Medium-risk security reports
99,067 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,182001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
26,601–26,650 of 99,067
PHYSICS TODAYphysicstoday.org
Education · United States
70Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Physics Today is a reputable publication operated by the American Institute of Physics, serving the physics community with news, analysis, and career resources. The website demonstrates a mature digital infrastructure with modern web technologies, including MathJax for scientific notation, and integrates comprehensive privacy and cookie consent mechanisms. Security posture is strong with HTTPS enforcement and standard security headers, though explicit security policies and incident response information are not publicly detailed. Overall, the site is professional, trustworthy, and well-optimized for its target audience.
STUDENTSspsnational.org
Education · United States
72Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
The SPS website serves as a comprehensive resource for physics students, operated under the American Institute of Physics umbrella. It provides news, educational content, event information, and opportunities for student involvement, positioning itself as a key platform for the physics student community. The affiliation with AIP lends credibility and trust to the site, reinforcing its role in the educational and non-profit sector. Technically, the website employs modern web technologies including JavaScript, Web Components, and a CMS platform (Brightspot). It integrates Google Tag Manager for analytics and Osano for cookie consent management, reflecting a mature digital infrastructure. The site is mobile-optimized and demonstrates good SEO practices, although some accessibility features could be enhanced. From a security perspective, the site uses HTTPS and cookie consent mechanisms effectively. However, explicit security headers and vulnerability disclosure mechanisms are absent, representing areas for improvement. The lack of WHOIS data due to privacy protection is common for organizations but limits domain trust analysis. Overall, the security posture is solid but could benefit from additional transparency and policy disclosures. The overall risk assessment is low, with the site appearing legitimate, professional, and compliant with privacy regulations. Strategic recommendations include enhancing security headers, publishing incident response and security policies, and implementing a security.txt file to improve transparency and trust.
AIP Publishingscitation.org
Education
70Medium
NIS2 17 · GDPR 65
NIS2 17 · GDPR 65
AIP Publishing is a well-established academic publisher specializing in the physical sciences, offering a broad range of peer-reviewed journals, conference proceedings, and books. The website reflects a mature digital presence with comprehensive content targeting researchers, authors, and librarians. The company maintains a consistent brand identity and provides extensive resources and special topic collections to support the scientific community. Technically, the site uses modern JavaScript libraries, consent management tools, and integrates advertising and analytics services responsibly. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are not publicly visible. Overall, the domain and website present a trustworthy and professional front for a large academic publisher.
- Viessmann s.r.o.
viessmann-partner.sk
Energy · Slovakia
60Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Viessmann s.r.o. is a well-established company specializing in heating and climate solutions, operating a partner portal targeted at business partners and installers. The website reflects a professional B2B platform with consistent branding and a clear business focus on energy and climate technologies. The technical infrastructure is based on ASP.NET WebForms with modern frontend frameworks like Foundation and jQuery, supplemented by Usercentrics for cookie consent and Google Analytics for tracking. The site is mobile optimized and provides a good user experience with clear navigation and professional design. Security posture is adequate with HTTPS and secure form handling, though explicit security headers and policies are not evident in the provided data. Privacy compliance is strong, with clear links to privacy and cookie policies and GDPR adherence. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.
Viessmannviessmann.com
Energy · Germany
66Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Viessmann is a large, well-established company operating in the energy sector, specializing in heating, climate, and energy solutions. The website serves as a corporate portal linking to its main business units, including Viessmann Climate Solutions, now part of Carrier, and the Viessmann Generations Group focused on sustainability. The site targets both B2B and end customers interested in sustainable energy solutions. Technically, the website uses modern frameworks such as Astro and Storyblok CMS, with integration of Usercentrics for cookie consent and Google Tag Manager for analytics, indicating a mature digital infrastructure. The site is mobile-optimized and SEO-friendly with good navigation and professional branding. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though some security headers and explicit security policies are missing. No vulnerabilities or exposed sensitive data were detected. Overall, the website is trustworthy and professionally maintained, with minor recommendations to enhance security transparency and incident response readiness.
Silverstripe Limitedsilverstripe.org
Technology · New Zealand
73Medium
NIS2 2 · GDPR 73
NIS2 2 · GDPR 73
Silverstripe Limited operates the Silverstripe CMS, an open-source content management system and framework designed for developers, marketers, authors, and IT managers. The company positions itself as a provider of flexible, extensible, and secure CMS solutions with enterprise-level support and a strong global community. Their website reflects a mature digital presence with comprehensive content, active community engagement, and regular updates on security and software releases. Technically, the site leverages modern web technologies including SilverStripe CMS, Bootstrap, jQuery, Google Analytics, and reCAPTCHA, ensuring a responsive and user-friendly experience. Security practices include HTTPS enforcement and published security advisories, although explicit security headers and incident response contacts are not evident. Overall, the website is professional, trustworthy, and well-structured, supporting Silverstripe's market position as a reliable open-source CMS provider.
Innovatifinnovatif.com
Technology · Slovenia
71Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Innovatif is a Slovenian-based company specializing in brand communication, digital platform development, and media buying with over 20 years of experience. Their website demonstrates a professional and modern digital presence, targeting businesses and brands seeking comprehensive communication and digital solutions. The company serves a diverse client base including government entities and large enterprises, positioning itself as a trusted partner in the technology and communication sectors. Technically, the website is built on SilverStripe CMS and uses modern JavaScript libraries and Google Tag Manager for analytics, reflecting a mature digital infrastructure. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and policies could be improved. The WHOIS data is unavailable, which slightly reduces trust but the active and professional website mitigates concerns. Overall, Innovatif presents a credible and well-established business with a strong digital footprint.
- Pivovarna Laško Union d.o.o.
pivovarnalaskounion.com
Manufacturing · Slovenia
63Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
Pivovarna Laško Union d.o.o. is the largest beer and beverage producer in Slovenia, with a rich 200-year tradition in brewing. The company emphasizes sustainability and social responsibility, positioning itself as a leader in the Slovenian beverage market. Their website reflects a professional and modern digital presence, showcasing their brands and corporate values. Technically, the site is well-implemented with modern HTML5 and CSS, mobile responsiveness, and a cookie consent mechanism aligned with GDPR requirements. Security posture is solid with HTTPS enforced and age verification for alcohol content, though some security headers and policies could be improved. Overall, the domain registration and WHOIS data are consistent with the business claims, supporting legitimacy and trustworthiness.
- A1 Slovenija
a1.si
Telecommunications · Slovenia
69Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
A1 Slovenija is a leading private telecommunications provider in Slovenia, offering a wide range of communication services including mobile subscriptions, prepaid packages, triple play bundles, and devices. The company serves over 700,000 users with a strong market presence and a workforce of more than 500 employees. Their website reflects a mature digital infrastructure with modern technologies such as Liferay CMS, Vue.js, and various accessibility and analytics tools. The site is well-optimized for SEO, mobile-friendly, and compliant with GDPR regulations, including a comprehensive cookie consent mechanism. Security posture is solid with HTTPS enforced and no visible vulnerabilities, although explicit security policies and incident response information are not publicly disclosed. Overall, the domain registration and business information align well, indicating a trustworthy and legitimate enterprise.
- GENERALI zavarovalnica d. d.
generali.si
Finance · Slovenia
66Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
GENERALI zavarovalnica d. d. is a well-established Slovenian insurance company offering a wide range of insurance products including vehicle, home, health, accident, travel, and pension insurance for both individuals and businesses. The company is part of the larger Generali Group, a recognized global insurance provider. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive product information tailored to the Slovenian market. Technical infrastructure leverages Liferay CMS, jQuery, and Google Tag Manager, indicating a modern and maintainable platform. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response contacts are not published. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with GDPR requirements.
- Facts.net
cookiesdirective.com
Technology
62Medium
NIS2 17 · GDPR 85
NIS2 17 · GDPR 85
Facts.net is an established online media platform founded in 1997, specializing in publishing factual and educational content across diverse categories including technology and computing. The website targets a general audience interested in knowledge discovery and provides content supported by advertising revenue. The platform demonstrates consistent branding and professional content quality, supported by expert verification and editorial guidelines. Technically, the site is built on WordPress with modern SEO and analytics tools such as Yoast SEO, Google Tag Manager, and Matomo, hosted with GoDaddy and utilizing Cloudflare DNS services. The site is mobile optimized and performs moderately well, with good SEO and basic accessibility features. Security posture is adequate with HTTPS enabled and no exposed sensitive data, though improvements in security headers and explicit security policies are recommended. Privacy compliance is evident with cookie consent mechanisms and GDPR-aligned policies. Overall, the website is trustworthy, safe for general audiences, and maintains a solid business credibility profile.
Swiss Leaderssustainableleaders.ch
Non-profit · Switzerland
68Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Sustainable Leaders is a Swiss non-profit initiative led by Swiss Leaders, focused on promoting sustainable leadership and new managerial norms. The website offers information about the initiative, training programs, a sustainability charter, and participation in a sustainability barometer. The target audience includes business leaders and organizations interested in sustainability. Technically, the site is built on WordPress using the Enfold theme, enhanced with Google reCAPTCHA v3 and PWA capabilities, indicating a moderate level of digital maturity. Security posture is good with HTTPS enforced and anti-bot measures, but lacks some advanced security headers and explicit cookie consent mechanisms. Privacy compliance is basic with a privacy policy linked on the partner domain but no visible cookie banner or terms of service. Overall, the site is professional, trustworthy, and well-branded, with room for improvement in privacy and security transparency.
Best of Realtybestofrealty.cz
Real Estate · Czech Republic
73Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
Best of Realty is a prestigious Czech real estate competition established in 1999, recognizing outstanding developers, architects, and real estate professionals in the Czech Republic. The website serves as an information hub for the competition, showcasing nominated projects, news, and partner information. The site is professionally designed, mobile-optimized, and includes modern analytics and tracking tools, reflecting a mature digital presence. However, the absence of WHOIS data and explicit contact details slightly reduces trustworthiness. Security posture is solid with HTTPS and cookie consent mechanisms, but could be improved with additional security headers and published security policies. Overall, the site is a credible and well-maintained platform for its niche audience.
PUMApuma-catchup.com
Media
67Medium
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
PUMA CATch up is a corporate media platform operated by PUMA SE, focusing on delivering news, stories, and updates related to the brand's business, sports, sustainability, and employee engagement. The website serves as an internal and external communication channel targeting PUMA employees and brand enthusiasts. Technically, the site is built on WordPress, leveraging modern web technologies such as jQuery, Google Tag Manager, and OneTrust for cookie consent, with progressive web app capabilities. The site is well-optimized for mobile and SEO, with structured data enhancing search visibility. Security-wise, the site uses HTTPS with good SSL configuration but lacks explicit security headers and detailed privacy or security policies. The absence of WHOIS registration data raises concerns about domain legitimacy, although the website content and branding appear professional and consistent with PUMA's corporate identity. Overall, the site demonstrates a moderate to good digital maturity level but would benefit from enhanced transparency and security practices.
Crownpeak Technology, Incattraqt.com
Technology
74Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Crownpeak Technology, Inc offers Fredhopper, an advanced AI-powered product discovery solution designed to enhance e-commerce experiences for enterprise retailers and brands, particularly in fashion and beauty sectors. The platform provides intelligent merchandising, personalized recommendations, and AI-driven search capabilities that significantly boost conversions and average order values. The website demonstrates a mature digital presence with integrations across major e-commerce platforms such as Shopify and Salesforce Commerce. Technically, the site employs modern tracking and marketing technologies, robust consent management, and enforces HTTPS with security headers, reflecting a strong security posture. However, the absence of WHOIS registration details slightly reduces trust but is mitigated by the professional site content and branding. Overall, the site scores highly on content quality, technical implementation, security, privacy compliance, and business credibility.
- FFatCow Web Hosting
fatcow.com
Technology · United States
66Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
FatCow Web Hosting is a well-established provider of small business web hosting and domain registration services, now operating under the umbrella of iPage by Network Solutions, a Newfold Digital brand. The website serves as a login portal for customers to access their control panel and webmail services. It targets small business owners and website administrators seeking reliable hosting solutions. The company offers a range of services including web hosting, domain registration, email hosting, WordPress hosting, e-commerce, and marketing services, positioning itself as a comprehensive provider in the web hosting industry. Technically, the website employs a modern technology stack including Bootstrap 3, jQuery, YUI, and integrates third-party services such as Google Tag Manager, Sift for fraud detection, AudioEye for accessibility, and Genesys for live chat support. The site is hosted on infrastructure managed by iPage/Network Solutions, ensuring moderate performance and good mobile optimization. Accessibility and SEO practices are well implemented, contributing to a positive user experience. From a security perspective, the site enforces HTTPS and uses secure login forms with POST methods. It includes cookie consent mechanisms and privacy policies that indicate GDPR compliance. While explicit security headers like Content-Security-Policy are not detected, the use of script integrity attributes and cross-origin policies reflect good security hygiene. No vulnerabilities or exposed sensitive data were found in the analysis. However, recommendations include implementing additional security headers and publishing a vulnerability disclosure policy. Overall, the website demonstrates a strong security posture, good privacy compliance, and professional business credibility. The lack of WHOIS data for the subdomain is typical and does not detract from the legitimacy of the site, which aligns with the parent company’s branding and services. Strategic recommendations focus on enhancing security headers, transparency, and incident response readiness to further strengthen trust and compliance.
FTV Primacnnprima.cz
Media · Czech Republic
60Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
FTV Prima operates the CNN Prima NEWS website, a leading Czech news media outlet providing trustworthy, fast, and clear news coverage for a broad audience. The site offers live TV streaming, news articles, video content, and a mobile app, targeting general audiences in the Czech Republic. The business is positioned as a major player in the Czech media industry with consistent branding and a comprehensive content offering. Technically, the website uses modern web technologies including JavaScript frameworks, Google Tag Manager, and a consent management platform (Didomi) to ensure GDPR compliance. The site is mobile-optimized, accessible, and integrates multiple trusted third-party services for analytics and advertising. Performance is moderate with good SEO and accessibility practices. Security posture is strong with HTTPS enforced, consent management, and no visible vulnerabilities or exposed sensitive data. However, explicit security headers should be verified and a security.txt file or incident response contact could enhance transparency. Privacy compliance is well addressed with clear cookie and privacy policies. Overall, the website presents a low risk profile with high professionalism and trustworthiness. The lack of WHOIS data is likely due to privacy protection and does not detract from the legitimacy of the site. Strategic recommendations include enhancing security header implementation, publishing vulnerability disclosure information, and maintaining regular audits of third-party scripts.
Deník Referendumdenikreferendum.cz
Media · Czech Republic
62Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
Deník Referendum is an independent Czech media outlet founded in 2009, focusing on political, social, and climate-related journalism without paywalls or oligarch influence. The website is well-structured, uses modern web technologies including Svelte, and integrates multiple analytics and tracking tools such as Google Analytics, Hotjar, and Facebook Pixel. The site implements a comprehensive cookie consent mechanism, allowing users granular control over cookie categories. Security posture is strong with HTTPS enforced and Cloudflare Bot Management in place, though explicit privacy and security policies are not found in the provided content. Overall, the site is professional, content-rich, and trustworthy, serving a Czech-speaking audience interested in independent journalism.
Other
63Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website ultipro.com is currently inaccessible due to a Cloudflare error 1000 indicating that the DNS resolves to a prohibited IP address. This misconfiguration prevents access to any business-related content, policies, or contact information. The domain is well-established, registered since 1999 with Network Solutions, LLC, and uses Cloudflare DNS servers. However, the current DNS setup causes a service disruption, severely limiting the ability to assess the company's offerings or security posture. The site only serves a Cloudflare error page with no visible business or compliance information. Technical infrastructure relies on Cloudflare services, but the DNS misconfiguration is a critical issue that must be resolved to restore service and enable further analysis. Security posture is weak due to lack of security headers and absence of HTTPS enforcement details. Privacy and compliance policies are not found, and no contact or incident response information is available. Overall, the site is currently non-functional for end users or analysts.
- Balkan Pensiony
balkanpensiony.cz
Hospitality · Czech Republic
65Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Balkan Pensiony is a small hospitality business offering accommodation services in Bulgaria, specifically in the Bansko and Primorsko regions. The website presents two main pensions, Atika and Nadia, targeting tourists seeking winter and summer vacation stays. The business model focuses on direct accommodation bookings with a clear regional niche. The website is built on Joomla CMS with a moderate technical infrastructure including Bootstrap, jQuery, and social media integration via Facebook SDK. Google Analytics is used for visitor tracking. Security posture is basic with HTTPS enabled but lacking security headers and privacy policies, which are critical for GDPR compliance. The absence of WHOIS data reduces domain trustworthiness, though the website content and contact phone number appear legitimate. Overall, the site is functional and professionally designed but requires improvements in privacy compliance and security best practices to enhance trust and regulatory adherence.
Non-profit · United States
73Medium
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
The Seventh-day Adventist Church operates adventist.org as its official global online presence, providing comprehensive religious, educational, and humanitarian information and services. The website serves a worldwide Christian audience, offering resources on beliefs, church locations, prayer requests, and impact initiatives such as education and health. The organization is a large, well-established non-profit religious entity with a history dating back to the 19th century, reflected in the domain's long registration since 1996. Technically, the website employs modern web technologies including React and Next.js frameworks, supported by Cloudflare DNS and CDN services. It integrates multiple third-party analytics and marketing tools such as HubSpot and Google Tag Manager, ensuring robust performance, mobile optimization, and good SEO practices. The site is well-designed with excellent user experience and accessibility. From a security perspective, the site enforces HTTPS with strong domain registration protections, though DNSSEC is not enabled. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with a comprehensive privacy policy, cookie consent mechanisms, and GDPR adherence. Contact information and legal notices are clearly presented, enhancing business credibility. Overall, adventist.org demonstrates a mature digital infrastructure, strong security posture, and high content quality, supporting its mission as a trusted global religious organization. Strategic improvements could include enabling DNSSEC and publishing a formal security policy and vulnerability disclosure framework to further enhance trust and resilience.
- Fédération Française de Football
cnf-clairefontaine.com
Government · France
74Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
The Centre National du Football Clairefontaine website is a professionally maintained portal representing the French Football Federation's prestigious football training center. It offers a variety of services including training programs, facility rentals, and group visits targeting enterprises, football clubs, associations, and the general public. The site is well-branded and aligned with the federation's identity, featuring partner logos from reputable companies. Technically, the site employs modern web technologies, including Google Analytics, Google Tag Manager, and a GDPR-compliant cookie consent mechanism, hosted on AWS infrastructure. Security posture is adequate with HTTPS enforced and reCAPTCHA integration, though security headers and incident response information are lacking. Overall, the website is trustworthy and compliant with privacy regulations, with room for improvement in security transparency and technical hardening.
ProFlags BVcountryflags.com
Other
68Medium
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
Countryflags.com is a specialized website offering a comprehensive collection of national flags and related country information. The site provides downloadable vector files, icons, wallpapers, and emojis for all country flags, targeting educators, designers, researchers, and the general public interested in geography and flag symbolism. The business operates under ProFlags BV and positions itself as a niche informational resource with e-commerce capabilities for digital assets. Technically, the website is built on WordPress with WooCommerce and enhanced by SEO and analytics plugins such as Yoast SEO and MonsterInsights. The site demonstrates good mobile optimization, clear navigation, and solid content relevance, although some accessibility features could be improved. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms, but lacks explicit security headers and published incident response policies. The absence of WHOIS registration data raises concerns about domain legitimacy, though the website content and business information appear professional and trustworthy. Overall, the site scores well in content quality and security posture but should address domain registration transparency and enhance security policies for improved trust.
Ridera Development s.r.o.rezidence-keltickova.cz
Real Estate · Czech Republic
62Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Rezidence Keltičkova is a residential real estate development project located in Slezská Ostrava, Czech Republic, developed by Ridera Development s.r.o., a subsidiary of Ridera a.s. The project offers modern family housing with 41 apartments ranging from 1+KK to 4+KK, all sold out, with a focus on peaceful living near the city center. The website is professionally designed using WordPress and Elementor, featuring clear navigation and relevant content for prospective buyers and investors. Technical infrastructure includes modern web technologies and tracking tools such as Google Analytics and Facebook Pixel, with HTTPS enforced and a cookie consent mechanism implemented. However, the absence of WHOIS data and registrant information limits domain trust assessment.
- CEC European Managers
sustainableleaders.eu
Non-profit · Belgium
57Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
SustainableLeaders.eu is a professionally maintained website representing the Sustainable Leadership Project managed by CEC European Managers, a non-profit organization based in Belgium. The project focuses on empowering leaders for a net-positive future through sustainable leadership training, reports, and summit events. The website targets managers, consultants, and organizations interested in sustainability within the European context. The business model is non-profit with EU funding and partnerships supporting its activities. Technically, the site is built on WordPress using the Enfold theme and includes modern web technologies such as jQuery and LayerSlider. The site is moderately performant, mobile-optimized, and SEO-friendly. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers could be improved. Privacy compliance is strong with a clear privacy policy and cookie management. Contact information is comprehensive, including email, phone, physical address, and a contact form. Overall, the website is trustworthy, professional, and well-aligned with its stated mission.
Združenje Managerzdruzenje-manager.si
Non-profit · Slovenia
55Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Združenje Manager is a well-established Slovenian non-profit association dedicated to supporting management professionals through events, knowledge sharing, and networking. The website reflects a professional and consistent brand presence with clear business information and active social media engagement. Technically, the site is built on SilverStripe CMS, uses modern JavaScript libraries, and integrates analytics tools like Google Analytics and Microsoft Clarity with privacy considerations. Security posture is adequate with HTTPS and cookie consent mechanisms, though it lacks explicit security policies and vulnerability disclosure channels. Overall, the site is trustworthy, accessible, and serves its target audience effectively.
- Ledarna
ledarna.se
Non-profit · Sweden
75Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
Ledarna is a Swedish trade union exclusively for managers, providing membership services, leadership development, legal support, and income insurance. The organization holds a unique market position as the only Swedish union dedicated solely to managers, targeting professionals in leadership roles across Sweden. Their website reflects a mature digital presence with comprehensive content and strong branding consistency. Technically, the site uses modern tools including Episerver CMS, Matomo analytics, OneTrust for cookie consent, and Azure Application Insights for monitoring, indicating a well-maintained infrastructure. Security posture is solid with HTTPS, bot protection, and privacy compliance, though some security headers and policies could be improved. The WHOIS data for the queried subdomain is missing, which is unusual but does not detract from the site's legitimacy given the professional content and contact information. Overall, Ledarna's website is a trustworthy and authoritative source for its audience.
- Confédération Nationale des Cadres
cnc-nck.be
Non-profit · Belgium
60Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
The website represents the Confédération Nationale des Cadres, a Belgian trade union focused on defending the rights of cadres and participating in social elections. The organization positions itself as a neutral alternative syndicate for Belgian cadres, targeting a specialized audience within Belgium. The website is built on the Wix platform, utilizing Wix's Thunderbolt framework and standard polyfills for browser compatibility. The technical infrastructure is modern but basic, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and incident response information. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is functional and professional but could improve transparency and compliance.
Manufacturing · Brazil
64Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
IBÁ - Indústria Brasileira de Árvores is a well-established association representing companies in the Brazilian forest sector, focusing on industrial tree planting and native reforestation. Founded in 2014, it serves as a key reference in the sector, providing data, advocacy, and promotion of sustainable forest management practices. The website reflects a professional and consistent brand presence targeting industry stakeholders and partners. Technically, the website is built on WordPress with modern technologies including jQuery, Google Tag Manager, and Google reCAPTCHA. Hosting and DNS are managed via reputable providers including GoDaddy and Cloudflare. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Performance is moderate with room for improvement. Security posture is adequate with HTTPS enabled and use of reCAPTCHA, but lacks DNSSEC and explicit security headers. No visible privacy, cookie, or incident response policies were found, indicating gaps in compliance and transparency. The domain registration is consistent and long-standing, supporting the legitimacy of the organization. Overall, the website is functional and professional but would benefit from enhanced privacy compliance, security hardening, and clearer contact and incident response information to improve trust and regulatory adherence.
Francejudofrancejudo.com
Media · France
63Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Francejudo.com is a French-language niche media website dedicated to providing comprehensive news, results, and multimedia content related to the sport of judo. Established in 2000, it serves judo enthusiasts primarily in France but also covers international events. The site operates on the WordPress platform, leveraging popular SEO and social sharing plugins to enhance content visibility and user engagement. It monetizes through advertising networks such as Google AdSense and Advanced Ads. Technically, the site is moderately optimized with good mobile responsiveness and SEO practices, though there is room for improvement in accessibility and security headers. Security posture is solid with HTTPS and cookie consent mechanisms in place, but lacks explicit security policies and vulnerability disclosure channels. Overall, the website presents a professional and trustworthy front for its target audience, though it could enhance transparency and compliance by publishing privacy and terms of service documents and improving security best practices.
Fédération Française de Boxeffboxe.com
Government · France
54Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
The Fédération Française de Boxe (FFBoxe) is the official French boxing federation, serving as the national governing body for amateur and professional boxing in France. The website provides comprehensive information about boxing practice, training, professional boxing, teams, and federation governance. It targets athletes, clubs, officials, and boxing enthusiasts in France. The federation is positioned as a key sports organization with over 60,000 licensed members, offering services such as licensing, training certifications, event organization, and information dissemination. Technically, the website is built on WordPress using Oxygen Builder, with modern JavaScript libraries like Alpine.js and jQuery. It employs SEO best practices with Yoast SEO and uses Matomo for analytics, indicating a moderate level of digital maturity. The site is mobile optimized and provides a good user experience with clear navigation and professional design. From a security perspective, the site uses HTTPS with good SSL configuration but lacks explicit security headers and publicly available incident response or vulnerability disclosure information. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is addressed with visible privacy and cookie policies, including consent mechanisms, aligning with GDPR requirements. Overall, the site is trustworthy and professional, though the absence of WHOIS data for the domain www.ffboxe.com is a concern that warrants verification. The domain may be newly registered or privacy protected, which is unusual for an official federation. Strategic recommendations include enhancing security headers, publishing incident response details, and verifying domain registration to strengthen trust.
Other · France
71Medium
NIS2 2 · GDPR 65
NIS2 2 · GDPR 65
The Confédération Française de Jiu-Jitsu Brésilien (CFJJB) is a well-established French sports federation dedicated to Brazilian Jiu-Jitsu. Founded in 2005, it serves a large community with over 500 affiliated clubs and more than 31,000 licensed members. The website provides comprehensive information on club affiliations, licensing, competitions, national team selection, and training programs. It targets practitioners, clubs, and enthusiasts across France and its overseas territories. Technically, the site uses modern web technologies including Vue.js, Tailwind CSS, and Cloudflare CDN, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and domain protections, though improvements are recommended in security headers and explicit privacy/security policies. Overall, the site is professional, trustworthy, and serves as a central hub for the Brazilian Jiu-Jitsu community in France.
- RMC BFM ADS
rmcbfm-ads.com
Media · France
60Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
RMC BFM ADS is a prominent French advertising agency specializing in the commercialization of advertising spaces for major media brands such as BFM and RMC. Positioned as the third largest private TV advertising agency in France, it offers a comprehensive portfolio of advertising solutions across television, radio, digital platforms, and local channels. The company targets advertisers and businesses seeking to enhance brand visibility and performance through multi-channel campaigns. The website reflects a professional and consistent brand image with clear service offerings and a focus on digital-first advertising strategies. Technically, the website employs modern web standards including HTML5, CSS3, JavaScript, and JSON-LD structured data for SEO. It is mobile-optimized with good navigation clarity and moderate performance. The presence of cookie consent mechanisms and detailed privacy policies indicate a commitment to GDPR compliance. However, no explicit security policies or incident response information are published, which could be improved. From a security perspective, the site uses HTTPS with a good SSL configuration and implements cookie consent. No critical vulnerabilities or exposed sensitive data were detected. The absence of security headers and vulnerability disclosure information suggests room for enhancement in security posture. The WHOIS data is unavailable, which slightly impacts trust but is mitigated by the professional presentation and consistent branding. Overall, RMC BFM ADS presents a trustworthy and professional online presence suitable for its business domain. Strategic improvements in security transparency and WHOIS data availability would further strengthen its credibility and compliance posture.
- Judoverse
judoverse.org
Technology
71Medium
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
Judoverse.org is a website dedicated to a judo-themed NFT project, offering digital collectibles related to the sport of judo. The site targets NFT enthusiasts and fans of judo, leveraging blockchain technology to create unique digital assets. The business appears to be a small-scale, recently founded entity (2022) focusing on niche digital collectibles. The website features SVG animations and a clean, modern design but lacks comprehensive textual content and detailed business descriptions. Technically, the site uses Cloudflare DNS, Google Fonts, and Google Analytics, with HTTPS enabled, ensuring basic security and performance standards. However, DNSSEC is not enabled, and security headers are missing, which could be improved to enhance security posture. The security posture is moderate, with no critical vulnerabilities detected, but the absence of privacy and cookie policies, as well as incident response contacts, indicates gaps in compliance and security transparency. Contact is primarily through an external Discord link, with no direct company emails or phone numbers provided. Overall, the site is functional and moderately secure but would benefit from enhanced privacy compliance and security best practices.
- HHarvest Group SA
harvest-group.com
Transportation · Switzerland
59Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Harvest Group SA is a Swiss-based international commodities merchant specializing in agricultural products such as wheat, corn, soy, and barley. The company provides comprehensive services including international logistics, financing, risk management, and advisory services, positioning itself as a key player in global commodity trading and supply chain management. The website reflects a medium-sized enterprise with a professional online presence and consistent branding. Technically, the website employs standard web technologies including HTML5, CSS3, and JavaScript with the Slick Carousel library for UI elements. The site is hosted under a reputable registrar and DNS provider, with HTTPS enabled ensuring secure communications. Mobile optimization and navigation clarity are good, though accessibility features are basic and SEO optimization is moderate. From a security perspective, the site benefits from HTTPS and domain transfer protection but lacks advanced security headers and DNSSEC. There is no visible security policy or incident response information, and no cookie consent mechanism is implemented, which may impact GDPR compliance. No vulnerabilities or exposed sensitive data were detected in the content. Overall, the website is trustworthy and professional, with clear contact information and business details. However, improvements in privacy compliance, security headers, and incident response transparency are recommended to enhance security posture and regulatory adherence.
- MET Group
met.com
Energy · Switzerland
69Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
MET Group is a large European energy company headquartered in Switzerland, specializing in natural gas, electricity trading, and renewable energy production including wind and solar. The company operates across multiple European countries and emphasizes green energy and socially responsible business practices. The website is professionally designed, mobile-optimized, and provides comprehensive business and media information, targeting energy market participants and corporate clients. Technically, the site uses Umbraco CMS with modern frontend technologies like jQuery and Bootstrap, delivering a good user experience and SEO optimization. Security posture is solid with HTTPS and client-side validation, though some security headers and explicit cookie consent mechanisms could be improved. WHOIS data for the domain group.met.com is not publicly available, likely due to it being a subdomain under met.com, but the website content and branding strongly indicate legitimacy. Overall, the site is trustworthy, business-focused, and safe for general audiences.
CBH Compagnie Bancaire Helvétiquecbhbank.com
Finance · Switzerland
58Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
CBH Compagnie Bancaire Helvétique is a Swiss family-owned private bank specializing in wealth management, investment management, family office solutions, and banking services. The bank targets private and institutional clients, emphasizing creativity and excellence in its offerings. The website reflects a mature digital presence built on WordPress with modern plugins and SEO tools, providing a professional and content-rich user experience. Security posture is adequate with HTTPS and domain protections, though improvements are needed in security headers and published policies. Overall, the bank demonstrates strong business credibility and market positioning in the Swiss private banking sector.
Icona Capitaliconacapital.com
Finance
66Medium
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Icona Capital is a global alternative investment company specializing in private equity, debt solutions, and real estate investments. Founded in 2022 and part of the SWI Group, it targets high-growth sectors with a hands-on entrepreneurial approach to deliver sustainable growth. The company positions itself as a forward-thinking investment firm with a diversified portfolio and a focus on impactful investments. Technically, the website is built on WordPress using modern plugins and frameworks, hosted by Infomaniak Network SA, and employs HTTPS with a cookie consent mechanism, reflecting a mature digital presence. Security posture is solid with HTTPS and domain transfer protections, though DNSSEC is not enabled and no explicit security policy or incident response contacts are published. Overall, the website is professional, well-structured, and compliant with privacy regulations, though it lacks direct contact emails and phone numbers, relying on contact forms for communication.
International Judo Federationjudobase.org
Other
66Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
The International Judo Federation (IJF) operates Judobase.org, a comprehensive and authoritative platform dedicated to judo sports enthusiasts worldwide. The website serves as the official source for competition results, athlete rankings, event calendars, and multimedia content related to IJF-sanctioned events. It targets a global audience including athletes, coaches, officials, and fans, positioning itself as a key resource in the judo sports ecosystem. The business model is primarily federation-driven, supported by sponsorships and partnerships, with a medium-sized operational scale and a history dating back to at least 2007. Technically, the website employs modern web technologies including JavaScript frameworks, Bootstrap for responsive design, and integrates third-party services such as Google Analytics and Facebook SDK for analytics and marketing. The site is well-optimized for performance and mobile devices, with a clean and professional design that facilitates excellent user experience and navigation. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and a dedicated security policy page, which are areas for improvement. Privacy and cookie policies are present and appear comprehensive, indicating a reasonable level of GDPR compliance. Contact information is clearly provided with official domain emails, enhancing trustworthiness. Overall, Judobase.org demonstrates a strong security posture and high business credibility, with no signs of suspicious activity or content safety concerns. The lack of WHOIS data due to privacy protection is typical for such organizations and does not detract from the site's legitimacy. Strategic recommendations include enhancing security headers, implementing explicit cookie consent mechanisms, and publishing a formal security incident response policy to further strengthen compliance and user trust.
- TILL CONSULT a.s.
dunaview.cz
Technology · Czech Republic
54Medium
NIS2 2 · GDPR 45
NIS2 2 · GDPR 45
TILL CONSULT a.s. operates the dunaVIEW portal, providing a digital platform for employees to access payslips and pension insurance documents. The company has a long-standing presence in the Czech Republic's economic software market since 1996, offering a suite of related products and services. The website is professionally designed with a clear focus on business users, particularly employers and their employees. Technically, the site uses modern frameworks like Bootstrap and includes interactive elements, though performance is moderate and accessibility is basic. Security posture is adequate with HTTPS usage and encrypted communication claims, but lacks published security policies, privacy and cookie policies, and visible security headers. The contact form collects personal data but does not show anti-bot protections. Overall, the domain registration is consistent and transparent, supporting the legitimacy of the business. The site is safe for general audiences with no adult or questionable content.
KABELMAT Wickeltechnikkabelmat.com
Manufacturing · Germany
56Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
KABELMAT Wickeltechnik is a specialized German manufacturer focused on cable winding, storage, and measurement equipment, serving primarily industrial and commercial clients. Founded in 2004, the company offers products such as drum winders, ring winders, spool winders, cable drum racks, and length measuring devices. Their market position is that of a niche player with a consistent brand presence and a clear focus on cable handling technology. The website reflects a professional and well-structured digital presence, incorporating modern technologies like FontAwesome, Google Analytics, Google Tag Manager, and reCAPTCHA for security and analytics purposes. Hosting is provided by IONOS SE, a reputable provider, and the domain has been registered since 2004, consistent with the company's founding date. Security posture is generally good with HTTPS enabled and use of reCAPTCHA, but lacks DNSSEC and security headers, and no explicit security or privacy policies are published. Privacy compliance is weak due to absence of privacy and cookie policies and consent mechanisms. Overall, the website is trustworthy and professional but could improve in privacy and security transparency.
- nLine GmbH
nline.ai
Manufacturing · Germany
69Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
nLine GmbH is a German-based technology company specializing in AI-powered inline quality inspection solutions for extrusion products such as cables, wires, and hoses. Their flagship product, nLine, integrates high-speed cameras and proprietary AI software to provide 360° surface inspection and quality assurance, targeting manufacturing sectors including automotive, chemical, and medical industries. The company positions itself as an innovator with strong partnerships with major industry players like Helukabel, Nexans, and ABB. Technically, the website is built on modern frameworks such as Next.js and React, with content managed via Contentful CMS. The site is well-optimized for performance and mobile devices, featuring professional design and clear navigation. Tracking scripts indicate moderate user analytics, though privacy compliance could be improved with cookie consent mechanisms. From a security perspective, the site uses HTTPS with good SSL configuration but lacks visible security headers and published security policies or incident response information. The WHOIS data is unavailable or malformed, which reduces domain trustworthiness, but the presence of physical addresses, contact details, and partner logos supports legitimacy. Overall, the website demonstrates a solid business and technical foundation with room for improvement in privacy compliance and security best practices. Strategic enhancements in these areas would strengthen trust and regulatory adherence.
- scireum
oxomi.com
Technology · Germany
54Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
OXOMI is a B2B SaaS platform developed by scireum GmbH, specializing in product information management and digital catalog distribution primarily for industrial and wholesale sectors. The platform offers integration capabilities and support services, positioning itself as a niche provider in the technology industry within Germany. The website serves as a login portal for users and provides support and knowledge base resources. Technically, the site employs a modern technology stack including Font Awesome, Electron, MongoDB, Redis, and ElasticSearch, indicating a mature and scalable infrastructure. The presence of an Electron desktop app integration suggests multi-platform support. Security posture is adequate with HTTPS enforced and domain transfer protection, though improvements are recommended in DNSSEC and security headers. Privacy compliance is partial, with a privacy policy present but lacking cookie consent mechanisms and terms of service. Overall, the website is professional, trustworthy, and safe for general audiences.
- TTE Connectivity Corporation
onlinekonfigurator.biz
Technology · United States
70Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website onlinekonfigurator.biz serves as a specialized web configurator tool associated with TE Connectivity Corporation, a large US-based technology enterprise. The site provides a technical interface likely intended for business partners or internal users to configure products or services. The content is minimal and focused on functionality rather than marketing or customer engagement. The technical infrastructure relies on custom JavaScript and PHP backend handlers, with no visible use of common CMS or third-party analytics tools. The site lacks public-facing privacy, cookie, or terms of service policies, and no contact information is provided, which limits transparency and user trust. Security posture is moderate but could be improved by enabling DNSSEC, adding security headers, and publishing compliance policies. The domain registration is consistent with the corporate entity and shows no suspicious patterns, indicating legitimacy.
- MAS Labské Skály
maslabskeskaly.cz
Government · Czech Republic
52Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
MAS Labské Skály is a local action group focused on community and regional development within the Ústecký region of the Czech Republic. The organization supports local municipalities and communities through strategic planning, grant management, and community engagement initiatives. Their website reflects a well-structured and content-rich platform aimed at informing and supporting their target audience of local stakeholders and residents. Technically, the site employs modern web technologies including jQuery, Bootstrap, and Swiper.js, providing a responsive and accessible user experience. Security-wise, the site uses HTTPS and implements cookie consent mechanisms, but lacks visible advanced security headers, which could be improved. The absence of WHOIS data reduces domain trust, but the website's content and external references indicate a legitimate and active organization. Overall, the site is professional, privacy-conscious, and focused on public service.
- Australian Web Industry Association Inc.
webindustry.org.au
Technology · Australia
66Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
The Australian Web Industry Association (AWIA) is a well-established professional association founded in 2002, serving the Australian web industry. It provides membership services, industry resources, networking events, and recognition through the Australian Web Awards. The association targets web professionals, agencies, and consultants across Australia, positioning itself as a leading body in the digital technology sector. The website reflects a mature digital presence with modern technologies such as Next.js and React, and integrates third-party services like Google Tag Manager for analytics. The site is well-designed, mobile-optimized, and accessible, providing a positive user experience. Security posture is solid with HTTPS enabled and no exposed sensitive data, though improvements can be made by adding security headers and incident response information. Privacy compliance is partially met with a clear privacy policy but lacks a cookie consent mechanism. Overall, the domain registration and WHOIS data support the legitimacy and trustworthiness of the organization.
- Opklopper B.V.
judgeme.io
E-commerce · Netherlands
53Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Opklopper B.V. is a specialized Shopify bureau based in Amsterdam, Netherlands, providing comprehensive e-commerce solutions including webshop design, migration, and marketing services primarily targeting entrepreneurs and businesses in the Netherlands and Belgium. The company positions itself as a trusted Shopify partner with a strong portfolio and expertise in email marketing strategies to boost online sales. Technically, the website leverages modern frameworks such as Nuxt.js and Vue.js, integrates Google Tag Manager and Analytics for tracking, and demonstrates good performance and mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and published security policies, which are recommended for improvement. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected, potentially impacting GDPR adherence. Overall, the website is professional, trustworthy, and well-structured, supporting a positive business credibility profile.
- Communauté d'Agglomération Cannes Lérins
cannespaysdelerins.fr
Government · France
56Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Cannes Pays de Lérins is a regional government authority serving the Cannes Lérins agglomeration in France, focusing on transportation, public works, employment, and community development. The website reflects a medium-sized public sector entity with a clear mission to support and develop the local living environment. The site uses WordPress with the Divi theme and integrates common plugins for social media feeds and cookie compliance. The technical infrastructure is modern and hosted by ECRITEL, a reputable provider. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers and policies are missing. No critical vulnerabilities or blocking mechanisms were detected, and the site is accessible and safe for general audiences.
Other
56Medium
NIS2 25 · GDPR 80
NIS2 25 · GDPR 80
The website 'Tree of the Year' is dedicated to the European Tree of the Year competition, showcasing trees with interesting stories from various national rounds. The site targets a general audience interested in environmental and nature-related content. The technical infrastructure is modern, leveraging Nuxt.js and Vue.js frameworks, and includes Google Tag Manager for analytics. The site is mobile-optimized and presents content in a professional and consistent manner. Security posture is adequate with HTTPS enabled, but lacks security headers and detailed privacy or cookie policies. WHOIS data is incomplete, which impacts trustworthiness. Overall, the site is functional and informative but could improve in privacy compliance and security best practices.
- NEWTON University Group, s.r.o.
newton.university
Education · Czech Republic
67Medium
NIS2 17 · GDPR 65
NIS2 17 · GDPR 65
NEWTON University Group is a private higher education institution focused on preparing students for success in the business world through practical and innovative programs. The university operates campuses in Prague, Brno, Bratislava, and offers online courses in multiple languages including Czech, English, and Slovak. The institution is well-positioned in the education sector with recognized accreditations such as AACSB and partnerships with other educational entities like Vysoká škola Sting. The website demonstrates a mature digital presence with modern technologies, good content quality, and compliance with privacy regulations including GDPR. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and policies could be improved. Overall, the domain and website present a trustworthy and professional image suitable for prospective students and partners.