Medium-risk security reports
99,067 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,187001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
34,101–34,150 of 99,067
Global Insight Conferences Ltdglobalinsightconferences.com
Other · United Kingdom
73Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Global Insight Conferences Ltd is a UK-based company specializing in organizing high-quality, tailored conferences across various sectors. Their business model focuses on delivering personalized conference experiences that emphasize value for time and money, targeting professionals and organizations seeking effective knowledge exchange and networking opportunities. The company positions itself as a niche provider with a strong emphasis on quality and client-centric event design. Technically, the website is built on WordPress using the Elementor framework, leveraging modern web technologies such as jQuery and Font Awesome. The site is mobile-optimized and demonstrates good SEO practices, although some accessibility features could be improved. Performance is moderate, with no critical technical issues detected. From a security perspective, the site enforces HTTPS but lacks several important security headers, which could improve protection against common web attacks. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is partially addressed with visible privacy and cookie policies, but the absence of a cookie consent mechanism and incomplete Google Analytics configuration indicate room for improvement. Overall, the website presents a professional and trustworthy front for the business, but the lack of WHOIS data and unclear domain registration status introduces some risk. Strategic recommendations include enhancing security headers, verifying domain registration, implementing cookie consent, and configuring analytics properly to strengthen compliance and trust.
Handelsverband Bayern e.V.hv-bayern.de
Retail · Germany
70Medium
NIS2 2 · GDPR 73
NIS2 2 · GDPR 73
Handelsverband Bayern e.V. (HBE) is a prominent Bavarian retail trade association representing approximately 60,000 businesses and 330,000 employees, making it a key player in Bavaria's retail sector. The website serves as a comprehensive portal offering legal, economic, educational, environmental, and insurance services tailored to retail businesses. It features active news updates, event calendars, and member services, reflecting a well-established organization with strong regional influence. Technically, the site is built on Weblication CMS, employs eTracker for analytics, and demonstrates good mobile optimization and SEO practices. Security posture is adequate with HTTPS and cookie consent mechanisms, though formal security policies and incident response contacts are absent. Overall, the site is professional, trustworthy, and compliant with GDPR, targeting Bavarian retail businesses effectively.
Springer Fachmedien Wiesbaden GmbHspringerprofessional.de
Technology · Germany
75Medium
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Springer Professional operates as a leading digital Fachbibliothek (specialized digital library) providing access to over 3 million documents from books and journals in the fields of economics and technology. The platform targets professionals and experts in sectors such as engineering, finance, management, and real estate, offering subscription-based access to high-quality, curated content. It is part of the Springer Nature group, a reputable global publishing company, which reinforces its market position and trustworthiness. The website is professionally designed with consistent branding and clear navigation, optimized for both desktop and mobile users. Technically, the website employs modern JavaScript technologies, integrates Google Tag Manager for analytics, and uses OneTrust for GDPR-compliant cookie consent management. The hosting infrastructure is supported by Ultradns nameservers, indicating reliable DNS management. Performance is fast, and SEO and accessibility best practices are well implemented, contributing to a positive user experience. From a security perspective, the site enforces HTTPS with strong SSL configuration and includes important security headers such as Content Security Policy and X-Frame-Options. The cookie consent mechanism is robust, supporting GDPR compliance. However, explicit security policies and incident response contacts are not publicly visible, which could be improved to enhance transparency and trust. Overall, the website demonstrates a high level of professionalism, security, and compliance, making it a trustworthy resource for its target audience. Strategic recommendations include publishing a dedicated security policy, providing incident response contact details, and considering a vulnerability disclosure program to further strengthen security posture.
tricoma AGtricoma.de
Technology · Germany
72Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
tricoma AG operates a sophisticated all-in-one AI-powered ERP system targeting SMEs and startups in the e-commerce sector. The company positions itself as a leading multi-channel sales ERP provider in Germany, supported by industry recognition such as the techconsult PUR-Diamant 2026 award. Their platform integrates over 250 apps and plugins, cloud hosting, and AI features to automate and optimize business processes. The website reflects a mature digital presence with comprehensive content, multimedia, and clear navigation tailored for business users. Technically, the website employs a custom CMS with a modern web desktop platform, leveraging JavaScript libraries like jQuery and Swiper.js. Hosting appears to be managed via ipresearch.de, with strong SSL configuration and a cookie consent mechanism that complies with GDPR. While some older libraries are used, the overall technical implementation is solid, with good mobile optimization and SEO practices. Security posture is good, with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. However, the absence of explicit security policies or incident response contacts suggests room for improvement in transparency and readiness. The website uses extensive tracking and marketing tools, including Facebook Pixel and Google Analytics, with a well-implemented cookie consent banner. Overall, tricoma.de presents a trustworthy and professional business software provider with a strong market position and digital maturity. Strategic enhancements in security policy publication and technical modernization could further strengthen their posture.
mgm technology partnersmgm-tp.com
Technology · Germany
52Medium
NIS2 17 · GDPR 65
NIS2 17 · GDPR 65
mgm technology partners is an established international enterprise software company specializing in low code platforms and model-driven software engineering, targeting sectors such as public sector, retail, and industrial insurance. Their business model focuses on providing integrated software development, consulting, and security services, supported by a portfolio of related partner companies. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content tailored for enterprise clients. Technically, the site leverages modern tools including Webflow CMS, Matomo analytics with privacy-conscious configurations, and Weglot for multilingual support, indicating a high level of digital maturity. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response contacts are not publicly disclosed. The absence of WHOIS data is a notable anomaly that slightly reduces trust but does not outweigh the overall professionalism and transparency of the site. Strategic recommendations include enhancing security transparency and publishing incident response information to further strengthen trust and compliance.
- Computop
computop.com
Technology · Germany
73Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Computop is a well-established global payment service provider founded in 2001, offering a modular payment gateway solution called Computop Paygate. Their platform supports omnichannel payment processing across e-commerce, point of sale, and mobile commerce, integrating with over 350 international acquirers and payment methods. The company targets businesses requiring flexible and secure payment solutions worldwide. Technically, the website is built on TYPO3 CMS, hosted and registered via Cloudflare, and incorporates modern analytics and consent management tools. Security posture is strong, with multiple certifications including PCI DSS and ISO/IEC 27001, HTTPS enforcement, and announced multi-factor authentication for merchant logins. However, explicit privacy policy and terms of service pages were not found in the provided content, and no public incident response or vulnerability disclosure information is available. Overall, the website is professional, secure, and trustworthy, with good technical implementation and business credibility.
- Arrabiata Solutions
arrabiata.de
Technology · Germany
56Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Arrabiata Solutions is a German-based digital agency specializing in technology and digital consulting services. The website presents a professional image with a clear focus on guiding clients through digital transformation journeys. The company targets businesses seeking digital solutions and consulting. The technical infrastructure is built on WordPress CMS using the Astra theme, enhanced with SEO and marketing tools such as Yoast SEO, HubSpot, and Google Tag Manager. Cookie consent mechanisms are implemented to comply with privacy regulations. Security posture is moderate with HTTPS enabled but lacks advanced security headers and published security policies. Privacy compliance is partial due to missing privacy and terms of service documents. Overall, the website is well-designed, mobile-optimized, and provides a good user experience but could improve transparency and security documentation.
4SELLERS4sellers.de
E-commerce · Germany
69Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
4SELLERS is a German-based company specializing in innovative ERP software solutions tailored for e-commerce businesses. Their platform aims to optimize trading processes and enhance online sales success, positioning them as a significant player in the e-commerce software sector. The website is professionally designed, leveraging HubSpot CMS and integrating modern analytics and cookie consent tools, reflecting a mature digital infrastructure. Security measures such as HTTPS and security headers are properly implemented, indicating a solid security posture. However, the absence of explicit privacy policies, terms of service, and contact information represents gaps in compliance and user trust facilitation. Overall, the site is accessible and trustworthy but would benefit from enhanced transparency and compliance documentation.
Education · Germany
62Medium
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
ibi research an der Universität Regensburg is an academic research institute affiliated with the University of Regensburg, specializing in digital commerce, payment systems, and related technological and economic research. The organization provides research studies, surveys, events, and networking opportunities targeting businesses, researchers, and professionals in the digital commerce and payment sectors. Their market position is that of an established academic entity with strong regional and sectoral partnerships. The website reflects a professional and consistent brand image with good content quality and navigation. Technically, the website employs modern front-end technologies including Font Awesome, Swiper, Alpine.js, and Google Analytics for tracking. The site is mobile optimized and performs moderately well, with good SEO practices and basic accessibility features. Security-wise, the site enforces HTTPS and implements cookie consent mechanisms compliant with GDPR. However, it lacks explicit security headers and publicly available security or incident response policies, which are areas for improvement. Overall, the security posture is solid but could be enhanced by adding security headers and vulnerability disclosure information. The domain registration data aligns well with the website's claims, indicating high legitimacy. No critical vulnerabilities or suspicious content were detected. The site is safe for general audiences and maintains good privacy compliance. Strategic recommendations include implementing additional security headers, publishing security policies and incident response contacts, and considering a vulnerability disclosure program to enhance trust and security culture.
- Eulerian
eulerian.com
Technology · France
58Medium
NIS2 17 · GDPR 58
NIS2 17 · GDPR 58
Eulerian is a French-based technology company specializing in marketing attribution, analytics, and activation through a SaaS platform. The website presents a professional and comprehensive marketing solution targeting marketing professionals and digital analysts. The platform supports multiple languages, indicating an international market approach. Technically, the site is built on WordPress using Elementor and Yoast SEO, ensuring good SEO and user experience. The site is mobile optimized and includes GDPR-compliant privacy and cookie policies, reflecting a mature digital presence. Security posture is good with HTTPS and consent mechanisms, though some security headers and policies could be improved. WHOIS data is missing or privacy protected, which slightly reduces trust but does not outweigh the professional presentation. Overall, Eulerian demonstrates a solid business and technical foundation with room for enhanced security transparency.
Automattic, Inc.underscores.me
Technology · United States
50Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
Underscores.me is a website offering a starter theme for WordPress developers, maintained by Automattic, Inc., a reputable company in the WordPress ecosystem. The site provides a minimal, well-structured theme framework designed for developers to build custom WordPress themes efficiently. The business model is open source and community-driven, targeting WordPress theme developers globally. The website is technically built on WordPress CMS with modern web technologies including HTML5, CSS3, JavaScript, and jQuery, and uses WordPress.com nameservers for hosting. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. From a security perspective, the website enforces HTTPS and has domain registration protections in place, but lacks DNSSEC and explicit security headers, which are recommended for enhanced security. No privacy or cookie policies are present, and Google Analytics is installed but not configured, indicating minimal user tracking. There is no visible incident response or vulnerability disclosure information, which could be improved to enhance trust and compliance. The domain WHOIS data is consistent with the business, showing a long-standing registration by Automattic, Inc., supporting the legitimacy of the site. Overall, the website is safe, professional, and trustworthy, with a strong business credibility and technical foundation. However, it would benefit from improved privacy compliance, security headers, and transparency regarding data protection and incident response. These enhancements would strengthen the site's security posture and regulatory compliance, aligning with best practices for modern web services.
- LLe Mans Métropole
lemansmetropole.fr
Government · France
63Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Le Mans Métropole operates as a French metropolitan government entity providing local administrative and public services to the Le Mans area. The website is built using modern JavaScript frameworks such as Nuxt.js and integrates Google Tag Manager for analytics. However, the provided HTML snapshot is minimal, indicating a server-side rendered SPA with dynamic content loading. The absence of WHOIS data from AFNIC limits transparency about domain registration details. Security posture is moderate with no visible security headers or explicit SSL configuration details, and privacy compliance is low due to missing privacy and cookie policies. Overall, the site appears legitimate but would benefit from enhanced transparency and security best practices.
- Volkswagen Bedrijfswagens
werkenbijvolkswagenbedrijfswagens.nl
Transportation · Netherlands
64Medium
NIS2 17 · GDPR 28
NIS2 17 · GDPR 28
Volkswagen Bedrijfswagens operates a specialized recruitment website targeting job seekers interested in commercial vehicle roles within the Volkswagen group in the Netherlands. The site offers job listings, candidate registration, and employer information, leveraging official Volkswagen branding and partnerships with Pon and AutomotiveVacaturebank.nl. Technically, the site uses a mature stack with jQuery and Bootstrap, is mobile optimized, and implements cookie consent mechanisms. Security posture is solid with HTTPS and secure forms, though lacks advanced security headers and explicit incident response policies. Overall, the site is professional, trustworthy, and well-aligned with its business purpose.
Škodawerkenbijskoda.nl
Transportation · Netherlands
64Medium
NIS2 17 · GDPR 28
NIS2 17 · GDPR 28
The website www.werkenbijskoda.nl serves as a specialized job portal focused on Škoda automotive dealership vacancies within the Netherlands. It is operated by AutomotiveVacaturebank.nl and VRT Media B.V., under the parent company Pon. The platform offers job listings, search functionalities, and candidate/employer portals tailored to the automotive sector, specifically Škoda dealers. The site is well-branded with official Škoda logos and links to verified social media channels, reinforcing its authenticity and market position as a niche recruitment platform. Technically, the site employs a modern JavaScript stack including jQuery and Bootstrap, with a CMS likely based on Concrete5. The site is mobile-optimized and SEO-friendly, providing a good user experience with clear navigation and relevant content.
- SEAT
werkenbijseat.nl
Transportation · Netherlands
64Medium
NIS2 17 · GDPR 28
NIS2 17 · GDPR 28
The website www.werkenbijseat.nl serves as a dedicated recruitment portal for SEAT automotive dealers in the Netherlands, offering a variety of job vacancies primarily targeting automotive professionals such as mechanics, service advisors, and salespersons. The platform is well-branded with SEAT and Pon affiliations, indicating a strong market position within the automotive recruitment niche. The site provides job search functionalities with filters by category, region, and function, supporting user engagement and candidate registration. Technically, the site employs a traditional web stack with jQuery plugins and Bootstrap, likely running on Concrete5 CMS, delivering a moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced and secure login forms, but lacks advanced security headers and visible incident response policies. Privacy compliance is basic with cookie consent implemented and a privacy policy present, though GDPR compliance details are minimal. Overall, the site is professional, trustworthy, and serves its business purpose effectively.
Audi Nederlandwerkenbijaudi.nl
Transportation · Netherlands
53Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
The website www.werkenbijaudi.nl serves as a professional recruitment platform dedicated to Audi and its dealer network in the Netherlands. It offers job listings, candidate registration, and employer information primarily targeting automotive sector job seekers. The site reflects Audi's brand values and is operated in partnership with AutomotiveVacaturebank.nl and VRT Media B.V., under the umbrella of Pon, a major automotive group. The content is well-structured, localized in Dutch, and optimized for user experience and SEO. Technically, the site employs a mature tech stack including jQuery, Bootstrap, and Slick Carousel, with a CMS likely based on Concrete5. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies could be improved. No critical vulnerabilities or suspicious content were detected, and the site maintains a high trust level with consistent WHOIS data and official branding.
Van den Udenhoutudenhout.nl
Transportation · Netherlands
71Medium
NIS2 10 · GDPR 83
NIS2 10 · GDPR 83
Van den Udenhout is a well-established automotive dealership in the Netherlands, specializing in Volkswagen, Audi, SEAT, Škoda, CUPRA, and Volkswagen commercial vehicles. The company holds a strong market position as one of the largest official brand dealers in the country, targeting Dutch consumers and commercial clients seeking new vehicles. The website reflects a professional business model focused on vehicle sales and related services. Technically, the site is built on Wenetic CMS and leverages modern web technologies including Google Tag Manager, Cookiebot for cookie consent, and multiple marketing and analytics tools. The site is mobile optimized and demonstrates good SEO practices. Security-wise, the website uses HTTPS with DNSSEC enabled and employs Cookiebot for GDPR compliance, but lacks explicit security headers and published security policies. No privacy policy or terms of service pages were found in the provided content, which is a compliance gap. Overall, the website is professional and trustworthy, with room for improvement in transparency and security documentation.
Transportation · Netherlands
74Medium
NIS2 2 · GDPR 43
NIS2 2 · GDPR 43
Van Tilburg-Bastianen is a well-established family-owned truck company founded in 1934, specializing as a leading DAF truck dealer with a strong presence in the Netherlands, Germany, and Poland. The company offers a comprehensive range of services including truck sales, service, parts, leasing, and rental, positioning itself as a top-5 DAF dealer in Europe. The website reflects a professional and consistent brand image with excellent content quality and user experience. Technically, the site is built on Drupal 10 and integrates modern analytics and marketing tools, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and policies could be improved. Privacy compliance is strong with clear policies and GDPR adherence. Overall, the domain registration and WHOIS data align well with the company's claims, indicating high legitimacy and trustworthiness.
Wealer Groepwealer.nl
Transportation · Netherlands
71Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Wealer Groep operates a professional automotive mobility platform in the Netherlands, offering new and used car sales, private leasing, and maintenance services. The website reflects a medium-sized business with a clear focus on providing easy mobility solutions to private and business customers. The technical infrastructure leverages modern JavaScript frameworks, a reputable CMS (Craft CMS), and integrates multiple analytics and marketing tools such as Google Analytics, Hotjar, and Mailchimp, indicating a mature digital presence. Security posture is strong with HTTPS enforcement, comprehensive cookie consent mechanisms, and appropriate security headers, although formal security policies and incident response contacts are not publicly documented. Overall, the website is trustworthy, well-designed, and compliant with GDPR requirements, serving its target audience effectively.
Ames Autobedrijfames.nl
Transportation · Netherlands
53Medium
NIS2 2 · GDPR 73
NIS2 2 · GDPR 73
Ames Autobedrijf is a well-established official car dealership in the Netherlands, specializing in Volkswagen, Audi, SEAT, and ŠKODA brands. With a history spanning 75 years, the company serves the Drechtsteden, Hoeksche Waard, and Ridderkerk regions, offering new and used car sales, leasing, financing, and comprehensive vehicle servicing including electric vehicle solutions. The website reflects a mature business with a strong regional presence and a focus on customer satisfaction, as evidenced by high customer ratings. Technically, the website employs modern web technologies including AngularJS, Google Tag Manager, Microsoft Clarity, and Google reCAPTCHA v3, ensuring a robust digital infrastructure. The site is mobile-optimized, uses HTTPS, and integrates GDPR-compliant cookie consent mechanisms, indicating a good level of digital maturity and privacy awareness. From a security perspective, the site enforces HTTPS and uses bot protection mechanisms, but lacks explicit security policies and vulnerability disclosure information. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the business claims, showing consistent registration details and domain age appropriate for the company's history. Overall, Ames.nl presents a professional, trustworthy, and secure online presence suitable for its business model. However, improvements in publishing privacy policies, terms of service, and security incident response information would enhance compliance and customer trust.
Bourguignonbourguignon.nl
Transportation · Netherlands
64Medium
NIS2 2 · GDPR 73
NIS2 2 · GDPR 73
Bourguignon is a regional mobility partner based in Friesland, Netherlands, specializing in automotive sales, leasing, rental, and maintenance services for multiple well-known brands including Volkswagen, Audi, SEAT, Škoda, and CUPRA. The company also extends its offerings to electric bikes and scooters through affiliated domains. The website demonstrates a professional and modern digital presence built on Next.js with integration of Google Tag Manager and Cookiebot for analytics and privacy compliance. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit privacy and security policies are not found in the scanned content. Overall, the domain registration aligns well with the business claims, indicating legitimacy and trustworthiness.
- Automotive Vacaturebank
vrtmedia.nl
Transportation · Netherlands
64Medium
NIS2 17 · GDPR 28
NIS2 17 · GDPR 28
Automotive Vacaturebank is a specialized online job board focused on the automotive sector in the Netherlands, offering a comprehensive platform for job seekers and employers. It holds a strong market position as the largest automotive vacancy bank in the country, providing services such as job listings, CV placement, email alerts, and an employer network. The website is professionally designed with good content quality and consistent branding, targeting automotive professionals and companies. Technically, the site uses a custom CMS with common JavaScript libraries and tracking tools like Google Analytics, Hotjar, and Google Tag Manager. Mobile optimization and SEO practices are good, though accessibility is basic. Security posture is adequate with HTTPS enforced and secure login forms, but lacks advanced security headers and public incident response information. Privacy compliance is supported by a cookie consent mechanism and a privacy policy, though GDPR-specific details are basic. Overall, the domain registration is consistent and trustworthy, with no signs of suspicious activity. The site integrates with multiple partner domains in the automotive recruitment ecosystem, enhancing its business credibility.
- Automotive Vacaturebank
automotivevacaturebank.nl
Transportation · Netherlands
64Medium
NIS2 17 · GDPR 28
NIS2 17 · GDPR 28
Automotive Vacaturebank is a specialized online job board focused on the automotive sector in the Netherlands, positioning itself as the largest automotive vacancy platform in the country. The website offers job listings, CV placement, email alerts, and an employer network, targeting job seekers and employers within the automotive industry. The business model revolves around providing a comprehensive recruitment platform tailored to automotive professionals and companies. Technically, the site uses a custom CMS with a jQuery-based frontend, integrating popular analytics and marketing tools such as Google Analytics, Hotjar, and Google Tag Manager. The site is mobile-optimized and features a cookie consent mechanism, reflecting a moderate level of digital maturity. Security-wise, the site enforces HTTPS and secure login forms but lacks advanced security headers and explicit security or incident response policies. No vulnerabilities or suspicious content were detected. Overall, the domain registration data aligns well with the website's business claims, supporting its legitimacy.
Porsche Leasing SCG d.o.oporscheleasing.rs
Finance · Serbia
75Medium
NIS2 17 · GDPR 65
NIS2 17 · GDPR 65
Porsche Leasing SCG d.o.o operates as a financial services provider specializing in vehicle financing, leasing, fleet management, and insurance partnerships in Serbia. The company leverages the Porsche brand to position itself as a premium leasing and financing option for customers seeking mobility solutions. The website reflects a professional and consistent brand image with clear service offerings and contact information. Technically, the site uses modern web technologies including Google Tag Manager and OneTrust for cookie consent, ensuring compliance with basic privacy requirements. Security posture is solid with HTTPS enforced, though explicit security headers and published security policies are absent. Overall, the site is trustworthy and well-maintained, serving its target audience effectively.
Transportation
73Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
The website www.ratp.fr is currently inaccessible due to a Cloudflare security challenge page employing Turnstile captcha verification. This prevents direct content access and analysis. The domain WHOIS data is not publicly available, likely due to privacy protection or registry restrictions, limiting verification of registrant details. The site appears to be related to transportation, inferred from the domain name, but no business or contact information is visible on the challenge page. The technical infrastructure includes Cloudflare security and analytics services, indicating a focus on security and performance. However, the lack of visible content, metadata, and policies restricts a full assessment of the website's digital maturity and compliance posture. Security posture cannot be fully evaluated due to missing headers and SSL details. Overall, the site is protected but currently opaque to external analysis.
Greenhouse Sportsgreenhousesports.org
Non-profit · United Kingdom
61Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Greenhouse Sports is a UK-based non-profit charity dedicated to developing young people through sport and mentoring. The organization focuses on embedding trusted Coach-Mentors in schools and communities to help young people overcome barriers related to poverty, education, and wellbeing. Their market position is that of a well-established charity with a strong community and school partnership network, supported by donors and corporate partners. The website reflects a professional and consistent brand image with comprehensive content about their mission, impact, and ways to support. Technically, the website is built on WordPress with modern SEO and performance optimizations including Yoast SEO, Google Tag Manager, and ShortPixel image optimization. It is mobile-optimized and accessible, with a cookie consent mechanism compliant with GDPR. Security posture is good with HTTPS enforced and bot management cookies present, though explicit security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. Overall, the site demonstrates a strong security and privacy posture for a non-profit, with clear privacy and cookie policies. However, it lacks publicly visible security policies or incident response contacts. The WHOIS data is privacy protected, which is justified for this type of organization. The domain appears legitimate based on website content and trust indicators. Recommendations include enhancing security headers, publishing a security policy and incident response information, and considering a vulnerability disclosure policy to further improve trust and security maturity.
Healthcare
68Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
The European Association for Cardio-Thoracic Surgery (EACTS) operates a comprehensive and professionally designed website serving the global cardiothoracic surgical community. The organization focuses on improving patient outcomes through education, research, publications, and community engagement. The website reflects a mature digital presence with extensive content including upcoming courses, clinical guidelines, and news updates. Technically, the site is built on WordPress with modern JavaScript libraries and integrates multiple tracking and marketing tools while maintaining GDPR compliance through a robust cookie consent mechanism. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security headers could be better documented. Overall, the site demonstrates high professionalism and trustworthiness, supporting its role as a leading healthcare association.
Go Squared Ltd.ecosend.io
Technology · United Kingdom
67Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
EcoSend is a SaaS email marketing platform dedicated to purpose-driven brands seeking sustainable growth without compromising their values. The company, Go Squared Ltd., based in Great Britain, launched the domain in 2022 and positions itself as a niche leader integrating climate impact into email marketing. The platform emphasizes authenticity, audience growth, and environmental responsibility, supported by a B Corp certification and a dedicated UK-based support team. Technically, the website is built on modern frameworks such as Next.js and hosted on Vercel, ensuring fast performance and excellent mobile optimization. Analytics tools like GoSquared and Google Tag Manager are used for user tracking. Security posture is good with HTTPS and domain transfer protection, but improvements are needed in DNSSEC and security headers. Privacy compliance is weak due to missing policies and consent mechanisms. Overall, the website is professional, trustworthy, and well-branded, but should enhance privacy and security transparency to improve compliance and user trust.
Ruokavirastooivahymy.fi
Government · Finland
53Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Oivahymy.fi is an official Finnish government website operated by Ruokavirasto (Finnish Food Authority) that provides consumers with up-to-date information on food industry inspection results. The platform serves as a public service portal aimed at enhancing transparency and consumer awareness regarding food safety inspections conducted by local authorities. The website is well-positioned as a trusted source of food safety data in Finland, supporting public health and regulatory compliance. Technically, the site is built as a modern Angular single-page application, leveraging PrimeNG UI components and custom styling. It is hosted on infrastructure associated with Sonera, a Finnish hosting provider, and employs HTTPS for secure communications. The site demonstrates good mobile optimization, accessibility, and SEO practices, although it lacks some advanced security headers and explicit security contact information. From a security perspective, the website maintains a solid posture with no detected vulnerabilities or exposed sensitive data. However, it could benefit from implementing additional HTTP security headers and publishing a formal security policy or incident response information. Privacy compliance is adequate, with clear privacy and cookie policies present, though no explicit consent mechanism for cookies is observed. Overall, Oivahymy.fi represents a credible, secure, and professionally maintained government information portal with a strong trust profile. Strategic recommendations include enhancing security headers, adding security contact channels, and improving cookie consent mechanisms to further strengthen compliance and user trust.
K-ryhmäk-ryhma.fi
Retail · Finland
62Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
K-ryhmä is a prominent Finnish retail cooperative group offering products, advice, and tips for everyday life. The website presents a professional and consistent brand image targeting general consumers in Finland. The business model focuses on retail services with a strong market position in the Finnish retail sector. Technically, the site uses modern frameworks such as Next.js and React, with Google Tag Manager integrated for analytics. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Security posture is solid with HTTPS enforced and no exposed sensitive data, but lacks explicit security headers and published security policies. Privacy compliance is limited due to missing visible privacy and cookie policies. Overall, the domain registration data aligns well with the business identity, indicating legitimacy and trustworthiness.
- EEurolandcom AB
euroland.com
Finance · Sweden
57Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
Euroland operates as a small finance-focused service provider specializing in investor relations and stock portal services. The website targets investors and shareholders, offering access to IR services and a stock portal platform. The business appears niche with a moderate market position in the finance sector, primarily serving Swedish clientele as indicated by the default country code and company name. Technically, the website uses standard web technologies such as Bootstrap, jQuery, and Google reCAPTCHA, but lacks advanced frameworks or CMS detection. The site is moderately optimized for mobile and performance but has basic SEO and accessibility features. Security posture is limited, with no visible HTTPS enforcement or security headers, though Google reCAPTCHA is implemented to protect forms. The absence of WHOIS registration data is a significant concern, impacting trust and legitimacy. Privacy and cookie policies are missing, and no incident response or vulnerability disclosure mechanisms are evident. Overall, the site is functional but requires improvements in security, compliance, and transparency to enhance trustworthiness and professional standing.
Marin Softwaremarinsoftware.com
Technology
69Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Marin Software is a technology company specializing in AI-driven performance marketing solutions. Recently acquired by Zax Capital, the company is focused on advancing its AI capabilities to provide forecasting, automation, and measurable marketing outcomes. The website reflects a mature SaaS business model targeting marketers and agencies with a suite of tools and managed services. Technically, the site is built on Webflow with integrations of major analytics and marketing platforms such as Google Analytics, Marketo, and Facebook Pixel. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and published security policies are absent. The WHOIS data is missing, which is unusual and slightly reduces trust, but the overall digital presence and business information suggest legitimacy.
- Viking Redningstjeneste
vikingredning.no
Transportation · Norway
61Medium
NIS2 2 · GDPR 95
NIS2 2 · GDPR 95
Viking Redningstjeneste is a prominent Norwegian roadside assistance and vehicle service provider offering a wide range of services including emergency roadside help, vehicle recovery, battery replacement, tire changes, and boat assistance. The company targets vehicle owners and drivers across Norway, emphasizing rapid response times and comprehensive coverage regardless of vehicle type or insurance status. Their market position is strong within the transportation sector in Norway, supported by a professional and well-structured website that clearly communicates their services and value proposition. Technically, the website is built on modern frameworks such as Next.js and React, utilizing advanced analytics and marketing tools including Google Tag Manager, Fathom Analytics, RudderStack, and Cookiebot for privacy compliance. The site is mobile-optimized, fast-loading, and accessible, reflecting a mature digital infrastructure. However, explicit security headers are not detected, which could be improved to enhance security posture. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism aligned with GDPR requirements. No critical vulnerabilities or exposed sensitive data were identified in the analysis. The absence of WHOIS data due to privacy protection limits domain registration trust verification, but the professional presentation and comprehensive privacy policy support legitimacy. Contact information is limited to a phone number, with no public email address found. Overall, Viking Redningstjeneste presents a secure, professional, and user-friendly online presence suitable for its business model. Strategic improvements in security headers, contact transparency, and formal security policies could further strengthen trust and compliance.
Rebil Mobility ASrebil.no
Transportation · Norway
73Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
Rebil Mobility AS operates a professional online platform for buying and selling used cars in Norway, positioning itself as the country's largest used car dealer with a strong focus on customer trust and convenience. The company offers services including vehicle valuation, home pickup for car sales, and a selection of workshop-checked used cars for buyers. Their market presence is reinforced by partnerships with major financial and insurance institutions and extensive positive customer feedback on Trustpilot. Technically, the website is built on the Webflow CMS platform and integrates a modern technology stack including Google Tag Manager, Facebook and TikTok pixels, HubSpot CRM, and PostHog analytics. The site is well-optimized for performance, mobile responsiveness, and accessibility, with comprehensive SEO and user experience design. From a security perspective, the site enforces HTTPS and employs error monitoring via Sentry, but lacks explicit published security policies or incident response contacts. The WHOIS data is not publicly available, likely due to privacy protection, which is common and justified for commercial entities in Norway. Overall, the site demonstrates a strong security posture with room for improvement in transparency and security header implementation. The overall risk assessment is low, with the site showing high professionalism, trustworthiness, and compliance with privacy regulations. Strategic recommendations include enhancing security header deployment, publishing a security policy, and establishing a vulnerability disclosure program to further strengthen trust and security culture.
- Gire
giremobility.com
Transportation · Norway
54Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Gire is a Scandinavian vehicle transportation service specializing in on-demand car transport across Norway, Denmark, Sweden, and the Netherlands. The company offers services to both private individuals and businesses, including used car transport, fleet logistics, and service market deliveries. Their market position is strengthened by partnerships with major automotive companies and a strong presence in key cities such as Oslo, Bergen, and Trondheim. The website reflects a professional and modern digital presence, leveraging Webflow CMS, Google Tag Manager, Plausible Analytics, and Cookiebot for privacy compliance. The site is well-optimized for mobile and accessibility, with clear navigation and rich content including news updates and partner logos. Security posture is strong with HTTPS enforced and appropriate security headers, though explicit security policies and incident response contacts are not publicly disclosed. WHOIS data is unavailable, which slightly reduces trust but is offset by the professional business presentation and reputable partnerships. Overall, Gire demonstrates a mature digital infrastructure and a solid market presence in the transportation sector.
Bildusjenbildusjen.no
Transportation · Norway
73Medium
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Bildusjen is a Norwegian small business specializing in brushless car wash services, offering efficient, gentle, and affordable vehicle cleaning solutions. The company targets both private and business customers, providing app-based access and tailored business services. The website is built on Squarespace, leveraging modern web technologies including Matomo analytics and Crisp live chat, with a strong focus on user experience and mobile optimization. Security posture is robust with HTTPS and HSTS enabled, complemented by a comprehensive cookie consent mechanism that aligns with GDPR requirements. However, the absence of explicit privacy policy and terms of service pages represents an area for improvement. Overall, Bildusjen presents a trustworthy and professional online presence consistent with its business profile.
- MMittdekkhotell AS
mittdekkhotell.no
Transportation · Norway
60Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
Mittdekkhotell AS operates a leading tire storage and wheel change service chain in Norway, offering services including tire storage (dekkhotell), tire and rim sales, and customer loyalty programs. The company targets private vehicle owners seeking convenient and secure tire management solutions. The website reflects a professional and consistent brand presence with multiple physical locations and a customer portal for service management. Technically, the site is built on WordPress with WooCommerce, leveraging modern web technologies and tracking tools such as Google Analytics, Facebook Pixel, and Cookiebot for consent management. The site is mobile-optimized and SEO-friendly, providing a good user experience. Security posture is strong with HTTPS enforcement and security headers, though the absence of published security policies and incident response information is noted. The lack of WHOIS data for the domain raises some concerns about domain registration transparency, but the overall business credibility remains high based on website content and contact information.
Hyre AShyre.no
Transportation · Norway
69Medium
NIS2 17 · GDPR 65
NIS2 17 · GDPR 65
Hyre AS operates a modern car rental platform primarily serving Norway and other Scandinavian countries. The company leverages a mobile app to provide users with easy access to rental cars, enabling instant unlocking and flexible rental durations. Their business model includes both consumer and corporate offerings, such as subscription passes and mobility plans for businesses. The website demonstrates a mature digital presence with strong app store ratings and comprehensive service information. Technically, the site uses modern frameworks like Next.js and Mantine, integrates Google Maps and Stripe for payments, and shows good performance and mobile optimization. Security posture is solid with HTTPS and secure payment integration, though explicit security policies and incident response details are not publicly disclosed. Overall, Hyre presents a trustworthy and professional service with a strong market position in the Scandinavian car rental sector.
Volkswagen Møller Bilfinans ASbilfinans.no
Finance · Norway
75Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Volkswagen Møller Bilfinans AS is a leading Norwegian financial services company specializing in vehicle leasing, financing, and insurance for both private and business customers. The company positions itself as one of Norway's largest leasing companies, offering a broad range of services including private leasing, business leasing, car loans, insurance, and vehicle maintenance. Their partnerships with major automotive brands such as Volkswagen, Audi, Skoda, and Cupra reinforce their market presence and credibility. Technically, the website is built on Adobe Experience Manager, utilizing modern web technologies including Adobe Helix RUM for performance monitoring and Adobe DTM for tag management. The site is mobile-optimized, accessible, and SEO-friendly, with a moderate performance profile. The use of secure login portals with BankID authentication demonstrates a commitment to secure customer interactions. From a security perspective, the site enforces HTTPS and employs secure authentication methods. However, it lacks visible security headers and a cookie consent mechanism, which are important for compliance and security best practices. There is no publicly available incident response or security policy information, and direct company contact details are not prominently displayed, which could impact user trust and support responsiveness. Overall, the website is professional, trustworthy, and well-branded, with a strong business model and market position. The absence of WHOIS data due to privacy protection is typical for Norwegian domains but limits domain age and registrant verification. The site is safe for general audiences with no adult or questionable content detected.
SEATseat.no
Other · Norway
71Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website seat.no presents a minimal online presence with very limited content and no visible business or contact information. The domain was registered in 2018, indicating a relatively new entity, but the site lacks essential elements such as privacy policies, cookie consent mechanisms, and terms of service. The technical infrastructure is basic, relying on deferred JavaScript files and minimal metadata without advanced SEO or accessibility features. Security posture is weak due to the absence of security headers and unclear SSL configuration. Overall, the site appears to be in an early or placeholder stage, limiting its trustworthiness and user engagement potential.
- Møller Bil
mollerbil.no
Transportation · Norway
75Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Møller Bil is Norway's largest car dealership chain specializing in Volkswagen, Audi, Skoda, and Volkswagen commercial vehicles. The company offers a comprehensive range of services including new and used car sales, vehicle servicing, EU inspections, tire services, and damage repairs. As a subsidiary of Møller Mobility Group, it holds a strong market position with a large network of dealerships and specialized repair centers across Norway. The website reflects a mature digital presence with a modern tech stack based on Next.js and Sanity CMS, optimized for performance and mobile use. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response information are not publicly detailed. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site demonstrates high professionalism, trustworthiness, and user engagement through social media integration.
Other · Bosnia and Herzegovina
68Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website olx.ba is currently inaccessible due to a Cloudflare Turnstile CAPTCHA challenge page that blocks direct access to its content. As a result, no business, contact, or policy information is available for analysis. The site appears to be protected by Cloudflare's security mechanisms, indicating an intent to prevent automated access or abuse. Without access to the actual website content, it is not possible to assess the business model, services, or compliance posture accurately. The technical infrastructure includes Cloudflare's security platform, but no further technology stack details can be confirmed. Security posture cannot be fully evaluated due to lack of accessible data, though the presence of Cloudflare indicates some level of protection. Overall, the site is currently low risk but also low transparency due to content blocking.
Qode Interactiveedge-themes.com
Technology
72Medium
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
Qode Interactive is a well-established WordPress theme author founded in 2011, offering a large portfolio of over 150 premium WordPress themes under the Edge brand. The company targets web designers, developers, and agencies seeking high-quality, customizable WordPress themes. Their business model focuses on digital product sales, including themes and plugins, supported by affiliate marketing and digital downloads. The website demonstrates a good level of digital maturity, utilizing modern WordPress plugins such as Easy Digital Downloads, WPBakery Page Builder, and Slider Revolution, alongside integration with Google Tag Manager and Facebook SDK for analytics and marketing purposes. Hosting and DNS are managed via Cloudflare, providing reliable infrastructure and SSL encryption.
- Cookie Info Script
cookieinfoscript.com
Technology · Germany
67Medium
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
Cookie Info Script is a small technology service providing a free, lightweight JavaScript solution to help websites comply with the EU Cookie Law. The website offers easy-to-use cookie consent banners with customization options, targeting website owners and developers who need to meet regulatory requirements without programming expertise. The business operates on a free service model supported by advertising and donations, positioning itself as a niche player in the cookie compliance market. Technically, the site uses modern web technologies including jQuery, Google Fonts, Google Tag Manager, and analytics services such as Google Analytics and Yandex Metrica. Hosting is provided via Amazon Web Services with Cloudflare CDN, ensuring good performance and security. The site is mobile-optimized and accessible, with clear navigation and professional design. Security posture is solid with HTTPS enforced and a cookie consent mechanism implemented, though some security headers and explicit security policies are absent. Privacy compliance is strong, with comprehensive privacy and cookie policies and GDPR compliance clearly indicated. Overall, the domain registration is legitimate and consistent with the business history, enhancing trustworthiness.
- vivenu
vivenu.com
Technology
70Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
vivenu is a technology company founded in 2019 that offers a flexible and advanced white-label event ticketing platform designed for enterprises and event organizers. The platform emphasizes brand-centric ticketing, powerful analytics, and customization through APIs and SDKs. The website demonstrates a high level of digital maturity with modern technologies such as Next.js, Segment Analytics, and Cloudflare DNS, providing a fast and mobile-optimized user experience. Security posture is good with HTTPS and domain locking, but lacks published security policies and DNSSEC. Privacy compliance is limited due to missing explicit privacy and cookie policies. Overall, vivenu presents a professional and trustworthy online presence with room for improvement in privacy and security transparency.
- KKosmocar
luxuryhire.gr
Transportation · Greece
71Medium
NIS2 2 · GDPR 95
NIS2 2 · GDPR 95
Luxury Hire by Kosmocar is a premium car rental service specializing in luxury vehicles in Athens, Greece. The website is professionally designed, leveraging the Kosmocar brand to position itself as a trusted provider in the luxury transportation sector. Key services include luxury car rentals with an online quote request form, targeting affluent individuals and businesses. The site integrates modern marketing and analytics tools such as Google Analytics, Facebook Pixel, and Cookiebot for consent management, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforcement and standard security headers, though some improvements are recommended such as updating legacy libraries and publishing explicit security policies. Privacy compliance is well addressed through a comprehensive cookie consent mechanism and a detailed privacy policy, though direct contact information is limited to a web form. Overall, the site presents a trustworthy and professional front with room for enhanced transparency and technical modernization.
- KKOSMORIDE e-Bike Stores
kosmoride.gr
Transportation · Greece
65Medium
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
KOSMORIDE e-Bike Stores operates as a retail business specializing in electric bicycles, e-scooters, and nano cars, targeting the Greek market. The website presents a professional and consistent brand image with a focus on e-mobility products. The business positions itself as the first network of stores dedicated to electric mobility in Greece, catering to consumers interested in sustainable transportation solutions. Technically, the website is built on WordPress with WooCommerce and Elementor, leveraging modern plugins and tracking technologies such as Google Analytics, Facebook Pixel, and TikTok Pixel. Cookie consent is managed via Cookiebot, indicating awareness of privacy regulations. Security posture is adequate with HTTPS enabled, but lacks some security headers and explicit security policies. No privacy policy or terms of service pages were detected, which is a compliance gap. Overall, the website is functional, moderately optimized, and trustworthy but could improve in privacy and security transparency.
Volkswagenvolkswagen-commercial-vehicles.gr
Transportation · Greece
71Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Volkswagen Greece operates a professional and comprehensive website dedicated to commercial vehicles, targeting business customers and professionals in the transportation sector. The site offers detailed information about Volkswagen's commercial vehicle offerings, including configuration tools, test drive bookings, and access to an authorized dealer network. The digital infrastructure is modern, leveraging Adobe Experience Manager CMS and React-based technologies, ensuring a responsive and user-friendly experience. Security practices are robust with HTTPS enforcement and security headers, although explicit security policies and incident response details are not published. Overall, the website reflects a mature digital presence aligned with Volkswagen's global brand standards.
- Aftermarket.pl Limited
vwu-finansowanie.pl
Finance · Poland
73Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
Aftermarket.pl Limited operates a leading domain marketplace platform primarily serving the Polish market, offering domain sales, auctions, and related services such as hosting, mail, and SSL certificates. The platform targets domain buyers and sellers, especially in the finance sector, and positions itself as the largest domain marketplace in Poland. The website provides comprehensive transactional and business information, including VAT invoicing and account verification for purchases, enhancing trust and compliance. Technically, the site employs modern web technologies including JavaScript frameworks, Google Analytics, and service workers, with good mobile optimization and SEO practices. Security posture is strong with HTTPS enforcement, CSRF protections, and cookie consent mechanisms, although some security headers could be improved. Privacy compliance is robust with detailed GDPR-aligned policies and cookie consent. Overall, the site is professional, trustworthy, and well-positioned in its market niche.
- Volkswagen Group Polska Sp. z o.o.
dasweltauto.pl
Transportation · Poland
62Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Das WeltAuto is a certified used car program operated under the Volkswagen Group Polska Sp. z o.o., targeting Polish consumers seeking reliable used vehicles with verified history and warranty. The website serves as a branded platform linking to various Volkswagen Group brand certified used car programs including Volkswagen, Seat, Skoda, Cupra, and Volkswagen commercial vehicles. The business model focuses on providing trust and quality assurance in the used car market segment, leveraging the strong brand equity of Volkswagen Group. The domain age and WHOIS data support the legitimacy and established presence of the program since 2010. Technically, the website employs modern JavaScript modules, Google Tag Manager, and CookieHub for cookie consent management, indicating a moderate to good level of digital maturity. The site is mobile optimized with good SEO practices and a professional design. However, no CMS or specific frameworks were detected, and hosting details are limited to registrar information. From a security perspective, the site uses HTTPS with good SSL configuration and implements cookie consent mechanisms compliant with GDPR. However, no explicit security headers were detected, and no dedicated security or incident response policies are published on the site. The use of third-party analytics and tracking is transparent and managed via consent. Overall, the security posture is adequate but could be improved with additional headers and published policies. The overall risk assessment is low with no critical vulnerabilities or suspicious indicators found. Strategic recommendations include enhancing security headers, publishing security policies and incident response contacts, and maintaining regular audits of third-party scripts. The site is trustworthy and professionally managed, supporting Volkswagen Group's brand reputation in the Polish used car market.