Medium-risk security reports
99,067 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,184001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
28,351–28,400 of 99,067
Healthcare · Austria
64Medium
NIS2 17 · GDPR 28
NIS2 17 · GDPR 28
Multiple Sklerose Gesellschaft Tirol (MSGT) is a regional non-profit organization based in Tirol, Austria, dedicated to supporting people affected by Multiple Sclerosis. The website provides comprehensive information, educational resources, exercises, videos, and event announcements tailored to MS patients and their families. The organization positions itself as a trusted local resource with a focus on advocacy, therapy information, and community support. The site is well-branded and consistent with its mission, targeting a healthcare audience in the Tirol region. Technically, the website is built on Joomla CMS using the Astroid template framework, incorporating modern libraries such as jQuery, FontAwesome, and Lenis for smooth scrolling. The site is mobile-optimized with good SEO practices including structured data for breadcrumbs. Performance is moderate, and accessibility is basic but functional. The site uses HTTPS with no detected security vulnerabilities in the visible content. Security posture is solid with HTTPS and cookie consent mechanisms implemented, but lacks advanced security headers and explicit security or incident response policies. No vulnerability disclosure or security.txt files were found. Privacy compliance is good, with a clear privacy policy and cookie banner consistent with GDPR requirements. Overall, the website is trustworthy, professional, and well-suited for its non-profit healthcare mission. Recommendations include enhancing security headers, publishing security policies, and adding contact emails and phone numbers explicitly on the site for improved transparency and user trust.
- MMS-Gesellschaft Burgenland
msges-bgld.at
Healthcare · Austria
73Medium
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
The MS-Gesellschaft Burgenland is a small, regional non-profit organization dedicated to supporting individuals affected by Multiple Sclerosis in the Burgenland region of Austria. Founded in 2006, it operates as a member of the Austrian Multiple Sclerosis Society, providing counseling, networking for self-help groups, and therapy-related information and events. The website serves as a central information hub for patients and their families, emphasizing community support and healthcare guidance. Technically, the website is built on the Jimdo Creator CMS platform, utilizing standard web technologies such as jQuery and third-party widgets from POWr.io. The site is mobile-optimized and employs HTTPS for secure communications. Cookie consent mechanisms are implemented in compliance with GDPR, although some advanced security headers and policies are absent. From a security perspective, the site demonstrates a good baseline with HTTPS and cookie consent but lacks explicit security policies, incident response contacts, and advanced HTTP security headers. No vulnerabilities or suspicious activities were detected in the content or scripts. The WHOIS data aligns well with the organization's claims, indicating a legitimate and consistent domain registration. Overall, the website is trustworthy, professionally presented, and compliant with privacy regulations, serving its target audience effectively. Strategic improvements in security headers, incident response transparency, and terms of service documentation would enhance its security posture and user trust.
Oberösterreichische Multiple Sklerose Gesellschaftmultiplesklerose-ooe.at
Healthcare · Austria
61Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
The Oberösterreichische Multiple Sklerose Gesellschaft website serves as a regional non-profit platform dedicated to supporting individuals affected by Multiple Sclerosis in Upper Austria. The organization provides various services including counseling, financial support, regional groups, events, and specialized programs for newly diagnosed and young patients. The website reflects a clear mission to assist and inform its target audience with relevant and accessible content. Technically, the site is built on WordPress and leverages modern libraries such as jQuery and Bootstrap, ensuring a responsive and user-friendly experience. Cookie consent is managed professionally via Cookiebot, demonstrating compliance with GDPR requirements. Security-wise, the site enforces HTTPS, uses anonymized Google Analytics tracking, and implements cookie consent mechanisms, indicating a solid security posture. However, there is room for improvement in publishing explicit security policies and incident response information. Overall, the website is trustworthy, professionally maintained, and aligned with its non-profit healthcare mission.
- SSecurity Verification
ms-gesellschaft.at
Other · Austria
66Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
The website ms-gesellschaft.at is currently inaccessible beyond a security verification page employing Google reCAPTCHA v3, indicating the presence of a Web Application Firewall or bot protection mechanism. Due to this, no substantive business content, contact information, or policies are available for analysis. The domain is registered through a reputable Austrian registrar, consistent with the domain's country code top-level domain. The technical infrastructure includes modern frontend frameworks such as Bootstrap and Google reCAPTCHA for security, but lacks visible security headers or HTTPS enforcement confirmation in the provided data. Overall, the site’s security posture is limited by the lack of accessible content, and privacy compliance cannot be assessed. The business credibility and content quality are low due to the absence of visible information.
- Multiple Sklerose Gesellschaft Salzburg
msge-salzburg.at
Healthcare · Austria
64Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
The Multiple Sklerose Gesellschaft Salzburg is a regional non-profit organization dedicated to supporting individuals affected by Multiple Sclerosis and their families in Salzburg, Austria. The website provides comprehensive information about MS, social support services, events, and educational resources including podcasts and online talks. The organization positions itself as a trusted local resource for MS-related assistance and community engagement. Technically, the website is built on Joomla CMS using modern frameworks such as Bootstrap 5 and jQuery, ensuring a responsive and user-friendly experience. The site employs HTTPS with a valid SSL certificate and includes cookie consent mechanisms, reflecting a good level of digital maturity and privacy awareness. Structured data is implemented for improved SEO and navigation. From a security perspective, the site enforces HTTPS and cookie consent but lacks advanced security headers and a formal security policy or incident response contact. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is supported by a clear privacy policy and cookie banner, aligning with GDPR requirements. Overall, the website is professional, trustworthy, and well-suited for its target audience. Strategic improvements in security headers, incident response transparency, and accessibility could further enhance its security posture and compliance standing.
RegioHelden GmbHregiohelden.de
Technology · Germany
71Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
RegioHelden GmbH is a German online marketing agency established in 2010, specializing in digital marketing services such as SEO, content management, web design, and marketing communication. The company positions itself as a creative and passionate partner for businesses seeking digital visibility and success, supported by a strong team culture and recognized Google Partner status. The website reflects a modern, professional, and well-structured digital presence built on WordPress, with good mobile optimization and accessibility. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and policies could be enhanced. Overall, the domain registration and WHOIS data align well with the business claims, indicating legitimacy and trustworthiness.
Citadele bankafinoterapija.lv
Finance · Latvia
70Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Finoterapija.lv is a Latvian-language free online financial consultation platform designed to help individuals manage their personal finances more effectively. The service offers personalized plans for savings and investments, targeting individuals seeking financial advice. The website is closely associated with Citadele banka, a major Latvian banking institution, which lends credibility and trust to the service. The platform is well-branded, consistent, and professionally designed with good user experience and mobile optimization.
JSC Citadele bankaklix.app
Finance · Latvia
59Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
Klix by Citadele is a financial services platform based in Latvia offering fast and secure online payment solutions and loan comparison services. The platform targets consumers and businesses in the Baltic region, providing services such as Klix Pay Later installment payments, a loan comparison platform, and a user portal for transaction management. The website is professionally designed with consistent branding and clear navigation, supporting multiple languages and providing comprehensive cookie consent mechanisms. Technically, the site uses modern JavaScript libraries including jQuery and Bootstrap, integrates Google Tag Manager and Microsoft Clarity for analytics, and is built on October CMS. Performance is fast with good mobile optimization and basic accessibility features. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though security headers and explicit security policies could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. Overall, the site demonstrates high trustworthiness and professionalism.
Citadelexrewards.lv
Finance · Latvia
73Medium
NIS2 2 · GDPR 73
NIS2 2 · GDPR 73
The website www.xrewards.lv represents the C REWARDS program, a loyalty and rewards platform for Citadele Bank cardholders in the Baltic region. It offers users the ability to earn points on purchases and redeem them for various rewards, positioning itself as a key value-added service within the banking sector. The site is professionally designed, mobile-optimized, and integrates modern web technologies including Magento CMS, RequireJS, and Google Tag Manager for analytics and marketing. From a technical perspective, the site demonstrates a mature digital infrastructure with performance monitoring via New Relic and a comprehensive cookie consent mechanism aligned with GDPR requirements. However, there is room for improvement in security posture, particularly in implementing and exposing security headers and publishing a formal security policy or incident response contacts. Security-wise, the site uses HTTPS and does not expose sensitive data in its HTML content. No WAF or blocking mechanisms interfere with accessibility. The WHOIS data confirms the domain's legitimacy and consistency with the business claims, reinforcing trustworthiness. No critical vulnerabilities or suspicious patterns were detected. Overall, the website presents a low-risk profile with good privacy compliance and business credibility. Strategic enhancements in security headers and incident response transparency would further strengthen its security posture and trust signals.
Citadele Groupcblgroup.com
Finance · Latvia
73Medium
NIS2 17 · GDPR 65
NIS2 17 · GDPR 65
Citadele Group is a prominent financial services provider operating in the Baltic region, offering a wide range of services including banking, capital management, life insurance, pension plans, leasing, and factoring. The website content is professionally presented in Latvian, targeting private individuals and businesses in the Baltics. The company positions itself as a modern financial platform with a strong regional presence and a comprehensive service portfolio. Technically, the website employs modern web technologies such as Google Tag Manager for analytics and marketing, uses standard HTML5 and CSS3, and includes cookie consent mechanisms compliant with GDPR. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. However, no explicit CMS or hosting provider information was detected. From a security perspective, the site uses HTTPS and includes CSRF tokens in forms, indicating basic security hygiene. However, no security headers were detected in the provided data, and there is no published security policy or incident response information. The absence of WHOIS registration data raises concerns about domain legitimacy, although the website content and branding appear consistent and professional. Overall, the website demonstrates a solid business and technical foundation but would benefit from enhanced transparency in domain registration, improved security headers, and clearer contact information to strengthen trust and compliance.
Banka Citadelecitadeleleasing.lv
Finance · Latvia
56Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Banka Citadele is a well-established Latvian financial institution offering a range of banking and leasing services, including auto leasing with a focus on electric vehicles. The website provides detailed product information, a leasing portal for customers, and multiple language options, reflecting a mature digital presence. Technically, the site uses modern web technologies such as jQuery, Bootstrap, and Google Tag Manager, with good mobile optimization and SEO practices. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response contacts are not published on the analyzed page. Overall, the site demonstrates professionalism and trustworthiness consistent with a reputable bank.
- Crossref
crossref.org
Education
68Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Crossref is a globally recognized non-profit organization that provides open infrastructure to link research objects, entities, and actions, supporting open science and scholarly communication. With a large membership base spanning 23,000 members in 163 countries, Crossref facilitates metadata exchange and supports nearly 2 billion monthly API queries. The website reflects a mature digital presence with comprehensive content, clear navigation, and a professional design tailored to researchers, publishers, and funders. Technically, the site leverages modern web technologies including Hugo, Bootstrap, jQuery, and Algolia search, combined with analytics and user feedback tools, indicating a well-maintained and performant infrastructure. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though the absence of explicit security policies and incident response information suggests room for improvement. Privacy compliance is strong, with clear privacy and cookie policies and consent mechanisms in place. Overall, Crossref's website demonstrates high trustworthiness and professionalism, supporting its role as a key player in scholarly metadata services.
Healthcare · Czech Republic
64Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
Institut postgraduálního vzdělávání ve zdravotnictví (IPVZ) is a Czech educational institution specializing in postgraduate training and continuing education for healthcare professionals including doctors, dentists, pharmacists, and non-medical healthcare workers. The website serves as a comprehensive portal offering course catalogs, client registration, certification information, and additional services such as hotel and congress facilities. IPVZ holds a strong position in the Czech healthcare education sector with a clear focus on professional development and specialization. Technically, the website is built on ASP.NET WebForms with legacy jQuery and modern frontend libraries, delivering a good user experience with mobile optimization and accessibility features. Security posture is solid with HTTPS enforcement and CSRF protections, though improvements are recommended in HTTP security headers and updating legacy libraries. Privacy compliance is well addressed with detailed policies and cookie consent mechanisms. However, the absence of WHOIS data for the domain reduces transparency and slightly impacts trust. Overall, IPVZ presents a professional, secure, and user-friendly platform for healthcare education in the Czech Republic.
- Formthotics
formthotics.com
Healthcare · New Zealand
70Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Formthotics is a healthcare-focused company specializing in custom thermoformable medical orthotic insoles, targeting healthcare professionals, clinicians, sports retailers, and patients. The company leverages over 40 years of foot science expertise to provide clinically proven orthotic solutions that enhance patient comfort and performance. Their business model includes product manufacturing, distribution, and professional training services. The website reflects a professional and consistent brand image with good content quality and user experience. Technically, the website is built on modern frameworks such as Next.js and React, with integrations for Google Tag Manager and Cookiebot for analytics and cookie consent management. The site is mobile-optimized and performs moderately well, though accessibility features are basic. Security measures include HTTPS enforcement and bot protection via Google reCAPTCHA, but lack some advanced security headers and explicit security policies. The security posture is generally good with no visible vulnerabilities or exposed sensitive data, but the absence of privacy policy and terms of service pages represents a compliance gap. The WHOIS data is missing, which raises concerns about domain registration transparency and legitimacy. Overall, the site is trustworthy and professional but would benefit from improved compliance documentation and domain registration verification. Strategic recommendations include implementing comprehensive privacy and terms policies, enhancing security headers, providing incident response contacts, and verifying domain registration details to improve trust and compliance.
- OPED
oped.de
Healthcare · Germany
52Medium
NIS2 17 · GDPR 48
NIS2 17 · GDPR 48
OPED is a German medical technology manufacturer specializing in ortheses for foot, hand, shoulder, and knee, emphasizing digitalization and sustainability. The company positions itself as a regional leader in Bavaria with a focus on innovation and quality, targeting healthcare professionals and patients requiring orthotic solutions. The website is built on TYPO3 CMS and hosted likely on Deutsche Telekom infrastructure, reflecting a moderate level of digital maturity with good mobile optimization and accessibility. Security posture is adequate with HTTPS and cookie consent via Cookiebot, but lacks explicit privacy policies, terms of service, and security headers, which are areas for improvement. Overall, the website is professional and trustworthy but would benefit from enhanced transparency and security practices.
- NNea International bv
push.eu
Healthcare · Netherlands
63Medium
NIS2 17 · GDPR 28
NIS2 17 · GDPR 28
Push Braces is a specialized orthopaedic company focused on the development and distribution of braces designed to support joint injuries and chronic disorders. Established in 1986, the company leverages its expertise in orthopaedics to provide innovative products that enhance mobility and reduce pain. The website reflects a mature business with a clear market position in healthcare, targeting both patients and healthcare professionals. The product range is well-categorized and supported by educational content and research insights. Technically, the website is built on a modern CMS platform (Telerik Sitefinity) and uses contemporary web technologies including Bootstrap and Font Awesome, ensuring a responsive and user-friendly experience. The presence of multiple analytics and marketing tools indicates a data-driven approach to customer engagement. Security-wise, the site uses HTTPS and avoids exposing sensitive data, but lacks some security headers and explicit cookie consent mechanisms, which are recommended for enhanced compliance and protection. Overall, the domain WHOIS data is privacy-protected, which is common for .eu domains, but the website's professional presentation and consistent contact information support its legitimacy. Strategic recommendations include improving privacy compliance, publishing security policies, and implementing security headers to strengthen the security posture.
Ofa Bamberg GmbHofa-bamberg.com
Healthcare · Germany
54Medium
NIS2 17 · GDPR 65
NIS2 17 · GDPR 65
Ofa Bamberg GmbH is a well-established German company specializing in high-quality medical compression and orthopaedic products, with a history dating back to 1928. The company serves a global market, exporting to over 40 countries, and targets healthcare professionals and patients requiring phlebological and orthopaedic solutions. Their product range includes compression stockings, orthopaedic supports, and preventive health products, supported by digital tools such as a product finder and comprehensive knowledge resources. Technically, the website is built on a modern stack including HubSpot CMS, jQuery, and various carousel libraries, with integrations for Google Analytics and Facebook Pixel for marketing and analytics. The site is mobile-optimized and SEO-friendly, though some accessibility features are basic. Performance is moderate, with room for optimization. Security posture is generally good with HTTPS enforced and cookie consent implemented, but the absence of several key security headers suggests potential improvements. No critical vulnerabilities were detected in the visible content. Privacy compliance is strong, with clear privacy and cookie policies aligned with GDPR requirements. Overall, the website presents a professional and trustworthy digital presence for Ofa Bamberg GmbH. However, the lack of WHOIS data for the domain introduces some uncertainty regarding domain registration legitimacy. This may be a technical anomaly rather than a risk indicator. Strategic recommendations include enhancing security headers, maintaining privacy compliance, and investigating the WHOIS data issue to ensure full transparency and trust.
KeriMedicalkerimedical.com
Healthcare · Switzerland
53Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
KeriMedical is a specialized medical device company focusing on hand and wrist surgery implants, digital surgical planning solutions, and professional training workshops for surgeons. The company positions itself as a niche leader with advanced technology and strong ties to the Medartis Group, enhancing its market credibility. The website is professionally designed, multilingual, and optimized for performance and SEO, reflecting a mature digital presence. Security posture is good with HTTPS and no visible vulnerabilities, though some security headers and explicit policies could be improved. The absence of WHOIS data suggests privacy protection or recent registration, common in medical sectors for privacy reasons. Overall, the site presents a trustworthy and professional image suitable for healthcare professionals and patients.
Orthofixorthofix.com
Healthcare · United States
71Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Orthofix Medical Inc. is a well-established leader in the healthcare sector specializing in medical devices and solutions focused on spinal, orthopedic, bone growth, and motion preservation products. Founded in 1980, the company maintains a strong market position with a comprehensive portfolio targeting healthcare professionals and patients globally. Their website reflects a mature digital presence with detailed product information, patient stories, clinical research resources, and corporate responsibility initiatives. Technically, the site is built on WordPress, leveraging modern analytics and tracking tools such as Google Tag Manager and Hotjar, with good mobile optimization and accessibility features. Security posture is solid with HTTPS enforced and domain protections in place, though improvements like DNSSEC and enhanced security headers could be considered. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. Overall, Orthofix demonstrates a professional, trustworthy, and user-friendly online presence aligned with its business stature.
Medartis AGmedartis.com
Healthcare · Switzerland
70Medium
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
Medartis AG is a Swiss-based medical device company specializing in precision-engineered osteosynthesis implants for skull and extremity surgeries. The company holds a strong market position in the healthcare sector, offering personalized implant services through its CMX platform and engaging in clinical research partnerships. The website is professionally designed using TYPO3 CMS, hosted on Azure DNS infrastructure, and demonstrates good digital maturity with mobile optimization and clear navigation. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though DNSSEC is not enabled, representing a minor security gap. Privacy policies are comprehensive and GDPR compliant. Overall, the website reflects a trustworthy and credible business with a medium-sized enterprise profile founded in 1998.
Marek Žmijovskýzmickey.sk
Technology · Slovakia
61Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
The website zmickey.sk is a personal portfolio for Marek Žmijovský, a Slovak web designer specializing in WordPress and Joomla development. The site presents his skills, work history, education, and portfolio samples, targeting potential clients seeking freelance web design services. The business model is that of an individual freelancer with a small-scale operation primarily serving Slovak and English-speaking markets. The domain age and WHOIS data align well with the professional timeline presented, indicating legitimacy and consistency. Technically, the website uses a modern frontend stack including Bootstrap, jQuery, Font Awesome, and Google Fonts. It is hosted on Websupport, a Slovak hosting provider, with DNSSEC enabled, which adds to the security trustworthiness. The site is responsive and well-structured, though some accessibility and SEO optimizations could be improved. No CMS is detected, indicating a custom-coded site. From a security perspective, the site lacks explicit HTTP security headers and does not provide privacy or cookie policies, which are important for GDPR compliance. There is no visible incident response or vulnerability disclosure information. The contact form collects user data but no anti-spam or security measures are evident in the provided content. No analytics or tracking scripts are present, indicating minimal user tracking. Overall, the site is professional and functional but could improve its security posture and privacy compliance. The risk level is moderate with no critical vulnerabilities detected but with room for improvement in security best practices and legal compliance.
AMNOTEC International Medical GmbHamnotec.de
Healthcare · Germany
54Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
AMNOTEC International Medical GmbH is a medium-sized German company specializing in manufacturing and supplying high-quality medical technology products, including instruments for open surgery, endoscopy, and operating room equipment. Positioned as a leading and ambitious player in the medical technology sector in Tuttlingen, Germany, the company targets healthcare professionals and institutions. Their website reflects a professional and consistent brand image with clear navigation and relevant content. Technically, the site is built on Joomla CMS, utilizing common JavaScript libraries and sliders, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS and cookie consent mechanisms, though improvements in security headers and explicit security policies are recommended. Overall, the website is trustworthy, GDPR compliant, and provides comprehensive contact information and certifications, supporting its credibility in the healthcare industry.
- Koliba Kordulka
kolibakordulka.cz
Hospitality · Czech Republic
69Medium
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
Koliba Kordulka is a small hospitality business operating a restaurant in Rožnov pod Radhoštěm, Czech Republic, specializing in modern Czech cuisine with seasonal ingredients and event hosting services. The website presents a professional digital presence with integrated reservation and food ordering systems, supported by social media channels and clear contact information. The business targets local customers and tourists seeking authentic dining experiences and event venues. Technically, the website leverages modern web technologies and third-party analytics tools, hosted likely on the Dish.co platform, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though lacking explicit security policies or incident response contacts. Overall, the site is trustworthy, compliant with privacy regulations, and provides a positive user experience.
Vitrex Medical A/Svitrexmedical.com
Healthcare · Denmark
55Medium
NIS2 2 · GDPR 65
NIS2 2 · GDPR 65
Vitrex Medical A/S operates as a supplier of high-quality laboratory and analytical products primarily targeting the healthcare sector, including hospitals, laboratories, and clinics. The company leverages over 50 years of industry experience, positioning itself as a trusted provider in the healthcare supply chain. The website reflects a professional and consistent brand image, supported by structured data and SEO best practices to enhance visibility. Technically, the site is built on WordPress using the Divi theme, integrating modern tools such as Google Analytics and Tag Manager for performance and marketing insights. Security posture is solid with HTTPS enabled and domain registration protections, though DNSSEC is not enabled and some security headers are missing, suggesting room for improvement. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms aligned with GDPR requirements. Overall, the site presents a credible and trustworthy digital presence with moderate technical maturity and good business credibility.
Mladí praktici z.s.mladipraktici.cz
Healthcare · Czech Republic
52Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Mladí praktici z.s. is a Czech non-profit association dedicated to supporting young general practitioners preparing for certification and those within five years post-certification. The organization provides educational resources, community building, international internship opportunities, and financial support for conferences and training. Their market position is well-established within the Czech healthcare sector, with active international affiliations such as EYFDM and cooperation with official bodies like IPVZ and the Ministry of Health of the Czech Republic. The website serves as a portal and informational hub for their target audience of young doctors and medical trainees. Technically, the website is built using modern web standards with HTML5, CSS3, JavaScript, and is generated by Websy 4 CMS. It uses Google Fonts and Font Awesome for styling and icons, and Google Analytics for visitor tracking. The site is hosted by Wedos, a reputable Czech hosting provider. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. From a security perspective, the site uses HTTPS with good SSL configuration and secure form handling. However, it lacks explicit security headers and documented security policies or incident response contacts. Privacy compliance is addressed with a privacy policy and cookie consent mechanism, though GDPR compliance indicators could be more explicit. No critical vulnerabilities or suspicious content were detected. Overall, the website is trustworthy, professionally maintained, and serves its community well. Strategic improvements in security headers and incident response documentation could enhance its security posture and compliance maturity.
Mapa školitelůmapaskolitelu.cz
Healthcare · Czech Republic
65Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Mapa školitelů is a Czech Republic-based informational platform dedicated to connecting medical trainees with qualified trainers for pre-certification preparation in General Practical Medicine. The website offers a searchable map interface with filtering options by region, district, and accreditation status, supported by partnerships with reputable Czech medical organizations. The platform targets medical professionals and trainees seeking accredited training resources within the Czech healthcare education sector. Technically, the website employs modern JavaScript libraries including Mapbox GL JS for interactive mapping, Google reCAPTCHA for form security, and Google Tag Manager for analytics. It is built using the Websy 4 CMS and hosted via Czech providers, ensuring regional relevance and performance. The site is mobile-optimized with good design quality and basic accessibility features, though SEO and advanced accessibility could be improved. From a security perspective, the site uses HTTPS and implements CAPTCHA on forms, but lacks published privacy and cookie policies, security headers, and incident response information. The contact form is currently commented out, reducing attack surface but also limiting user interaction. No critical vulnerabilities or exposed sensitive data were detected, but compliance gaps with GDPR and security best practices exist. Overall, the website is functional, professional, and trustworthy within its niche but would benefit from enhanced privacy compliance, security hardening, and expanded contact information to improve user trust and regulatory adherence.
- Qualaroo
qualaroo.com
Technology
70Medium
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
Qualaroo is a technology company specializing in user research and feedback software, offering SaaS solutions that enable businesses to collect actionable customer insights through surveys and AI-powered analytics. The company is positioned as a trusted provider with a solid market presence, supported by a parent company, ProProfs, and notable clients such as eBay, Twilio, and LinkedIn. The website demonstrates good content quality, professional design, and clear navigation, targeting businesses seeking to improve user experience and customer satisfaction. Technically, the site employs modern web technologies including Google Fonts, Microsoft Clarity analytics, and Google Tag Manager, hosted under a reputable registrar with stable DNS infrastructure. Security posture is adequate with HTTPS enabled and domain status protections, though improvements are recommended in DNSSEC and security headers. Privacy compliance is limited by the absence of explicit privacy and cookie policies in the analyzed content. Overall, the website is professional and trustworthy, with moderate digital maturity and room for enhanced privacy and security transparency.
- ProProfs Chat
proprofschat.com
Technology
70Medium
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
ProProfs Chat is a technology company specializing in AI-powered live chat software designed to enhance customer support and sales for businesses. The website presents a professional and consistent brand image aligned with its parent company, ProProfs. It offers a SaaS business model with free and paid subscription plans, targeting businesses seeking real-time customer engagement solutions. The site integrates modern analytics and marketing tools such as Google Analytics, Google Tag Manager, and Hotjar, indicating a mature digital infrastructure. Mobile optimization and accessibility are well implemented, providing a positive user experience across devices. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy and cookie policies are present and indicate GDPR compliance. However, the WHOIS data for the domain is missing or unavailable, which raises concerns about domain registration legitimacy. Despite this, the website content and external references strongly associate it with the reputable ProProfs brand. Overall, the site is trustworthy and professionally maintained but would benefit from clearer domain registration transparency and enhanced security policy disclosures.
- ProProfs Project
proprofsproject.com
Technology
69Medium
NIS2 2 · GDPR 80
NIS2 2 · GDPR 80
ProProfs Project is an established online project management software platform designed to help teams plan, track, and collaborate on projects efficiently. It offers a SaaS subscription model with free and paid plans, targeting businesses and teams seeking simple yet powerful project management tools. The company is a subsidiary of ProProfs, a broader technology company offering multiple productivity and customer support tools. The website demonstrates a professional and consistent brand presence with comprehensive content and positive user ratings. Technically, the website employs modern JavaScript libraries, Google Tag Manager, and Microsoft Clarity for analytics and user behavior tracking. The site is mobile-optimized with good accessibility and SEO practices, although some security headers are not explicitly detected. The SSL configuration is excellent, ensuring secure communications. From a security perspective, the site uses HTTPS and avoids exposing sensitive data in its HTML. However, explicit security policies and incident response contacts are not found, which could be improved. Privacy and cookie policies are present with consent mechanisms, indicating good compliance with GDPR and related regulations. Overall, the website presents a low-risk profile with strong business credibility and technical maturity. The main concern is the lack of WHOIS data, which may indicate privacy protection or domain registration anomalies. Further verification of domain registration details is recommended to fully confirm legitimacy.
- ProProfs Help Desk Software
proprofsdesk.com
Technology
68Medium
NIS2 17 · GDPR 65
NIS2 17 · GDPR 65
ProProfs Help Desk Software is a technology company offering a comprehensive AI-powered help desk and ticketing system designed to streamline customer support and enhance customer satisfaction. The company operates a SaaS business model with multiple pricing plans including free, monthly, and annual subscriptions. It is positioned as a reliable and well-reviewed player in the customer service software market, supported by a parent company, ProProfs, with a broad product ecosystem. The website demonstrates strong branding, professional design, and clear navigation, targeting businesses seeking efficient customer support solutions. Technically, the website employs modern web technologies including JavaScript, Google Tag Manager, and responsive design with web fonts. It is optimized for mobile devices and shows good SEO and accessibility practices. The site uses HTTPS with a good SSL configuration, though explicit security headers are not fully evident. Privacy and cookie policies are present and indicate GDPR compliance, but no explicit security policy or incident response information is published. From a security perspective, the site follows best practices such as HTTPS enforcement and secure form handling, with no visible vulnerabilities or exposed sensitive data. However, the absence of WHOIS data for the domain is unusual and may indicate recent registration or privacy protection, which slightly lowers the trust score. No WAF or blocking mechanisms were detected, allowing full content access. Overall, the website is professional, secure, and trustworthy with minor areas for improvement in security policy transparency and WHOIS data availability. The risk level is low, but monitoring domain registration details is recommended to ensure ongoing legitimacy.
UAB „Ariogalos grūdai“ariogalosgrudai.lt
Manufacturing · Lithuania
52Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
UAB „Ariogalos grūdai“ is a Lithuanian company specializing in grain purchasing and animal feed production, serving primarily poultry farming complexes within Lithuania. The company positions itself as a reliable partner with a focus on high-quality services and modern feed raw materials. The website reflects a small-sized manufacturing business with a clear local market focus and multiple national awards that enhance its credibility. Technically, the website is built on the Site.pro platform, uses modern web standards, and is mobile optimized, though performance is moderate. Security posture is adequate with HTTPS enabled but lacks advanced security headers and privacy compliance mechanisms. Contact information is clearly presented, but no privacy or cookie policies are available, indicating compliance gaps. Overall, the website is professional and trustworthy but could improve in privacy and security transparency.
UAB GRINDYSgrindys.pro
Manufacturing · Lithuania
50Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
UAB GRINDYS operates a professional concrete floor polishing and installation business primarily serving industrial, commercial, and private clients in Lithuania. Their website showcases a comprehensive range of services including concrete polishing, repair, epoxy and polyurethane floor installation, terrazzo floors, and sports surfaces. The company maintains a professional online presence with a portfolio of completed projects and an e-commerce store for related machinery. Technically, the website is built on WordPress with WooCommerce and uses modern plugins and Google Analytics for tracking. Security measures include HTTPS and Google reCAPTCHA, but lack some advanced security headers and formal privacy policies. WHOIS data is privacy protected, which is typical for small businesses, and no suspicious patterns were detected. Overall, the website is professional and trustworthy, though improvements in privacy and security documentation are recommended.
- UAB RoboLabs
robolabs.lt
Finance · Lithuania
58Medium
NIS2 2 · GDPR 43
NIS2 2 · GDPR 43
RoboLabs is a Lithuanian company specializing in modern accounting services, document processing, and business analytics, delivered through their proprietary ROBO platform. The company targets businesses across Lithuania, offering scalable service plans and a user-friendly digital platform that integrates accounting with business management tools. With over 1300 companies trusting their services, RoboLabs positions itself as a modern and efficient accounting service provider in the Lithuanian market. Technically, the website is built using modern web technologies including React and Next.js, ensuring fast performance and excellent mobile optimization. The site employs Google Tag Manager and Facebook SDK for analytics and marketing, alongside Cookiebot for GDPR-compliant cookie consent management. The technical infrastructure supports a professional user experience with good SEO and accessibility features. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms, but lacks visible security policies, incident response contacts, and vulnerability disclosure information. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data for the domain reduces transparency and trustworthiness, though the website content and business presence suggest legitimacy. Overall, RoboLabs demonstrates a strong digital presence and business credibility with room for improvement in domain registration transparency and published security governance. Strategic enhancements in these areas would further strengthen trust and compliance.
Solen Software, s.r.o.crossref.cz
Education · Czech Republic
55Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
The website crossref.cz serves as an educational and informational portal focused on the CrossRef system, DOI identifiers, and scientific databases, primarily targeting the Czech academic and research community. It provides clear explanations about CrossRef as a reference linking system and DOI as a persistent digital identifier, linking to official CrossRef and DOI websites. The site is operated by Solen Software, s.r.o., a Czech company, and uses a Czech hosting provider, reflecting a consistent regional focus. From a technical perspective, the site employs legacy JavaScript libraries such as jQuery 1.7.2 alongside modern analytics tools like Google Analytics and Google Tag Manager. The content is well-structured with professional design and navigation, though mobile optimization and accessibility are basic. The site uses the Actavia editorial system and is hosted on Aerohosting servers. Performance is moderate, with no critical technical issues detected. Security posture is moderate but could be improved. The site lacks HTTPS confirmation in the provided data, no explicit security headers were detected, and no privacy or cookie policies are present, indicating gaps in compliance with GDPR and modern security best practices. No forms or sensitive data collection points reduce immediate risk, but the absence of contact and incident response information limits transparency. Overall, the website is a legitimate, niche educational resource with consistent WHOIS data and a stable domain age. However, it would benefit from enhanced privacy compliance, security hardening, and clearer contact information to improve trust and regulatory adherence.
Solen Software, s.r.o.solensoftware.cz
Technology · Czech Republic
53Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Solen Software, s.r.o. is a Czech Republic based small technology company specializing in the development of custom internet applications with a strong focus on editorial systems for scientific publishing. Their flagship product, Actavia, supports comprehensive workflows for scientific journals including DOI management and integration with CrossRef and other citation databases. The company has an established web presence since 2012 and operates multiple related domains supporting their core business. Technically, the website uses legacy JavaScript libraries such as jQuery 1.7.2 and includes Google Analytics and Tag Manager for tracking, but lacks modern security headers and visible privacy or cookie policies, indicating room for compliance and security improvements. No contact emails or phone numbers are explicitly provided on the main site, which may impact user trust and support accessibility. The WHOIS data is consistent with the business claims, showing a legitimate and stable domain registration. Overall, the website is professional and content-rich but requires enhancements in privacy compliance, security posture, and contact transparency.
- Helena Kasalá
lapilou.com
Retail · Czech Republic
50Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
LaPilou is a small Czech family-run business specializing in handcrafted lap desks designed for use with laptops and other casual activities such as breakfast in bed or reading. The website presents a niche artisanal product with customization options, targeting adults and children who seek practical and original lap desks. The business model is direct retail with an emphasis on quality craftsmanship and individuality. The website content is primarily in Czech and includes detailed contact information, supporting the legitimacy of the business despite the lack of WHOIS registration data. Technically, the website uses legacy JavaScript libraries such as jQuery and Cufon for font rendering, with moderate performance and basic mobile optimization. SEO practices are adequate with proper meta tags, but accessibility and modern security practices could be improved. The site uses HTTPS, but no security headers were detected in the provided data, and no cookie consent mechanism is present, indicating partial privacy compliance. From a security perspective, the site shows moderate maturity with secure forms including honeypot anti-spam measures, but lacks advanced security headers and explicit incident response or security policies. The absence of WHOIS registration data is a significant concern, lowering the overall trustworthiness score. No critical vulnerabilities or adult content were detected. Overall, LaPilou presents a legitimate small business with a focused product offering but would benefit from improved security posture, updated technical infrastructure, and enhanced privacy compliance to strengthen trust and compliance with modern standards.
Webglobewy.sk
Technology · Slovakia
50Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Webglobe is a well-established Slovak technology company specializing in domain registration, webhosting, email services, and server infrastructure solutions. The company targets individuals and businesses seeking reliable online presence services, boasting over 120,000 satisfied clients and a strong market position in Slovakia and neighboring regions. Their website reflects a professional and consistent brand image with comprehensive service offerings and client testimonials. Technically, the site is built on WordPress with modern frameworks like Bootstrap and integrates multiple analytics and marketing tools such as Matomo, Google Tag Manager, and Facebook Pixel. Security posture is solid with HTTPS and reCAPTCHA usage, though explicit security headers and policies are not evident. Privacy compliance is basic, lacking visible privacy and cookie policies or consent mechanisms. WHOIS data confirms the domain's legitimacy and consistency with the business identity. Overall, Webglobe presents a trustworthy and professional digital presence with room for improvement in privacy and security transparency.
- EError
sitebuilderhost.net
Other
53Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website sitebuilderhost.net currently presents an access forbidden (403) error page, indicating that the content is blocked by a security mechanism, likely Cloudflare's WAF. Due to this restriction, no business content, contact information, or policy documents are accessible for analysis. The domain is registered with SafeNames Ltd. since 2012, showing a long-term registration consistent with an established entity. The technical infrastructure includes Cloudflare DNS services, but no further technology or CMS details are available due to content blocking. Security posture is limited to the presence of Cloudflare protection, but no security headers or policies are visible. Overall, the site cannot be fully assessed for compliance, security, or business credibility due to the access restriction.
Danone a.s.danonesouteze.cz
Retail · Czech Republic
61Medium
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
Danone soutěže is a promotional website operated by Danone a.s., a large multinational food company, targeting Czech consumers with product contests and marketing campaigns. The site consolidates current and past contests, providing users with opportunities to participate and win prizes, thereby enhancing brand engagement and loyalty. The website is professionally designed with consistent Danone branding and clear navigation, optimized for both desktop and mobile users. It employs modern web technologies including WordPress with Oxygen Builder, Google Tag Manager, and Cookiebot for privacy compliance. Security posture is strong with HTTPS enforced and a comprehensive cookie consent mechanism, though explicit security policies and incident response information are not publicly disclosed. The absence of WHOIS data due to privacy protection is typical for corporate domains and does not detract from the site's legitimacy. Overall, the site demonstrates a mature digital presence aligned with corporate standards and regulatory compliance.
ChannelSightchannelsight.com
Technology · Ireland
75Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
ChannelSight is a technology company specializing in AI-powered ecommerce optimization solutions. Their platform focuses on enhancing online product performance and maximizing conversions across the consumer journey. Positioned as a market leader, ChannelSight offers key services including Where To Buy solutions, Shoppable Media, and Digital Shelf analytics, targeting brands and marketers aiming to optimize ecommerce sales. The company operates primarily in Ireland and serves a medium-sized business profile. Technically, the website is built on a modern Webflow CMS platform, leveraging a robust tech stack including Google Tag Manager, HubSpot, Zoho SalesIQ, Hotjar, and LinkedIn Insight Tag. The site demonstrates excellent performance, mobile optimization, and SEO practices, reflecting a mature digital infrastructure. The use of advanced animation libraries and smooth scrolling enhances user experience. From a security perspective, the site enforces HTTPS and employs a consent management platform for privacy compliance. While explicit security headers are not fully evident, the overall security posture is strong with no exposed sensitive data or vulnerabilities detected. Privacy policies and cookie consent mechanisms are comprehensive and GDPR compliant, supporting a trustworthy user environment. Overall, ChannelSight presents a professional, secure, and well-structured online presence with strong business credibility. The incomplete WHOIS data suggests privacy protection but does not detract significantly from trust given the quality of the website and business information. Strategic recommendations include enhancing security headers, publishing a vulnerability disclosure policy, and improving incident response visibility to further strengthen security and compliance.
- WWounds Middle East
wounds-me.com
Healthcare · United Kingdom
69Medium
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Wounds Middle East is a specialized healthcare media platform launched in 2024, focusing on wound care news, journals, events, and educational resources targeted at healthcare professionals in the Middle East. The website is built on WordPress with Elementor and WooCommerce, supported by Cloudflare DNS and registrar services. It integrates marketing and analytics tools such as HubSpot and Google Tag Manager, and monetizes via Google Ad Manager advertising slots. The site demonstrates good content quality and professional design with clear navigation and mobile optimization. Security posture is moderate with HTTPS enabled but lacks some advanced security headers and DNSSEC. Privacy and cookie policies are present with consent mechanisms, supporting GDPR compliance. No direct company contact emails or phone numbers are published, relying on contact forms. The domain is newly registered but consistent with the business launch timeline and shows no suspicious WHOIS patterns. Overall, the website is a credible and professional resource in its niche with room for security enhancements.
Wounds Asiawoundsasia.com
Healthcare
73Medium
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Wounds Asia is a specialized healthcare content platform focused on wound healing and care in the Asia-Pacific region. It offers a variety of educational resources including journals, case studies, podcasts, and event listings targeting healthcare professionals and wound care specialists. The website is built on a modern WordPress infrastructure using Elementor and WooCommerce, supported by Cloudflare for domain registration and DNS services. The content quality is good with consistent branding and professional presentation. Security posture is adequate with HTTPS enabled and domain transfer protection, though improvements are recommended in DNSSEC adoption and security headers. Privacy compliance is partial, lacking a cookie consent mechanism and explicit GDPR indicators. Overall, the domain registration and website content are consistent and legitimate, positioning Wounds Asia as a credible niche player in healthcare education.
- MMunicipality of the city Ostrava
ostrava.cz
Government · Czech Republic
74Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
The Statutory City of Ostrava's official website serves as a comprehensive portal for residents, visitors, and businesses, providing city news, administrative contacts, visitor information, and business investment resources. The site is well-structured and professionally designed, targeting a broad audience including expats and tourists. Technically, the site is built on the Plone CMS platform, utilizes jQuery and Matomo analytics, and implements cookie consent mechanisms aligned with privacy best practices. Security posture is solid with HTTPS enforced and form validation in place, though improvements can be made by adding explicit security headers and publishing security policies. The absence of WHOIS data is a notable gap, but the presence of official contact details and consistent branding supports the site's legitimacy. Overall, the website is a reliable and authoritative source for Ostrava city information.
- Černá louka s.r.o.
ostravainfo.cz
Hospitality · Czech Republic
67Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
OstravaInfo is an official city guide and information portal for Ostrava, Czech Republic, operated by Černá louka s.r.o. The website provides comprehensive event listings, tourist information, accommodation details, and an e-shop for souvenirs. It targets tourists and local residents seeking cultural and practical information about Ostrava. The site is well-branded and maintains partnerships with official city and regional entities, enhancing its market position as a trusted local resource. Technically, the website uses a mix of legacy and modern web technologies including jQuery 1.11.3, Google Tag Manager, and Facebook Pixel for analytics and marketing. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. However, some technical debt is noted with the use of an outdated jQuery version and lack of explicit security headers. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms compliant with GDPR. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of WHOIS data and security headers slightly reduces the overall security posture. There is no visible incident response or vulnerability disclosure information, which could be improved to enhance trust. Overall, OstravaInfo presents a professional and trustworthy online presence for its business domain. The main risk factor is the lack of WHOIS transparency, which should be addressed to improve domain legitimacy and trust. Strategic improvements in security headers and updating legacy libraries are recommended to strengthen the security posture.
Other
63Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website bidswitch.net is currently inaccessible due to an AccessDenied error, indicating that the content is blocked by a security mechanism or access control. This prevents any meaningful extraction of business, technical, or security information from the site itself. The domain is registered with Gandi SAS since 2012, showing a mature domain age and a clientTransferProhibited status which suggests some level of domain security. However, DNSSEC is not enabled, and no further registrant details are available to verify alignment with the website's business claims. Due to the blocked content, no metadata, forms, scripts, or contact information could be analyzed, resulting in a low overall AI score and inability to assess privacy compliance or security posture effectively.
Zeotapzeotap.com
Technology
75Medium
NIS2 17 · GDPR 70
NIS2 17 · GDPR 70
Zeotap is an enterprise-level AI-powered Customer Data Platform (CDP) provider that helps businesses unlock the value of their customer data through advanced AI insights, flexible infrastructure solutions, and comprehensive marketing tools. The company positions itself strongly in the technology and telecommunications sectors, emphasizing data privacy and governance with features like German-grade privacy. The website reflects a mature digital presence with professional design, clear navigation, and SEO optimization, targeting marketing and IT/data teams in enterprises. Technically, the site is built on WordPress with modern frameworks like Bootstrap and integrates consent management via Usercentrics, Google Tag Manager for analytics, and Cloudflare for DNS and likely CDN services. Security posture is good with HTTPS and domain transfer protection, though improvements are recommended in DNSSEC and security headers. Privacy compliance is partially demonstrated through consent mechanisms but lacks explicit privacy and terms of service pages. Overall, the site is trustworthy, professional, and well-optimized for its audience.
Healthcare · Portugal
67Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
The Sociedade Portuguesa de Esclerose Múltipla (SPEM) is a Portuguese non-profit organization dedicated to supporting individuals affected by Multiple Sclerosis. The website serves as an official platform providing comprehensive information, resources, and community engagement opportunities related to the disease. SPEM positions itself as a trusted authority in the healthcare non-profit sector in Portugal, offering educational materials, advocacy, and support services. The site targets patients, families, healthcare professionals, and volunteers, fostering inclusion and awareness. Technically, the website is built on WordPress with modern plugins and technologies such as WPBakery Page Builder, Google reCAPTCHA, and lazy loading for performance optimization. The site demonstrates good mobile responsiveness, SEO optimization, and accessibility features, although some areas could be enhanced. Security measures include HTTPS enforcement, security headers, and cookie consent mechanisms, reflecting a mature security posture for a non-profit entity. No critical vulnerabilities or security issues were detected. Privacy compliance is strong, with clear privacy and cookie policies aligned with GDPR requirements. Contact information is transparent and accessible, enhancing business credibility. The WHOIS data confirms domain registration consistency with the organization's identity, supporting legitimacy. Overall, SPEM's website is a well-maintained, secure, and user-friendly platform that effectively supports its mission. Strategic recommendations include publishing a dedicated security policy, enhancing accessibility, and introducing a vulnerability disclosure program to further strengthen trust and security.
Esclerosis Múltiple Españaesclerosismultiple.com
Healthcare · Spain
55Medium
NIS2 17 · GDPR 65
NIS2 17 · GDPR 65
Esclerosis Múltiple España operates an official website dedicated to providing comprehensive information about multiple sclerosis, including disease education, news updates, and fundraising for research. The organization targets Spanish-speaking patients, caregivers, and donors, positioning itself as a trusted non-profit entity within the healthcare sector in Spain. The website leverages a mature technical infrastructure based on WordPress CMS, enhanced with SEO and GDPR compliance plugins, and integrates marketing and analytics tools such as Google Tag Manager and Mailchimp. Security measures include HTTPS enforcement and reCAPTCHA integration, although there is room for improvement in DNS security and explicit security policies. Overall, the website demonstrates a solid business credibility and technical foundation, with a good user experience and safe content for general audiences.
- ZZdruženie sclerosis multiplex Nádej
sclerosis-multiplex.sk
Healthcare · Slovakia
59Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Združenie sclerosis multiplex Nádej is a Slovak non-profit organization dedicated to supporting patients with multiple sclerosis. The website serves as an information hub, community platform, and fundraising channel, targeting patients, their families, and supporters. The organization has a strong local presence with nearly two decades of activity, reflected in the domain age and content. Technically, the website is built on WordPress with a modern but common technology stack including Bootstrap and jQuery, optimized for mobile and SEO. Security posture is adequate with HTTPS and DNSSEC enabled, but lacks advanced security headers and formal privacy/cookie policies, which are compliance gaps. The site integrates Google Analytics and Facebook SDK for tracking, with moderate user tracking levels. Overall, the website is professional, trustworthy, and well-branded but could improve privacy compliance and security best practices.
Healthcare · Italy
65Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
AISM (Associazione Italiana Sclerosi Multipla) is a well-established Italian non-profit organization dedicated to supporting individuals affected by multiple sclerosis. The website serves as a comprehensive resource offering information, support services, research funding, and advocacy. It targets patients, caregivers, volunteers, and researchers primarily within Italy. The organization maintains a strong market position as a leading association in its sector, supported by a large-scale operation and a professional digital presence. Technically, the website is built on Drupal 9 with modern front-end frameworks like Bootstrap 5 and integrates various third-party libraries for enhanced user experience, including Owl Carousel and Leaflet for maps. The site is mobile-optimized, accessible, and employs Google Tag Manager and CookieHub for analytics and cookie consent management, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS, implements key security headers, and provides cookie consent mechanisms, indicating a solid security posture. However, it lacks a publicly available security policy or incident response contact, which are recommended for enhanced transparency and readiness. No vulnerabilities or suspicious activities were detected in the content or scripts. Overall, the website is trustworthy, professionally designed, and compliant with GDPR requirements. It effectively balances user experience, accessibility, and security, making it a reliable platform for its audience.