Low-risk security reports
14,261 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,165001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
2,551–2,600 of 14,261
Other · Switzerland
80Low
NIS2 2 · GDPR 65
NIS2 2 · GDPR 65
The Association Suisse des Golfeurs Indépendants (ASGI) operates a well-established website serving the Swiss golf community with membership services, official handicap management via the Swiss Golf Card, and a comprehensive calendar of golf events and training courses. The site targets golf enthusiasts in Switzerland and maintains a consistent brand presence with over 25 years of history. Technically, the website is built on TYPO3 CMS, leveraging modern JavaScript libraries and Google services, providing a good user experience with mobile optimization and clear navigation. Security posture is adequate with HTTPS enforced and cookie consent implemented; however, the absence of security headers and privacy policy pages indicates room for improvement in compliance and security best practices. Overall, the domain registration aligns well with the business claims, supporting the site's legitimacy.
Spider AFsp-trk.com
Technology
77Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Spider AF is a specialized technology company founded in 2017 that provides digital marketing security solutions focused on combating ad fraud, click fraud, and invalid leads. The company targets businesses and marketers seeking to protect their advertising budgets from fraudulent activities. Their market position is supported by trust from over 500 companies and positive user ratings. Technically, the website is built on Webflow and hosted on AWS, integrating modern marketing and analytics tools such as Google Tag Manager, HubSpot, Intercom, and Visual Website Optimizer, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and domain registration protections in place, though improvements can be made by enabling DNSSEC and publishing explicit security and privacy policies. Overall, the website is professional, safe, and trustworthy, but lacks some compliance documentation and direct contact information.
Mystore.no ASmystore.no
E-commerce · Norway
76Low
NIS2 17 · GDPR 65
NIS2 17 · GDPR 65
Mystore.no AS is a Norwegian e-commerce and retail platform provider focused on enabling entrepreneurs and businesses to start online stores and physical shops. The company offers comprehensive tools and support to simplify commerce, targeting the Norwegian market. The website is professionally designed, leveraging HubSpot CMS and integrating multiple marketing and analytics technologies such as Google Tag Manager, Microsoft Clarity, Facebook Pixel, and Visual Website Optimizer, indicating a mature digital marketing infrastructure. Security posture is generally good with HTTPS enforced and cookie consent implemented, though explicit security policies and vulnerability disclosures are absent. Overall, the website presents a trustworthy and professional front for its business services.
Herzog & de Meuron Objects Ltdhdmobjects.com
E-commerce · Switzerland
78Low
NIS2 2 · GDPR 70
NIS2 2 · GDPR 70
Herzog & de Meuron Objects Ltd operates an e-commerce platform specializing in the sale of design objects including furniture, lighting, accessories, and books. The business leverages the reputation of the Herzog & de Meuron architectural studio to target design enthusiasts and collectors globally, positioning itself as a niche luxury retailer. The website is built on the Shopify platform, integrating modern e-commerce technologies and marketing tools to provide a seamless shopping experience. The company maintains a consistent brand presence with social media engagement and newsletter subscriptions to foster customer relationships. Technically, the website employs a robust Shopify infrastructure with CDN hosting, modern JavaScript libraries such as jQuery and Swiper.js, and marketing integrations like Klaviyo and Back In Stock. The site demonstrates good mobile optimization and moderate performance, with room for improvement in accessibility and explicit security headers. Privacy and cookie policies are present and indicate GDPR compliance, although direct company contact details are limited to forms without explicit emails or phone numbers. From a security perspective, the site enforces HTTPS and uses CAPTCHA protections on forms, but lacks some recommended HTTP security headers. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS registration data introduces some uncertainty about domain legitimacy, though the active Shopify store and consistent branding mitigate concerns. No incident response or vulnerability disclosure policies were found, suggesting an area for future enhancement. Overall, Herzog & de Meuron Objects Ltd presents a professional and trustworthy e-commerce presence with solid technical foundations and privacy compliance. Strategic improvements in security headers, contact transparency, and incident response documentation would further strengthen its security posture and business credibility.
AZDS Interactive Groupazds.com
Hospitality
77Low
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
AZDS Interactive Group is a specialized luxury hotel marketing agency focused on delivering digital solutions, web design, paid and earned media, and email marketing services to high-end hospitality brands. The company positions itself as a preferred digital partner for luxury travel brands, showcasing long-term client engagements and bespoke technology solutions such as custom booking engines. Technically, the website is built on WordPress with modern JavaScript libraries like jQuery and integrates analytics and marketing tools such as Google Analytics, Google Tag Manager, and HubSpot. The site demonstrates good SEO practices and mobile optimization, providing a professional user experience with rich multimedia content. Security posture is moderate with HTTPS implied but lacks explicit security headers and public security policies. Privacy compliance is basic with a cookie consent banner but no visible privacy or terms of service pages. The absence of WHOIS registration data raises concerns about domain legitimacy, although the website content and client portfolio suggest a credible business. Strategic recommendations include improving transparency with privacy and security policies, enhancing security headers, and verifying domain registration details.
Musik Hugmusikhug.ch
Retail · Switzerland
80Low
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Musik Hug is a well-established Swiss retailer specializing in musical instruments, sheet music, accessories, rental services, and repair workshops. The company operates multiple physical stores across Switzerland and maintains a comprehensive online presence, targeting musicians, students, and music enthusiasts. Their business model combines retail sales, rentals, and music education services, positioning them as a key player in the Swiss music retail sector. Technically, the website leverages modern JavaScript modules, integrates popular analytics and marketing tools such as Google Analytics, Facebook Pixel, TikTok Pixel, and Hotjar, and uses the Opacc e-commerce platform. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, the website enforces HTTPS, implements strong security headers, and includes session timeout mechanisms, reflecting a mature security posture. However, explicit security policies and incident response contacts are not publicly available, and no vulnerability disclosure program is evident. Overall, the site is trustworthy, compliant with GDPR, and demonstrates good privacy practices with cookie consent management. Strategic recommendations include publishing a dedicated security policy, incident response information, and a vulnerability disclosure framework to enhance transparency and trust.
www.derbystar.dederbystar.de
E-commerce · Germany
82Low
NIS2 2 · GDPR 100
NIS2 2 · GDPR 100
DERBYSTAR operates a professional e-commerce website focused on football and teamwear products, leveraging the Shopify platform for its online retail operations. The site targets sports teams, athletes, and football enthusiasts primarily in Germany, offering a range of products including footballs, goalkeeper gloves, and training equipment. The business model is direct-to-consumer e-commerce with an official brand presence, supported by integrations with trusted third-party services for analytics and marketing. Technically, the website is built on a modern Shopify infrastructure with extensive use of JavaScript modules, third-party analytics, and marketing tools. The site demonstrates good performance, mobile optimization, and accessibility features. GDPR compliance is addressed through a cookie consent mechanism, although explicit privacy and terms of service pages were not detected in the provided content. From a security perspective, the website enforces HTTPS and employs standard security practices inherent to Shopify's platform. However, there is room for improvement by adding explicit security policies, incident response contacts, and enhanced security headers. No vulnerabilities or suspicious activities were detected in the analyzed content. Overall, DERBYSTAR's website presents a secure, well-structured, and professional e-commerce platform with moderate to high trustworthiness. Strategic enhancements in transparency and security documentation would further strengthen its compliance and user trust.
- Hochschule RheinMain
hs-rm.de
Education · Germany
80Low
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
Hochschule RheinMain is a well-established public university of applied sciences in Germany, offering over 70 practical and international degree programs across multiple campuses in Wiesbaden and Rüsselsheim. The institution emphasizes applied research, international cooperation, and career readiness for students. The website reflects a mature digital presence built on TYPO3 CMS, featuring comprehensive content, clear navigation, and multilingual support. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is strong, with a detailed privacy policy and cookie management in place. Overall, the website projects high professionalism and trustworthiness consistent with a reputable academic institution.
- HHublot
hublot.com
Retail · Finland
76Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Hublot is a renowned Swiss luxury watch brand specializing in high-end timepieces for men and women. The company operates a professional and visually appealing website built on Drupal 10, showcasing its collections and brand heritage. The website demonstrates a mature digital infrastructure with modern technologies such as Google Tag Manager, reCAPTCHA, and AB Tasty for marketing and analytics. Security posture is strong with HTTPS enforced and standard security headers likely in place, although explicit security policies and incident response contacts are not publicly visible. Privacy compliance is partially addressed through a cookie consent mechanism, but the absence of a clear privacy policy and terms of service pages limits full compliance assurance. The domain WHOIS data is unavailable, which is unusual but likely due to privacy protection or registry limitations rather than malicious intent. Overall, the website is trustworthy, professional, and well-optimized for user experience and SEO.
- Schweizerischer Gemeindeverband
chgemeinden.ch
Government · Switzerland
81Low
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
The Schweizerischer Gemeindeverband (SGV) is a Swiss government-related association representing the interests of municipalities at the federal level. The website serves as an informational platform targeting Swiss municipalities and local government stakeholders, providing resources and advocacy services. The organization positions itself as a key national representative body for municipal interests, supporting the performance and policy needs of its members. Technically, the website is built using the Weblication® CMS platform, incorporating modern web standards such as HTML5, CSS3, and JavaScript, along with Font Awesome iconography. The site demonstrates good design quality, mobile responsiveness, and clear navigation, although some advanced accessibility features appear limited. Performance is moderate, with no significant technical issues detected. From a security perspective, the site uses HTTPS but lacks visible security headers and published security policies. There is no evidence of privacy or cookie policies, incident response plans, or vulnerability disclosure mechanisms, indicating gaps in compliance and security transparency. No forms or user data collection mechanisms were detected in the analyzed content, reducing immediate data protection concerns. Overall, the website is legitimate and trustworthy, consistent with the organization's public profile and WHOIS data. However, to improve compliance and security posture, the organization should implement and publish privacy and cookie policies, add security headers, and provide incident response and vulnerability disclosure information.
Truelytics, Inc.truelytics.com
Finance
76Low
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Truelytics, Inc. operates a specialized Advisor Transition Management Platform designed to support wealth management enterprises, independent broker-dealers, custodians, and RIAs in attracting, retaining, and managing advisory businesses. The company is positioned as a leader in its niche, evidenced by its acquisition by Envestnet | Yodlee, a prominent data aggregation and analytics platform. Truelytics offers a suite of applications including TruePerformance, TrueContinuity, and TrueMatch, which collectively address practice management, succession planning, and matchmaking needs within the financial advisory sector. The platform leverages data-driven insights and benchmarking to enhance business decision-making for over 18,000 advisors and multiple enterprise clients.
MoneyGuide, Inc.moneyguidepro.com
Finance · United States
78Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
MoneyGuide, Inc., a subsidiary of Envestnet, is a leading provider of financial planning software designed to empower financial advisors and their clients through personalized, goal-based planning solutions. The website showcases a comprehensive platform with multiple configurable products such as MoneyGuide, MyBlocks, and Wealth Studios, targeting financial professionals seeking scalable and interactive planning tools. The company positions itself strongly in the finance sector with a medium-sized business profile and consistent branding across its digital presence. Technically, the website employs a mature digital infrastructure with modern marketing and analytics technologies including Google Tag Manager, Marketo, Salesforce LiveAgent, and multiple tracking pixels, indicating a high level of digital marketing sophistication. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, the website enforces HTTPS and implements cookie consent mechanisms, though HTTP security headers are not explicitly detected in the source. No critical vulnerabilities or exposed sensitive data were found. WHOIS data is unavailable or protected, which is common for commercial entities but reduces transparency. Overall, the website demonstrates a strong security posture and privacy compliance with room for improvement in explicit security header implementation and incident response disclosures. Strategic recommendations include enhancing security headers, publishing incident response contacts, and improving accessibility compliance to further strengthen trust and security culture.
Envestnetbillfin.com
Finance
84Low
NIS2 47 · GDPR 73
NIS2 47 · GDPR 73
Envestnet operates a cloud-based advisory fee billing platform called BillFin, targeting Registered Investment Advisors (RIAs) and financial advisors. The website presents a professional and modern interface built on Drupal 11, integrating advanced marketing and consent management tools such as Visual Website Optimizer and TrustArc. The company positions itself as a leading provider of cost-effective billing solutions in the financial services sector. Technically, the site demonstrates good performance, mobile optimization, and SEO practices, though some accessibility features could be improved. Security posture is solid with HTTPS and consent mechanisms, but lacks explicit security policy and incident response information. WHOIS data is unavailable, which slightly impacts trust but the overall site appears legitimate and professional.
Envestnettamaracinc.com
Finance · United States
84Low
NIS2 47 · GDPR 73
NIS2 47 · GDPR 73
Envestnet is a leading provider of integrated portfolio, practice management, and reporting solutions tailored for financial advisors and institutions. The company operates primarily in the finance and technology sectors, offering SaaS-based wealth management tools that support advisors in delivering comprehensive financial services. Their market position is strong, supported by enterprise-grade technology and recognized certifications such as SOC 2 and ISO 27001. The website reflects a mature digital presence with a focus on user experience and compliance. Technically, the website is built on Drupal 11, leveraging modern web technologies and integrating advanced marketing and analytics tools including Visual Website Optimizer and Google Tag Manager. The site demonstrates good performance, mobile optimization, and accessibility standards. Privacy and cookie policies are clearly presented with consent mechanisms in place, indicating a commitment to GDPR compliance. From a security perspective, the site enforces HTTPS, employs key security headers, and avoids exposing sensitive data. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not publicly available, representing areas for improvement. The absence of WHOIS registration data limits domain trust verification but does not detract significantly from the overall professionalism and trustworthiness of the site. Overall, Envestnet's website presents a secure, compliant, and professional digital front that aligns with its enterprise stature in the financial technology market. Strategic enhancements in transparency around security policies and domain registration details would further strengthen trust and compliance posture.
iCapitalicapital.com
Finance · United States
85Low
NIS2 10 · GDPR 95
NIS2 10 · GDPR 95
iCapital operates as a leading enterprise platform specializing in alternative investments, structured investments, and annuities, targeting financial advisors, wealth managers, and asset managers. The company positions itself as a marketplace enabling scalable incorporation of alternative strategies and expanding distribution channels for asset managers. The website reflects a mature digital presence with a professional design and comprehensive marketing integrations. Technically, the site is built on WordPress with modern plugins and optimization tools, hosted with Cloudflare DNS and registrar services, ensuring good performance and security. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers and explicit policies are not publicly disclosed. Privacy compliance is well addressed with GDPR-aligned cookie policies and consent banners. Overall, the website demonstrates high professionalism and trustworthiness, with no signs of content blocking or WAF interference.
Landtmann's Originallandtmanns-original.at
E-commerce · Austria
82Low
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
Landtmann's Original is an Austrian e-commerce company specializing in traditional baked goods and confectionery, targeting consumers seeking authentic Austrian products. The website is built on the Shopify platform, leveraging modern e-commerce technologies and integrating multiple third-party analytics and advertising tools. The technical infrastructure is solid, with good performance, mobile optimization, and SEO practices. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, although formal security policies and incident response information are not published. Overall, the website presents a trustworthy and professional online presence with compliance to GDPR and cookie regulations.
- Mercado Libre
mercadolibre.cl
E-commerce · Chile
83Low
NIS2 17 · GDPR 65
NIS2 17 · GDPR 65
Mercado Libre Chile operates a leading e-commerce marketplace platform serving general consumers in Chile. The website offers a broad catalog of products with fast shipping options, positioning itself as a dominant player in the Chilean online retail market. The platform leverages modern web technologies including React and New Relic monitoring to deliver a performant and user-friendly experience. The site is well-optimized for SEO and accessibility, with consistent branding and professional design. Security posture is strong with HTTPS enforcement and monitoring, though explicit privacy and terms policies are not directly found on the homepage. Overall, the site demonstrates a mature digital infrastructure with extensive analytics and advertising integrations, supporting its enterprise-scale operations.
AISLA APSaisla.it
Healthcare · Italy
79Low
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
AISLA APS is a reputable Italian non-profit association dedicated to supporting individuals affected by Amyotrophic Lateral Sclerosis (SLA). The organization provides patient assistance, funds research, disseminates information, and advocates for patient rights. Their website reflects a well-structured and content-rich platform targeting patients, caregivers, healthcare professionals, and donors. The association maintains a strong presence through social media and events, reinforcing its market position as a leading SLA support entity in Italy. Technically, the website is built on WordPress with a variety of plugins and modern web technologies, offering a good user experience and mobile optimization. Security measures include HTTPS and Google reCAPTCHA, though improvements are recommended in security headers and library updates. Privacy compliance is robust with clear policies and consent mechanisms. Overall, AISLA demonstrates a trustworthy and professional digital presence aligned with its mission.
Government · Austria
76Low
NIS2 2 · GDPR 80
NIS2 2 · GDPR 80
The website www.wko.at serves as the official portal for the Austrian Economic Chambers (WKO), providing comprehensive information, services, and advisory offerings targeted at entrepreneurs and business owners in Austria. It holds a strong national market position as a government-affiliated economic chamber portal, offering key services such as information dissemination, consulting, event organization, and e-services tailored to Austrian businesses. The content is primarily in German and is professionally presented with consistent branding and clear navigation. Technically, the website employs modern web technologies including JavaScript libraries like jQuery and Swiper.js, and uses Bootstrap for responsive design. The site is powered by Gentics CMS, indicating a mature content management infrastructure. Performance is moderate with good mobile optimization and accessibility features. SEO practices are well implemented with proper meta tags and Open Graph data. From a security perspective, the site enforces HTTPS with excellent SSL configuration and includes some security headers. It uses Google Tag Manager and consent management scripts to handle tracking and privacy compliance, although explicit privacy and cookie policies were not found in the provided content. No vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms the legitimacy of the domain with consistent registrant information and appropriate domain age. Overall, the website is a trustworthy, professional, and secure portal for Austrian businesses, though it would benefit from publishing explicit privacy, cookie, and security incident response policies to enhance compliance and user trust.
Golf Küssnacht am Rigigolfkuessnacht.ch
Hospitality · Switzerland
78Low
NIS2 2 · GDPR 65
NIS2 2 · GDPR 65
Golf Küssnacht am Rigi operates a premium 18-hole golf course located centrally in Switzerland, catering to golfers of all skill levels. The business integrates hospitality services including a panorama restaurant, golf academy, and golf shop, positioning itself as a regional leader with sustainability credentials such as GEO certification. The website is professionally designed, multilingual, and provides clear navigation and user engagement features such as tee time booking and newsletter subscription. Technically, the site is built on TYPO3 CMS with modern tracking and advertising tools, supported by a cookie consent mechanism ensuring GDPR compliance. Security posture is solid with HTTPS and CAPTCHA protections, though formal security policies and incident response contacts are absent. Overall, the site reflects a mature digital presence aligned with its business goals and market expectations.
ART19 LLCart19.com
Technology · United States
78Low
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
ART19 LLC is a technology company specializing in podcast hosting and advertising solutions, operating as a subsidiary of Amazon. The company provides a platform that empowers publishers and advertisers to control audio experiences, enhancing listener engagement and monetization. The website reflects a mature digital presence with a modern Ember.js framework, integrated analytics, and a comprehensive privacy and cookie consent mechanism. Security posture is strong with HTTPS and content security policies, though DNSSEC is not enabled and some security headers could be improved. The domain is well-established, consistent with the company's history and ownership. Overall, ART19 presents a professional and trustworthy online presence aligned with its business objectives.
- John Wiley & Sons, Inc
scienceconnect.io
Technology · United States
76Low
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
ScienceConnect.io is a digital platform operated under John Wiley & Sons, Inc, designed to provide researchers with a unified account system to access, discover, organize, and publish scholarly research across multiple publisher platforms. The platform leverages modern web technologies including React and Material-UI, and is built by Atypon, a Wiley brand recognized as a leader in digital scientific publishing technology. The website demonstrates a professional and consistent brand presence, targeting academic researchers and scholarly publishers. Technically, the site is hosted behind Cloudflare DNS and CDN services, ensuring good performance and security. The platform supports secure authentication mechanisms such as Passkeys and centralized privacy controls, enhancing user security and experience. Security posture is strong with HTTPS enforced and domain transfer protections in place, although DNSSEC is not enabled and explicit security policies are not published. Privacy compliance is partially met with privacy and terms of use pages available, but lacks a cookie consent mechanism. Overall, the website is trustworthy, well-structured, and serves a critical role in the academic publishing ecosystem.
- PageUp
pageuppeople.com
Technology · Australia
85Low
NIS2 65 · GDPR 80
NIS2 65 · GDPR 80
PageUp is an enterprise-focused talent acquisition software provider offering a comprehensive suite of HR management solutions including recruitment marketing, applicant tracking, onboarding, learning management, performance, succession, and analytics. The company positions itself as a leader in AI-powered, people-centered hiring technology, targeting large businesses and enterprises primarily in Australia. The website demonstrates a mature digital presence with extensive use of modern marketing and analytics tools, reflecting a high level of digital maturity and marketing sophistication. Security posture is generally strong with HTTPS and cookie consent mechanisms in place, though some improvements are recommended such as adding security headers and a clear privacy policy. The absence of WHOIS data for the domain is a notable anomaly that slightly reduces trust but does not outweigh the professional presentation and business legitimacy evident on the site. Overall, PageUp presents as a credible and professional enterprise software provider with a solid technical foundation and good user experience.
Ejadahejadah.com
Real Estate · United Arab Emirates
76Low
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Ejadah is a prominent asset management company based in the United Arab Emirates, specializing in real estate asset management and community solutions. The company serves a broad range of sectors including residential, retail, commercial, hospitality, and mixed-use developments. Their market position is strong within the UAE, supported by a large workforce and extensive managed property portfolio. The website reflects a professional business with clear service offerings such as facilities management, security management, and consultancy solutions. Technically, the website is built on the Webflow platform and leverages modern web technologies including Google Analytics, Google Tag Manager, and Google reCAPTCHA for security and analytics. The site is mobile-optimized with good SEO and accessibility features, although some improvements in security headers and incident response information could enhance its posture. From a security perspective, the site enforces HTTPS and includes cookie consent mechanisms, but lacks explicit security headers and a public vulnerability disclosure policy. No WHOIS data was found for the domain, which raises questions about domain registration status, though the website content and client portfolio suggest a legitimate business. Overall, the security posture is solid but could benefit from enhanced transparency and technical controls. The overall risk assessment indicates a trustworthy and professional business website with minor gaps in domain registration transparency and security best practices. Strategic recommendations include adding security headers, publishing a security.txt file, and providing clear contact information for incident response to strengthen trust and compliance.
HotelMaphotelmap.com
Technology · United Kingdom
85Low
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
HotelMap is a UK-based technology company specializing in hotel booking solutions tailored for events such as conferences, exhibitions, and trade shows. The company offers a suite of products including fully managed services for large event organizers and venues, free solutions for smaller events, and advanced room block blending technology. Their platform integrates with event registration systems and provides automated marketing and reporting tools, positioning them as a global leader in event hotel booking technology. The website demonstrates a mature digital presence with professional design, clear navigation, and extensive content supporting their business model. Technically, the site leverages HubSpot CMS and marketing tools, AWS hosting, and integrates analytics and behavioral tracking services like Google Analytics and Hotjar. Security posture is strong with HTTPS, domain transfer protections, and secure form handling, though DNSSEC is not enabled and some security headers could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR indicators. Overall, the site is trustworthy, professional, and well-optimized for its target audience.
- Instructure
learnplatform.com
Education
79Low
NIS2 22 · GDPR 88
NIS2 22 · GDPR 88
Instructure operates a professional and enterprise-grade educational technology platform focused on evidence-based management of K–12 edtech investments. The website demonstrates a mature digital infrastructure leveraging Drupal 10 CMS, modern JavaScript libraries, and extensive marketing and analytics tools such as Google Tag Manager, Marketo, and Microsoft Clarity. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and policies are not visible in the provided content. The absence of WHOIS data is a notable anomaly but does not detract from the professional presentation and comprehensive service offerings. Overall, Instructure presents as a credible and established player in the education technology sector with a focus on compliance, safety, and data-driven decision-making.
- Instructure
portfolium.com
Education · United States
80Low
NIS2 22 · GDPR 88
NIS2 22 · GDPR 88
Instructure is a leading educational technology company specializing in learning management systems (LMS) and edtech solutions for K–12, higher education, and business sectors. Their flagship product, Canvas LMS, is widely adopted and supported by a robust ecosystem of partners and community engagement. The company positions itself as a comprehensive provider of digital learning tools that empower educators and learners alike. Technically, the website is built on Drupal 10 CMS and leverages a modern technology stack including Google Tag Manager, Marketo, Microsoft Clarity, and various front-end libraries for performance and user experience. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS, employs multiple security headers, and integrates cookie consent mechanisms indicating GDPR compliance. Certifications such as SOC 2 and ISO 27001 further demonstrate a commitment to security standards. However, the absence of a publicly accessible security policy and incident response contact details suggests room for improvement in transparency and readiness. Overall, Instructure's website reflects a professional, trustworthy, and well-maintained digital presence aligned with its enterprise market position. The missing WHOIS data is a notable anomaly but does not significantly detract from the overall credibility given the strong branding and operational indicators.
- Instructure
masteryconnect.com
Education
82Low
NIS2 7 · GDPR 88
NIS2 7 · GDPR 88
Instructure operates a professional and comprehensive K–12 assessment and data solution platform branded as Mastery. The website demonstrates a mature digital infrastructure leveraging Drupal 10 CMS, modern JavaScript libraries, and multiple marketing and analytics tools such as Google Tag Manager, Marketo, Microsoft Clarity, and Intellimize. The site is well-optimized for mobile and accessibility, with clear navigation and rich content focused on educational outcomes. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and vulnerability disclosures are absent. WHOIS data is unavailable, which limits domain trust verification, but the website's professionalism and integrations suggest a legitimate enterprise presence. Overall, the site scores well on content quality, technical implementation, and business credibility, with room for improvement in privacy compliance and security transparency.
Wiener Zeitungwienerzeitung.at
Media · Austria
76Low
NIS2 2 · GDPR 73
NIS2 2 · GDPR 73
Wiener Zeitung is a well-established Austrian digital media outlet providing independent and critical quality journalism. The website offers a variety of content including news articles, podcasts, videos, and newsletters targeting a general audience interested in current affairs and quality journalism. The site is professionally designed with consistent branding and excellent content quality. Technically, it uses modern web technologies including the Astro framework, Tailwind CSS, and Matomo analytics configured with privacy-conscious settings. Security posture is good with HTTPS enforced and some privacy features enabled, but lacks explicit security policies and headers. Privacy compliance is basic due to missing visible privacy and cookie policies. Overall, the site is trustworthy and professional but could improve transparency and compliance documentation.
- Instructure
kimonocloud.com
Education
79Low
NIS2 22 · GDPR 88
NIS2 22 · GDPR 88
Instructure is a prominent education technology company offering a comprehensive ecosystem of tools for K-12, higher education, and business sectors, including the well-known Canvas LMS platform. Their website demonstrates a mature digital presence with extensive use of modern marketing and analytics technologies, indicating a strong digital marketing strategy and customer engagement focus. However, the absence of publicly available WHOIS data and lack of visible privacy and terms of service policies on the analyzed page present some concerns regarding transparency and compliance. The website is well-designed, mobile-optimized, and provides a professional user experience aligned with enterprise standards.
Retail · Italy
82Low
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
Artigianoinfiera.it is a well-established Italian website dedicated to promoting and selling handmade artisan products from around the world, anchored by an annual artisan fair event held in Milan. The business operates a combined event and eCommerce model targeting consumers interested in unique artisan crafts. The website employs a modern technical infrastructure built on React and Next.js frameworks with Material-UI components, ensuring a good user experience and mobile optimization. Security posture is adequate with HTTPS enabled and cookie consent implemented, though lacks explicit privacy and terms of service documentation and security headers. The domain is long-registered and consistent with the business claims, indicating legitimacy. Overall, the site is professional and trustworthy but could improve privacy compliance and security best practices.
- Löwen Medien Service
loewenmedienservice.de
Education · Germany
78Low
NIS2 2 · GDPR 95
NIS2 2 · GDPR 95
Löwen Medien Service is a specialized educational media distributor operating under the Westermann Gruppe umbrella, focusing on supplying schools and educators in Germany with a comprehensive range of teaching materials from all publishers. Their business model emphasizes convenience through no minimum order values, statutory discounts, free shipping, and tailored packaging and delivery services. The website reflects a professional and consistent brand presence with good content quality and user experience. Technically, the site is built on TYPO3 CMS with modern libraries and frameworks, hosted by a reputable provider, and includes privacy-conscious analytics via Matomo with cookie consent managed by Klaro. Security posture is solid with HTTPS and form protections, though lacking explicit security headers and published security policies. Overall, the domain registration and WHOIS data align well with the business claims, indicating legitimacy and trustworthiness.
- UD Trucks
udtrucks.com
Transportation · Japan
82Low
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
UD Trucks is a globally active Japanese commercial vehicle solutions provider, specializing in manufacturing and selling trucks across more than 60 countries. The website presents a professional and well-structured digital presence built on Drupal 10, incorporating modern analytics and cookie consent tools to ensure compliance and user tracking. The business targets commercial vehicle buyers and fleet operators, offering truck finder services and vehicle solutions. Despite the lack of publicly available WHOIS data, the website's content and technical infrastructure indicate a mature and legitimate enterprise with a strong market position in the transportation sector. Security posture is solid with HTTPS enforcement and security headers, though explicit security policies and incident response details are absent, representing an area for improvement.
FLO Group s.r.o.base.cz
Technology · Czech Republic
80Low
NIS2 55 · GDPR 73
NIS2 55 · GDPR 73
FLO Group s.r.o. is a Czech Republic-based technology consulting firm specializing in modern data and AI solutions. The company positions itself as a certified Databricks partner, serving clients in banking, retail, and investment sectors. Their business model focuses on expert advisory, data consulting, and capacity boosting through expert assignments. The website demonstrates a mature digital presence with modern technologies such as Next.js and HubSpot integrations, and a strong emphasis on privacy compliance and user consent. Security posture is good with HTTPS and cookie consent mechanisms, though explicit security policies and incident response details are not published. WHOIS data is unavailable, which slightly impacts trust but is mitigated by professional content and client references. Overall, FLO presents as a credible and professional data consultancy with a clear market focus and solid technical infrastructure.
Superbsuperbexperience.com
Hospitality
81Low
NIS2 22 · GDPR 85
NIS2 22 · GDPR 85
Superb is a hospitality-focused SaaS platform offering an integrated suite of tools designed to help restaurants, cafés, bars, bakeries, and breweries open, run, and grow their businesses. Their platform includes POS systems, payment processing, reservation management, gift cards, takeaway services, marketing, and integrations, positioning them as a comprehensive solution provider in the hospitality technology market. The website content is professionally designed, targeting hospitality businesses with clear service offerings and customer success stories. Technically, the site leverages modern web technologies including Webflow CMS, HubSpot for meetings and analytics, Hotjar for user behavior tracking, and Facebook Pixel for marketing. The site is hosted on Webflow's CDN and uses HTTPS with good SSL configuration, though lacks some security headers. Privacy compliance is basic with a cookie consent banner but no visible privacy or terms pages. No direct contact emails or phone numbers are found, which may impact user trust. The WHOIS data is missing or unavailable, which is unusual and reduces domain trustworthiness. Overall, the site is functional and professional but could improve transparency and security practices.
- el Gaucho Steakhouse
elgaucho.at
Hospitality · Austria
76Low
NIS2 2 · GDPR 43
NIS2 2 · GDPR 43
el Gaucho Steakhouse is a medium-sized hospitality business operating multiple steakhouse locations in Austria and Germany. The company focuses on premium beef dining experiences, combining urban lifestyle with fine dining. Their website is professionally designed using WordPress and modern web technologies, featuring good SEO and mobile optimization. The technical infrastructure includes common marketing and analytics tools such as Google Analytics, Facebook Pixel, and Google Tag Manager. Security posture is solid with HTTPS enforced and cookie consent implemented, though security headers are not explicitly detected. Privacy policies are present and GDPR compliant. No direct contact information is visible on the homepage, which may affect user engagement. Overall, the website reflects a legitimate and trustworthy business with a good digital presence.
Das Bootshaus Alte Donaudasbootshaus.at
Hospitality · Austria
79Low
NIS2 47 · GDPR 100
NIS2 47 · GDPR 100
Das Bootshaus Alte Donau is a small hospitality business located in Vienna, Austria, combining rowing culture with gastronomy. The website presents a professional and well-structured digital presence featuring online reservations, event promotions, and a strong social media footprint. Technically, the site uses modern web technologies including JavaScript libraries, lazy loading, and integrates third-party reservation widgets. Security posture is adequate with HTTPS enforced but lacks explicit security headers and published security policies. Privacy compliance is partial with cookie consent but missing explicit privacy and terms of service pages. Overall, the website is trustworthy and well-positioned in its local market niche.
Westermannbibox.schule
Education · Germany
83Low
NIS2 2 · GDPR 95
NIS2 2 · GDPR 95
The website www.bibox.schule is a professionally designed digital education platform operated by Westermann Gruppe, a well-established educational publisher in Germany. It offers digital textbooks and teaching materials tailored for various school levels including Grundschule, Mittlere Schulformen, Gymnasium, and Berufliche Bildung. The platform targets schools, teachers, and students primarily in German-speaking countries, providing apps and licensing services to facilitate digital learning. The site demonstrates a strong market position within the education sector, leveraging digital transformation to enhance traditional educational content delivery. Technically, the website is built on TYPO3 CMS and integrates modern analytics and marketing tools such as Matomo, Google Tag Manager, and Meta Pixel, all managed with a clear cookie consent mechanism compliant with GDPR. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. However, some security headers appear missing, and no explicit security or incident response policies are published, indicating areas for improvement. From a security perspective, the site uses HTTPS with good SSL configuration and respects user privacy through consent-based tracking. No critical vulnerabilities or exposed sensitive data were detected in the content. The absence of WHOIS data limits domain registration trust analysis, but the website’s branding, contact information, and domain usage strongly indicate legitimacy. Overall, the site maintains a good security posture with room for enhancement in security policy transparency and header implementation. The overall risk assessment is low, with recommendations focusing on improving security headers, publishing a security policy, and adding a vulnerability disclosure mechanism. These steps would enhance trust and compliance, supporting the platform’s role as a reliable digital education provider.
Westermann Gruppewestermann.de
Education · Germany
82Low
NIS2 2 · GDPR 80
NIS2 2 · GDPR 80
Westermann Gruppe operates a comprehensive educational media and services platform primarily targeting teachers, parents, students, and educational professionals in German-speaking countries. The website offers a broad range of services including educational books, digital learning platforms like BiBox, teacher training webinars, school consulting, and an online shop. The company is positioned as a large, established player in the education sector with consistent branding and a professional online presence. Technically, the website employs modern web technologies, including JavaScript frameworks, responsive design, and lazy loading for images, ensuring a good user experience across devices. The site is well-optimized for SEO and accessibility, with clear navigation and rich content. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms compliant with GDPR. However, it lacks explicit security headers and a published security policy or incident response contact, which are areas for improvement. Overall, the website is safe, trustworthy, and professionally maintained, with no signs of adult or questionable content. The domain registration appears legitimate though limited WHOIS data restricts full verification. Strategic recommendations include enhancing security headers, publishing a security policy, and establishing a vulnerability disclosure process to further strengthen trust and compliance.
IT Exhibitionit-exhibition.com
Other · Italy
77Low
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
IT Exhibition is an Italian association representing international trade fairs with a focus on promoting and protecting the competitiveness of Italian exhibitions and supporting the internationalization of Italian SMEs. The website is professionally designed using WordPress and Elementor, featuring modern web technologies and good SEO practices. The security posture is adequate with HTTPS enabled, but lacks some security headers and privacy compliance elements. The absence of WHOIS data raises concerns about domain legitimacy, though the website content and contact information suggest a legitimate business. Strategic recommendations include adding privacy and cookie policies, improving security headers, and verifying domain registration status.
- MADE eventi Srl
madeexpo.it
Other · Italy
76Low
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
MADE eventi Srl operates the MADE expo, a prominent trade fair in Milan, Italy, focusing on the construction sector. The website presents a professional and comprehensive platform for exhibitors, visitors, and media, offering detailed event information, ticketing, and networking opportunities. The company is positioned as a key player in the event organization industry with strong partnerships and media presence. Technically, the website uses modern web technologies including Adobe Experience Manager CMS, Bootstrap, jQuery, and integrates Google Tag Manager and Iubenda for analytics and privacy compliance. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms implemented. No critical vulnerabilities or suspicious content were detected. Overall, the site is well-structured, GDPR compliant, and trustworthy, serving a general audience interested in construction industry events.
- Lutec GmbH
lutec.ch
Energy · Switzerland
77Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Lutec GmbH is a Swiss-based company specializing in energy-efficient ventilation and climate technology solutions, focusing on central and residential ventilation systems. The company targets regional customers in Baselland, Switzerland, offering services including installation, maintenance, and servicing of ventilation and air conditioning systems. The website is built on the BaseKit CMS platform, hosted by Hoststar, and employs modern web technologies such as FontAwesome and PhotoSwipe for enhanced user experience. The site is mobile-optimized and provides a good level of content quality and navigation clarity, although explicit contact details and privacy policies are missing. Security-wise, the website uses HTTPS but lacks important security headers and explicit incident response or vulnerability disclosure information, indicating room for improvement in security posture and compliance. Overall, the domain registration data aligns well with the business claims, supporting the legitimacy of the website and company.
Prosegur Deutschlandprosegur.de
Transportation · Germany
83Low
NIS2 2 · GDPR 80
NIS2 2 · GDPR 80
Prosegur Deutschland is a leading security and cash management service provider in Germany, specializing in secure transportation and handling of physical and digital assets. The company positions itself as the market leader in Germany, serving B2B clients including banks, public institutions, and enterprises. Their comprehensive service portfolio includes cash management outsourcing, cash deposit solutions, technical services, and high-security storage. Technically, the website employs modern tracking and consent management tools, hosted on a reputable CDN provider (Akamai), and demonstrates good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though there is room for improvement in security headers and incident response transparency. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, supporting Prosegur's strong market presence.
Prosegurprosegur.cl
Technology · Chile
83Low
NIS2 2 · GDPR 65
NIS2 2 · GDPR 65
Prosegur Chile is a prominent security services provider specializing in alarm systems, video surveillance, and cash management solutions tailored for both residential and business customers. The website reflects a mature digital presence with comprehensive service offerings and a strong focus on customer engagement through interactive forms and clear calls to action. Technically, the site employs modern web technologies including Bootstrap, Google Tag Manager, TikTok Pixel, and Microsoft Clarity, indicating a well-maintained infrastructure with attention to analytics and marketing. Security-wise, the site enforces HTTPS and cookie consent mechanisms, though some security headers could be improved for enhanced protection. The absence of WHOIS data for the queried subdomain is likely a technical querying issue rather than a legitimacy concern, as the website content and structure strongly support a trustworthy business. Overall, Prosegur Chile demonstrates a solid security posture and compliance with privacy regulations, making it a reliable platform for its users.
Government · Switzerland
76Low
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
The Eidgenössisches Institut für Geistiges Eigentum (IGE) is the Swiss federal authority responsible for intellectual property rights including patents, trademarks, designs, geographical indications, and copyright. The website serves as a comprehensive portal for individuals, businesses, and IP professionals to access registration services, legal information, public registers, and educational resources. It maintains a strong market position as the central Swiss IP office with a clear government affiliation and authoritative content. The site offers multilingual support and a variety of online services to facilitate IP management. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies such as Google Tag Manager for analytics and slick sliders for UI. The site is mobile optimized, accessible, and SEO friendly with a professional design and clear navigation. Hosting details are not explicit but the site uses HTTPS with good SSL configuration. Security best practices are partially implemented, with room for improvement in security headers and published security policies. From a security perspective, the site enforces HTTPS, uses cookie consent mechanisms, and avoids exposing sensitive data. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms such as security.txt. No vulnerabilities or suspicious domains were detected. The WHOIS data confirms the domain is legitimately registered to a Swiss federal entity, reinforcing trust. Overall, the website is highly professional, trustworthy, and compliant with privacy regulations such as GDPR. It effectively serves its target audience with relevant content and services. Strategic recommendations include enhancing security headers, publishing a security policy, and implementing a vulnerability disclosure framework to further strengthen the security posture and trust.
Government Communications Headquarters (GCHQ)gchq-careers.co.uk
Government · United Kingdom
76Low
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
GCHQ Careers is the official recruitment portal for the Government Communications Headquarters, a UK government intelligence and cyber security agency. The website serves as a platform to attract and inform prospective candidates about career opportunities within GCHQ, emphasizing its mission to keep the UK safe. The site is professionally designed with clear navigation, mobile optimization, and comprehensive content about roles and application processes. Technically, the site employs modern JavaScript frameworks, Google Tag Manager, and Facebook Pixel for analytics and marketing, alongside a robust cookie consent mechanism ensuring GDPR compliance. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though additional security headers could enhance protection. The absence of WHOIS data is due to the domain being a subdomain or alias, common for government sites, and does not detract from the site's legitimacy. Overall, the site presents a trustworthy, professional front for GCHQ recruitment efforts.
- Al Jazeera
aljazeera.com
Media · Qatar
77Low
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Al Jazeera is a globally recognized news media organization founded in 2006 and headquartered in Qatar. It provides comprehensive news coverage, analysis, multimedia content, and live broadcasts targeting a general international audience. The website demonstrates a mature digital infrastructure utilizing modern web technologies such as React, GraphQL, and Firebase, supported by advanced analytics and advertising frameworks. The site is well-optimized for performance, mobile responsiveness, and accessibility, offering a professional user experience with clear navigation and rich content. Security posture is strong with HTTPS enforcement and multiple security headers, although explicit security policies and incident response contacts are not publicly disclosed. Privacy compliance is robust, featuring comprehensive privacy and cookie policies with consent mechanisms aligned with GDPR standards. Despite the absence of WHOIS data, the domain is associated with a reputable media brand, and no blocking or WAF interference was detected. Overall, the site is trustworthy, professionally managed, and well-positioned in the international media landscape.
- 3Q GmbH
3q.video
Technology · Germany
80Low
NIS2 17 · GDPR 95
NIS2 17 · GDPR 95
3Q GmbH is a German-based technology company specializing in professional video streaming and hosting solutions. Their platform offers a comprehensive suite of services including live streaming, video hosting, webcasting, video analytics, and AI-powered video optimization. Positioned as a GDPR-compliant and ISO 27001 certified provider, 3Q targets businesses and organizations requiring secure, scalable, and flexible video infrastructure primarily in Europe but also worldwide. The company operates its own infrastructure, ensuring data sovereignty and reliability. Technically, the website demonstrates a mature digital presence with modern web technologies such as HTML5, JavaScript, HubSpot integration, and Cookiebot for consent management. The proprietary 3Q video player and content delivery network underline their technical capabilities. The site is well-optimized for performance, mobile responsiveness, and accessibility, reflecting a high level of digital maturity. From a security perspective, 3Q maintains strong practices including HTTPS enforcement, security headers, GDPR compliance, and ISO 27001 certification. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of a public vulnerability disclosure or incident response contact is noted as an area for improvement. Overall, 3Q GmbH presents a trustworthy, professional, and secure platform with strong compliance and business credibility. The website effectively communicates their offerings and supports user engagement through clear contact channels and marketing tools.
- Mercado Libre
mercadolibre.com.mx
E-commerce · Mexico
80Low
NIS2 17 · GDPR 65
NIS2 17 · GDPR 65
Mercado Libre is a leading e-commerce platform in Mexico and Latin America, offering a wide range of products with services including shipping and official stores. The website demonstrates a mature digital infrastructure with modern technologies such as React, New Relic monitoring, and advanced performance optimizations. Security posture is strong with HTTPS enforcement and monitoring, though explicit security policies and privacy disclosures are not prominently found in the analyzed content. Overall, the platform is highly professional and trustworthy, serving a broad general audience with extensive tracking and analytics capabilities.
Prosegur Brasilprosegur.com.br
Transportation · Brazil
80Low
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
Prosegur Brasil is a leading security and cash management services provider operating extensively across Brazil. The company offers comprehensive solutions including cash logistics, intelligent safes, daily deposits, authorized correspondent services, and special cargo transportation. Their target audience primarily includes B2B clients such as small, medium, and large enterprises, especially in finance, retail, industry, and services sectors. The website reflects a strong market position with a large national presence and is part of the global Prosegur group. Technically, the site uses modern technologies such as Google Tag Manager, YouTube API, and a privacy SDK, hosted on Akamai infrastructure, indicating a mature digital presence. The site is well-optimized for SEO and mobile devices, with good accessibility and performance metrics. Security posture is solid with HTTPS enforcement and privacy compliance mechanisms, though explicit security policies and incident response details are not publicly disclosed. Overall, the website is professional, trustworthy, and safe for general audiences.