Medium-risk security reports
99,067 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,187001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
34,151–34,200 of 99,067
Typeformvideoask.com
Technology
64Medium
NIS2 2 · GDPR 65
NIS2 2 · GDPR 65
VideoAsk by Typeform is a technology company offering an interactive video platform designed to enhance business communications through video funnels, AI-powered chatbots, and multimedia messaging. The platform targets businesses aiming to improve recruitment, sales, marketing, and customer engagement processes at scale. The website demonstrates a strong market position with over 10,000 companies using the service, supported by professional branding and comprehensive content. Technically, the site leverages modern frameworks such as React and Next.js, ensuring fast performance and mobile optimization. Security measures include HTTPS enforcement and cookie consent mechanisms, though explicit security policies and incident response contacts are not publicly detailed. Overall, the site presents a trustworthy and professional digital presence with good privacy compliance.
- CallPage
callpage.io
Technology
68Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
CallPage is a technology company specializing in SaaS solutions that convert website traffic into sales calls using real-time engagement tools such as click-to-call widgets, AI Voice Agents, virtual PBX systems, and meeting scheduling tools. The company targets marketing, sales, and support teams aiming to increase lead generation and improve customer interaction efficiency. With over 1,500 companies using their platform, CallPage holds a solid market position supported by positive customer testimonials and a strong online presence. Technically, the website is built on modern frameworks like Next.js and integrates multiple analytics and marketing tools, demonstrating a mature digital infrastructure. Security posture is robust with HTTPS, security headers, and no visible vulnerabilities, although incident response and vulnerability disclosure policies are not explicitly published. Privacy compliance is well addressed with clear privacy and cookie policies, including GDPR considerations. Overall, CallPage presents a professional, trustworthy, and technically sound online presence suitable for its business model.
Škoda Autowelovecycling.com
Transportation
73Medium
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
Škoda We Love Cycling is a professionally managed digital media platform dedicated to cycling culture, stories, and events, sponsored by the automotive manufacturer Škoda Auto. The website serves as a niche content hub targeting cycling enthusiasts and the general public interested in cycling-related content. It leverages a modern WordPress CMS infrastructure with SEO and analytics tools integrated, ensuring a high-quality user experience and strong digital presence. The platform is internationalized with multiple country-specific versions, reflecting a broad market reach. Security measures such as HTTPS and Google reCAPTCHA are implemented, although additional security headers and cookie consent mechanisms could enhance compliance and protection. The absence of WHOIS data is likely due to privacy protection, which is justified for a brand-affiliated site. Overall, the site demonstrates a high level of professionalism, trustworthiness, and technical maturity.
- CUPRA
cupra-sklep.pl
Retail · Poland
56Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
The website cupra-sklep.pl serves as the official online store for CUPRA accessories and branded merchandise in Poland. It offers a comprehensive catalog of original car accessories, lifestyle products, and detailed information about CUPRA vehicle models. The site targets CUPRA car owners and enthusiasts, providing a seamless e-commerce experience with dealer contact information and social media integration. Technically, the site is built on modern frameworks such as Next.js and React, with integrations for Google Tag Manager and cookie consent management, indicating a mature digital infrastructure. Security posture is solid with HTTPS enabled and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is addressed with clear privacy and cookie policies, and contact information is readily available. Overall, the site presents a professional and trustworthy brand presence with moderate to good technical and security standards.
- ibi research der Universität Regensburg
zahlungsverkehrsforum.de
Finance · Germany
58Medium
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
The website zahlungsverkehrsforum.de represents a professional, finance-focused conference organized by ibi research at Universität Regensburg. It targets professionals and executives in the payment and finance sectors, offering a two-day event covering innovations, trends, and technologies such as Instant Payments, digital central bank money, and cross-border payment systems. The site provides detailed event schedules, speaker profiles with LinkedIn and Xing links, and embedded multimedia content to enhance user engagement. Technically, the site uses modern web technologies including Bootstrap, Font Awesome, Google Fonts, Google Maps API, and Vimeo for video content. Cookie consent with opt-in mechanisms and Google Analytics with IP anonymization indicate attention to privacy compliance. However, explicit contact information, terms of service, and security policies are not prominently available. Security posture is moderate with room for improvement in headers and incident response transparency. Overall, the site is professional, trustworthy, and well-positioned within its niche.
Technology
58Medium
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
The International Software Architecture Qualification Board (iSAQB®) operates as a leading non-profit organization specializing in the certification and training of software architects globally. Their flagship certification, CPSA®, is widely recognized and supported by a network of accredited training providers and partners. The website reflects a mature and professional digital presence, emphasizing quality education and certification standards in the software architecture domain. Technically, the website is built on WordPress with a modern tech stack including Yoast SEO, Bootstrap, and various plugins for content management, multilingual support, and cookie consent. The site is well-structured with comprehensive metadata and structured data enhancing SEO and social sharing capabilities. Performance and mobile optimization are good, providing a positive user experience. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms, but lacks explicit security headers and detailed privacy policies. No vulnerabilities or suspicious activities were detected. The absence of WHOIS data limits domain registration trust analysis, but the overall professionalism and content quality support a strong legitimacy stance. Overall, iSAQB® presents a trustworthy and authoritative platform for software architecture certification, with recommendations to enhance privacy disclosures and security headers to further strengthen compliance and security posture.
Software & Support Media GmbHmad-summit.de
Technology · Germany
58Medium
NIS2 17 · GDPR 60
NIS2 17 · GDPR 60
MAD Summit is a specialized event organizer focusing on developer experience, API design, software design, and modernization workshops primarily in Germany. The company, Software & Support Media GmbH, positions itself as a niche provider of high-quality training events targeting developers, engineers, CTOs, and tech enthusiasts. The website reflects a professional and consistent brand image with clear calls to action for event registration and detailed program information. Technically, the site is built on WordPress with modern plugins for SEO, cookie consent, and analytics, hosted behind Cloudflare for performance and security. Security posture is strong with HTTPS, reCAPTCHA protection, and GDPR-compliant cookie management, though some security headers could be improved. Overall, the site demonstrates good digital maturity and compliance with privacy regulations. No critical vulnerabilities or suspicious indicators were found, making it a trustworthy platform for its audience.
Software & Support Media GmbHentwickler-konferenz.de
Technology · Germany
62Medium
NIS2 47 · GDPR 60
NIS2 47 · GDPR 60
The website entwickler-konferenz.de represents EKON 29, a specialized developer conference focused on Delphi programming, organized by Software & Support Media GmbH. The event is scheduled for October 27-29, 2025 in Düsseldorf, Germany, targeting developers and technology professionals interested in Delphi. The site provides detailed event information, ticket offers, and session details, positioning itself as a niche leader in the Delphi developer community. Technically, the site is built on WordPress with modern plugins for SEO, cookie consent, and analytics, hosted behind Cloudflare for performance and security. Security measures include HTTPS, Google reCAPTCHA for forms, and a comprehensive cookie consent mechanism, though some security headers could be improved. Privacy compliance is strong with GDPR-aligned policies and consent management. Overall, the site is professional, trustworthy, and well-structured, with room for enhancements in security policy transparency and terms of service documentation.
- 44INSIDER
4insider.com
Education · Austria
65Medium
NIS2 2 · GDPR 80
NIS2 2 · GDPR 80
4INSIDER is a specialized online knowledge platform founded in 2015, focusing on HR and Marketing professionals primarily in German-speaking regions, notably Austria. The platform offers free online conferences, a media library with on-demand content, and a blog to enhance professional skills. The business model centers on community engagement and knowledge sharing, positioning itself as a niche educational resource. Technically, the website is built on WordPress with modern plugins and privacy-respecting analytics (Matomo). The site is well-optimized for SEO, mobile-friendly, and provides a professional user experience. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and policies could be improved. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.
Software & Support Media GmbHjavascript-days.de
Education · Germany
64Medium
NIS2 17 · GDPR 60
NIS2 17 · GDPR 60
JavaScript Days is a well-established event organizer specializing in developer training focused on JavaScript, Angular, and related technologies. The website effectively promotes upcoming events in Berlin and Munich, offering a comprehensive schedule of workshops and bootcamps targeting a broad developer audience. The business model centers on educational events and training services, supported by a professional digital presence with strong branding and clear communication. Technically, the site is built on WordPress with modern plugins for SEO, cookie consent, and analytics, hosted behind Cloudflare for performance and security. The security posture is solid with HTTPS, reCAPTCHA, and consent management, though some improvements in security policy transparency and library updates could enhance resilience. Overall, the site demonstrates good compliance with GDPR and provides sufficient contact and privacy information, positioning it as a credible and trustworthy platform in the education technology sector.
Software & Support Media GmbHsoftware-architecture-summit.de
Technology · Germany
63Medium
NIS2 17 · GDPR 60
NIS2 17 · GDPR 60
Software & Support Media GmbH operates the Software Architecture Summit, a professional event focused on modern software architecture training and bootcamps held in Berlin and München. The website presents a well-structured, professionally designed platform targeting developers, engineers, and technology enthusiasts. It leverages WordPress CMS with advanced SEO and cookie consent mechanisms, ensuring GDPR compliance and a positive user experience. The technical infrastructure includes modern libraries and integrations such as Google Analytics, Facebook Pixel, and Google Tag Manager, hosted behind Cloudflare for performance and security. Security posture is strong with HTTPS enforcement and bot protection via Google reCAPTCHA, though some security headers could be improved. Overall, the site demonstrates a mature digital presence with transparent privacy practices and clear business information.
Global Insight Conferences Ltdtheemailconference.com
Other · United Kingdom
72Medium
NIS2 2 · GDPR 95
NIS2 2 · GDPR 95
Global Insight Conferences Ltd operates the Advanced Email Conference website, providing specialized conferences focused on email marketing in the UK and Europe. The company positions itself as a leading independent organizer with over 14 years of market presence, targeting brand-side email marketing professionals. The website is content-rich, professionally designed, and optimized for user experience and SEO. Technically, it leverages WordPress with Elementor, integrates Google Analytics and HubSpot for marketing and analytics, and implements a comprehensive cookie consent mechanism. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, though some security headers and policies could be improved. The absence of WHOIS domain registration data is a notable concern that requires verification to confirm domain legitimacy. Overall, the site demonstrates strong business credibility and privacy compliance, but would benefit from enhanced transparency around security policies and incident response.
- ibi research GmbH
ecommerce-tag.de
E-commerce · Germany
58Medium
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
The ecommerce-tag.de website represents a professional event platform organized by ibi research GmbH, focusing on the E-Commerce-Tag Regensburg 2025. It serves as a central hub for digital commerce stakeholders including retailers, manufacturers, and service providers, offering detailed event schedules, speaker profiles, and sponsorship opportunities. The site demonstrates a mature digital presence with modern web technologies such as Bootstrap, Google Analytics, and Google Maps API integrated for enhanced user experience and functionality. The content is rich, well-structured, and targeted towards a German-speaking audience interested in e-commerce trends and innovations. Technically, the site is hosted on INWX nameservers, uses HTTPS with good SSL configuration, and implements cookie consent mechanisms aligned with GDPR requirements. While some security headers are not explicitly detected, the site follows best practices like IP anonymization in analytics and opt-in cookie consent. No critical vulnerabilities or exposed sensitive data were found in the provided content. The WHOIS data aligns well with the website's business purpose, indicating a consistent and legitimate domain registration. Overall, the security posture is solid but could be improved by adding explicit security policies and headers. The privacy compliance is good with a comprehensive privacy policy and cookie consent. The business credibility is high, supported by professional content, detailed speaker information, and reputable sponsors. The site is safe for general audiences with no adult or questionable content detected.
- entwickler.de
entwickler-summit.de
Technology · Germany
73Medium
NIS2 55 · GDPR 100
NIS2 55 · GDPR 100
entwickler.de operates as a prominent German technology community platform, organizing the Entwickler Summit, a free tech event connecting decades of software development experience with future industry trends. The platform targets software developers and tech enthusiasts, offering community engagement, knowledge sharing, and event services. Technically, the website is built on WordPress CMS with Elementor for layout and WooCommerce for e-commerce functionalities, supported by modern analytics and marketing tools such as Google Analytics, Microsoft Clarity, and various advertising pixels. Security measures include HTTPS enforcement, Google reCAPTCHA for form protection, and GDPR-compliant cookie consent management, although additional HTTP security headers could enhance the security posture. Overall, the website is professional, well-structured, and compliant with privacy regulations, making it a trustworthy resource for its audience.
- HighText Verlag Graf und Treplin OHG
hightext.de
Media · Germany
68Medium
NIS2 2 · GDPR 43
NIS2 2 · GDPR 43
HighText Verlag is a specialized German media publishing company with a strong focus on new media, marketing, and communication sectors. It operates multiple niche portals and services such as iBusiness, press1, ONEtoONE, and Versandhausberater, providing premium content, press release distribution, and industry insights primarily for professionals and decision-makers in marketing and media. The company has a long history dating back to 1991 and maintains a reputable market position in Germany. Technically, the website uses modern frameworks like Bootstrap and privacy-focused analytics (Matomo), with a cookie consent mechanism that complies with GDPR. Security posture is moderate with room for improvement in HTTP security headers and legacy form security. Overall, the website is professional, well-branded, and trustworthy, with no signs of blocking or suspicious activity.
Technology · Germany
75Medium
NIS2 47 · GDPR 80
NIS2 47 · GDPR 80
BVDW – Bundesverband Digitale Wirtschaft (BVDW) e.V. is a prominent German digital economy association that unites digital professionals and companies to shape the future of digital business and policy. The website showcases a comprehensive range of services including certifications, events, training programs, and advocacy initiatives aimed at fostering innovation and responsible digital transformation. The organization targets digital economy stakeholders primarily in Germany and Europe, positioning itself as a leading industry expert and community hub. Technically, the website is built on WordPress with modern enhancements such as Yoast SEO Premium for search optimization, Borlabs Cookie for GDPR-compliant cookie management, and jQuery and Swiper.js for interactive elements. The site is mobile-optimized, accessible, and performs moderately well, reflecting a mature digital infrastructure. SEO and structured data usage further enhance its discoverability and professional presentation. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, demonstrating good privacy compliance. However, it lacks explicit security headers and a published security.txt file, which are recommended for improved security posture. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data due to privacy protection does not detract from the site's legitimacy, supported by consistent branding, social media presence, and partner affiliations. Overall, BVDW's website reflects a trustworthy, professional, and well-maintained digital presence suitable for its role as a digital economy association. Strategic improvements in security headers and incident response transparency would further enhance its security maturity and stakeholder trust.
Werben & Verkaufenwuv.de
Media · Germany
71Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
W&V (Werben & Verkaufen) is a well-established German media platform specializing in marketing, advertising, media, and related industry news. It targets marketing decision-makers, advertisers, and media professionals with comprehensive news, trends, case studies, and analyses. The platform offers digital content, membership subscriptions, events, and job listings, positioning itself as a key media player in the German marketing sector. The website is professionally designed, mobile-optimized, and provides a good user experience with clear navigation and rich content.
Easy Social Share Buttons for WordPress Teamsocialsharingplugin.com
Technology
53Medium
NIS2 17 · GDPR 65
NIS2 17 · GDPR 65
Easy Social Share Buttons for WordPress is a specialized software provider offering a comprehensive social media plugin for WordPress websites. The company positions itself as a market leader with a lifetime license business model, targeting WordPress users from beginners to professionals. Their product suite includes social sharing buttons, follower counters, subscribe forms, chat features, and advanced analytics, supported by a professional website with strong SEO and marketing integrations. The company appears to be small but focused on delivering a high-quality, feature-rich plugin with active customer support and continuous updates. Technically, the website is built on WordPress with modern frameworks like Elementor and optimized with WP Rocket, ensuring good performance and mobile responsiveness. Security posture is solid with HTTPS and some security best practices, though explicit security policies and privacy compliance documentation are lacking. Overall, the domain registration data supports the legitimacy and maturity of the business. Strategic improvements in privacy and security policy transparency would enhance trust and compliance.
L'Idem Animation Schoollidembarcelona.com
Education · Spain
68Medium
NIS2 17 · GDPR 65
NIS2 17 · GDPR 65
L'Idem Animation School is an international digital arts educational institution with over 25 years of experience, operating campuses in Spain and France. The website presents a professional and well-structured digital presence, leveraging WordPress with the Divi theme and integrating multiple marketing and analytics tools such as TikTok Pixel, LinkedIn Insight, and Google Tag Manager. While the technical infrastructure is modern and the site is mobile-optimized with good SEO practices, there is a notable absence of publicly available WHOIS domain registration data, which raises concerns about domain legitimacy and registration transparency. Security measures include HTTPS and reCAPTCHA, but the lack of comprehensive security headers and published security policies suggests room for improvement. Privacy compliance is basic, with a cookie consent mechanism present but no clear privacy policy or contact information visible. Overall, the website is functional and trustworthy from a user perspective but requires enhanced transparency and security documentation to strengthen its risk profile.
- Mobility Trader UK Limited
heycargroup.com
Transportation · United Kingdom
71Medium
NIS2 2 · GDPR 85
NIS2 2 · GDPR 85
Heycar UK, operated by Mobility Trader UK Limited, is a reputable online marketplace specializing in used car sales and car finance services within the United Kingdom. The platform offers thousands of quality-checked used cars, either directly or through trusted dealers, backed by a 10-day money-back guarantee. The website targets UK consumers seeking reliable used vehicles and financing options, positioning itself as a trusted intermediary in the automotive resale market. The company was founded in 2019 and leverages a mature domain registered since 2008, indicating a stable online presence. Technically, the website is built on modern frameworks such as Next.js and React, hosted on Amazon AWS infrastructure, and integrates multiple third-party services including Stripe for payments, Google Maps for location services, and a consent management platform for GDPR compliance. The site demonstrates good performance, mobile optimization, and SEO practices, contributing to a positive user experience. From a security perspective, heycar.com enforces HTTPS, employs clientTransferProhibited domain status to prevent unauthorized transfers, and uses reCAPTCHA and CMP scripts to enhance security and privacy compliance. However, it lacks explicit security policies, incident response contacts, and DNSSEC, which are areas for improvement. No critical vulnerabilities or suspicious activities were detected. Overall, heycar.com presents a professional, trustworthy, and user-friendly platform with a solid technical foundation and moderate privacy compliance. Strategic enhancements in transparency around privacy, security policies, and DNS security would further strengthen its security posture and user trust.
carsale24carsale24.com
Transportation · Germany
51Medium
NIS2 2 · GDPR 73
NIS2 2 · GDPR 73
carsale24 operates as a professional online platform facilitating the sale of used cars primarily in Germany, Austria, and Switzerland. The company connects private sellers with a network of verified dealers, offering a streamlined, secure, and convenient car selling experience. Their business model is commission-based, funded by dealers, and includes value-added services such as premium vehicle appraisals and personalized customer support. The website demonstrates strong market positioning with trust signals including customer testimonials, media endorsements, and certification badges. Technically, the website is built on WordPress with a modern tech stack including the Enfold theme, WP Rocket for performance optimization, and Usercentrics for consent management. The site is well-optimized for SEO and mobile responsiveness, ensuring a high-quality user experience. Analytics and marketing tools such as Google Tag Manager are employed with privacy compliance in mind. From a security perspective, the site enforces HTTPS and integrates consent management, but lacks explicit HTTP security headers and incident response contact details. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data for the domain is a concern but does not currently undermine the site's legitimacy given the professional content and business presence. Overall, carsale24 presents a trustworthy and mature online service with strong business credibility and technical implementation. Strategic improvements in security headers and transparency around incident response would further enhance their security posture and user trust.
Le Mans Techlemans.tech
Energy · France
68Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Le Mans Tech is a French association dedicated to fostering innovation and startup development in the clean technology and new mobility sectors. As a member of the French Tech network, it plays a strategic role in uniting local economic, academic, and financial actors to accelerate sustainable mobility projects. The website reflects a professional and consistent brand presence, targeting startups and entrepreneurs in the energy and transportation industries. Technically, the site is built on WordPress with modern frameworks like UIkit and Elementor, supporting a responsive and SEO-optimized experience. Security posture is adequate with HTTPS and no visible vulnerabilities, though it lacks some security headers and formal privacy and cookie policies, which are compliance gaps. Overall, the site is trustworthy and well-positioned within its niche, with room for improvement in privacy compliance and security best practices.
- FFrance Digitale
francedigitale.org
Technology · France
68Medium
NIS2 25 · GDPR 35
NIS2 25 · GDPR 35
France Digitale is a prominent European association that connects startups and investors to foster innovation and promote a responsible vision of technology. Established in 2012, it serves as a key player in the European technology ecosystem, offering collective groups for startups, scale-ups, and investors. The website reflects a professional and modern digital presence built on Next.js and React, hosted by OVH sas with Cloudflare DNS services. While the site demonstrates good design quality and mobile optimization, it lacks explicit privacy and cookie policies, which are critical for GDPR compliance. Security posture is generally good with HTTPS and domain status protections, but DNSSEC is not enabled, representing a minor security gap. Overall, the domain registration and business information are consistent and trustworthy, positioning France Digitale as a credible and established entity in the technology sector.
French Tech missionlafrenchtech.com
Government · France
59Medium
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
La mission French Tech is an official French government initiative dedicated to supporting and promoting the French start-up and scale-up ecosystem both domestically and internationally. The website serves as a central hub for information about the mission's programs, network, and news, targeting entrepreneurs, start-ups, public administrations, and ecosystem actors. It holds a strong market position as a governmental entity facilitating innovation and tech growth in France. The site offers key services including various support programs, networking opportunities, and ecosystem promotion. Technically, the website is built on WordPress with modern technologies such as the French government design system (DSFR), Leaflet for maps, and a robust cookie consent mechanism (Tarteaucitron). The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. Security-wise, the site enforces HTTPS, uses security headers, and implements privacy-compliant cookie consent. However, explicit security policies and incident response information are not published, representing an area for improvement. Overall, the website is trustworthy, professional, and well-aligned with its governmental mission, with no detected security or privacy red flags.
- FFrance Autotech
autotech-news.com
Transportation · France
57Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Autotech News, operated by France Autotech, is a niche media platform and newsletter focused on the transition of the automotive industry into technology. The website offers subscription to a newsletter that provides detailed insights into this sector shift, targeting professionals and enthusiasts interested in automotive technology. The business is relatively new, founded in 2022, and operates primarily in France. The platform leverages WordPress with Elementor for content management and Sendinblue for newsletter distribution, indicating a modern and scalable technical infrastructure. The website is well-designed, mobile-optimized, and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enabled and domain management controls in place, though DNSSEC is not enabled and security headers are not evident. Privacy and cookie policies are absent, which is a compliance gap. Overall, the website is trustworthy and professional but could improve privacy compliance and security hardening.
Cenowarka Porównanie cen Polskacenowarka.pl
E-commerce · Poland
73Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Cenowarka.pl is a Polish price comparison website established in 2009, providing consumers with aggregated product prices and offers from various merchants to facilitate informed purchasing decisions. The site targets Polish consumers and operates primarily in the e-commerce sector. Technically, the website employs modern JavaScript modules served from a dedicated CDN, uses HTTPS for secure communication, and integrates a cookie consent mechanism to comply with privacy regulations. However, explicit privacy policies and terms of service are not found in the provided content, which may impact compliance and user trust. Security posture is moderate with HTTPS enabled but lacks visible security headers and formal security policies. Overall, the website presents a professional and user-friendly interface with good mobile optimization and SEO practices, but could improve transparency and security documentation to enhance trust and compliance.
Alfreðalfred.is
Other · Iceland
71Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
Alfreð.is is the largest job search platform in Iceland, providing a comprehensive service for job seekers and employers to browse and apply for jobs via web and app. The platform offers hundreds of new job listings weekly and additional services such as courses. The website is well-branded and targets the Icelandic employment market. Technically, the site uses modern frameworks like React and Next.js, hosted behind Cloudflare with CDN and image optimization via Imgix. Analytics and marketing tools include Hotjar, Google Tag Manager, and Bing Ads. Security posture is adequate with HTTPS and Cloudflare DNS but lacks advanced security headers and published policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is professional and functional but could improve transparency and security practices.
- Mitsubishi-motors á Íslandi
mitsubishi.is
Transportation · Iceland
72Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Mitsubishi-motors á Íslandi operates as the official Mitsubishi dealership in Iceland, offering sales and servicing of Mitsubishi vehicles, including the popular Outlander PHEV plug-in hybrid. The website targets Icelandic consumers interested in new and used Mitsubishi cars, providing detailed product information, warranty details, and test drive booking options. The business model is focused on automotive retail and after-sales services, positioning itself as a trusted local representative of the Mitsubishi brand. Technically, the website is built on the Duda platform, leveraging modern web technologies such as service workers, HTTPS, and multiple analytics and tracking tools. The site is well-optimized for mobile and desktop users, with good navigation and content quality. Security posture is solid with HTTPS and no visible vulnerabilities, though it lacks some security headers and formal privacy and cookie policies. The absence of WHOIS data for the domain is a concern for domain legitimacy, but the professional presentation and consistent branding mitigate some risk. Overall, the site is functional, professional, and trustworthy for its intended audience, but improvements in privacy compliance and domain registration transparency are recommended.
Hömehoemepage.com
Technology · Germany
68Medium
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
Höme is a German-based innovative ticketing platform focused on empowering event organizers with full control over their data, advanced marketing tools, and a collaborative network to support a fair event industry. Founded in 2015, the company positions itself as a modern alternative in the event ticketing market, emphasizing data privacy and community impact. The website is built on WordPress with professional theming and SEO optimization, indicating a mature digital presence. Security-wise, the site uses HTTPS and cookie consent mechanisms but lacks explicit security policies or incident response information. The domain registration is consistent and stable, hosted by a reputable German provider. Overall, Höme demonstrates a solid business and technical foundation with room for enhanced security transparency and contact accessibility.
Transportation · Poland
55Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
MAN Financial Services Poland Sp. z o.o. operates as a specialized financial services provider focused on offering tailored financing and insurance solutions for MAN vehicles including trucks, vans, and buses within Poland. The company targets business customers ranging from small enterprises to large fleet operators, providing leasing, credit, and rental options for both new and used vehicles. The website reflects a professional and consistent brand presence aligned with MAN's corporate identity. Technically, the website employs a modern JavaScript stack including jQuery, Swiper, and Flatpickr, alongside Google Tag Manager for analytics and marketing. The site is mobile-optimized with good navigation and SEO practices, though some accessibility features could be improved. No CMS or hosting provider details were detected. From a security perspective, the site uses HTTPS (implied by canonical URLs), implements a cookie consent mechanism compliant with GDPR, and avoids exposing sensitive data. However, no explicit security headers were detected, and DNSSEC is not enabled for the domain. Incident response and security policy information are absent, representing areas for improvement. Overall, the website is trustworthy and professionally maintained, with a solid privacy compliance posture. The domain registration data supports legitimacy, showing consistent registration history without privacy protection. Strategic recommendations include enhancing security headers, enabling DNSSEC, and publishing incident response contacts to strengthen security posture and user trust.
Other
64Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
The website autoaukcja.com is currently inaccessible, returning a 403 Forbidden error page with minimal HTML content. This prevents any meaningful extraction of business, technical, or security information from the site itself. The domain is registered since 2018 with Key-Systems GmbH and uses Amazon AWS DNS hosting, indicating a legitimate registration and hosting setup. However, the lack of accessible content and absence of privacy, cookie, or terms of service policies limits the ability to assess compliance and business credibility. No contact or security policy information is available, and no technologies or frameworks can be identified from the site content. The security posture cannot be fully evaluated due to the blocked content, but the domain registration data does not raise immediate concerns.
Volkswagen Financial Services Polska Sp. z o.o.vwleasing.pl
Finance · Poland
74Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Volkswagen Financial Services Polska Sp. z o.o. operates a comprehensive financial services website targeting business clients in Poland, offering leasing, banking, insurance, and fleet management solutions. The website is well-branded with official Volkswagen imagery and provides multiple secure portals for electronic banking and leasing services. The technical infrastructure is modern, leveraging Adobe Experience Manager and Adobe Analytics for content management and user tracking. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms in place, though explicit security policies and incident response information are not publicly detailed. WHOIS data is unavailable due to registry limitations, but the website's professional presentation and linkage to official Volkswagen domains support its legitimacy. Overall, the site demonstrates a mature digital presence suitable for a large financial services provider.
Møller Mobility Groupmoller.no
Transportation · Norway
75Medium
NIS2 17 · GDPR 65
NIS2 17 · GDPR 65
Møller Mobility Group is a leading automotive group in the Nordic and Baltic regions, founded in 1936 and still family-owned. The company specializes in import, sales, service, and financing of major automotive brands including Volkswagen, Audi, Škoda, and CUPRA. Their market position is strong as the largest car dealership chain in Norway and a significant player in the region. The website reflects a mature digital presence with modern technologies such as Adobe DTM for analytics and OneTrust for cookie consent, indicating a commitment to privacy and compliance. The site is well-designed, mobile-optimized, and provides clear corporate information and social media integration. Security posture is solid with HTTPS and cookie consent mechanisms, though some advanced security headers and policies could be improved. Overall, the website and business demonstrate high professionalism and trustworthiness.
Keskokesko.fi
Retail · Finland
65Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Kesko Oyj is a leading Finnish retail company operating in eight countries, specializing in grocery trade, building and technical trade, and car trade sectors. The website reflects a mature corporate presence with comprehensive information on business operations, investor relations, sustainability, and career opportunities. The site targets a general audience including customers, investors, and partners. Technically, the website uses modern technologies such as Episerver CMS, Google Tag Manager, Google Analytics, and OneTrust for cookie consent, indicating a well-maintained digital infrastructure. The site is mobile-optimized and SEO-friendly with good navigation and content quality. Security posture is strong with HTTPS enforced and cookie consent implemented, though explicit security headers like Content-Security-Policy are not evident in the HTML. Privacy compliance is robust with clear privacy and cookie policies linked and GDPR compliance evident. No critical vulnerabilities or suspicious elements were detected. Overall, the website demonstrates high business credibility and trustworthiness.
Other
68Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
The website soil.voyage is currently inaccessible, returning an HTTP 403 Forbidden error with minimal HTML content indicating access is denied. Due to this, no meaningful business information, metadata, or technical details can be extracted. The WHOIS data is unavailable for this domain's TLD, with no registrar creation or expiry dates, registrant information, or nameservers publicly accessible. This lack of transparency and accessibility severely limits the ability to assess the website's business operations or security posture. The absence of HTTPS or security headers further reduces trustworthiness. Overall, the site appears to be either under strict access control or improperly configured, resulting in a very low confidence in its legitimacy and security.
- Volkswagen Group Info Services AG
drivesomethinggreater.com
Transportation · Germany
74Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Volkswagen Group Info Services AG operates as a central data service provider offering streamlined access to approved vehicle data from multiple Volkswagen Group brands. The company targets businesses across various industries such as repair, retail, insurance, fleet management, and mobility services, enabling them to optimize operational efficiency through digital integration. The website reflects a professional and consistent brand presence aligned with Volkswagen Group standards. Technically, the site is built on Adobe Experience Manager and leverages Adobe's marketing and analytics tools, hosted on Azure DNS infrastructure. Security posture is strong with HTTPS enforcement and domain transfer protection, though DNSSEC is not enabled and no explicit security policies are published. Privacy compliance is robust with clear cookie consent mechanisms and comprehensive privacy and cookie policies. Overall, the website is trustworthy, well-maintained, and serves as a credible digital interface for Volkswagen Group's vehicle data services.
Herber & Herber Werbeagenturherber-herber.de
Media · Germany
53Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
Herber & Herber Werbeagentur is a well-established advertising agency serving the Saarland, Luxemburg, and Dreiländereck regions, with over 30 years of experience. They specialize in website development, consulting, strategy, and digital marketing, positioning themselves as a trusted Google Partner. Their client base spans multiple industries including social institutions, handcraft, tourism, real estate, healthcare, automotive, and more. The website reflects a professional and consistent brand image with clear navigation and comprehensive content. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries such as jQuery and Slick Carousel, and integrates advanced marketing and analytics tools including Google Tag Manager, Matomo (self-hosted), Microsoft Clarity, and smartsupp chat. The site is mobile-optimized and implements a robust cookie consent mechanism compliant with GDPR. From a security perspective, HTTPS is enforced and privacy-friendly analytics are used. However, explicit security headers and published security policies or incident response information are absent. No vulnerabilities or suspicious content were detected. Overall, the site demonstrates a solid security posture with room for improvement in transparency and security best practices. The overall risk is low, with strong business credibility and privacy compliance. Strategic recommendations include adding terms of service, security policies, and enhancing security headers to further strengthen trust and compliance.
Wholegrain Digitalwebsitecarbon.com
Technology · United Kingdom
61Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Website Carbon is a sustainability-focused platform developed by Wholegrain Digital, a UK-based digital agency specializing in sustainable web design. The site offers a free tool to calculate the carbon footprint of websites, aiming to raise awareness and promote greener internet practices. The business operates as a small but influential entity within the technology and energy sectors, providing consultancy services alongside its calculator tool. The website is professionally designed, mobile-optimized, and SEO-friendly, reflecting a mature digital presence. Technically, it leverages WordPress with modern plugins and scripts, ensuring good performance and accessibility. Security posture is solid with HTTPS enforced, though some security headers and cookie consent mechanisms are absent. The WHOIS data for the domain is unavailable, which introduces some transparency concerns despite the legitimate business appearance. Overall, the site is trustworthy and serves a niche market of environmentally conscious web professionals and organizations.
Logoralogora.fr
Media · France
75Medium
NIS2 17 · GDPR 65
NIS2 17 · GDPR 65
Logora is a specialized SaaS company providing a top-rated engagement and discussion system tailored for press and media websites. Their platform offers customizable comment spaces, debates, consultations, and automatic moderation, trusted by over 100 media references. The company emphasizes data ownership, GDPR compliance, and seamless integration with existing websites and mobile applications. Technically, the website is built on modern web technologies including Webflow CMS, Google Fonts, and various JavaScript libraries, ensuring a fast, mobile-optimized, and accessible user experience. Security posture is solid with HTTPS and no cookies stored, though improvements could be made in security headers and incident response transparency. The absence of WHOIS data for the domain is a notable anomaly that warrants further verification. Overall, Logora presents a professional, trustworthy, and technically mature platform with strong privacy and compliance focus.
- GGoogle
googlecode.com
Technology · United States
63Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
The domain googlecode.com historically served as a platform for hosting open source projects under Google's umbrella. Currently, the website content is a 404 error page indicating that the service or content is no longer available. The domain is registered through MarkMonitor Inc., a reputable registrar used by Google, and the domain age aligns with the historical timeline of the Google Code service. The website infrastructure is minimal, with basic HTML and CSS, no active content, no privacy or cookie policies, and no contact information. The site is hosted by Google and shows consistent branding but lacks functional content or services. Security posture is limited due to lack of DNSSEC and absence of security headers, but the domain registration protections are strong. Overall, the site is safe but non-functional, with a low AI score due to lack of content and policies.
Ponjobsatpon.com
Transportation · Netherlands
73Medium
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Pon is a well-established international mobility solutions company with a strong presence in automotive and bicycle sectors. The website serves as a professional career portal showcasing job opportunities, traineeships, and company culture primarily in Dutch with multi-language support. The technical infrastructure leverages modern web technologies including React, Weglot for translations, and Recruitee ATS platform, hosted behind Cloudflare DNS and CDN services. Security posture is solid with HTTPS and cookie consent mechanisms, though additional security headers and explicit privacy policies would enhance compliance and trust. Overall, the site is professional, trustworthy, and well-aligned with Pon's business stature.
Other
65Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
The website at vwfsi.com is currently inaccessible, returning a 403 Forbidden error page with minimal HTML content. This indicates that the site is either restricted or not publicly available, preventing extraction of meaningful business or security information. The domain was registered in 2020 via Tucows Domains Inc., with UK-based name servers, suggesting a legitimate registration but no further public business details are available. Due to the lack of accessible content, no metadata, forms, or contact information could be identified, and no security policies or compliance indicators are present. The absence of HTTPS and security headers further reduces the security posture of the site. Overall, the site appears non-operational or restricted, resulting in a low trust and security score.
Volkswagen OSBvwcvie-onlinebooking.com
Transportation · Ireland
58Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
The website vwcvie-onlinebooking.com serves as an online booking platform dedicated to Volkswagen and VW CV vehicle servicing appointments. It targets Volkswagen vehicle owners primarily in Ireland, providing a streamlined interface to select the appropriate service department and book appointments. The platform is relatively new, established in 2022, and operates under the Volkswagen OSB brand, which aligns with the parent company Volkswagen Group. The site’s content is minimal but functional, focusing solely on service booking without extraneous information or distractions. Technically, the website employs a modern but basic technology stack including jQuery, Bootstrap, and the Yii PHP framework. It is hosted under a reputable registrar (123-Reg Limited) with DNS servers from domaincontrol.com, suggesting stable infrastructure. The site is mobile optimized and includes essential meta tags and CSRF protection tokens, indicating attention to basic security and usability. However, the absence of DNSSEC and HTTP security headers points to areas for improvement in security hardening. From a security perspective, the site shows moderate maturity. HTTPS is implied by canonical URLs, and CSRF tokens are present, but no explicit security headers were detected. The lack of a published security policy, incident response contacts, or vulnerability disclosure mechanisms limits transparency and preparedness. Privacy compliance is partially addressed with linked privacy and cookie policies, though no active cookie consent mechanism is implemented. No contact emails or phone numbers are provided, which may hinder user support and trust. Overall, the website is legitimate and consistent with its business purpose, with no signs of malicious activity or suspicious domain registration patterns. The site’s security posture and privacy compliance could be enhanced to better protect users and build trust. Strategic recommendations include enabling DNSSEC, implementing security headers, publishing security and incident response policies, adding cookie consent mechanisms, and providing clear contact information to improve user confidence and regulatory compliance.
Région Occitanie / Pyrénées-Méditerranéelaregion.fr
Government · France
67Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
The website www.laregion.fr is the official digital portal of the Région Occitanie / Pyrénées-Méditerranée, a regional government entity in France. It provides comprehensive information about the region's governance, public services, citizen engagement, regional news, and support for local enterprises, agriculture, and associations. The site targets residents, public actors, businesses, and visitors, serving as a key communication and service platform for the regional authority. The business model is that of a government public service portal, with a strong market position as the official regional website.
- Bpifrance
bpifrance.fr
Finance · France
73Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
Bpifrance is the French public investment bank dedicated to supporting businesses across their lifecycle, from startup funding to stock market listing. It offers a comprehensive range of financing solutions including credit and equity investments, positioning itself as a key player in France's economic development and innovation ecosystem. The website reflects a mature digital presence with a professional design, clear navigation, and mobile optimization, supporting its role as a trusted public institution. Technically, the site leverages Drupal CMS, integrates Google Maps API, Matomo analytics, and Google Tag Manager, indicating a modern and well-maintained infrastructure. Security posture is strong with HTTPS enforcement, security headers, and no visible vulnerabilities, although the absence of a public vulnerability disclosure policy is noted. Privacy compliance is robust, with clear privacy and cookie policies and consent mechanisms aligned with GDPR requirements. Overall, the site demonstrates high business credibility and trustworthiness, suitable for its public institution status.
Science Me Upsciencemeup.com
Other · France
64Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
Science Me Up is a specialized scientific recruitment agency based in Strasbourg, France, focusing on executive and R&D profiles such as engineers and PhD holders. As a subsidiary of Groupe Leyton, it leverages expertise to serve startups, SMEs, and large corporations across scientific sectors including data science, chemistry, electronics, and IT. The website presents a professional and consistent brand image with rich content and active social media engagement, positioning it as a niche player in scientific recruitment. The technical infrastructure is built on WordPress with modern JavaScript and SVG usage, delivering good mobile optimization and accessibility. Google Analytics is used for user tracking with a GDPR-compliant cookie consent mechanism. Performance is moderate with room for improvement in security headers and published security policies. Security posture is solid with HTTPS enforced and no exposed sensitive data, but lacks advanced security headers and incident response disclosures. The absence of WHOIS registration data is a notable anomaly that reduces trustworthiness despite the professional web presence and parent company affiliation. Overall, the website is well-designed and functional, supporting the business model effectively. Strategic improvements in security transparency and WHOIS registration clarity would enhance trust and compliance.
BIC Plein Sud Entreprisespleinsudentreprises.com
Other · France
61Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
BIC Plein Sud Entreprises is a French business incubator focused on supporting innovative startups and entrepreneurs to establish themselves in the region. The website presents a professional and consistent brand image, targeting future startups with services aimed at business creation assistance. Technically, the site is built on WordPress using the Divi theme and Yoast SEO plugin, hosted by OVH sas, a reputable provider. The site is moderately optimized for performance and mobile use, with good SEO practices evident. Security posture is adequate with HTTPS enabled, but lacks security headers and DNSSEC, which are recommended for enhanced protection. Privacy and cookie policies are absent, indicating a gap in GDPR compliance. Overall, the site is trustworthy with a long-standing domain registration, but improvements in privacy and security practices are advised.
- French Tech Barcelona
frenchtechbarcelona.com
Technology · Spain
68Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
French Tech Barcelona is a non-profit association dedicated to promoting and supporting the French technology ecosystem in Barcelona. It is part of the official French Tech network, recognized among 48 labeled cities. The association helps French tech talents and companies to settle, recruit, network, and grow within the vibrant Barcelona tech scene. Their services include welcoming new members, facilitating recruitment, organizing events, and fostering synergies among over 250 member companies. The website is professionally designed using Squarespace CMS, with good mobile optimization and clear navigation. Social media presence on LinkedIn and YouTube supports community engagement. Technically, the site uses modern web technologies and enforces HTTPS with HSTS, ensuring secure communication. However, it lacks some advanced security headers and formal security policies such as incident response or vulnerability disclosure. Privacy compliance is partial, with a cookie banner present but no dedicated privacy or terms of service pages. The WHOIS data for the domain is missing or indicates the domain may not be registered, which raises concerns about domain legitimacy despite the professional appearance of the site. Overall, the security posture is good but could be improved with additional headers and published policies. The business credibility is supported by clear contact information and official branding, but the domain registration inconsistency should be addressed. The site content is safe for general audiences, with no adult or questionable material detected.
- BBusiness France
businessfrance.fr
Government · France
70Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Business France is a French public advisory agency dedicated to supporting the internationalization of the French economy. It assists companies in export development and promotes France's attractiveness to foreign investors. The website is professionally designed, mobile-optimized, and provides comprehensive information about its services, network, and expertise. Technically, it uses modern frameworks such as Nuxt.js and Tailwind CSS, with good performance and SEO practices. Security posture is strong with HTTPS and security headers, though explicit security policies and incident response information are not publicly available. Privacy compliance is well addressed with cookie consent mechanisms and privacy policies. Overall, the site represents a trustworthy government entity with a strong digital presence.
L'IDEMlidem.eu
Education · France
63Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
L'IDEM is a well-established higher education institution specializing in creative and digital arts education, with campuses in France and Spain. The website presents a professional image with comprehensive information about their programs, certifications, and events. The institution targets students, professionals, and companies seeking training or apprenticeships in creative and digital fields. Technically, the website is built on WordPress with modern plugins and integrates multiple analytics and marketing tools such as HubSpot and Facebook Pixel. Security posture is good with HTTPS and reCAPTCHA usage, though it lacks explicit security headers and published security policies. Privacy compliance is partial due to missing explicit privacy and terms of service pages. Overall, the site is trustworthy and well-positioned in its market segment.