Medium-risk security reports
99,067 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,183001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
26,851–26,900 of 99,067
Ridera Slovakia s.r.o.ridera.sk
Energy · Slovakia
57Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Ridera Slovakia s.r.o. is a medium-sized energy sector company specializing in the import and sale of solid fuels such as coal and coke within Slovakia. The company is part of the larger Ridera group and has a well-established market position as one of the largest importers and sellers of solid fuels in the country. Their website reflects a professional business presence with clear descriptions of their services targeting both large industrial clients and domestic consumers. Technically, the website is built on WordPress using common plugins such as Yoast SEO and Contact Form 7, with Google Analytics integrated for visitor tracking. The site is served over HTTPS with a cookie consent mechanism compliant with GDPR, although no explicit privacy or security policies beyond cookie usage are published. Security posture is adequate but could be improved by adding security headers and incident response information. Overall, the website is trustworthy, well-branded, and provides a good user experience with moderate technical sophistication.
Ridera Developmentridera-development.cz
Real Estate · Czech Republic
60Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Ridera Development is a small real estate development company focused on modern housing projects in the Moravian-Silesian Region of the Czech Republic. Their website highlights current projects such as 'Bydlení Ema' and 'Rezidence Keltičkova', targeting potential home buyers and residents in the region. The business model centers on real estate development and providing housing documentation to clients. Technically, the website is built on WordPress using the Elementor page builder and Astra theme, indicating a modern and flexible digital infrastructure. The site is mobile-optimized and uses HTTPS, but lacks some security headers and privacy compliance features. Security posture is moderate with room for improvement in policy transparency and incident response readiness. Overall, the website is professional and relevant but limited in publicly available business and security information, and the absence of WHOIS data reduces domain trustworthiness. Strategic recommendations include adding privacy and cookie policies, contact information, and enhancing security headers to improve compliance and trust.
Ridera Stavebníridera-stavebni.cz
Real Estate · Czech Republic
62Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
Ridera Stavební is a well-established construction company based in the Czech Republic with over 60 years of experience. The company specializes in residential and civic construction projects, emphasizing quality and reliability. It holds multiple ISO certifications, underscoring its commitment to quality management, environmental standards, and occupational health and safety. The website reflects a mature digital presence built on WordPress with Elementor, featuring comprehensive content about the company, its projects, and certifications. The site is well-optimized for SEO and mobile devices, with clear navigation and professional design. Security posture is good with HTTPS and cookie consent mechanisms, though there is room for improvement in explicit security headers and incident response disclosures. Overall, the domain registration and WHOIS data align well with the company's claims, supporting legitimacy and trustworthiness.
Ridera Bohemia a.s.ridera.cz
Energy · Czech Republic
62Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
Ridera Bohemia a.s. is a well-established Czech company specializing in the supply of coal, coke, aggregates, and recycled materials, alongside construction services such as earthworks, demolition, and machinery rental. Operating since 1991 and part of the larger Ridera Group, the company serves both domestic households and industrial clients, positioning itself as a reliable regional supplier with a broad portfolio of services. The website reflects a professional digital presence built on WordPress with modern SEO and GDPR compliance tools, indicating a mature digital infrastructure. Security posture is solid with HTTPS and cookie consent mechanisms, though there is room for improvement in publishing explicit security policies and incident response contacts. Overall, the site is accessible, well-structured, and trustworthy, supporting the company's market position and business credibility.
TILL CONSULT a.s.duna.cz
Technology · Czech Republic
53Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
TILL CONSULT a.s. operates the website duna.cz, offering a suite of economic and accounting software products under the DUNA brand, targeting small to medium businesses, accounting firms, and specialized sectors such as medical offices and energy distributors. The company has a strong market presence with 28 years of experience and a comprehensive product portfolio including DUNA BUSINESS, TOP, SMART, TRADING, and related web extensions. The website is professionally designed, mobile-optimized, and provides clear navigation and rich content including testimonials and industry news. Technically, the site uses modern JavaScript libraries, Bootstrap framework, and integrates Google Tag Manager and Seznam retargeting for marketing purposes. Security posture is good with HTTPS enforced and cookie consent implemented, though explicit security policies and certifications are not published. Contact information is clearly provided with phone, email, and physical address. Overall, the site reflects a mature business with a solid digital presence but could improve transparency on privacy and security policies.
EPLANeplan.cz
Manufacturing · Czech Republic
62Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
EPLAN is a leading global provider of software and services focused on electrical engineering, automation, and mechatronics. The company operates a professional, multilingual website powered by TYPO3 CMS, reflecting a mature digital infrastructure with integrated marketing and analytics tools such as Google Tag Manager and HubSpot. The website demonstrates good design quality, mobile optimization, and clear navigation, targeting industrial and engineering professionals. Security posture is strong with HTTPS enforcement and security headers, although explicit security policies and vulnerability disclosures are not publicly available. Privacy compliance is supported by a cookie consent mechanism, but a formal privacy policy page was not detected in the provided content. Overall, the domain appears legitimate and professionally managed, though WHOIS data is privacy protected or unavailable, which is common for enterprises. Strategic recommendations include publishing detailed privacy and security policies, adding vulnerability disclosure mechanisms, and enhancing accessibility features to further strengthen trust and compliance.
Technology · Czech Republic
54Medium
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
The Regional Centre of Advanced Technologies and Materials (RCPTM) is a research institute based in the Czech Republic specializing in nanotechnology and advanced materials research. The website presents a professional and content-rich platform showcasing scientific publications, news, and events, targeting researchers, academic collaborators, and industry partners. The business model focuses on research, technology development, and providing analytic services and patented technologies. Technically, the website is built on WordPress with modern JavaScript libraries and is optimized for mobile devices, offering a fast and accessible user experience. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies are missing. The absence of WHOIS data for the domain is a notable concern for domain legitimacy verification, though the website content and affiliations appear credible. Overall, the site demonstrates a mature digital presence with room for improvement in security transparency and contact accessibility.
AERS s.r.o.aers.cz
Energy · Czech Republic
59Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
AERS s.r.o. is a Czech-based company specializing in the development and manufacture of energy storage technologies, focusing on battery systems for residential and industrial applications. Their offerings include home battery systems, industrial battery storage, and energy optimization services, targeting customers seeking energy self-sufficiency and efficiency. The company positions itself as a niche player in the energy sector within the Czech Republic, with a professional online presence and clear contact information. Technically, the website employs modern frontend technologies such as Bootstrap, jQuery, and FontAwesome, with integration of Google Analytics and Tag Manager for user tracking. The site is mobile-optimized and presents content in a structured and navigable manner. However, it lacks advanced SEO and accessibility features and does not implement visible security headers, which could be improved. From a security perspective, the site uses HTTPS but does not display security policies, privacy notices, or cookie consent mechanisms, which are important for GDPR compliance. The absence of WHOIS data reduces trustworthiness and transparency. No forms or sensitive data collection points were detected, minimizing immediate risk exposure. Overall, the security posture is moderate but could benefit from enhanced compliance and security best practices. The overall risk assessment indicates a legitimate small business with a professional web presence but with gaps in transparency and privacy compliance. Strategic recommendations include adding privacy and cookie policies, implementing security headers, improving accessibility, and clarifying domain registration details to enhance trust and compliance.
- Fenix Group
fenixgroup.cz
Energy · Czech Republic
59Medium
NIS2 2 · GDPR 85
NIS2 2 · GDPR 85
Fenix Group is a Czech-based manufacturer specializing in electric heating systems including radiant panels, heating cables, films, convectors, and control systems. The company targets residential, commercial, industrial, and agricultural sectors with a comprehensive product range and technical support services. Their market position is supported by certifications such as EUHA and a lifetime warranty program, indicating a strong commitment to quality and customer assurance. The website is professionally designed using Drupal 7, incorporating modern analytics and marketing tools with clear privacy compliance mechanisms including GDPR-aligned cookie consent. Security posture is solid with HTTPS enforced and bot management via Cloudflare, though security headers could be improved. WHOIS data is not publicly available, which slightly reduces transparency but does not detract from the overall legitimacy. The site is fully accessible with no blocking or WAF challenges detected.
Rittal Czech, s.r.o.rittal.cz
Energy · Czech Republic
72Medium
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Rittal Czech, s.r.o. operates a professional corporate website focused on modular system solutions for industrial and IT applications, including enclosures, power distribution, climate control, IT infrastructure, software, and automation. The company is positioned as a global leader with a strong modular system offering and is part of the Friedhelm Loh Group. The website is well-structured, content-rich, and targets industrial and IT professionals seeking advanced system solutions. Technically, the site uses modern web technologies such as Vue.js and JavaScript, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers are missing and no explicit incident response or security policy pages were found. WHOIS data is unavailable, which is unusual but likely due to privacy protection, and does not detract from the site's legitimacy given the strong corporate branding and parent company association. Overall, the site presents a trustworthy and professional digital presence.
- SSchmachtl CZ
schmachtl.cz
Manufacturing · Czech Republic
63Medium
NIS2 25 · GDPR 10
NIS2 25 · GDPR 10
Schmachtl CZ is a Czech-based company specializing in the distribution of components for industrial automation and electrical installations. They represent over 20 manufacturers and hold exclusive distributorship for the Wieland brand in the Czech market. Their offerings include advanced sensors, PLCs, electrical connectors, and installation components aimed at optimizing industrial processes and electrical infrastructure. The website is professionally designed, mobile optimized, and provides clear contact information, supporting their position as a reliable distributor in the manufacturing and energy sectors. Technically, the site leverages modern frameworks like Next.js and React, with integrated analytics from Google and Seznam.cz. Security posture is good with HTTPS enabled, but lacks some security headers and formal privacy/cookie policies, which are areas for improvement. WHOIS data is unavailable, which slightly impacts trust but the site content and contact details support legitimacy.
- BONEGA, spol. s r.o.
bonega.cz
Energy · Czech Republic
58Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
BONEGA, spol. s r.o. is a Czech company specializing in the development, manufacturing, and distribution of high-quality electrical installation materials and water meters. The company emphasizes innovation with patented products and serves a B2B audience primarily in the Czech Republic and Central Europe. The website reflects a medium-sized enterprise with a history dating back to 2000, consistent with the domain registration data. The business model focuses on technical product development and distribution with additional services such as public customs warehousing. Technically, the website uses basic HTML, CSS, and JavaScript with Google Analytics for tracking, hosted behind Cloudflare DNS. However, the site lacks modern CMS, mobile optimization, and accessibility features, indicating room for digital maturity improvement. Security posture is moderate; while Cloudflare DNS is used, no HTTPS enforcement or security headers are visible, and no privacy or cookie policies are present, which impacts compliance and trust. Overall, the site is functional but would benefit from enhanced security, privacy compliance, and technical modernization to improve user experience and regulatory adherence.
- AXIMA, spol. s r. o.
axima-obchod.cz
Manufacturing · Czech Republic
68Medium
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
AXIMA, spol. s r. o. is a Czech-based medium-sized company specializing in wholesale distribution of electrotechnical materials and industrial automation components. With over 24 years of market presence, it serves primarily B2B customers in the Czech Republic and Slovakia, offering a wide range of products including power supplies, connectors, sensors, and safety equipment. The website reflects a professional and well-structured digital presence with clear product categorization and manufacturer partnerships. Technically, the site uses modern JavaScript libraries and tracking tools such as Google Analytics and Google Tag Manager, and is mobile optimized with good SEO practices. Security posture is adequate with HTTPS enforced but lacks some recommended security headers like Content-Security-Policy and X-Frame-Options. Privacy and cookie policies are not explicitly found, indicating room for compliance improvement. WHOIS data is unavailable, limiting domain trust verification, but the website content and contact information suggest a legitimate business. Overall, the site scores well in content quality and business credibility but should enhance privacy compliance and security headers to improve trust and compliance.
- MMobile Industrial Robots
mobile-industrial-robots.com
Transportation · Denmark
70Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Mobile Industrial Robots (MiR) is a Denmark-based company specializing in autonomous mobile robots designed to automate internal transportation for businesses. Founded in 2012 and now part of Teradyne Robotics, MiR offers versatile robotic solutions complemented by service portals, training academies, and community engagement platforms. The company targets industrial and manufacturing sectors seeking automation to improve operational efficiency. The website reflects a mature digital presence with professional design and clear navigation, supporting a global B2B audience. Technically, the site is built on modern frameworks such as Nuxt.js and Vue.js, leveraging Storyblok CMS for content management. Performance and mobile optimization are good, though accessibility features are basic. Security posture is solid with HTTPS enforced and domain transfer protections, but lacks advanced security headers and explicit incident response policies. Privacy compliance is adequate with privacy and cookie policies present, though no active consent mechanism is detected. Overall, the domain registration and business information are consistent and trustworthy, supporting a high legitimacy score.
- Robelshoes.pl
robelshoes.pl
Retail · Poland
58Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Robelshoes.pl is a professional e-commerce retailer specializing in branded women's and men's footwear and accessories, targeting primarily the Polish market and neighboring European countries. The website offers a broad selection of products with key services including free delivery for orders over 249 PLN and a 30-day return policy, positioning itself as a customer-friendly online shoe store. The presence of multiple regional partner domains indicates a broader regional footprint in Central and Eastern Europe. Technically, the website employs modern web technologies such as Google reCAPTCHA for bot protection, Sentry for error monitoring, and Google Tag Manager for marketing and analytics. The site is built on the CREATIVE shop CMS platform and uses HTTPS with a good SSL configuration, ensuring secure communications. However, some security best practices like security headers and cookie consent mechanisms are missing or not detected, which could be improved for better compliance and protection. The WHOIS data for the domain is not publicly available, which is common for .pl domains managed by NASK, but the website's professional design, structured data, and consistent branding support its legitimacy. Overall, the site presents a solid security posture with room for enhancement in privacy compliance and security headers. Strategic recommendations include implementing cookie consent banners, adding security headers, publishing a security policy, and maintaining regular audits of third-party scripts to strengthen security and compliance.
- Robelshoes.ro
robelshoes.ro
Retail · Romania
50Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Robelshoes.ro is an e-commerce retailer specializing in footwear and accessories for women, men, and children, offering a wide range of branded products. The website targets consumers primarily in Romania and neighboring European countries, providing a 30-day return policy and multiple localized country sites. The business model is focused on online retail with a multi-brand catalog, positioning itself as a regional player in the footwear market. Technically, the site uses a CREATIVE shop CMS platform with integrations such as Google Tag Manager, Facebook Pixel, and Sentry for error tracking, indicating a moderate level of digital maturity. Security measures include HTTPS enforcement, CSRF tokens, and Google reCAPTCHA on forms, though there is room for improvement in security headers and published policies. Overall, the site is professional and functional with good content quality and moderate trustworthiness. The domain WHOIS data is privacy protected by ROTLD, which is common for Romanian domains and does not raise immediate concerns. Strategic recommendations include enhancing privacy compliance with cookie consent, publishing security and incident response policies, and improving mobile optimization.
- Robelshoes.at
robelshoes.at
Retail · Austria
62Medium
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
Robelshoes.at is an Austrian e-commerce retailer specializing in branded footwear and accessories for women, men, and children. The website offers a broad selection of products with free shipping over a certain threshold and a 30-day return policy, positioning itself as a regional player with multiple country-specific domains. The site is built on the CREATIVE shop CMS platform and integrates modern technologies such as Google reCAPTCHA, Facebook Pixel, Google Tag Manager, and Sentry for error tracking, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced and anti-bot measures in place, though some security headers are missing and privacy compliance could be improved. The absence of WHOIS data due to privacy protection slightly reduces transparency but is common for e-commerce businesses. Overall, the site is professional, secure, and user-friendly, targeting consumers in Austria and neighboring countries.
- Robelshoes.eu
robelshoes.eu
Retail · Slovakia
62Medium
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
Robelshoes.eu is an established European e-commerce retailer specializing in branded footwear and accessories. The website targets a broad audience across multiple European countries, offering a wide selection of products from well-known brands. The business model is focused on online retail with multi-language support and a clear product categorization structure. Technically, the site is built on the CREATIVE shop CMS platform, utilizing modern web technologies including HTTPS, Google reCAPTCHA for bot protection, and Sentry for error monitoring. While the site demonstrates good design and navigation, mobile optimization is basic and could be improved. Security posture is solid with HTTPS and some security best practices, but lacks explicit security headers and cookie consent mechanisms. WHOIS data is privacy protected, which is common for e-commerce but limits transparency. Overall, the site is professional and trustworthy with moderate risk.
- Robelshoes.hu
robelshoes.hu
E-commerce · Hungary
53Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Robelshoes.hu is a Hungarian e-commerce retailer specializing in branded footwear and accessories, offering a wide range of quality shoes from world-renowned brands. The website targets general consumers seeking convenient online shopping with home delivery. The platform is part of a multi-country network with sister sites serving neighboring markets. Technically, the site uses a proprietary CMS (CREATIVE shop), integrates modern tracking and analytics tools such as Facebook Pixel, Google Tag Manager, and Sentry for error monitoring. Security measures include HTTPS, CSRF tokens, and Google reCAPTCHA, indicating a mature security posture. However, explicit security policies and incident response contacts are not published, which could be improved. Overall, the website is professional, trustworthy, and well-optimized for SEO and user experience, with moderate performance and good mobile optimization.
- Rainer Winter Stiftung
rainer-winter-stiftung.de
Non-profit · Germany
73Medium
NIS2 17 · GDPR 28
NIS2 17 · GDPR 28
The Rainer Winter Stiftung is a well-established non-profit foundation based in Fürth, Germany, founded in 1980. It focuses on supporting disadvantaged, sick, and socially weak children and youth primarily in the Nürnberg metropolitan area and internationally. The foundation operates with a transparent, unbureaucratic model, ensuring 100% of donations go directly to the cause, supported strongly by the uvex group and its partners. The website reflects a professional and consistent brand image, with clear messaging and good content quality. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies including StencilJS and Amazon Cloudfront CDN for performance. It employs Usercentrics for consent management and Google Tag Manager for analytics, indicating a mature digital infrastructure. The site is mobile-optimized, accessible, and SEO-friendly. From a security perspective, the site uses HTTPS with strong SSL configuration and implements consent mechanisms for privacy compliance. No critical vulnerabilities or exposed sensitive data were detected. However, explicit security headers could be verified and incident response policies published to enhance security posture. Overall, the site presents low risk with a strong trust profile, good privacy compliance, and a clear business purpose. Strategic recommendations include enhancing security header implementation, publishing incident response and vulnerability disclosure policies, and maintaining regular security audits.
- uvex laservision
uvex-laservision.de
Manufacturing · Germany
66Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
uvex laservision is a German-based manufacturer specializing in the development, production, and distribution of laser protection products, serving industrial and medical sectors. The company positions itself as a global leader in laser safety equipment, offering a range of products accessible via an online shop. The website is professionally designed, primarily in German with English language support, and targets professionals requiring laser safety solutions. Technically, the site leverages modern web technologies including Shopware CMS, Amazon Cloudfront CDN, Google Tag Manager, and Usercentrics for cookie consent, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place; however, the absence of explicit security headers and published security policies suggests room for improvement. WHOIS data confirms domain legitimacy with consistent registration and authoritative nameservers. Overall, the site is trustworthy and professionally maintained but could enhance transparency by publishing privacy policies and security disclosures.
- Heckel
heckel-securite.fr
Manufacturing · France
62Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Heckel is a French manufacturer specializing in safety footwear, offering a broad range of products from lightweight safety sneakers to shoes designed for extreme environments. The company is part of the uvex group, a well-established entity in the safety and sports equipment sectors. The website demonstrates a professional digital presence with a modern TYPO3 CMS infrastructure, CDN hosting, and integration of analytics and marketing tools such as Google Tag Manager and Facebook Pixel. Privacy and cookie compliance are well implemented, reflecting adherence to GDPR standards. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. The absence of WHOIS data limits full trust assessment but the overall website professionalism and branding consistency support legitimacy.
- Filtral
filtral.com
Retail · Germany
71Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
Filtral is a specialized eyewear brand offering high-quality sunglasses and reading glasses, positioned within the retail sector and associated with the established uvex group. The website demonstrates a strong commitment to sustainability and quality, supported by certifications such as the EcoVadis Sustainability Rating. Technically, the site is built on TYPO3 CMS, leveraging modern web technologies and CDN hosting for fast performance and excellent mobile optimization. Security posture is solid with HTTPS enforcement and security headers, though explicit security policies and incident response information are absent. Privacy compliance is well addressed with GDPR-aligned policies and consent management. However, the lack of WHOIS registration data and absence of direct contact emails or phone numbers slightly reduce business credibility. Overall, the site is professional, trustworthy, and well-maintained, suitable for its target audience.
ALPINA Sportsalpina-sports.com
Retail · Germany
70Medium
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
ALPINA Sports operates an official e-commerce webshop specializing in high-quality sports safety equipment such as bicycle helmets, ski helmets, and sports eyewear. The website targets sports enthusiasts primarily in Germany and offers direct sales with customer support and product guidance. The digital infrastructure is built on Magento Commerce with modern JavaScript frameworks and includes integrations for analytics, consent management, and search optimization. Security posture is strong with HTTPS, security headers, and reCAPTCHA implementations, although the absence of a public security policy and vulnerability disclosure reduces transparency. The missing WHOIS registration data is a notable anomaly that impacts domain trustworthiness. Overall, the website is professional, secure, and compliant with GDPR, serving a medium-sized retail business effectively.
uvex sportsuvex-sports.com
Retail · Germany
68Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
uvex sports is a well-established brand specializing in the manufacturing and retail of sports protective equipment such as helmets and goggles for wintersports, biking, and equestrian activities. The company targets both professional athletes and amateurs, offering technologically advanced products designed for safety and performance. The website reflects a consistent brand image aligned with the parent company uvex group, indicating a strong market position in the sports safety equipment sector. Technically, the site is built on TYPO3 CMS with integrations for consent management and Google services, demonstrating a modern digital infrastructure with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and use of reCAPTCHA, though there is room for improvement in publishing explicit security policies and headers. Overall, the site is professional, trustworthy, and compliant with GDPR, but the lack of WHOIS data slightly reduces domain trustworthiness. Strategic recommendations include enhancing security transparency and adding incident response contacts to improve user trust and compliance.
Formulaytgatedcontent.com
Technology
71Medium
NIS2 2 · GDPR 95
NIS2 2 · GDPR 95
Formulayt is an enterprise-focused SaaS platform specializing in scalable web form management and compliance for marketing operations teams. The company offers a solution that enables rapid deployment, governance, and updating of web forms integrated with major marketing automation platforms. The website presents a professional and polished digital presence with strong branding and customer trust signals, including testimonials and logos of reputable clients. Technically, the site is built on WordPress with modern performance and analytics tools, hosted with Cloudflare DNS and registrar services. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and policies could be improved. Privacy compliance is partially addressed via a detailed cookie consent banner, but no explicit privacy policy or terms of service pages were found in the provided content. Overall, the domain registration is consistent with the business timeline and shows no suspicious patterns.
Other
67Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website hwy52digital.ca is currently inaccessible due to a Cloudflare security block page that prevents viewing any actual site content. This blockage indicates the presence of a Web Application Firewall (WAF) protecting the site from potential online attacks, but it also severely limits the ability to analyze the business, technical infrastructure, and security posture comprehensively. The domain is registered with Go Daddy Domains Canada, Inc. since 2019 and uses Cloudflare nameservers, but DNSSEC is not enabled. No privacy, cookie, or terms of service policies are published, and no contact information or business details are available on the blocked page. The lack of accessible content results in a low AI score and prevents meaningful assessment of the website's compliance, trustworthiness, or technical maturity.
- RRequest Rejected
culture.be
Other · Belgium
61Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
The website culture.be is currently inaccessible, presenting only a minimal 'Request Rejected' page indicating that access is blocked by a security mechanism, likely a Web Application Firewall (WAF). The domain is registered with BELNET, a Belgian registrar, since 2001, suggesting a long-standing registration and legitimacy of the domain. However, due to the lack of accessible content, no meaningful business description, contact information, or policies can be extracted or analyzed. The technical infrastructure and digital maturity cannot be assessed beyond the registrar information. Security posture evaluation is limited by the blocked content, with no visible security headers or HTTPS status. Overall, the site presents a high risk for analysis due to inaccessibility, and no trust or compliance indicators can be confirmed.
- Combell
combell.nl
Technology · Netherlands
75Medium
NIS2 10 · GDPR 80
NIS2 10 · GDPR 80
Combell is a well-established hosting specialist operating primarily in the Netherlands, offering a comprehensive suite of services including professional webhosting, cloud hosting, dedicated servers, domain registration, SSL certificates, email hosting, and website building tools. The company targets a broad audience ranging from starters and small to medium enterprises (KMO) to large enterprises, positioning itself as a premium hosting provider with a strong emphasis on security and customer support. The website reflects a mature digital presence with consistent branding and high-quality content, supporting its market position effectively. Technically, the website leverages modern web technologies such as Font Awesome, Google Fonts, Google Analytics, Google Tag Manager, Visual Website Optimizer, Hotjar, and Iubenda for cookie compliance. The site is hosted by Combell itself, indicating control over infrastructure. Performance is moderate with excellent mobile optimization and good accessibility and SEO practices. The presence of security headers, HTTPS enforcement, and CSRF tokens indicates a strong security posture, although there is room for improvement in publishing explicit security policies and incident response information. Security-wise, the site demonstrates good practices including HTTPS, security headers, and no visible vulnerabilities or exposed sensitive data. However, the absence of a public security policy or vulnerability disclosure program suggests an opportunity to enhance transparency and incident readiness. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms, aligning with GDPR requirements. Overall, Combell presents a low-risk profile with a professional and trustworthy online presence. Strategic recommendations include publishing dedicated security and incident response policies, establishing a vulnerability disclosure program, and continuing to enhance privacy and security transparency to maintain and strengthen customer trust.
ci Net Hostcinethost.com
Technology · United States
50Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
ci Net Host is a small US-based company specializing in premium web hosting, web design, graphic design, business printing, and digital services. The company targets small businesses and individuals seeking personalized hosting and design solutions. Their business model focuses on providing a range of digital services with an emphasis on customer service and local support. The website reflects a niche market position with clear service offerings and a professional presentation. Technically, the website is built on WordPress with common plugins such as Yoast SEO and MonsterInsights, although the latter is not configured. Hosting is provided by NameHero, as indicated by the nameservers. The site is mobile optimized and has good SEO practices but lacks some accessibility features and security headers. Performance is moderate with room for improvement. From a security perspective, the site uses HTTPS and has domain transfer protection enabled. However, DNSSEC is not enabled, and no security headers are present. The absence of a cookie consent mechanism and unconfigured analytics plugin indicate gaps in privacy compliance. No incident response or security policy information is available on the site. Overall, the website is functional and professional but could improve its security posture and privacy compliance to enhance trust and regulatory adherence. The domain registration data supports legitimacy with consistent business information and appropriate domain age.
- LLaughing Dog Brewing
laughingdogbrewing.com
Hospitality · United States
61Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Laughing Dog Brewing is a small craft brewery based in Northern Idaho, known for its award-winning beers and community-focused taproom experience. The company emphasizes quality and variety in its beer offerings, targeting craft beer enthusiasts and local patrons. The website is hosted on WordPress using the Divi theme and integrates common marketing and analytics tools such as Google Analytics and Facebook SDK. While the site is well-designed and provides relevant content, it lacks critical privacy and cookie policies, as well as explicit contact information, which impacts its privacy compliance and user trust. Security posture is moderate with HTTPS enabled and Cloudflare DNS usage, but missing DNSSEC and security headers reduce overall security maturity. The domain registration data is consistent and trustworthy, supporting the legitimacy of the business. Overall, the website is functional and professional but would benefit from enhanced privacy, security, and contact transparency.
- JJohnson Brothers Mountain State Beverage
mountainstatebeverage.com
Retail · United States
60Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Johnson Brothers Mountain State Beverage is a leading distributor and broker of wine, craft beer, and spirits in West Virginia, serving all 55 counties with a large portfolio of products. The company has a strong market position and a medium-sized team, supported by a professionally designed website built on WordPress with modern technologies such as Divi theme and Revolution Slider. The website demonstrates good SEO and mobile optimization but lacks critical privacy and cookie policies, which impacts compliance. Security posture is moderate with HTTPS enabled but missing DNSSEC and security headers. Contact information is available primarily via a contact form and social media links, with no direct emails or phone numbers published. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the business.
Deliveroo Experience teamdeliveroo.design
—
61Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Deliveroodeliveroo.engineering
Technology
68Medium
NIS2 25 · GDPR 65
NIS2 25 · GDPR 65
Deliveroo.engineering is the official technology blog of Deliveroo, a large and well-known food delivery company. The site serves as a platform for Deliveroo's engineering teams to share insights, technical stories, and innovations, targeting technology professionals and enthusiasts. The content is professionally presented with consistent branding and regular updates, reflecting a mature digital presence. Technically, the site is built using Jekyll, a static site generator, and leverages modern web technologies including asynchronous script loading and cookie consent mechanisms. While the site uses HTTPS and includes a cookie consent banner, it lacks visible security headers and explicit privacy or terms of service pages, which are areas for improvement. The WHOIS data is privacy protected, which is typical for corporate domains, and no suspicious patterns were detected. Overall, the site demonstrates a good security posture and business credibility, though enhancements in privacy compliance and security headers would strengthen its position.
Deliveroodeliveroo.tw
Transportation · Taiwan
73Medium
NIS2 25 · GDPR 50
NIS2 25 · GDPR 50
Deliveroo is a well-established online food delivery platform connecting customers with local restaurants and takeaways. The website serves multiple international markets, including Taiwan, although it currently announces cessation of operations in Taiwan. The platform offers a comprehensive service including online ordering, delivery, and subscription plans. The website is built on modern web technologies such as React and Next.js, hosted via Cloudflare, and integrates payment services like Stripe. It demonstrates good digital maturity with fast performance, mobile optimization, and SEO best practices. Security posture is strong with HTTPS, multiple security headers, and secure form handling, though explicit security policies are not prominently found. Privacy compliance is evident with GDPR-aligned privacy and cookie policies and consent mechanisms. Overall, the website reflects a professional and trustworthy brand presence with consistent branding and clear business information.
Deliveroodeliveroo.ae
E-commerce · United Arab Emirates
74Medium
NIS2 25 · GDPR 70
NIS2 25 · GDPR 70
Deliveroo.ae is a leading online food and grocery delivery platform operating in the United Arab Emirates. It connects consumers with local restaurants and shops, offering convenient takeaway and grocery delivery services through a modern web platform and mobile apps. The company maintains a strong market position with a comprehensive service offering including restaurant partnerships, rider recruitment, corporate meal solutions, and gift cards. The website is professionally designed, mobile-optimized, and provides a seamless user experience with clear navigation and rich content. Technically, the site leverages modern frameworks such as Next.js and React, supported by Cloudflare for hosting and CDN, and integrates third-party services like Google Tag Manager, OneTrust for cookie consent, and Stripe for payments. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although explicit security policy and incident response information are not publicly available. Privacy compliance is well addressed with comprehensive privacy and cookie policies and GDPR adherence. Overall, the website demonstrates a mature digital presence with high trustworthiness and professional standards.
Deliveroodeliveroo.hk
Transportation · Hong Kong
65Medium
NIS2 25 · GDPR 80
NIS2 25 · GDPR 80
Deliveroo is a global online food delivery platform that previously operated in the Hong Kong market but has now exited, as clearly stated on the website. The platform connects customers with local restaurants and takeaways, offering convenient food delivery services. The website maintains consistent branding and provides links to other international Deliveroo domains, reflecting its broad market presence. The Hong Kong site serves primarily as an informational landing page to communicate the market exit and thank customers and partners. Technically, the website is built using modern web technologies including React and Next.js, hosted behind Cloudflare DNS and CDN services, and incorporates cookie consent mechanisms via OneTrust. Security posture is good with HTTPS enforced and some security-related scripts in use, though explicit security headers and policies are not publicly documented. Privacy compliance is partial, with a cookie consent banner present but no visible privacy policy or terms of service on the landing page. Contact information such as emails or phone numbers is not directly available on the page. Overall, the site is professional and trustworthy but could improve transparency around privacy and security policies.
Deliveroodeliveroo.de
Transportation · Germany
68Medium
NIS2 25 · GDPR 25
NIS2 25 · GDPR 25
Deliveroo is a large international food delivery platform connecting consumers with local restaurants and takeaways. The company operates in multiple countries, including Germany, although the website indicates that Deliveroo has ceased operations in Germany for now. The platform offers online ordering, delivery services, and subscription plans such as Deliveroo Plus. The website is professionally designed, mobile-optimized, and uses modern web technologies including React and Next.js. Hosting and CDN services are provided by Cloudflare and roocdn.com. Security posture is strong with HTTPS enforced and multiple security headers implemented. Privacy policies and cookie consent mechanisms are present and GDPR compliant. However, direct contact information such as phone numbers is not prominently displayed on the site. Overall, the site reflects a mature, professional e-commerce business with a strong technical foundation and good privacy and security practices.
Postmates Inc.postmates.com
Transportation · United States
73Medium
NIS2 25 · GDPR 100
NIS2 25 · GDPR 100
Postmates Inc. operates a leading on-demand delivery platform specializing in food, groceries, alcohol, and other goods, serving millions of customers primarily in the United States. As a subsidiary of Uber Technologies Inc., Postmates benefits from a robust technical infrastructure and integration within a global transportation and delivery ecosystem. The website demonstrates a mature digital presence with modern technologies such as React and extensive use of JavaScript frameworks, optimized for both desktop and mobile platforms. Security posture is strong with HTTPS enforcement, use of Google reCAPTCHA, and secure script loading practices, although DNSSEC is not enabled and explicit security policies are not publicly disclosed. Privacy and cookie policies are comprehensive and GDPR compliant, reflecting a commitment to user data protection. Overall, the site is professional, trustworthy, and well-positioned in the competitive food delivery market.
Technology · France
73Medium
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
api.video is a technology company specializing in providing a comprehensive video API platform that enables businesses and developers to host, manage, encode, and deliver on-demand and live-stream videos efficiently. The company targets developers, digital agencies, and enterprises seeking to integrate high-quality video content into their websites, software, or applications. With a strong market presence evidenced by thousands of users and notable clients, api.video offers a robust set of services including AI-powered transcription and summarization, video analytics, and a global delivery infrastructure. The technical infrastructure is modern and mature, leveraging Next.js for frontend, AWS for hosting assets, and integrating multiple analytics and marketing tools such as HubSpot, Google Tag Manager, and Microsoft Clarity. The website is well-optimized for performance, mobile responsiveness, and SEO, reflecting a high level of digital maturity. Security best practices are observed with HTTPS enforcement and appropriate security headers, although explicit security policies and incident response contacts are not publicly detailed. Overall, the security posture is strong with no evident vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies, including GDPR considerations. The domain WHOIS data is limited due to TLD restrictions and privacy protection but does not raise concerns given the professional website content and external trust signals. The risk assessment indicates a low risk profile with recommendations to enhance transparency by publishing dedicated security and incident response information. Strategic improvements in security communication and vulnerability disclosure would further strengthen trust and compliance.
com&on Medienagenturcom-online.com
Media · Germany
59Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
com&on Medienagentur is a professional media agency based in Hanover, Germany, specializing in digital solutions encompassing strategy, design, and technology. The company targets businesses seeking to enrich their digital presence through innovative media experiences. The website reflects a well-established regional agency with a medium-sized business profile and a consistent brand image. Technically, the site is built on WordPress with modern UIkit frameworks and includes cookie consent mechanisms, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though there is room for improvement in security headers and explicit security policies. The absence of WHOIS data for the domain is a notable anomaly that warrants further verification but does not detract from the professional presentation and trustworthiness of the website content. Overall, the site demonstrates a high level of professionalism, good privacy compliance, and effective user experience.
Legalporno4k.com - Download Exclusive Porn - Flashbitlegalporn4k.com
Media
53Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
Legalporno4k.com is an adult entertainment website specializing in providing free downloads and online viewing of pornographic content across multiple genres. The site operates using the DataLife Engine CMS and is hosted with DNS services from Cloudflare, registered via NameCheap since 2018. The platform targets adult users seeking explicit video content, with daily updates and a large categorized library. Technically, the site uses common web technologies such as jQuery, Bootstrap, and Font Awesome, but lacks advanced security headers and privacy compliance mechanisms. There is no visible privacy or cookie policy, and contact is limited to a feedback form, which reduces trust and compliance with data protection regulations. Security posture is moderate with some domain protection but missing DNSSEC and security headers. Overall, the site functions as a niche adult content aggregator with basic technical implementation and limited privacy and security maturity.
- Repromeda
repromeda.cz
Healthcare · Czech Republic
50Medium
NIS2 22 · GDPR 25
NIS2 22 · GDPR 25
Repromeda is a healthcare provider specializing in assisted reproduction and infertility treatment, serving primarily the Czech Republic and surrounding regions through multiple localized websites. The company has a strong market presence, having helped bring over 6000 children into the world, indicating a well-established position in the fertility treatment sector. Their website is professionally designed using WordPress and Elementor, with multilingual support and SEO optimization, targeting individuals and couples seeking fertility assistance. Technically, the website employs modern web technologies including Google Tag Manager, Google reCAPTCHA for form security, and Leaflet.js for map functionalities. The site is mobile-optimized and performs moderately well, though there is room for improvement in accessibility and security headers. The absence of WHOIS data reduces transparency and trustworthiness, but the website's content and social media presence support its legitimacy. Security posture is generally good with HTTPS enforced and anti-bot measures in place, but the lack of explicit security headers and absence of published security or incident response policies are areas for enhancement. Privacy compliance is basic, with a cookie consent mechanism present but no clear privacy policy or terms of service detected. Overall, Repromeda presents a credible and professional online presence in the healthcare sector, with recommendations to improve transparency, security headers, and privacy documentation to strengthen trust and compliance.
Moravský patriotmoravskypatriot.eu
Retail · Czech Republic
58Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Moravský patriot is a Czech Republic based small e-commerce business specializing in the sale of Moravian patriotic merchandise including flags, books, stickers, badges, clothing, and accessories. The website is built on the eshop-rychle.cz platform and uses legacy jQuery libraries along with Matomo analytics configured to require user consent. The site is accessible without any WAF or blocking mechanisms and presents a well-structured product catalog targeting regional patriotic consumers. However, the website lacks explicit privacy and cookie policies, contact information, and security headers which are important for compliance and trust. The domain WHOIS data is privacy protected as per EURid policy for .eu domains, which is typical and justified for this business type.
Člověk v tísni, o.p.s.skutecnapomoc.cz
Non-profit · Czech Republic
62Medium
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
The website 'Skutečná pomoc Člověka v tísni' represents a Czech non-profit organization named Člověk v tísni, o.p.s., focused on humanitarian aid and encouraging regular donations. The site targets a general Czech audience and promotes ongoing charitable contributions. The business model is donation-based, positioning itself as an established medium-sized non-profit entity in the Czech Republic. The website content is professionally presented with consistent branding and good quality content relevant to its mission.
Člověk v tísnidoucujte.cz
Non-profit · Czech Republic
59Medium
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
Doučujte.cz is a Czech non-profit educational platform affiliated with the reputable organization Člověk v tísni. The website focuses on supporting children in need through tutoring and provides methodological support to volunteers, non-profit workers, students, parents, and teachers. It offers curated materials, tips, and recommendations to facilitate and enhance tutoring efforts. The platform targets a broad audience involved in educational support and operates primarily in the Czech Republic. Technically, the website is built on WordPress CMS, utilizing popular plugins such as Yoast SEO for optimization, Cookiebot for cookie consent management, and Google Tag Manager for analytics. The site is well-structured with good mobile optimization and moderate performance. It employs HTTPS with a strong SSL configuration and includes cookie consent mechanisms, reflecting a reasonable level of digital maturity. From a security perspective, the site enforces HTTPS and uses cookie consent to comply with privacy regulations. However, some advanced security headers like Content-Security-Policy are not confirmed, and no security.txt or vulnerability disclosure pages are present. No exposed sensitive data or vulnerabilities were detected in the HTML content. The absence of explicit privacy policy and terms of service pages slightly impacts privacy compliance. Overall, Doučujte.cz presents a trustworthy and professional online presence for a non-profit educational initiative. The lack of WHOIS data is consistent with privacy protection practices common among non-profits. Strategic recommendations include publishing clear privacy and terms policies, enhancing security headers, and providing explicit contact information for security and privacy concerns to strengthen trust and compliance.
JSNŠjsns.cz
Education · Czech Republic
63Medium
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
The website www.jsns.cz represents an educational initiative named Jeden svět na školách (JSNS), focused on providing free and legal documentary film screenings for schools in the Czech Republic. The platform supports educators by offering activities and projects to enrich teaching. The site targets schools and educators, positioning itself as a niche non-profit educational content provider. Technically, the website employs modern web technologies including Google Tag Manager, Cookiebot for consent management, Leaflet.js for mapping, and standard web libraries such as Font Awesome and Select2. The site is mobile optimized and demonstrates good SEO and accessibility basics. Security-wise, HTTPS is enforced with appropriate security headers, and no vulnerabilities or exposed sensitive data were detected. Cookie consent mechanisms are implemented, indicating GDPR awareness, although no explicit privacy policy or terms of service pages were found in the provided content. WHOIS data is unavailable, which reduces transparency and trustworthiness from a domain registration perspective. Overall, the website is professionally designed, secure, and serves a clear educational purpose, but would benefit from enhanced privacy disclosures and contact information to improve compliance and trust.
Pimcore GmbHpimcore.com
Technology · Austria
75Medium
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
Pimcore GmbH is an established Austrian technology company founded in 2009, specializing in enterprise data and experience management platforms. Their offerings include PIM, MDM, DAM, DXP/CMS, CDP, and digital commerce solutions targeting medium to large enterprises seeking rapid digitization and efficient data management. The company maintains a strong market position with global clients and partners, supported by a professional and content-rich website. Technically, the site leverages modern technologies such as HubSpot CMS, Cloudflare DNS, and integrates Google Analytics 4 and Cookiebot for analytics and privacy compliance. The website is fast, mobile-optimized, and SEO-friendly, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforced, security headers present, and no exposed sensitive data, though DNSSEC is not enabled and no explicit security policy or incident response contacts are published. Overall, Pimcore demonstrates high business credibility and trustworthiness with consistent WHOIS data and transparent policies.
Medefmedef.com
Other · France
64Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
Medef is the premier network of entrepreneurs in France, focusing on job creation and sustainable growth. The organization advocates for entrepreneurship and defends free enterprise, positioning itself as a leading business federation in the French market. The website reflects a professional and consistent brand image, targeting entrepreneurs and business stakeholders in France. Technically, the site employs modern web technologies including Google Analytics, Facebook Pixel, LinkedIn Insight Tag, and Weglot for multilingual support. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security posture is strong with HTTPS enforced and use of reCAPTCHA, though explicit security headers and policies are absent. Privacy compliance is well addressed with visible cookie consent and GDPR-aligned privacy policies. However, the absence of WHOIS registration data raises some concerns about domain legitimacy, though the website content and branding strongly support its authenticity. Overall, the site is trustworthy and professional but would benefit from enhanced transparency in domain registration and security policies.
Comité Paralympique et Sportif Françaisfrance-paralympique.fr
Non-profit · France
50Medium
NIS2 17 · GDPR 33
NIS2 17 · GDPR 33
The Comité Paralympique et Sportif Français (CPSF) is a well-established non-profit organization dedicated to coordinating and representing parasport federations in France. Founded in 1992, it serves as the official French Paralympic Committee recognized by the International Paralympic Committee. The website reflects a mature digital presence with comprehensive content focused on parasports development, events, and resources for persons with disabilities and related stakeholders. The organization maintains a strong market position as the authoritative body for parasports in France, supported by numerous official partners and federations. Technically, the website is built on WordPress with modern SEO and accessibility features, including Yoast SEO Premium and cookie consent management via tarteaucitron. The site is mobile-optimized and performs moderately well, with a clean and professional design. Hosting is provided by IONOS SE, a reputable registrar and hosting provider. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers could be improved. No critical vulnerabilities or suspicious activities were detected. Privacy policies and cookie consent mechanisms are in place and GDPR compliant. Contact information is primarily via contact forms and social media channels, with no direct emails or phone numbers publicly listed. The site does not publish explicit security or incident response policies, nor vulnerability disclosure information. Overall, the CPSF website demonstrates a strong, trustworthy, and professional online presence suitable for its mission and audience, with recommendations to enhance security headers and formalize incident response documentation for further maturity.