarily serving as a placeholder. The domain is registered with GoDaddy.com, LLC since 2021, indicating a relatively new business or project. There is no visible business information, contact details, or policies on the page, which limits the ability to assess the company's market position or services. Technically, the site uses basic JavaScript and includes Google Adsense scripts, but lacks modern SEO, accessibility, and security features. Security posture is weak due to absence of DNSSEC, security headers, and no visible HTTPS enforcement details. Overall, the site appears to be in an early or inactive stage with minimal digital maturity.
- Inclusive Outdoors Resource Hub
inclusiveoutdoors.org
Non-profit
63Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The Inclusive Outdoors Resource Hub is a non-profit collaborative platform focused on providing a community-driven digital library and collective resources to promote inclusivity in outdoor recreation. It partners with organizations such as the Outdoor Recreation Roundtable and Recreate Responsibly to offer trainings, toolkits, research, and opportunities to its target audience of outdoor professionals and advocates. The website is built on the Softr platform using modern frontend technologies including Bootstrap and jQuery, with integration of Google Analytics and Google Maps API. While the site demonstrates good design quality, mobile optimization, and clear navigation, it lacks explicit privacy, cookie, and terms of service policies, which impacts its privacy compliance score. Security posture is moderate with HTTPS and some best practices but missing security headers and incident response information. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces trustworthiness but is not uncommon for non-profit organizations. Overall, the site is safe, professional, and serves its niche audience effectively.
- Outdoor Access Initiative
yamahaoai.com
Transportation
68Medium
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
The Outdoor Access Initiative (OAI) website serves as a platform supporting grassroots efforts to protect and improve access to public lands for motorized and outdoor recreation. The organization operates as a small non-profit focused on advocacy, education, and grant funding to promote responsible use of off-highway vehicles and conservation goals. The website is built on WordPress with standard plugins for SEO and analytics, including Yoast SEO, Slider Revolution, Google Analytics, and Facebook Pixel. The technical infrastructure is modern and mobile-optimized, though performance is moderate and accessibility features are basic. Security posture is adequate with HTTPS enforced and domain transfer protections, but lacks DNSSEC and security headers, which are recommended for enhanced protection. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy or terms of service pages. Contact information is limited to a contact form without direct emails or phone numbers. Overall, the website is professional and trustworthy within its niche but would benefit from improved privacy disclosures and security enhancements.
- Mister Mix Dog
mistermixdog.cz
Retail · Czech Republic
62Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Mister Mix Dog is a Czech-based e-commerce business specializing in premium cold-pressed dog food and natural supplements. The company targets dog owners seeking high-quality nutrition products tailored to various dog life stages and health needs. The website demonstrates a professional and consistent brand presence with clear navigation and comprehensive product offerings. Technically, the site leverages modern web technologies and the Shoptet e-commerce platform, providing a responsive and user-friendly experience. Security posture is solid with HTTPS, security headers, and consent mechanisms, though the absence of a published security policy and incident response details suggests room for improvement. The lack of WHOIS data for the domain is a notable concern for domain legitimacy verification but does not detract from the apparent business authenticity. Overall, the site is well-positioned in its niche with good privacy compliance and marketing integration.
Bemoveariase.com
Telecommunications · France
55Partial
DNS & email only
DNS & email only
Ariase.com is a well-established French online comparison platform specializing in internet boxes, mobile plans, and smartphones. Owned by Bemove, a subsidiary of the CCM Benchmark - Le Figaro group, it targets French consumers seeking to optimize their telecom subscriptions. The website offers comprehensive comparison tools, coverage maps, speed tests, and up-to-date guides, positioning itself as a trusted resource in the telecommunications sector. Technically, the site employs modern web technologies including Google Tag Manager and Tailwind CSS, delivering fast performance and excellent mobile responsiveness. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security headers and incident response information are absent. Privacy compliance is partially met with a clear privacy policy but lacks a cookie consent mechanism. WHOIS data is unavailable, which slightly impacts domain transparency but is mitigated by the professional presentation and affiliation with a reputable parent company. Overall, Ariase.com demonstrates strong business credibility and technical maturity with room for improvement in privacy and security disclosures.
YAPEALyapeal.ch
Finance · Switzerland
74Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
YAPEAL is a Swiss FinTech company providing embedded finance and digital business account solutions, licensed by FINMA. The website presents a professional and modern digital platform targeting businesses seeking integrated financial services such as business accounts, cards, and payment solutions. The technical infrastructure is built on Umbraco CMS with modern JavaScript and CSS technologies, and includes cookie consent management via Cookiebot. Security posture is strong with HTTPS and security headers properly implemented, though explicit privacy and terms policies are not found on the main site. Contact is primarily via forms and demo booking links, with no direct emails or phone numbers visible. Overall, the website reflects a credible and trustworthy FinTech business with good digital maturity.
Share the Experiencesharetheexperience.org
Government · United States
56Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Share the Experience is a well-established photo contest platform dedicated to America's national parks and federal recreational lands. It targets amateur photographers and outdoor enthusiasts, providing a community-driven platform for sharing and celebrating photography related to natural and federal lands. The website demonstrates a consistent brand and clear business purpose, supported by a domain registered since 2006, indicating a mature presence in its niche. Technically, the site leverages modern JavaScript frameworks such as Vue.js and Bootstrap 5, along with various libraries for media handling and geolocation, reflecting a contemporary and interactive user experience. The platform integrates social media login via Facebook and employs Google reCAPTCHA to mitigate bot activity. Security posture is adequate with HTTPS enforced and domain transfer protections, though it lacks some advanced security headers and DNSSEC. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism detected. Overall, the site is trustworthy and professionally maintained, though improvements in security headers and privacy transparency are recommended.
Dreamonkeydreamonkey.com
Technology · Italy
74Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Dreamonkey is a small technology company based in Italy specializing in software development services including business software, web applications, augmented reality apps, mobile apps, and professional websites. The company targets businesses seeking custom software solutions and maintains a niche position in the regional market. The website is built using modern technologies such as Vue.js and employs Amazon Registrar for domain registration and hosting infrastructure. The site demonstrates good design quality and mobile optimization, providing a professional user experience. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and DNSSEC, which are recommended for enhanced protection. Privacy compliance is weak due to the absence of privacy and cookie policies, which should be addressed to meet GDPR requirements. Overall, the website is functional and credible but would benefit from improved privacy disclosures and security hardening.
SocialWicksocialwick.com
Media
74Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
SocialWick is a well-established social media marketing platform operating since 2017, offering a wide range of services including followers, likes, views, and other engagement metrics across major social media platforms such as Instagram, YouTube, TikTok, Facebook, and more. The company positions itself as a market leader with over a million customers and emphasizes fast delivery, premium quality, and affordable pricing. The website is professionally designed with good navigation and mobile optimization, supporting a positive user experience. Technically, the site uses modern web technologies including jQuery, Google Tag Manager, and Cloudflare Insights, hosted behind Cloudflare's infrastructure for performance and security. Security posture is generally good with HTTPS enforced and secure forms, though some security headers are missing and no explicit cookie consent mechanism is present, which may affect privacy compliance. The absence of WHOIS data limits domain trust verification, but the business operations and content appear legitimate and professional. Overall, SocialWick presents a credible and functional platform for social media marketing services.
- Recreation.gov
recreation.gov
Government · United States
73Medium
NIS2 35 · GDPR 35
NIS2 35 · GDPR 35
Recreation.gov is a U.S. government-operated platform providing centralized trip-planning and reservation services for federal recreation sites across the country. It serves as a one-stop shop for camping, cabins, RV rentals, permits, passes, and tours, supporting 14 federal agencies and thousands of recreation locations. The platform is managed by a dedicated government team with technical support from Booz Allen Hamilton, funded primarily through reservation fees rather than Congressional appropriations. The website is well-designed, mobile-optimized, and rich in content, targeting outdoor enthusiasts and the general public interested in federal lands visitation. Technically, the site employs modern web technologies including React and Mapbox GL JS, integrates Google Tag Manager and analytics services, and demonstrates good performance and accessibility. While HTTPS is enforced and bot mitigation strategies are described, explicit security headers are not visible in the HTML content, and no cookie consent mechanism was detected, indicating areas for improvement in security and privacy compliance. The security posture is strong overall, with no evident vulnerabilities or exposed sensitive data. The presence of a responsible disclosure page and contact mechanisms for security issues further supports a mature security culture. However, incomplete WHOIS data and missing registrar and registrant details reduce trust somewhat, though the government affiliation and operational maturity mitigate concerns. Overall, Recreation.gov presents a trustworthy, professional, and user-friendly service with a solid security foundation. Strategic recommendations include adding explicit security headers, implementing a visible cookie consent banner, and publishing a security.txt file to enhance transparency and compliance.
- EQUIFEED
equifeed.cz
Other · Czech Republic
57Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
The website www.equifeed.cz presents an access protection page requiring user login credentials, indicating restricted content access. The company brand 'EQUIFEED' is visible, but no detailed business description or contact information is provided on this page. The site uses the Shoptet e-commerce platform and integrates common web technologies such as jQuery, Google Tag Manager, Microsoft Clarity, and Facebook SDK for tracking and analytics. The technical infrastructure is moderately modern but includes an outdated jQuery version that may pose security risks. HTTPS is enforced, but no explicit security headers were detected in the provided data. Cookie consent mechanisms are implemented, denying marketing and analytics by default, indicating some privacy awareness. WHOIS data is unavailable, likely due to privacy protection or domain registration issues, limiting trust analysis. Overall, the site is functional but minimal in content and security transparency.
- T
E-commerce · Czech Republic
57Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
The website www.feelo.cz currently displays only a temporary suspension notice in Czech, indicating that the e-commerce store is offline or not operational at this time. There is no accessible business content, metadata, or contact information available. The lack of WHOIS data further complicates trust and legitimacy assessments, as no registrar or registration dates are found. Technically, the site lacks any detectable technologies, scripts, or security headers, and no HTTPS information is available, suggesting poor security posture. Overall, the site is effectively non-functional and provides no meaningful user or business interaction.
- Höveler Czech
hoeveler-czech.cz
Retail · Czech Republic
62Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
Höveler Czech operates as the official Czech and Slovak representative for Höveler, a German manufacturer specializing in premium horse feed and nutritional supplements. The website offers a comprehensive e-commerce platform featuring various product lines tailored for horse nutrition, including specialized feeds for metabolic issues. The business targets horse owners and equestrian professionals within the Czech Republic and Slovakia, positioning itself as a trusted regional distributor with a focus on quality and customer support. Technically, the website is built on the Shoptet e-commerce platform, utilizing a combination of jQuery, Bootstrap, and other modern web technologies. It integrates Google Analytics, Google Tag Manager, and Facebook Pixel for marketing and analytics purposes, all managed with user consent mechanisms. The site is mobile-optimized, accessible, and demonstrates good SEO practices, although some legacy libraries like an older jQuery version are in use. From a security perspective, the site enforces HTTPS, uses CSRF tokens in forms, and implements cookie consent banners, reflecting a good security posture. However, explicit security headers and a published security policy or incident response information are absent, representing areas for improvement. The lack of WHOIS data limits domain trust assessment, but the website content and contact information appear professional and legitimate. Overall, Höveler Czech presents a well-structured, trustworthy e-commerce presence with solid privacy compliance and marketing transparency. Strategic enhancements in security documentation and technology updates would further strengthen its security posture and business credibility.
- HORSE Spirit
horsespirit.store
Retail · Denmark
72Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
HORSE Spirit is a niche luxury equestrian apparel brand founded in 2019, specializing in stylish, comfortable, and functional riding clothing. The company operates an e-commerce platform powered by PrestaShop, targeting equestrian enthusiasts and riders who value premium fashion. The website demonstrates a good level of digital maturity with modern technologies such as Google Tag Manager, Google Analytics 4, and Facebook Pixel integrated for marketing and analytics purposes. The site is well-designed, mobile-optimized, and provides clear navigation and relevant content. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers and DNSSEC could be improved. Privacy compliance is addressed with accessible privacy and cookie policies, and contact information is clearly provided. Overall, the website is professional, trustworthy, and aligned with its business goals.
- Equimane
equimane.cz
E-commerce · Czech Republic
59Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
Equimane is a Czech Republic-based e-commerce business specializing in equestrian clothing and accessories, particularly focusing on riding leggings with grip and functional shirts. The website is professionally designed, mobile-optimized, and provides a clear navigation structure tailored to its niche audience of equestrian enthusiasts. The business operates primarily through an online retail model using the Shoptet platform, targeting a small but specialized market segment. Technical infrastructure includes modern JavaScript libraries, Google Analytics, Facebook SDK, and chat integrations, reflecting a moderate level of digital maturity. Security posture is generally good with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers could be improved. The absence of public WHOIS data suggests privacy protection, which is common for small businesses. Overall, the site is trustworthy, safe, and compliant with GDPR requirements, though it lacks some advanced security and incident response disclosures.
Other
75Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
The website at kavalino.cz currently presents no accessible content, with an empty HTML body and no metadata or scripts. The domain WHOIS data indicates a creation date in the future (January 29, 2025), which is inconsistent and suspicious, suggesting the domain may be inactive, placeholder, or under construction. The site uses Cloudflare nameservers, indicating potential use of a CDN or WAF, but no active content or security headers are detected. Overall, the digital maturity is very low with no visible business or security information. The security posture is weak due to lack of HTTPS and absence of security best practices. The risk level is high due to suspicious domain registration data and lack of transparency. Strategic recommendations include establishing valid SSL, publishing privacy and cookie policies, adding contact and business information, and improving technical implementation to build trust and compliance.
- EQUESTRIAN MANIAC
equestrianmaniac.cz
Retail · Czech Republic
58Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
EQUESTRIAN MANIAC is a Czech-based small retail e-commerce business specializing in equestrian clothing and accessories. The website presents a professional and well-structured online store built on the Shoptet platform, targeting equestrian riders and enthusiasts with quality products and a niche market focus. The business emphasizes quality materials, unique design, and passion for horse riding in its branding and product offerings. Technically, the website uses standard web technologies including jQuery, Google Tag Manager, and Facebook SDK, with a moderate performance profile and good mobile optimization. Security posture is adequate with HTTPS enabled and CSRF protections in place, but lacks advanced security headers and explicit incident response information. Privacy compliance is addressed with visible cookie consent and a privacy policy consistent with GDPR requirements. Overall, the website is trustworthy and functional with room for security and transparency improvements.
ABOUT YOUaboutyou.sk
E-commerce · Slovakia
68Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
ABOUT YOU is a large online fashion retail platform operating in Slovakia, offering over 1500 brands with services such as free delivery and a 30-day return policy. The website demonstrates a good level of digital maturity, employing modern technologies including Usercentrics for consent management and Datadog for logging and monitoring. The site is well-designed, mobile-optimized, and provides a professional user experience. Security posture is solid with HTTPS enabled and integration of logging services, though there is room for improvement in security headers and explicit incident response contacts. Privacy compliance is partially addressed through consent mechanisms but lacks visible privacy and terms of service documentation. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.
Simplonsimplon.co
Education · France
70Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Simplon is a French educational organization specializing in accessible tech training from beginner to advanced levels, including development, cybersecurity, data, and digital skills. The website demonstrates a strong market position with partnerships from major tech companies like IBM, Meta, and Microsoft, and offers a wide range of training services including alternance and personalized career support. Technically, the site is built on Webflow with modern web technologies, providing good performance, mobile optimization, and accessibility. Security posture is solid with HTTPS and reCAPTCHA usage, though explicit security policies and headers could be improved. Privacy compliance is lacking due to missing privacy and cookie policies. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the business.
OpenClassroomsopenclassrooms.com
Education · France
73Medium
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
OpenClassrooms is a well-established online education platform founded in 2008, offering courses and mentorship programs to a global audience. The platform targets students and professionals seeking to develop skills and advance their careers through accessible online learning. The business model combines free and premium content with personalized mentorship, positioning OpenClassrooms as a significant player in the education sector, particularly in France and internationally. Technically, the website employs modern JavaScript frameworks and integrates multiple analytics and marketing tools such as Datadog RUM, Hotjar, Blueshift, and Satismeter. Hosting and DNS services are provided via Cloudflare, ensuring good performance and security. The site demonstrates good mobile optimization and basic accessibility features, with room for improvement in SEO and security headers. From a security perspective, the site enforces HTTPS, uses clientTransferProhibited domain status, and implements a comprehensive cookie consent mechanism via TrustArc. However, it lacks DNSSEC, a published security policy, incident response contacts, and a vulnerability disclosure program. No critical vulnerabilities or exposed sensitive data were detected, indicating a solid security posture with opportunities for enhancement. Overall, OpenClassrooms presents a trustworthy and professional online presence with strong business credibility and compliance with privacy regulations. Strategic improvements in security transparency and technical hardening would further strengthen its risk profile and user trust.
- BBot Verification
impactlab.com
Other
61Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website at impactlab.com is currently inaccessible beyond a bot verification challenge page utilizing Google's invisible reCAPTCHA. This security mechanism prevents direct access to the site's actual content, limiting the ability to analyze business, security, and compliance aspects fully. The domain is long-established, registered since 2000 via GoDaddy.com, LLC, with standard domain locks indicating legitimate ownership. However, no business or contact information is visible in the provided HTML content. The technical infrastructure includes reCAPTCHA scripts and hosting on WPX Hosting, but no other technologies or CMS are detectable. Security headers and privacy policies are absent from the accessible content, and no analytics or advertising scripts are present beyond reCAPTCHA. Overall, the site appears to have a strong security posture in terms of bot protection but lacks visible compliance and business transparency in the accessible content.
- BBoutique Labess
labess.com
E-commerce · France
70Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Boutique Labess is a French e-commerce website dedicated to selling music albums and merchandise related to the musical group Labess, along with promoting upcoming concerts. The website targets fans and customers interested in music-related products, primarily French-speaking audiences. The business operates on the Shopify platform, leveraging its e-commerce capabilities and payment integrations such as Shopify Payments and Apple Pay. The site demonstrates a modern technical infrastructure with good mobile optimization and accessibility features, using the Dawn Shopify theme and various JavaScript modules for enhanced user experience. From a security perspective, the website enforces HTTPS and uses clientTransferProhibited status on the domain to prevent unauthorized transfers. It employs hCaptcha for form protection and integrates Facebook Pixel for marketing analytics. However, it lacks explicit privacy and cookie policies, security headers like CSP, and vulnerability disclosure information, which are areas for improvement. DNSSEC is not enabled, which could enhance DNS security. No direct company contact emails or phone numbers are published, relying instead on contact forms and social media channels. Overall, Boutique Labess presents a professional and trustworthy online presence with a solid technical foundation but requires enhancements in privacy compliance and security transparency to meet higher standards. The domain age and registration details support the legitimacy of the business. Strategic recommendations include publishing comprehensive privacy and cookie policies, enabling DNSSEC, adding security headers, and providing incident response contacts to improve trust and compliance.
DAGBA.COMdagba.com
Other
60Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
DAGBA.COM is a minimalistic business landing page primarily serving as a contact portal for business inquiries. The site offers a simple contact form protected by Google reCAPTCHA to mitigate spam. The website uses modern frontend technologies such as Bootstrap, jQuery, Font Awesome, and Google Analytics for tracking. However, the site lacks detailed business information, privacy policies, or terms of service, which limits its professional and compliance posture. The absence of WHOIS registration data for the domain is a significant concern, suggesting either a recent registration, privacy protection, or a misconfiguration. This discrepancy reduces trust in the domain's legitimacy. Security measures are basic, with no detected security headers, but HTTPS is implied by the use of secure URLs. Overall, the site is functional but lacks depth in business, security, and compliance aspects.
- Bemove
bemove.fr
Energy · France
67Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Bemove is a French company specializing in negotiating contracts for electricity, gas, and internet services, as well as facilitating moving and relocation processes. It operates as part of the Groupe Figaro, leveraging a network of 10 specialist websites that collectively attract over 4 million monthly visits. The company targets French households and families seeking to optimize their utility contracts and simplify moving procedures. Key services include contract negotiation, moving assistance, and daily savings on household expenses. The website reflects a professional and consistent brand image with strong partnerships with major energy and telecom providers. Technically, the website uses modern web technologies including Google Tag Manager and HubSpot forms, with good mobile optimization and SEO practices. The site is hosted securely with HTTPS and employs standard analytics and marketing tools. However, some security headers are not explicitly detected, and there is no visible dedicated security or incident response policy. Privacy and cookie policies are present and appear GDPR compliant, with consent mechanisms implemented. From a security perspective, the site shows a good posture with no visible vulnerabilities or exposed sensitive data. The absence of WHOIS data reduces transparency and trust slightly, but the affiliation with Groupe Figaro and visible trust indicators mitigate this concern. Overall, the website is professional, secure, and compliant, suitable for its business purpose. Strategic recommendations include enhancing security headers, publishing explicit security and incident response policies, and considering a vulnerability disclosure program to further strengthen trust and security culture.
Education · Slovenia
66Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
COBISS.SI is a well-established Slovenian national library information system portal managed by IZUM, providing comprehensive access to library catalogs, e-book lending, and user profile services. The platform targets library users, researchers, authors, and librarians, offering a centralized and integrated library experience. The website demonstrates a mature digital infrastructure with modern JavaScript libraries and social media integration, supporting good user experience and mobile responsiveness. Security posture is adequate with HTTPS and secure form handling, though improvements in security headers and explicit security policies are recommended. Overall, the site is trustworthy, professionally maintained, and compliant with GDPR through clear privacy and cookie policies. The domain's WHOIS data confirms legitimacy and institutional backing, supporting a high trust level.
ABF a.s.for-pets.cz
Other · Czech Republic
63Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
The website for-pets.cz is a professionally maintained event platform managed by ABF a.s., focusing on the 16th trade fair for pet supplies in the Czech Republic. It serves visitors, exhibitors, media, and partners with comprehensive event information, news updates, and registration forms. The site demonstrates a solid market position as a recurring trade fair organizer with established partnerships and sponsorships. Technically, the site uses a custom CMS with Bootstrap and jQuery, integrating multiple analytics and marketing tools such as Google Analytics, Facebook Pixel, and Piwik. While the site is mobile-optimized and well-structured, it uses an outdated jQuery version and lacks explicit security headers, which are areas for improvement. Security posture is moderate with HTTPS enforced and cookie consent implemented, but no visible security policy or incident response information is provided. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.
PsiTrenink.cz – Robert Zlochapsitrenink.cz
Other · Czech Republic
61Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
PsiTrenink.cz, led by Robert Zlocha, is a professional dog training service based in Prague, Czech Republic, offering both in-person and online training courses. The business emphasizes modern, ethical training methods without physical punishment, targeting dog owners who want to improve communication and obedience with their pets. The website demonstrates a strong market position supported by extensive experience, media presence, and a comprehensive service offering including individual lessons, puppy training, and dog sports.
- Labvet.cz, s.r.o.
labvet.cz
Healthcare · Czech Republic
54Medium
NIS2 7 · GDPR 35
NIS2 7 · GDPR 35
Labvet.cz, s.r.o. operates as a clinical veterinary laboratory and veterinary clinic based in Prague, Czech Republic. The company provides a range of veterinary diagnostic and clinical services including dermatology, reproduction, parasitology stool testing, vaccination, and microchipping. The website targets veterinarians and pet owners, positioning itself as a trusted regional veterinary service provider with a professional team and strong customer testimonials. The business was founded recently in 2022, consistent with the domain registration date. Technically, the website is built on WordPress with common SEO and marketing tools such as Yoast SEO, Google Tag Manager, and Facebook Pixel. The site is mobile optimized and has good content quality and navigation. However, it lacks explicit privacy and cookie policies, which is a compliance gap. Security posture is moderate with HTTPS enabled and domain transfer protection, but missing DNSSEC and security headers. The security posture shows room for improvement, especially in implementing security headers and formal privacy compliance documentation. No WAF or blocking mechanisms were detected, and the site is fully accessible. The domain registration is transparent and consistent with the business profile, enhancing trustworthiness. Overall, Labvet.online is a professional veterinary service website with good business credibility and technical implementation but requires enhancements in privacy compliance and security best practices to improve its security posture and regulatory adherence.
- Č
Other · Czech Republic
55Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Českomoravská kynologická unie is a Czech Republic-based organization dedicated to dog breeding, exhibitions, and canine activities. It serves as a national authority providing breed registries, event calendars, official documents, and expert listings for the cynology community. The website is well-structured with clear navigation and relevant content targeting dog breeders and enthusiasts. Technically, the site uses legacy JavaScript libraries like jQuery 2.1.4 and includes custom scripts for galleries and UI elements. Mobile optimization is good, but accessibility and SEO could be improved. Security posture is moderate with HTTPS implied but lacking explicit security headers and privacy policies. WHOIS data is unavailable, limiting domain trust assessment, but the site branding and partner affiliations support legitimacy. Overall, the site is functional and professional but would benefit from enhanced security and compliance measures.
OpenServisopenservis.cz
Technology · Czech Republic
60Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
OpenServis is a specialized Czech company providing hosting, module development, training, and consulting services focused exclusively on the PrestaShop e-commerce platform. The company positions itself as a niche expert with official ties to the PrestaShop community, offering tailored hosting solutions optimized for PrestaShop performance and reliability. Their business model revolves around service provision to PrestaShop store owners, including custom module development and training to enhance user experience and operational efficiency. The website reflects a professional and consistent brand image with comprehensive service descriptions and clear contact information. Technically, the website is built on WordPress using the Impreza theme, leveraging modern web technologies such as Google Fonts and jQuery. It is well-optimized for performance and mobile responsiveness, with good SEO and accessibility practices. The site employs HTTPS with excellent SSL configuration and includes a cookie consent mechanism, demonstrating awareness of privacy compliance requirements. From a security perspective, the site shows good practices such as HTTPS enforcement and no visible sensitive data exposure. However, it lacks explicit security headers and incident response information, which could be improved. The absence of WHOIS data limits domain trust analysis, but the website content and business presence indicate legitimacy and professionalism. Overall, OpenServis presents a low-risk profile with strong business credibility and technical maturity. Strategic recommendations include enhancing security headers, publishing security policies, and maintaining regular audits of third-party components to sustain security posture.
- PSModuly.cz
psmoduly.cz
E-commerce · Czech Republic
57Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
PSModuly.cz is a specialized e-commerce business focused on developing and selling PrestaShop modules, serving primarily PrestaShop e-shop owners and developers. The company has a strong market position in the Czech Republic with over 170 modules available, backed by long experience since 2012 and official recognition as a member of the PrestaShop Committers team. Their business model revolves around direct sales of modules with support and updates, complemented by partnerships for hosting and newsletter services. Technically, the website is built on the PrestaShop CMS platform, leveraging modern web technologies such as JavaScript libraries, Google Fonts, and analytics tools. The hosting is provided by a known Czech hosting partner, OpenServis, ensuring reliable infrastructure. Security posture is solid with HTTPS enforced, security headers present, and GDPR-compliant cookie consent mechanisms. However, there is no explicit security policy or incident response information published, which could be improved. Overall, the website is professional, trustworthy, and well-optimized for its target audience, with moderate user tracking and good privacy compliance.
- ProfiBeauty Salon
profibeautysalon.cz
Hospitality · Czech Republic
62Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
ProfiBeauty Salon is a Czech Republic based beauty salon specializing in professional hair extension services, hair systems for men, wigs, and other hair care treatments. The website presents a well-structured and professionally designed platform targeting local customers in Prague and Hradec Králové. Key services include various hair extension techniques, hair system solutions, and training courses. The business maintains an active social media presence on Facebook, Instagram, and YouTube, enhancing its market visibility. Technically, the website is built on WordPress with Elementor and uses modern SEO and analytics tools, reflecting a moderate to good digital maturity level. Security posture is solid with HTTPS, security headers, and reCAPTCHA integration, though some compliance aspects like cookie consent and detailed privacy policies could be improved. The absence of WHOIS data limits domain trust assessment, but the website content and contact information support business legitimacy. Overall, the site is professional and trustworthy with room for enhanced privacy compliance and transparency.
- ProfiBeauty Kurzy
kurzyprodluzovanivlasu.cz
Education · Czech Republic
63Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
ProfiBeauty Kurzy is a Czech-based professional training provider specializing in hair extension and thickening courses. The company offers a range of educational services, including workshops and seminars, supported by a strong online presence and social media engagement. Their business model integrates education, retail through an e-shop, and salon services, positioning them as a comprehensive player in the beauty education sector. Technically, the website is built on WordPress with modern plugins and SEO tools, providing a good user experience and mobile optimization. Security posture is adequate with HTTPS enabled, but lacks some recommended security headers and visible privacy compliance mechanisms. The absence of WHOIS data reduces domain trustworthiness, though the website content and social signals suggest legitimacy. Strategic improvements in privacy compliance and security headers would enhance overall trust and compliance.
KBOOkboo.com
Media · United States
61Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
KBOO is a well-established community radio station based in Portland, Oregon, operating since 2002. It provides alternative media content and community engagement through live radio streaming, scheduled programs, and volunteer opportunities. The station operates as a non-profit entity funded primarily through donations, memberships, and underwriting. The website reflects a consistent brand and good content quality aimed at local community members interested in alternative and independent media. Technically, the site runs on Drupal 7 with Bootstrap and integrates analytics tools such as Google Analytics and Matomo. While the site is mobile optimized and has good SEO practices, it lacks some modern security headers and cookie consent mechanisms, which are areas for improvement. The domain registration data is consistent with the business claims, indicating a legitimate and trustworthy entity.
- VVenture Upwards Enterprises, LLC
line25.com
Media
74Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Line25.com is a niche media website focused on web and graphic design resources, operating since 2009 under Venture Upwards Enterprises, LLC. The site provides articles, free design templates, fonts, and inspiration targeted at designers and creative professionals. The business model appears to be content publishing supplemented by affiliate marketing, particularly evident from recent gambling-related articles. Technically, the site is built on WordPress using popular themes and plugins such as GeneratePress, Elementor, and Yoast SEO Premium, with analytics integrations including Google Analytics, Microsoft Clarity, and GetResponse. The site is mobile-optimized and SEO-friendly but lacks some advanced accessibility features and cookie consent mechanisms. Security posture is moderate with HTTPS enabled and domain transfer protection, but missing DNSSEC and security headers. No explicit security or incident response policies are published. Overall, the site is professional and trustworthy but could improve privacy compliance and security hardening.
Hongkiat.comhongkiat.com
Technology
61Medium
NIS2 17 · GDPR 70
NIS2 17 · GDPR 70
Hongkiat.com is a well-established online platform providing technology, design, and inspiration content primarily targeting web designers, developers, freelancers, and novice users. The site offers a wide range of tutorials, tips, and resources, positioning itself as a valuable knowledge hub in the technology and design space. Its business model relies on content publishing monetized through advertising and affiliate marketing, supported by a professional and consistent brand presence. Technically, the website is built on WordPress CMS with modern SEO practices implemented via Yoast SEO and integrates Google Analytics and Adsense for analytics and monetization. The site demonstrates good mobile optimization, accessibility, and SEO, contributing to a positive user experience. Security-wise, the site enforces HTTPS and uses standard security plugins but lacks explicit security headers and vulnerability disclosure mechanisms, which could be improved. The absence of WHOIS data reduces trust slightly, but the overall content quality and professionalism mitigate this concern. Privacy policies are comprehensive and GDPR compliant, though cookie consent mechanisms are missing. Overall, Hongkiat.com presents a mature digital presence with room for security and privacy enhancements.
- M. G. C. Trade, s. r. o.
mountain-gorilla.cz
Retail · Czech Republic
56Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
Mountain Gorilla Coffee is a Czech-based specialty coffee and chocolate e-commerce retailer focused on high-quality products sourced from East Africa, particularly Uganda. The company integrates social responsibility by contributing a portion of sales to mountain gorilla conservation efforts. The website is professionally designed, mobile-optimized, and provides a seamless user experience with clear navigation and comprehensive product information. The business targets coffee enthusiasts who value quality and social impact. Technically, the site employs modern web technologies including Bootstrap, jQuery, Google Tag Manager, and integrates multiple analytics and marketing tools with user consent mechanisms. Security posture is solid with HTTPS and reCAPTCHA usage, though it lacks some advanced security headers and explicit incident response contacts. The absence of WHOIS data reduces domain transparency but does not detract significantly from the overall trustworthiness given the professional presentation and business legitimacy. Strategic recommendations include enhancing security headers, publishing vulnerability disclosure policies, and improving accessibility compliance.
- Úklid J+J
uklidjj.cz
Hospitality · Czech Republic
64Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Úklid J+J is a professional cleaning company operating primarily in the Czech Republic, offering a wide range of cleaning services including upholstery, carpets, sofas, windows, blinds, and vehicle interiors. The company targets both residential and commercial customers across multiple cities such as Hradec Králové, Trutnov, and Prague. Their market position is that of a regional service provider with a focus on quality and customer satisfaction, supported by testimonials and detailed service pricing. Technically, the website is built on the Webnode CMS platform, hosted via Cloudfront CDN, and employs modern web technologies with good mobile optimization and SEO practices. Security-wise, the site uses HTTPS and has a cookie consent mechanism but lacks some advanced security headers and explicit GDPR compliance details. The absence of WHOIS data reduces domain trust, but the website content and business information appear legitimate and professional. Overall, the site demonstrates a moderate to good digital maturity with room for security and privacy improvements.
- VÝSTAVIŠTĚ KROMĚŘÍŽ, a.s.
hobbyvystaviste.cz
Other · Czech Republic
55Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
The website hobbyvystaviste.cz represents a small Czech company, VÝSTAVIŠTĚ KROMĚŘÍŽ, a.s., specializing in organizing unique sales exhibitions across various sectors such as crafts, health, and collectibles. The company operates multiple venues including Kroměříž, Olomouc, and Prague, targeting hobby enthusiasts and the general public interested in creative and handmade products. The site provides event calendars, exhibitor registration, and contact information, positioning itself as a regional event organizer with a clear business focus. Technically, the website is built on the inPage CMS platform, utilizing modern JavaScript libraries such as jQuery, Bootstrap 5.1, Photoswipe, and Magic Grid for UI and image handling. It integrates Google Analytics, Google Tag Manager, and Facebook Pixel for analytics and marketing purposes. The site is mobile-optimized with a cookie consent mechanism that complies with GDPR requirements, although no explicit privacy policy page was found. Performance is moderate with good SEO and accessibility basics. From a security perspective, the site enforces HTTPS and uses cookie consent with granular user controls. However, it lacks explicit security headers and published security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the HTML content. WHOIS data is unavailable or privacy protected, which is common for small businesses but limits domain registration transparency. Overall, the website is professional, trustworthy, and well-suited for its business purpose. Strategic improvements include publishing a privacy policy, implementing security headers, and adding incident response contact information to enhance security posture and compliance.
- LLoire Vins
loirevins.fr
E-commerce · France
75Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
Loire Vins operates an e-commerce platform specializing in the sale of wines from the Loire region of France. The website targets French-speaking wine consumers and enthusiasts, offering a wide selection of red, white, rosé, sparkling, and organic wines directly sourced from producers. The business model focuses on direct-to-consumer sales with secure payment and fast delivery services. The company positions itself as a niche player in the French wine e-commerce market with a consistent brand presence and good content quality. Technically, the website is built on the PrestaShop CMS platform and integrates multiple modern marketing and analytics tools such as Google Tag Manager, Facebook Pixel, Sendinblue, Matomo, and Skeepers for customer reviews. The site is mobile-optimized with good SEO practices and basic accessibility features. Performance is moderate, with a well-structured technical stack supporting e-commerce operations. From a security perspective, the site enforces HTTPS, implements standard security headers, and uses cookie consent mechanisms compliant with GDPR. However, there is no publicly available security policy or incident response information, and no vulnerability disclosure program is evident. The absence of WHOIS data for the domain raises some concerns about domain registration transparency, though the website content and technical setup suggest a legitimate business. Overall, Loire Vins presents a professional and trustworthy e-commerce platform for Loire wines, with room for improvement in transparency around security policies and domain registration details. Strategic recommendations include publishing security and incident response policies, establishing a vulnerability disclosure channel, and monitoring domain registration status to enhance trust and compliance.