Medium-risk security reports
99,066 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,186001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
30,951–31,000 of 99,066
KFkf.no
Government · Norway
71Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
KF is a Norwegian organization focused on providing solutions, courses, and professional literature to the municipal sector, aiming to simplify daily operations within municipalities. The website presents a professional and consistent brand image, targeting municipal employees and public sector stakeholders in Norway. Their offerings include software solutions, educational courses, and specialized publications tailored for municipal needs. Technically, the website is built on Drupal 10, leveraging modern web technologies and integrating analytics tools such as Google Analytics, Google Tag Manager, and Facebook Pixel. The site is mobile-optimized and accessible, with good SEO practices and clear navigation. Security-wise, the site enforces HTTPS and implements cookie consent mechanisms, but lacks some advanced security headers and a public security policy or incident response contact. Overall, the domain registration data aligns well with the website content, indicating a trustworthy and legitimate entity. The site does not contain any adult or questionable content and maintains a high level of professionalism and trustworthiness.
KS Digitalksdif.no
Government · Norway
71Medium
NIS2 25 · GDPR 35
NIS2 25 · GDPR 35
KS Digital is a Norwegian government-related organization providing sustainable shared digital services tailored to the needs of the municipal sector in Norway. The website positions KS Digital as a key digital service provider for Norwegian municipalities, emphasizing sector alignment and sustainability. The company was founded in 2024, consistent with the domain registration date, indicating a new but legitimate entity. The website content is professional, well-structured, and targets the Norwegian public sector audience. Technically, the site is built on WordPress with modern plugins and React components, indicating a moderate to advanced digital maturity. SEO is enhanced through Yoast SEO and structured data implementation. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers are not explicitly detected. Privacy compliance is weak due to the absence of privacy and cookie policies or consent mechanisms. Contact information is not explicitly provided, which may impact user trust and compliance. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security disclosures.
- SSUTOR GLOBAL s.r.o.
sutorglobal.com
Energy · Czech Republic
65Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
SUTOR GLOBAL s.r.o. is a small Czech Republic-based company specializing in installation, repair, and inspection services for reserved lifting, pressure, gas, and electrical equipment. The company targets industrial clients requiring specialized maintenance and compliance services in the energy sector. The website is minimalistic, primarily image-driven, and uses Bootstrap for responsive design, indicating a basic but functional digital presence. Technical infrastructure is modest with no advanced CMS or analytics detected, hosted likely via Forpsi based on DNS information. Security posture is limited with no evident security headers or privacy policies, and no HTTPS status was explicitly confirmed. The domain registration is consistent and stable, supporting the legitimacy of the business. Overall, the website serves as a basic informational portal without advanced digital marketing or security features.
Other
65Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
The website orlen.sk is currently inaccessible in terms of meaningful content due to what appears to be a Web Application Firewall (WAF) or security challenge page. The page content is minimal, with obfuscated JavaScript and no visible business, contact, or policy information. This limits the ability to analyze the company's business model, services, or compliance posture. Technically, the site uses JavaScript but lacks detectable frameworks, CMS, or SEO features. Security posture cannot be assessed properly due to lack of accessible data and absence of security headers or SSL details. Overall, the site scores very low on content quality, technical implementation, security, privacy compliance, and business credibility. Strategic recommendations include removing or adjusting WAF settings to allow legitimate analysis, implementing clear privacy and cookie policies, providing contact and incident response information, and improving technical and security configurations.
Mary's Muffins Oakvillemarysmuffins.com
E-commerce · Canada
72Medium
NIS2 17 · GDPR 58
NIS2 17 · GDPR 58
Mary's Muffins Oakville is a small Canadian e-commerce bakery business specializing in nutritious, naturally sweetened muffins and snacks. The company targets health-conscious consumers and families primarily in Ontario, Canada, offering online ordering with delivery and pick-up options. The website is built on the Shopify platform, leveraging modern e-commerce technologies and marketing tools such as Google Tag Manager, Facebook Pixel, and affiliate marketing integrations. The site is well-designed, mobile-optimized, and provides a professional user experience with clear navigation and rich content including customer testimonials and product reviews. Security posture is strong with HTTPS, form protection via hCaptcha, and no exposed sensitive data, although DNSSEC is not enabled. Privacy and cookie policies are present and indicate GDPR compliance. No direct contact emails or phone numbers are published, relying on contact forms and social media channels. Overall, the website demonstrates a mature digital presence for a small local business with good security and privacy practices.
- WWemass
wemass.com
Media · Spain
71Medium
NIS2 2 · GDPR 65
NIS2 2 · GDPR 65
Wemass is a leading digital advertising marketplace in Spain, aggregating premium inventory from over 80 national media outlets. The platform is backed by major Spanish media groups including Prisa, Vocento, and Godó, positioning it as a principal player in the Spanish digital advertising ecosystem. Wemass offers a comprehensive suite of advertising formats including rich media, video, audio, display, native, and social, supported by proprietary ad tech solutions and first-party data targeting capabilities. The website content is professionally presented in Spanish, targeting advertisers and agencies within Spain.
Mundo Deportivomundodeportivo.com
Media · Spain
58Medium
NIS2 22 · GDPR 50
NIS2 22 · GDPR 50
Mundo Deportivo is a prominent Spanish sports news website focusing on football, motorsports, tennis, and other sports. It serves a Spanish-speaking audience with live results, news articles, and multimedia content. The site is part of Grupo Godó, a major media group in Spain, and maintains a strong market position in sports journalism. Technically, the website employs a modern tech stack including Google Analytics, Google Tag Manager, multiple ad networks, and a custom CMS called Xalok. It is optimized for both desktop and mobile platforms with good SEO and performance characteristics. Security-wise, the site uses HTTPS and consent management platforms to comply with GDPR, though some security headers could be improved. The absence of WHOIS data for the queried subdomain limits domain registration insights but does not detract from the site's legitimacy. Overall, Mundo Deportivo presents a professional, secure, and user-friendly platform for sports news.
EuroFIR AISBLeurofir.org
Non-profit · Belgium
64Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
EuroFIR AISBL is a Belgian-based international non-profit association established in 2009, dedicated to providing validated food composition data and related resources across Europe and beyond. It serves a diverse audience including researchers, food industry professionals, and policy-makers by offering access to comprehensive food databases and analytical tools. The organization maintains a strong market position as the sole independent aggregator of food composition data from multiple countries, supporting nutrition and health research. Technically, the website is built on a modern WordPress platform with a well-integrated tech stack including UIkit and various plugins for e-commerce, cookie management, and multimedia embedding. The site demonstrates good mobile optimization, SEO practices, and moderate performance. Analytics are implemented via Google Analytics and Sumo, with appropriate cookie consent mechanisms in place. From a security perspective, the site enforces HTTPS and includes cookie consent banners, but lacks published formal security policies, incident response contacts, and vulnerability disclosure information. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS registrar and creation date information reduces domain trust slightly, but the website content and contact details support legitimacy. Overall, EuroFIR AISBL presents a professional, trustworthy online presence aligned with its mission. Strategic improvements in security transparency and domain registration clarity would enhance its risk posture and stakeholder confidence.
Government · Czech Republic
67Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Ústav zemědělské ekonomiky a informací (ÚZEI) is a Czech government-affiliated research institute specializing in applied research in agricultural economics, agrarian markets, and the relationship of agriculture to the environment and rural development. The organization serves as an expert center providing research, advisory services, education, and information dissemination in agriculture and food sectors. Their market position is that of a trusted government research entity with a broad portfolio of services including scientific projects, certification, and public services. The website reflects a mature digital presence built on Drupal 10 with modern web technologies and moderate performance. It is well-structured, mobile-optimized, and accessible, supporting a professional user experience.
MVM Next Energiakereskedelmi Zrt.mvmenergiakereskedo.hu
Energy · Hungary
68Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
MVM Next Energiakereskedelmi Zrt. is a Hungarian energy retail company specializing in electricity and natural gas supply for business clients including large enterprises, SMEs, and municipalities. The company offers a range of services including electronic invoicing, contract management, and energy solutions such as solar panel systems and e-mobility infrastructure. The website reflects a professional and consistent brand presence with a focus on business customers. Technically, the site uses JavaServer Faces with PrimeFaces and integrates modern JavaScript libraries like Swiper.js and jQuery, supported by Google Tag Manager for analytics and marketing. The site is mobile optimized and provides clear navigation and relevant content.
- MVM Next
nemzetikozmuvek.hu
Energy · Hungary
64Partial
DNS & email only
DNS & email only
MVM Next is a major Hungarian energy company providing electricity and natural gas services to residential and business customers. The website serves as a portal for multiple energy-related services including billing, online customer management, and additional offerings such as solar energy solutions and insurance products. The company operates several subsidiaries responsible for distribution and network services. Technically, the website is built on ASP.NET WebForms with a modern JavaScript stack including jQuery and Google Tag Manager for analytics and consent management. Security posture is solid with HTTPS enforced and cookie consent implemented, though security headers are missing and no explicit incident response or security policy is published. Overall, the site is professional, well-branded, and targets Hungarian energy consumers with a comprehensive service portfolio.
Hotelinfo Kft.hungarycard.hu
Hospitality · Hungary
51Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
HungaryCard.hu is a well-established Hungarian tourism discount card platform operated by Hotelinfo Kft., founded in 2001. The website offers a membership-based model providing discounts across hospitality, cultural events, transportation, and other tourism-related services. It targets tourists and residents interested in Hungarian tourism benefits and maintains a consistent brand presence with a professional website and social media engagement primarily on Facebook. The business is positioned as a trusted player in the Hungarian tourism sector with a medium-sized operation and a clear focus on customer engagement through newsletters and partner networks. Technically, the site is built on WordPress with Visual Composer and uses common web technologies such as jQuery and Google Fonts. It is moderately optimized for performance and mobile devices, with basic accessibility and SEO features.
Egis Pharmaceuticals PLCegis.health
Healthcare · Hungary
62Medium
NIS2 17 · GDPR 65
NIS2 17 · GDPR 65
Egis Pharmaceuticals PLC is a well-established pharmaceutical company with a strong international presence, focusing on cardiovascular and central nervous system treatments. The website reflects a mature digital infrastructure with modern technologies such as Video.js, Bootstrap, and Google reCAPTCHA, ensuring a good user experience and security posture. The site is fully accessible without any WAF or blocking mechanisms, indicating reliable hosting and configuration. Security best practices are observed, including HTTPS enforcement and anti-bot measures, though additional security headers could enhance protection. Privacy compliance is evident with dedicated GDPR and cookie policies, supporting trustworthiness. Overall, the website projects a professional and credible image consistent with a large healthcare entity.
Asolviasolvi.com
Technology
64Medium
NIS2 25 · GDPR 80
NIS2 25 · GDPR 80
Asolvi is a specialist provider of field service management software aimed at improving operational efficiency and customer service for businesses in the field service sector. The website presents a professional and focused business offering, targeting organizations that require software solutions to manage field operations effectively. The company appears to operate in the technology sector with a SaaS business model, although detailed corporate information such as founding year or company size is not disclosed. Technically, the website is built on WordPress using Kadence Blocks and Google Fonts, indicating a modern but standard CMS infrastructure. The site is accessible and mobile-optimized with good design quality and user experience. However, there is limited evidence of advanced technical frameworks or hosting details. Performance is moderate, and SEO and accessibility features are basic. From a security perspective, the website lacks visible security headers, privacy policies, cookie consent mechanisms, and contact information for incident response or data protection officers. The WHOIS data is unavailable, showing no domain registration match, which raises concerns about domain legitimacy and trustworthiness. No analytics or tracking scripts were detected, suggesting minimal user tracking. Overall, the site is safe for general audiences and free from adult or explicit content. However, the absence of critical compliance and security information, combined with missing WHOIS data, results in a moderate risk profile. Strategic improvements in transparency, security posture, and compliance documentation are recommended to enhance trust and credibility.
- PPatria Finance
patria-finance.cz
Finance · Czech Republic
65Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Patria Finance is a Czech financial services company specializing in investment products and brokerage services, operating under the ČSOB banking group. The website offers a comprehensive range of investment options including ETFs, long-term investment products, and personal brokerage advisory. It targets retail and institutional investors with a strong emphasis on online trading platforms and educational content. The company has a solid market presence with over 30 years of experience and a reputable backing by a major banking group. Technically, the website uses modern JavaScript libraries and tracking tools, is mobile optimized, and provides secure login portals. Security posture is good with HTTPS and cookie consent mechanisms, though explicit security headers and policies could be improved. The absence of WHOIS data reduces domain registration transparency but does not detract from the apparent legitimacy of the business. Overall, the site is professional, trustworthy, and well-suited for its target audience.
- BBayer Global - Home | Bayer Global
bayer.com
—
75Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
Úvod | Agrofert SKagrofert.sk
—
61Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
—
75Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
applyparkapplypark.cz
Technology · Czech Republic
60Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Applypark is a small Czech technology company specializing in the development and servicing of web applications, databases, and integrations with platforms such as Shoptet. Founded in 2019 and based in Ostrava, the company targets local businesses seeking custom web solutions. The website presents a professional image with clear descriptions of services and a consistent brand presence. Technically, the site uses modern web technologies including Font Awesome 6 Pro icons and Google Tag Manager for analytics, hosted likely via WEDOS, a Czech hosting provider. The site is mobile optimized and SEO friendly but lacks some accessibility features. Security posture is adequate with HTTPS enabled, but the absence of security headers and explicit security policies indicates room for improvement. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the domain registration is consistent and legitimate, supporting the business credibility. Strategic improvements in privacy compliance and security hardening would enhance trust and reduce risk.
- MMartin Šimko
mcore.sk
Technology · Slovakia
57Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Martin Šimko operates as a freelance fullstack web developer based in Slovakia, offering services including website creation, custom web applications, and accessibility compliance primarily for public sector clients. The business is small, independent, and has been established since 2012, with a focus on long-term client relationships and quality service delivery. The website reflects a professional and consistent brand image with clear contact details but lacks formal privacy and cookie policies, which are important for compliance and trust. Technically, the website employs a modern technology stack including PHP frameworks (Yii 2, Laravel, Symfony), JavaScript libraries (Vue.js, Alpine.js), and OctoberCMS as the preferred CMS. Hosting is provided by Websupport, indicated by the domain's nameservers. The site is mobile optimized, accessible, and uses HTTPS with DNSSEC enabled, reflecting a good digital maturity level. However, there is room for improvement in SEO and performance optimization. From a security perspective, the site benefits from HTTPS and DNSSEC but lacks visible security headers and formal security policies. No vulnerability disclosure or incident response information is provided, which could be a risk for handling security incidents. No tracking or analytics scripts were detected, indicating minimal user tracking and a privacy-conscious approach, though the absence of privacy and cookie policies is a compliance gap. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance, security policy transparency, and additional security hardening measures to improve its security posture and regulatory adherence.
Digital Thinkersdtapp.hu
Technology
68Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Digital Thinkers is a well-established digital innovation company founded in 1999, specializing in designing and delivering innovative digital solutions tailored to business needs. Their market position is supported by a strong portfolio of projects and client testimonials, targeting businesses seeking digital transformation and product development services. Technically, the website leverages modern frameworks such as Next.js and React, with Cloudflare providing DNS and CDN services, ensuring fast performance and mobile optimization. Security posture is solid with HTTPS enforced and use of reCAPTCHA, though improvements can be made by enabling DNSSEC and publishing explicit security policies. Privacy compliance is basic with a privacy policy and cookie consent banner present, but lacks detailed GDPR compliance indicators. Overall, the website demonstrates high professionalism and trustworthiness with room for enhanced transparency in security and contact information.
Fastbasefastbase.com
Technology
67Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Fastbase is a technology company specializing in intelligent web analytics and lead generation services. Their platform identifies website visitors, filters business leads, and integrates with Google Analytics to provide enhanced marketing insights. The business model is subscription-based with tiered offerings and a free trial, targeting businesses seeking to convert web traffic into actionable sales leads. The website content is professional and consistent, supporting a small-sized technology firm with a niche market position.
Studio Animato s. r. o.animato.cz
Technology · Czech Republic
62Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
Studio Animato s. r. o. is a Czech-based digital agency specializing in branding, web and e-commerce development, and online marketing services. Established since 2008, the company positions itself as a full-service partner for businesses seeking integrated digital solutions including custom websites, B2C and B2B e-shops, graphic design, and marketing campaigns. The firm has earned multiple industry awards and partnerships, reflecting a strong market presence in the Czech Republic. Technically, the website is built on modern platforms such as Webflow CMS, integrates advanced tracking and analytics tools, and employs security measures like HTTPS and CAPTCHA to protect user interactions. The site is well-optimized for mobile and accessibility standards, providing a professional user experience. However, WHOIS data is unavailable, which slightly impacts trust but is mitigated by transparent contact information and certifications. Overall, the security posture is solid though could benefit from enhanced HTTP security headers and published security policies.
Moravio s.r.o.moravio.com
Technology · Czech Republic
69Medium
NIS2 47 · GDPR 80
NIS2 47 · GDPR 80
Moravio s.r.o. is an established international software development agency specializing in custom software, AI, data analytics, and digital transformation services. With over 14 years in the market and more than 120 projects completed, Moravio serves a broad audience from startups to Fortune 500 companies. Their service portfolio includes software development, AI software, product development, technical due diligence, and software support, positioning them as a comprehensive digital solutions provider. The company is headquartered in Ostrava, Czech Republic, and demonstrates strong market presence through client testimonials, awards, and official memberships. Technically, the website leverages modern technologies such as React, Next.js, Node.js, TypeScript, and various AI frameworks including ChatGPT and LangChain. The site is built on Webflow CMS, hosted on Webflow's platform, and integrates advanced analytics and marketing tools like Google Tag Manager and LinkedIn Insight. The website is well-optimized for performance, mobile responsiveness, and SEO, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS, employs security headers, integrates Google reCAPTCHA, and follows best practices for secure forms and data handling. However, explicit security policies and incident response information are not publicly available, indicating room for improvement in transparency and preparedness. The WHOIS data is unavailable, likely due to privacy protection, which is common for businesses of this nature but introduces minor uncertainty regarding domain registration details. Overall, Moravio presents a professional, trustworthy, and technically sound online presence with strong business credibility. Strategic recommendations include publishing detailed security policies, establishing a vulnerability disclosure program, and enhancing accessibility features to further strengthen their security posture and compliance standing.
značkárna s.r.o.webees.cz
Other · Czech Republic
60Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
značkárna s.r.o. is a Czech Republic based small business specializing in branding, communication, design, and digital development services. The company positions itself as a craftsman of communication and design, targeting businesses seeking to build and enhance their brand identity. Their website reflects a professional and consistent brand image with a clear presentation of their team and client portfolio. Technically, the site is built on WordPress, leveraging modern tools such as Google Analytics, Google Tag Manager, and Google Maps API, with lazy loading for images to optimize performance. The site is mobile optimized and SEO friendly, though accessibility features are basic. Security posture is good with HTTPS enforced, but lacks some security headers and formal security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the website is trustworthy and professional, but could improve in privacy transparency and security best practices.
Albatros Mediaalbatrosmedia.group
Media · Czech Republic
71Medium
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
Albatros Media is the largest publishing group in the Czech Republic and Slovakia, offering a broad portfolio of publishing houses, books in various formats, e-commerce platforms, and an online antiquarian bookstore. The website reflects a professional and well-structured digital presence, targeting readers, authors, and partners in the publishing and retail sectors. The company positions itself strongly in the media industry within its regional market. Technically, the site uses ASP.NET Web Forms, integrates modern libraries such as jQuery and Fancyapps UI, and employs Google Tag Manager and Cookiebot for analytics and privacy compliance. The website is mobile optimized and SEO friendly, though accessibility features could be enhanced. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks visible security headers which could improve protection against common web threats. WHOIS data is privacy protected, which is typical for commercial entities, and no suspicious patterns were detected. Overall, the site is trustworthy, compliant with GDPR, and provides a safe browsing experience.
- FFINCLUB POLAND Sp. z o. o.
finclub.eu
Retail · Poland
53Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
FINCLUB POLAND Sp. z o. o. operates a professional e-commerce website specializing in natural food supplements and cosmetics sourced from Finland. The company is part of a larger Central European network with over 30 years of market presence, positioning itself as a leading distributor and partner of the Finnish manufacturer Hankintatukku Oy. The website targets consumers interested in health and beauty products, offering an online shop, interactive product advisor, and business partnership opportunities. The site is well-branded, consistent, and provides clear contact information, enhancing trustworthiness. Technically, the website uses a modern e-commerce platform (Shopsys) with integration of popular analytics and marketing tools such as Google Analytics, Google Tag Manager, Facebook SDK, and reCAPTCHA for form security. The site is mobile-optimized with good SEO and accessibility basics, though some security headers are missing. Performance is moderate, and the site uses HTTPS with a cookie consent mechanism, indicating GDPR compliance awareness. Security posture is solid with HTTPS and reCAPTCHA, but lacks explicit security policies and incident response information. No vulnerabilities or exposed sensitive data were detected. WHOIS data is unavailable due to privacy protection, which slightly reduces transparency but is common for EU domains. Overall, the website presents a low risk profile with good business credibility. Recommendations include adding security headers, publishing a security policy and incident response contacts, and implementing a vulnerability disclosure program to further enhance security and trust.
- FFINCLUB plus, a.s.
finclub.de
Retail · Tschechische Republik
51Medium
NIS2 2 · GDPR 80
NIS2 2 · GDPR 80
FINCLUB plus, a.s. is a Czech-based company with over 30 years of experience specializing in natural dietary supplements, cosmetics, and biodegradable cleaning products. It holds a strong market position in Central Europe as a leading distributor and partner of the Finnish manufacturer Hankintatukku Oy, which has an AAA rating. The company targets health-conscious consumers and business partners seeking to establish their own enterprises in the health and beauty sectors. The website reflects a professional e-commerce platform with multilingual support and a clear focus on natural products and customer success. Technically, the site uses modern web technologies including Shopsys CMS, Google Tag Manager, Google Analytics, Facebook SDK, and reCAPTCHA for security. Hosting is provided by Active24, as inferred from nameservers. Security posture is good with HTTPS enforced and secure form handling, though security headers are not evident and no explicit security policy or incident response contacts are published. Privacy compliance is strong with clear GDPR and cookie policies and consent mechanisms. Overall, the site is trustworthy, well-branded, and professionally maintained, with room for improvement in security transparency and header implementation.
- FFINCLUB plus, a.s.
finclub.at
Healthcare · Czech Republic
53Medium
NIS2 2 · GDPR 80
NIS2 2 · GDPR 80
FINCLUB plus, a.s. is a Czech-based company specializing in natural health supplements, cosmetics, and biodegradable cleaning products with over 30 years of market presence. The company acts as a strategic partner to the Finnish manufacturer Hankintatukku Oy, known for its AAA rating and global leadership in natural parapharmaceutical products. The business model focuses on direct sales and e-commerce, targeting both end consumers and business partners seeking entrepreneurial opportunities. The website is professionally designed, multilingual, and provides comprehensive product and company information, supporting a strong market position in Central Europe. Technically, the website leverages modern technologies including Shopsys CMS, Google Tag Manager, Google Analytics, Facebook SDK, and reCAPTCHA for security and marketing. The site is mobile-optimized with good SEO and accessibility features, though some improvements in accessibility and security headers are recommended. The presence of GDPR-compliant privacy and cookie policies indicates a mature approach to data protection. Security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. However, the absence of explicit security policies and incident response contacts suggests room for improvement in transparency and preparedness. The lack of WHOIS data reduces trust slightly but does not detract significantly from the overall legitimacy given the detailed business information and external references. Overall, FINCLUB plus, a.s. presents a credible, professional online presence with a strong business foundation and good technical implementation. Strategic recommendations include enhancing security headers, publishing security policies, and improving accessibility to further strengthen trust and compliance.
- NNeofema s.r.o.
kompletweb.cz
Technology · Czech Republic
54Medium
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
KOMPLETWEB.cz is a Czech-based website creation platform operated by Neofema s.r.o., offering a proprietary CMS that enables users to build corporate, product, or personal websites quickly with customizable design and integrated features such as Facebook connectivity and SEO optimization. The platform targets small businesses and individuals seeking an easy-to-use web presence solution, supported by a 14-day free trial and no hidden fees. The website demonstrates consistent branding and good content quality, with a focus on the Czech market. Technically, the site uses legacy jQuery libraries alongside modern analytics and cookie consent tools, hosted behind Cloudflare DNS services. Security posture is adequate with HTTPS and reCAPTCHA, but could be improved with updated libraries and enhanced security headers. Privacy compliance is well addressed with clear cookie policies and consent mechanisms. Overall, the site is professional and trustworthy, though it lacks explicit security and incident response policies. Strategic recommendations include modernizing the tech stack, publishing security policies, and enhancing mobile and accessibility features to strengthen the platform's market position and security maturity.
Aftermarket.pl Limitedtlumaczpolskoczeski.pl
Technology · Poland
73Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
Aftermarket.pl Limited operates the largest domain marketplace in Poland, offering domain sales, auctions, domain catching, and related services such as hosting, mail, website creation, and SSL certificates. The platform targets domain buyers and sellers, providing a professional and comprehensive marketplace experience. The website is well-structured with clear navigation and multilingual support, emphasizing ease of use and accessibility for its audience. Technically, the website employs modern web technologies including service workers, Font Awesome icons, and integrates third-party services such as Google Analytics (with consent denied by default) and HelpCrunch for live chat support. The site is mobile-optimized and uses HTTPS with secure form handling, although explicit security headers are not evident from the provided data. From a security perspective, the platform demonstrates good practices such as CSRF protection, cookie consent mechanisms, and secure password input fields. However, the absence of WHOIS data and inconsistencies in domain registration dates reduce the overall trust score. Privacy policies and GDPR compliance are well addressed, with detailed cookie and data processing information available. Overall, Aftermarket.pl presents a professional and trustworthy domain marketplace with solid technical and privacy foundations. The main risk lies in the lack of transparent WHOIS data and minor gaps in security header implementation. Strategic improvements in these areas would enhance trust and security posture.
Atrakcje, turystyka w Czechach | tlumaczenia-czeskie.pltlumaczenia-czeskie.pl
Other · Poland
56Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
The website tlumaczenia-czeskie.pl is a Polish language content portal dedicated to tourism, attractions, and cultural information about the Czech Republic. It targets Polish-speaking tourists and individuals interested in Czech travel. The site operates on WordPress CMS with Yoast SEO plugin, leveraging common web technologies such as jQuery and Slick Carousel for UI components. The content is well structured with good SEO metadata and structured data, indicating a moderate level of digital maturity. However, the site lacks privacy and cookie policies, security headers, and direct contact information such as emails or phone numbers, which limits its privacy compliance and security posture. HTTPS is enabled, ensuring encrypted communication. Overall, the site is a small-scale, niche informational portal with a consistent brand presence and moderate trustworthiness.
Online learning s.r.o.onlinejazyky.cz
Education · Czech Republic
67Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
OnlineJazyky.cz is an established Czech online language education platform operated by Online learning s.r.o. The company offers interactive language courses in six major languages targeting individuals, companies, and schools. Their business model revolves around e-commerce sales of language courses, supplemented by live online lessons and conversational clubs. The website demonstrates a good level of digital maturity with modern JavaScript libraries, tracking tools, and responsive design. However, the absence of WHOIS data and explicit security headers slightly detracts from their security posture. Privacy compliance is strong, with clear cookie consent mechanisms and GDPR-aligned privacy policies. Overall, the platform presents a trustworthy and professional online presence with room for security enhancements.
PRESS-PYGMALIONpress-pygmalion.cz
Other · Czech Republic
58Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
PRESS-PYGMALION is a Czech informational website focused on providing reviews and information about online casinos targeted at Czech players. The site operates as an affiliate or informational platform promoting legal and licensed Czech online casinos. The business is relatively new, founded in 2022, and targets a niche market within the Czech Republic. The website uses WordPress CMS and is hosted behind Cloudflare, ensuring good performance and security basics. The site includes privacy and cookie policies, though these are basic in scope, and lacks explicit terms of service or security policies. Security posture is adequate with HTTPS enforced but could be improved with additional security headers and incident response documentation. Overall, the site is professional, well-structured, and suitable for its target audience, with moderate trustworthiness and compliance levels.
- Pygmalion s.r.o.
prekladypygmalion.cz
Other · Czech Republic
50Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Překlady Pygmalion is a Czech-based translation center with over 25 years of experience, offering translation, interpreting, and proofreading services across multiple language combinations. The company operates from Český Těšín with branches in Třinec and Ostrava, targeting individuals and businesses requiring professional language services. The website reflects a well-established local business with a clear service offering and multiple partner sites enhancing its market presence. Technically, the website employs standard modern web technologies including jQuery, Google Analytics, and Google Tag Manager, ensuring moderate performance and good mobile optimization. However, the absence of WHOIS data limits domain trust verification, and the lack of security headers and cookie consent mechanisms indicates room for improvement in security and privacy compliance. Overall, the site is professional and functional but could benefit from enhanced security practices and clearer privacy controls.
- CConti FleetPartner
fleetpartner.cz
Transportation · Czech Republic
68Medium
NIS2 47 · GDPR 25
NIS2 47 · GDPR 25
FleetPartner is a Czech Republic-based fleet management service provider operating under the Continental AG BestDrive brand umbrella. The website serves primarily as a login portal for users, with basic contact information and corporate branding. The business targets fleet operators and automotive service customers, positioning itself as a regional player in transportation services. The site content is minimal but professional, focusing on user access and contact facilitation. Technically, the website employs a modern JavaScript stack including jQuery, FontAwesome, and Chart.js, hosted on CSC DNS infrastructure. While the site is functional and moderately optimized for performance, it lacks advanced SEO, accessibility, and mobile optimization features. No CMS or complex frameworks are detected, indicating a custom-built solution. From a security perspective, the site uses HTTPS and includes CSRF tokens, but lacks visible security headers such as CSP or HSTS. There is no explicit privacy or cookie consent mechanism, and no public security or incident response policies are found. The login form is basic but uses standard password input types. Overall, the security posture is moderate but could be improved with standard best practices. The domain registration is consistent with the business profile, created in 2015 and registered through a reputable registrar. No suspicious patterns or privacy protections are used, supporting legitimacy. Contact details are clearly provided, but the absence of detailed privacy and cookie policies reduces compliance confidence. Strategic improvements in security headers, privacy compliance, and user experience would enhance trust and operational security.
NetArt Grouptest2speed.com
Technology · Finland
63Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
The website test2speed.com offers a free online tool to check website loading speeds and promotes a paid service called Monitoring WWW for server reliability and regular speed testing. The business is operated by NetArt Group, a technology-focused company based in Finland, with domain registration consistent with the business identity. The site is well-structured, uses modern web technologies such as Vue.js, and integrates Google Tag Manager and reCAPTCHA for analytics and bot protection. The cookie consent mechanism is comprehensive and GDPR compliant, though no explicit privacy or security policies beyond the cookie consent are found. Security posture is good with HTTPS enabled but could be improved by enabling DNSSEC and adding security headers. No contact emails or phone numbers are provided on the site, which may impact user trust and support accessibility.
Innovasjon Norgeinnovationnorway.no
Government · Norway
75Medium
NIS2 25 · GDPR 88
NIS2 25 · GDPR 88
Innovasjon Norge is a Norwegian government agency dedicated to fostering sustainable growth and export opportunities for Norwegian businesses. The organization provides comprehensive support services including advisory, capital funding, and networking to entrepreneurs and companies at various stages such as starting, scaling, internationalizing, and renewing their business models. The website reflects a strong market position as a key national innovation facilitator with a clear focus on sustainability and international growth. Technically, the website is built on modern frameworks such as Next.js and React, ensuring a responsive and accessible user experience. The site employs best practices in SEO, accessibility, and performance optimization, with a well-structured layout and clear navigation. The presence of a cookie consent mechanism and privacy policy indicates a mature approach to privacy compliance. From a security perspective, the site enforces HTTPS, implements security headers, and avoids exposing sensitive data. However, explicit security policies and incident response information are not publicly available, and no vulnerability disclosure program is evident. Overall, the security posture is strong but could benefit from enhanced transparency and formalized disclosure mechanisms. The domain WHOIS data is not publicly available due to Norwegian registry privacy policies, but the domain and website content strongly indicate legitimacy as the official site of Innovasjon Norge. No WAF or blocking mechanisms were detected, and the site content is fully accessible and safe for general audiences.
Sbor dobrovolných hasičů Košicesdhkosice.cz
—
61Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
—
55Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
OUR MEDIA SR a. s.mediaklik.sk
Media · Slovakia
55Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Mediaklik, operated by OUR MEDIA SR a. s., is a Slovak media content platform providing daily updates on Slovak and international TV series, films, television shows, gaming, and influencer news. The website targets a general audience interested in entertainment and media, positioning itself as a key player in Slovak media publishing with a focus on digital content and advertising revenue. The business model revolves around content publishing supported by advertising networks and analytics services. Technically, the site employs modern web technologies including Google Analytics, Chartbeat, and a consent management platform to ensure GDPR compliance. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is solid with HTTPS enforcement, security headers, and privacy compliance, although explicit security policies and incident response contacts are not published. Overall, the website is legitimate, trustworthy, and well-maintained, with room for improvement in transparency of security and contact information.
—
75Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
Pravdaipravda.sk
—
75Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
Měšec.czmesec.cz
Finance · Czech Republic
52Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Měšec.cz is a Czech-language online media platform specializing in personal finance news, product analyses, financial calculators, and bank comparisons. It serves as a financial guide for Czech-speaking individuals seeking practical financial advice and current news. The website is well-established in the Czech market, targeting consumers interested in managing their personal finances effectively. Technically, the site employs a modern tech stack including Google Tag Manager, Google Adsense, Gemius analytics, and advanced advertising technologies such as cpex and R2B2 header bidding. The site is mobile-optimized and uses HTTPS with appropriate security headers, reflecting a good digital maturity level. Security posture is strong with no evident vulnerabilities, though the absence of explicit incident response contacts and security.txt files suggests room for improvement in transparency. Privacy compliance is well addressed with comprehensive cookie and privacy policies, including GDPR adherence. Overall, the site presents a professional and trustworthy front, though the lack of WHOIS data and explicit contact details slightly reduce the business credibility score.
—
66Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
Budoucnost tvoříme spolu | Erste Private Bankingersteprivatebanking.cz
—
75Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
- AAlkotó Energia
alkotoenergia.hu
Energy · Hungary
62Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Alkotó Energia operates a Hungarian-language online magazine focused on sustainability, conscious living, recycling, and eco-friendly lifestyle topics. Founded in 2018, the site targets environmentally aware individuals interested in practical and inspirational content about sustainable home living and circular economy principles. The business positions itself as a niche media outlet within the energy and sustainability sector in Hungary, offering articles, videos, and publications to engage its audience. Technically, the website is built using modern web technologies including React and Next.js frameworks, supported by a custom CMS. The site demonstrates good mobile optimization and SEO practices, with integration of Google Fonts and social media SDKs. Performance is moderate, with room for improvement in accessibility features and security headers. From a security perspective, the site enforces HTTPS and uses standard tracking tools like Google Tag Manager and Facebook SDK. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not present. Privacy and cookie policies are comprehensive and GDPR compliant, reflecting a mature approach to user data protection. Overall, the website is professionally designed, trustworthy, and aligned with its business goals. The security posture is adequate but could be enhanced by adding security headers and formal incident response information. The domain registration data supports the legitimacy of the business, with consistent registration details and no privacy protection masking ownership.
InstaWP - All-in-one Cloud for WordPressinstawp.com
—
75Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
ORLEN | ORLEN HUNGARY Kft..orlen.hu
—
64Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
- IIIS Windows Server
lubricantadvisor.com
Other
61Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
The domain lubricantadvisor.com is registered since 2009 with GoDaddy.com, LLC and uses Cloudflare nameservers. However, the website content is a default IIS Windows Server start page with no active or meaningful content, indicating the site is not currently operational or maintained. There are no privacy, cookie, or terms of service policies, nor any contact information or business details visible on the site. Technically, the site uses IIS on Windows Server and Cloudflare DNS but lacks HTTPS and security headers, which are critical for secure web presence. The absence of any analytics, advertising, or tracking scripts further suggests the site is inactive or under development. Security posture is weak due to missing HTTPS and security best practices. Overall, the website presents a low trust profile and minimal business credibility.