Low-risk security reports
14,261 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,165001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
3,451–3,500 of 14,261
Libra Memoria : les avis de décès parus dans la presse françaiselibramemoria.com
Media · France
80Low
NIS2 17 · GDPR 65
NIS2 17 · GDPR 65
Libra Memoria is a French media platform specializing in the aggregation and publication of obituary notices from various regional newspapers and funeral homes. It offers users the ability to search for death notices, subscribe to alerts, and access related funeral services such as flower delivery and funeral home directories. The platform targets French-speaking individuals seeking to honor and remember deceased loved ones. Technically, the website employs modern JavaScript libraries, integrates Google Tag Manager and Facebook SDK for analytics and social media, and uses a GDPR-compliant consent management platform (Didomi). While the site is mobile-optimized and well-structured, it lacks explicit privacy and terms of service pages and does not expose contact information clearly. Security-wise, HTTPS is implied but no security headers were detected in the provided data, and no WHOIS information is available for the domain, which raises concerns about domain legitimacy. Overall, the website is functional and professional but would benefit from enhanced transparency and security measures.
Grid Connectgridconnect.com
Technology · United States
79Low
NIS2 2 · GDPR 73
NIS2 2 · GDPR 73
Grid Connect is a specialized technology company focused on industrial networking and IoT solutions, offering a broad range of products including CAN adapters, Ethernet solutions, wireless devices, sensors, and custom engineering services. The company targets industrial clients and OEMs seeking reliable and customizable networking hardware and IoT integration. Their market position is that of a niche provider with a strong emphasis on quality and expert service. Technically, the website is built on the Shopify platform, leveraging modern web technologies and multiple third-party analytics and marketing tools, indicating a mature digital infrastructure. The site is well-optimized for performance, mobile responsiveness, and SEO, providing a professional user experience. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms, but lacks explicit security policies and incident response contacts, which are areas for improvement. The absence of WHOIS data for the domain is a notable concern, potentially impacting trust. Overall, the website presents a professional and trustworthy front for its business, with recommendations to enhance security transparency and domain registration clarity.
SuperOfficesuperoffice.com
Technology
85Low
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
SuperOffice operates as a cloud-based CRM provider offering software solutions designed to enhance business relationships and revenue generation. The company maintains a professional and consistent web presence with localized versions for multiple countries, indicating a medium-sized international operation in the technology sector. Their business model is SaaS, targeting businesses seeking CRM solutions. Technically, the website leverages modern Microsoft Azure cloud infrastructure, ASP.NET Core framework, and integrates analytics and marketing tools such as Google Tag Manager and HubSpot. The site is mobile optimized and performs moderately well. Security posture is strong with HTTPS enforced and use of Azure Application Insights for monitoring, though explicit security headers and policies could be improved. Privacy compliance is robust, featuring a comprehensive cookie consent mechanism and GDPR-aligned privacy policy. However, WHOIS data is not publicly available, likely due to privacy protection, which slightly impacts trust but is justified for this business type. Overall, the website is professional, secure, and trustworthy with room for enhanced transparency in security policies and incident response.
- Evolution Host
evolution-host.com
Technology
81Low
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Evolution Host is a specialized hosting provider established in 2015, offering VPS hosting, game servers, and advanced DDoS protection services. The company targets a broad audience from startups to enterprise clients, emphasizing reliability, security, and performance. Their market position is strengthened by multiple awards and positive customer testimonials, reflecting a strong reputation in the hosting industry. Technically, the website is well-implemented with modern web standards, mobile optimization, and integrated analytics, indicating a mature digital presence. Security posture is solid with HTTPS enforcement and domain transfer protections, though improvements such as DNSSEC and published security policies could enhance trust further. Overall, the website is professional, trustworthy, and compliant with privacy regulations, supporting a positive user experience and business credibility.
- ThePixel.dev
thepixel.dev
Technology
81Low
NIS2 2 · GDPR 100
NIS2 2 · GDPR 100
ThePixel.dev is a small, highly rated web development service provider specializing in front-end, CMS (Joomla, WordPress), eCommerce platforms, back-end technologies, SEO, and Joomla migration. The company targets businesses seeking expert website development and digital transformation services. The website demonstrates a good level of technical maturity, leveraging Joomla CMS, modern frameworks, and third-party services such as ConsentManager.net for cookie consent. Security posture is strong with HTTPS and multiple security headers implemented, although explicit privacy and terms of service policies are missing. Overall, the site is professional, trustworthy, and well-structured, but could improve privacy compliance and direct contact information availability.
Kanzelsbergerkanzelsberger.cz
Retail · Czech Republic
78Low
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
Kanzelsberger.cz is a well-established Czech Republic-based retail chain specializing in books and related products, operating both online and through 26 physical stores nationwide. The website offers a comprehensive e-commerce platform with a broad catalog of books across various genres, supported by promotional banners and customer engagement features such as newsletters and loyalty clubs. The business targets general book buyers in the Czech market, emphasizing convenience with options like in-store pickup and free shipping over a threshold. Technically, the website is built on modern frameworks including Angular 12 and integrates multiple third-party services such as Google Tag Manager, reCAPTCHA, and SmartEmailing for marketing and security. The site demonstrates good mobile optimization and SEO practices, although some accessibility features could be enhanced. Performance is moderate, with a clean and professional design that supports a positive user experience. From a security perspective, the site enforces HTTPS and employs reCAPTCHA to protect forms, alongside a cookie consent mechanism indicating GDPR compliance. However, the absence of visible security headers and lack of published security policies or incident response contacts suggest areas for improvement. The missing WHOIS data reduces transparency and slightly impacts trustworthiness, though the overall business presence and content quality support legitimacy. Overall, Kanzelsberger.cz presents a solid e-commerce platform with good business credibility and technical implementation. Strategic recommendations include enhancing security headers, publishing security policies, and verifying domain registration details to improve trust and compliance.
Le Bien Publicbienpublic.com
Media · France
79Low
NIS2 25 · GDPR 65
NIS2 25 · GDPR 65
Le Bien Public is a regional French news media organization focused on delivering local news, videos, and services for Dijon and the Côte d'Or region. It operates under the EBRA Group umbrella and offers subscription-based access complemented by advertising revenue. The website demonstrates a mature digital infrastructure with modern technologies such as Google Tag Manager, Didomi for consent management, and reCAPTCHA for form security. Privacy compliance is well addressed with clear cookie consent mechanisms and GDPR adherence, including a named Data Protection Officer contact. Security posture is good with HTTPS enforced and secure form handling, though some security headers could be improved. The absence of WHOIS data is a minor concern but does not detract significantly from the site's legitimacy given its professional presentation and known parent company. Overall, the site is trustworthy, well-maintained, and suitable for a general audience.
Le Journal de Saône et Loirelejsl.com
Media · France
77Low
NIS2 17 · GDPR 65
NIS2 17 · GDPR 65
Le Journal de Saône et Loire (Le JSL) is a regional French news media organization focused on delivering live news, photos, and videos primarily for the Saône-et-Loire area. The website presents a professional and consistent brand image with active social media presence and app availability, targeting a general audience interested in regional news. Technically, the site employs modern web technologies including Google Tag Manager and consent management via Didomi, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS usage and consent mechanisms, though lacks visible security headers and explicit privacy policies. WHOIS data is unavailable, raising questions about domain registration status and legitimacy, which should be monitored. Overall, the site is functional and trustworthy as a regional news source but would benefit from enhanced privacy disclosures and security hardening.
- URW
urw.com
Real Estate · France
79Low
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Unibail-Rodamco-Westfield (URW) is a leading European commercial real estate company specializing in owning, developing, and operating sustainable, high-quality real estate assets in major cities. The company focuses on creating destinations that foster community connections and meaningful experiences. Their website reflects a mature digital presence with comprehensive investor relations content, sustainability initiatives, and multimedia engagement. Technically, the site is built on modern frameworks such as Next.js and React, optimized for performance and mobile responsiveness. Security posture is strong with HTTPS enforcement and standard security headers, though public security policies and incident response contacts are not prominently disclosed. The absence of WHOIS data is unusual but does not detract from the overall legitimacy and professionalism of the site. Strategic recommendations include publishing explicit security and incident response policies and enhancing transparency around vulnerability disclosures.
- Groupe BPCE
groupebpce.com
Finance · France
87Low
NIS2 17 · GDPR 65
NIS2 17 · GDPR 65
Groupe BPCE is a major French banking and insurance group, operating through well-known brands such as Banque Populaire, Caisse d'Epargne, and Natixis. It holds the position of the second largest banking group in France, financing a significant portion of the national economy. The website reflects a mature digital presence with comprehensive content targeting customers, investors, journalists, and partners. The business model focuses on retail banking, insurance, investment management, and corporate banking services. The site is professionally designed, mobile-optimized, and SEO-friendly, indicating a high level of digital maturity. Technically, the website is built on WordPress, leveraging modern JavaScript libraries, SEO plugins, and tag management tools like Tealium. Security measures include HTTPS enforcement and bot protection via hCaptcha. Cookie consent and privacy policies are implemented in compliance with GDPR, demonstrating attention to privacy and regulatory requirements. However, explicit security policies and incident response contacts are not prominently available, which could be improved. The security posture is strong with no evident vulnerabilities or exposed sensitive data. The absence of WHOIS registration data is a notable anomaly but does not detract from the overall legitimacy given the extensive corporate branding and content. The site does not contain any adult or questionable content, making it safe for general audiences. Overall, Groupe BPCE's website is a robust, professional platform supporting its business operations and stakeholder communications. Strategic improvements could focus on enhancing transparency around security policies and incident response to further strengthen trust and compliance.
FERRERO Franceferrero.fr
Manufacturing · France
81Low
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
Ferrero France is a subsidiary of the globally recognized Ferrero Group, a family-owned Italian confectionery company founded in 1946. The company operates in the manufacturing and retail sectors, specializing in sweet food products with iconic brands such as Nutella®, Kinder®, Tic Tac®, and Ferrero Rocher®. The website reflects a mature, enterprise-level business with a strong emphasis on quality, sustainability, and corporate social responsibility. The digital presence is well-structured, multilingual, and professionally designed, targeting a broad general audience including consumers, partners, and job seekers. Technically, the website is built on Drupal CMS and incorporates modern web technologies such as Google Tag Manager for analytics, AddToAny for social sharing, and UserWay for accessibility enhancements. The site is mobile-optimized and includes SEO best practices, though accessibility compliance is moderate at 57%. Security posture is strong with HTTPS enforced and multiple security headers present, alongside a published vulnerability disclosure policy. However, WHOIS data for the domain is unavailable, which is unusual for a major brand and warrants monitoring. Overall, the website demonstrates a high level of digital maturity and security awareness, with comprehensive privacy and cookie policies aligned with GDPR requirements. The absence of explicit contact emails and phone numbers on the public site suggests a preference for contact via forms or social media channels. The site is safe for general audiences with no adult or questionable content detected.
Hitzerot Shophitzerot.com
Retail · Germany
80Low
NIS2 17 · GDPR 85
NIS2 17 · GDPR 85
Hitzerot Shop is a niche e-commerce business based in Berlin specializing in print publications related to graffiti and urban culture. The website offers a curated selection of books, zines, exhibition catalogues, and prints, targeting collectors and enthusiasts of this art form. The business has been active since 2015, aligning with the domain registration date, and maintains a focused market position within the retail and media sectors. The website is professionally designed with consistent branding and good content quality, supporting a positive user experience.
- PPau Agglomération
agglo-pau.fr
Government · France
76Low
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
The website www.pau.fr serves as the official digital portal for Pau Agglomération, a French municipal government entity. It provides comprehensive information and services related to daily life, urban planning, culture, social services, and community engagement for residents and visitors. The site is built on Drupal 10 and integrates Matomo analytics for privacy-conscious user tracking. The design is professional, mobile-optimized, and accessible, reflecting a mature digital presence for a government organization. Security posture is good with HTTPS and some security best practices observed, though explicit security policies and incident response information are not publicly visible. The absence of WHOIS data is a notable anomaly that warrants further verification but does not detract from the site's apparent legitimacy based on content and branding.
- iO
iodigital.com
Technology
81Low
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
iO is a leading digital agency specializing in creating seamless customer experiences that drive business growth. They offer a comprehensive suite of services including brand and business design, digital platforms, marketing campaigns, content production, cloud and data integration, and consulting. Their market position is strong, supported by a portfolio of notable clients and industry awards. The website reflects a mature digital infrastructure leveraging modern technologies such as React, Next.js, and Storyblok CMS, with integrations to platforms like AWS and HubSpot. Security posture is robust, evidenced by ISO 27001 certification and HTTPS enforcement, though the absence of public WHOIS data introduces some trust concerns. Privacy and cookie policies are comprehensive and GDPR compliant, with clear contact channels primarily via email and forms.
IQVIA Digitalmeddatagroup.com
Healthcare · United States
83Low
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
IQVIA Digital is a leading healthcare marketing solutions provider specializing in delivering personalized, data-driven omnichannel engagement for pharma companies, agencies, partners, and publishers. As a subsidiary of IQVIA, it leverages advanced clinical and behavioral data to empower healthcare marketers to create meaningful customer experiences that drive better outcomes. The company positions itself as a trusted partner in the healthcare marketing ecosystem with integrated platforms and analytics capabilities. Technically, the website is built on the HubSpot CMS platform, utilizing modern web technologies including Google Tag Manager for analytics, Brightcove for video content, and Swiper for interactive carousels. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. Privacy and cookie compliance are well implemented with clear policies and consent mechanisms. From a security perspective, the site enforces HTTPS and uses secure forms via HubSpot. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not visibly configured, representing an area for improvement. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is notably missing or unavailable, which slightly reduces trustworthiness but does not outweigh the professional presentation and clear business legitimacy. Overall, IQVIA Digital demonstrates a strong business and technical profile with good security hygiene and privacy compliance. The main risk lies in the lack of WHOIS transparency, which should be investigated further to ensure domain registration legitimacy and continuity.
Manni Groupmannigroup.com
Energy · Italy
76Low
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Manni Group is a well-established Italian industrial company specializing in steel processing, sandwich panels, energy efficiency, and off-site construction technologies. The company has a strong market position in Europe with multiple subsidiaries and a focus on innovation and sustainability. The website is professionally designed, multilingual, and optimized for user experience and SEO. Technically, it uses WordPress with modern integrations such as HubSpot and Google Analytics, and implements good security practices including HTTPS and cookie consent mechanisms. However, there is room for improvement in DNS security and publishing explicit security policies. Overall, the security posture is strong with no critical vulnerabilities detected. The domain registration data aligns well with the business claims, enhancing trustworthiness.
Del Monte Foodsdelmontefoods.com
Retail · United States
76Low
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Del Monte Foods is a well-established food manufacturing and retail company with a rich history spanning over 135 years. The company offers a portfolio of well-known brands focused on wholesome and quality food products, targeting general consumers and grocery buyers primarily in the United States. Their business model centers on manufacturing and brand management with a strong emphasis on sustainability and corporate responsibility. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content that supports their market position. Technically, the website is built on the Drupal CMS platform, utilizing modern web technologies including jQuery, Google Analytics, Google Tag Manager, and Facebook Pixel for analytics and marketing. The site is mobile optimized and includes accessibility features such as the UserWay widget. Performance is moderate, with good SEO and meta tag implementation. However, some security headers are not explicitly present, and there is no visible cookie consent mechanism, which could be improved for compliance. From a security perspective, the site enforces HTTPS and uses secure analytics scripts, but lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. The WHOIS data is unavailable, which reduces trustworthiness from a domain registration perspective, though the website content and branding strongly indicate legitimacy. Overall, the security posture is good but could benefit from enhanced header policies and privacy compliance features. The overall risk assessment is low, with recommendations to improve privacy compliance by adding cookie consent, publish security policies, and enhance security headers. These steps will strengthen trust and regulatory adherence while maintaining a professional and secure online presence.
- American Heart Association
goredforwomen.org
Healthcare · United States
78Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Go Red for Women is a prominent initiative by the American Heart Association focused on ending heart disease and stroke in women through education, advocacy, and community engagement. The website serves as a comprehensive resource for awareness, volunteer opportunities, and fundraising efforts. It targets women, healthcare advocates, and donors, positioning itself as a leading national movement in women's cardiovascular health. Technically, the site is built on the Sitecore CMS platform, leveraging modern technologies such as Google Tag Manager, Facebook Pixel, and Hotjar for analytics and user engagement. The site is mobile optimized, accessible, and SEO friendly, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response contacts are not published. Privacy compliance is well addressed with cookie consent mechanisms and GDPR considerations. Overall, the site demonstrates high professionalism, trustworthiness, and business credibility, though WHOIS data is privacy protected, which is justified for this non-profit entity.
- Five9
five9.com
Technology · United States
78Low
NIS2 35 · GDPR 85
NIS2 35 · GDPR 85
Five9 is a leading enterprise provider of cloud contact center software and AI-powered customer experience solutions. The company targets businesses seeking to enhance their customer service operations through reliable, scalable, and intelligent cloud-based platforms. Their market position is strong, supported by a professional website, high customer ratings, and a clear focus on AI integration in contact centers. The website is built on Drupal 10 and incorporates modern analytics and optimization tools, reflecting a mature digital infrastructure. Performance and mobile optimization are good, supporting a positive user experience. Security posture is solid with HTTPS enforced and no exposed sensitive data, though explicit security headers and public security policies could be improved. Privacy and cookie policies are comprehensive and GDPR compliant, indicating attention to regulatory requirements. Overall, Five9 presents a trustworthy and professional online presence, though the absence of WHOIS data limits domain registration trust verification.
- Child Neurology Foundation
childneurologyfoundation.org
—
77Low
NIS2 17 · GDPR 95
NIS2 17 · GDPR 95
Collabora Limitedcollabora.com
Technology · United Kingdom
78Low
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Collabora Limited is a well-established open source software consulting company specializing in Linux Kernel, multimedia, graphics, and web engines. The company positions itself as a leader in open source development services, targeting businesses and organizations requiring expert guidance and development in open source technologies. Their website reflects a professional and consistent brand image with comprehensive content about their services and expertise. Technically, the website uses a modern but somewhat dated JavaScript stack including jQuery and BXSlider, with Matomo analytics for privacy-conscious user tracking. The site is mobile-optimized and well-structured, providing a good user experience. Security-wise, the site enforces HTTPS and avoids exposing sensitive data, but lacks explicit security headers and incident response information. The WHOIS data is unavailable, which raises some concerns about domain registration transparency, but the overall site professionalism and content quality support legitimacy. Privacy compliance is good with a clear privacy policy and cookie policy, though no active cookie consent mechanism is present.
- My Online Schooling
myonlineschooling.co.uk
Education · United Kingdom
81Low
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
My Online Schooling is a British international online school established in 2016, providing accredited UK education from Key Stage 2 to A-Level. The school offers live virtual lessons, after school clubs, SEND support, and pastoral care to a global community of over 1,000 pupils from more than 80 countries. The website is professionally designed, mobile-optimized, and rich in relevant educational content, targeting parents and students seeking flexible, high-quality online schooling. The business model focuses on delivering British curriculum education through an online platform with subject-specialist teachers and flexible timetables. Technically, the website uses a modern tech stack including Google Analytics, Facebook Pixel, HubSpot forms and chat, and Finalsite CMS. The site performs moderately well with good SEO and accessibility features. Security posture is adequate with HTTPS enforced and no exposed sensitive data, though explicit security headers are not fully verified. Privacy and cookie policies are present with consent mechanisms, supporting GDPR compliance. The website demonstrates strong trust indicators such as accreditations, multiple office locations, and active social media presence. However, the WHOIS lookup for the domain www.myonlineschooling.co.uk failed due to a domain naming rules violation, indicating potential registration issues or that the domain is a subdomain or alias. This discrepancy lowers the domain legitimacy score and suggests caution. Overall, the website is trustworthy and professional, but the domain registration inconsistency should be investigated further. Strategic recommendations include enhancing security headers, publishing explicit security and incident response policies, and resolving domain registration inconsistencies to improve trust and compliance.
- ITOPF
itopf.org
Energy · United Kingdom
79Low
NIS2 10 · GDPR 68
NIS2 10 · GDPR 68
ITOPF is a globally recognized non-profit organization specializing in promoting effective spill response for oil, chemicals, and hazardous substances. The organization serves industry and government entities worldwide, providing expert advice, contingency planning, training, and claims analysis related to accidental ship-source pollution. ITOPF maintains a strong market position as a primary source of technical information and support in the environmental protection sector. Technically, the website is built on the TYPO3 CMS platform, leveraging modern JavaScript libraries and frameworks such as FancyApps UI Carousel and Google Analytics with Tag Manager for tracking and consent management. The site demonstrates good performance, mobile optimization, and accessibility standards, reflecting a mature digital infrastructure. From a security perspective, the website enforces HTTPS and employs consent-based analytics tracking. However, it lacks explicit security headers and a published security policy or incident response contacts, which are recommended for enhanced security posture. No vulnerabilities or exposed sensitive data were detected in the provided content. Overall, ITOPF's website is professional, trustworthy, and well-maintained, with comprehensive content and clear navigation. The absence of WHOIS data limits domain registration analysis, but the organization's legitimacy is supported by consistent branding, detailed service offerings, and active content updates. Strategic recommendations include implementing security headers, publishing a security policy, and adding vulnerability disclosure mechanisms to further strengthen trust and security.
LiveRampliveramp.com
Technology · United States
78Low
NIS2 47 · GDPR 53
NIS2 47 · GDPR 53
LiveRamp is a well-established enterprise technology company specializing in data collaboration and identity resolution services for marketers and their partners. The company operates a comprehensive platform that connects people, data, and devices to enable personalized marketing and data monetization. Their market position is strong, supported by a global ecosystem and a broad portfolio of services including identity resolution, data marketplace, enrichment, and clean rooms. The website reflects a mature digital presence with excellent content quality and professional branding. Technically, the website is built on WordPress with modern JavaScript libraries such as jQuery and GSAP, and integrates advanced SEO tools like Yoast SEO Premium. Hosting and DNS are managed via Cloudflare and AWS, ensuring robust infrastructure. Performance and mobile optimization are excellent, with asynchronous loading of scripts and consent management implemented via Ketch. The site uses Google Tag Manager for analytics and tracking, balanced with user consent mechanisms. From a security perspective, the site enforces HTTPS and employs domain registration protections to prevent unauthorized changes. While explicit security headers are not detailed, the use of consent management and absence of exposed sensitive data indicate a solid security posture. However, enabling DNSSEC and publishing a security.txt file would enhance security transparency and vulnerability management. No critical vulnerabilities or suspicious content were detected. Overall, LiveRamp's website demonstrates high professionalism, strong business credibility, and good privacy compliance. The risk profile is low, with recommendations focusing on incremental security improvements and enhanced incident response transparency.
- IIQVIA
ultomirispregnancystudy.com
Healthcare · United States
78Low
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
The Ultomiris Pregnancy Registry Study website serves as a clinical research platform focused on enrolling and informing pregnant or breastfeeding women who have been prescribed ULTOMIRIS for autoimmune conditions. The site is professionally designed and targets both patients and healthcare providers in the United States. It provides detailed information about the study, medication, and participation methods, supported by links to official prescribing information and medication guides. The parent company IQVIA is prominently referenced, lending credibility to the site. Technically, the website employs a modern technology stack including jQuery, Bootstrap, Vue.js, and Google Tag Manager, with Sitecore CMS inferred from cookie names. The site is mobile-optimized and includes accessibility features, though some improvements could be made. Security measures include HTTPS enforcement, Google reCAPTCHA integration, and a comprehensive cookie consent mechanism. However, explicit security headers are not detected, and no incident response or security policy pages are present. From a security and compliance perspective, the site demonstrates good privacy compliance with clear privacy and cookie policies and user consent mechanisms. The absence of WHOIS data for the domain is a notable anomaly, reducing trust slightly, but the professional content and association with IQVIA mitigate concerns. No vulnerabilities or exposed sensitive data were detected. Overall, the website is a credible and professionally maintained clinical research registry with moderate to good technical and security posture. Strategic improvements in security headers, incident response transparency, and domain registration clarity would enhance trust and compliance.
Le Dauphiné Libéréledauphine.com
Media · France
77Low
NIS2 25 · GDPR 65
NIS2 25 · GDPR 65
Le Dauphiné Libéré is a well-established regional French news media organization delivering comprehensive local and national news coverage primarily for several southeastern French departments. The website offers a rich mix of articles, videos, podcasts, and digital newspaper editions, supported by a subscription and advertising business model. The site targets a broad general audience within its regional scope and maintains a strong brand presence consistent with its parent company, EBRA Group. Technically, the website employs modern web technologies including Google Tag Manager, Didomi for consent management, and reCAPTCHA for form security, ensuring a robust digital infrastructure. Security posture is solid with HTTPS enforcement and consent mechanisms, though explicit security headers could be improved. Privacy compliance is strong, with clear GDPR adherence and a dedicated Data Protection Officer contact. The absence of publicly available WHOIS data is a notable transparency gap but does not detract significantly from the site's legitimacy given the professional content and branding. Overall, the website represents a credible, secure, and user-friendly digital news platform with room for minor security enhancements.
Raiola Networksraiolanetworks.es
Technology · Spain
87Low
NIS2 25 · GDPR 83
NIS2 25 · GDPR 83
Raiola Networks is a well-established Spanish web hosting and domain registration company founded in 2014. It offers high-quality hosting solutions including SSD hosting, VPS, dedicated servers, and specialized WordPress hosting, targeting Spanish-speaking customers seeking reliable and fast web hosting services. The company maintains a strong market position in Spain with a medium-sized operation and consistent branding across its digital presence. Technically, the website employs modern web technologies such as ES modules, Google Fonts, FontAwesome, and integrates multiple marketing and analytics tools including Google Analytics, Facebook Pixel, TikTok Pixel, and Mautic. The hosting infrastructure leverages AWS DNS services, ensuring robust performance and scalability. Security posture is strong with HTTPS enforced, proper security headers, CSRF protection, and a comprehensive cookie consent mechanism compliant with GDPR. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms domain legitimacy and consistency with the business profile. Overall, the website is professional, secure, and compliant, reflecting a mature digital presence.
International Greeter Associationinternationalgreeter.org
Other
88Low
NIS2 2 · GDPR 95
NIS2 2 · GDPR 95
International Greeter Association operates a niche community-driven platform offering free local guided walks for tourists worldwide. The website positions itself as a connector between travelers and local greeters, focusing on small groups and personalized experiences. The business model appears non-profit or community-based, targeting tourists seeking authentic local interactions. The website is built on WordPress using the Divi theme, with SEO optimization via Rank Math and tracking through Google Tag Manager. Hosting is provided by a reputable registrar, and the domain is relatively young but consistent with the business age. Security posture is moderate with HTTPS enabled but lacks advanced security headers and DNSSEC. Privacy compliance is limited, with no visible privacy policy or terms of service, though a cookie consent mechanism is present. Overall, the site is professional and trustworthy but would benefit from enhanced security and compliance documentation.
HelpDocshelpdocs.io
Technology
79Low
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
HelpDocs is a technology company founded in 2016 that provides an AI-ready knowledge base software platform designed to help SaaS and product-focused teams scale customer support through structured documentation and AI-powered tools. The company positions itself as a modern, intelligent documentation solution that integrates with popular support and AI platforms to deliver seamless self-serve customer experiences. The website demonstrates a high level of digital maturity, leveraging Webflow CMS, multiple analytics and marketing tools, and advanced JavaScript libraries to deliver a fast, mobile-optimized, and accessible user experience. Security posture is strong with HTTPS enforced, anonymized IP tracking, and cookie consent mechanisms, although explicit security headers and a dedicated security policy page are not found. The WHOIS data is privacy protected, which is common and justified for SaaS businesses, and no suspicious patterns were detected. Overall, HelpDocs presents as a credible, professional, and trustworthy SaaS provider with a well-structured online presence.
- Aqualia
aqualia.com
Energy · Spain
77Low
NIS2 2 · GDPR 100
NIS2 2 · GDPR 100
Aqualia is a large, established Spanish company specializing in the integral management of the water cycle, with participation from FCC Group and IFM Investors. The company focuses on sustainable water management services targeting municipalities and citizens, emphasizing social responsibility and environmental sustainability. The website reflects a mature digital presence built on the Liferay CMS platform, integrating modern technologies such as jQuery, Bootstrap, and Google Tag Manager. It features comprehensive content, clear navigation, and multilingual support, indicating a well-maintained corporate site. Security posture is good with HTTPS and cookie consent mechanisms, though improvements in security headers and explicit incident response policies are recommended. The absence of WHOIS data reduces transparency but does not detract significantly from the site's legitimacy given its professional presentation and trust signals. Overall, the site is suitable for general audiences and aligns well with corporate and regulatory standards.
D.A.S. právní ochranadas.cz
Other · Czech Republic
79Low
NIS2 2 · GDPR 73
NIS2 2 · GDPR 73
D.A.S. právní ochrana is a Czech-based legal protection insurance provider with over 20 years of market presence, offering a range of legal insurance products tailored for private individuals, employees, families, and drivers. The company operates under the ERGO Versicherung Aktiengesellschaft pro ČR umbrella, providing comprehensive legal services and insurance packages with clear pricing and accessible customer support. The website is professionally designed, mobile-optimized, and integrates modern technologies such as Alpine.js, Swiper.js, and various analytics and marketing tools. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities. However, the absence of a publicly accessible privacy policy and WHOIS data transparency slightly reduce trust levels. Overall, the site demonstrates a mature digital presence suitable for its industry and audience.
- Uniroyal
uniroyal-tyres.com
Transportation
76Low
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
Uniroyal is a tire brand specializing in wet weather driving safety, offering products for cars and trucks. The website positions Uniroyal as a brand under Continental with a long history dating back to 1868. The site provides product information, dealer locators, and brand values, targeting both individual consumers and commercial transport businesses. Technically, the website is built on Adobe Experience Manager, uses Google Tag Manager for analytics, and implements consent management for GDPR compliance. The site is well-structured, mobile-optimized, and professionally designed. Security posture is good with HTTPS enforced and consent mechanisms in place, though explicit security headers are not evident. WHOIS data for the domain is unavailable, which reduces trustworthiness and requires further verification. Overall, the website is professional, trustworthy, and compliant with privacy regulations, serving its audience effectively.
- GGenentech
enspryng.com
Healthcare · United States
81Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
The website www.enspryng.com represents Genentech's pharmaceutical product ENSPRYNG®, a treatment for Neuromyelitis Optica Spectrum Disorder (NMOSD). The site provides detailed patient-focused information, healthcare professional resources, and access to medication guides and prescribing information. The business is positioned as an established biotechnology company with a specialty drug offering, targeting patients and clinicians. Technically, the site is built on Adobe Experience Manager with modern web technologies, including consent management and analytics tools, reflecting a mature digital infrastructure. Security posture is good with HTTPS, reCAPTCHA, and cookie consent mechanisms, though explicit security headers and policies are not fully documented. The absence of WHOIS registration data is a concern for domain legitimacy, but the site content and branding align with a reputable pharmaceutical entity. Overall, the site is professional, secure, and compliant with privacy norms, though improvements in transparency of security and privacy policies are recommended.
The Fast Modethefastmode.com
Telecommunications
78Low
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
The Fast Mode is an independent research and media company specializing in telecommunications news, analysis, and industry insights. Founded in 2013, it serves a professional audience including telecom operators, technology providers, and industry analysts. The website offers breaking news, expert opinions, white papers, and event coverage, supported by advertising and newsletter subscriptions. Technically, the site is built on Joomla CMS with modern JavaScript libraries and integrates Google Analytics, AddThis, and OneSignal for analytics and marketing. The site is mobile-optimized with good SEO and accessibility basics. Security posture is solid with HTTPS and CSRF protections, though it lacks some security headers and explicit incident response contacts. Privacy and cookie policies are present but lack explicit consent mechanisms. WHOIS data is unavailable, which reduces domain trustworthiness, but the website's professional content and social presence support legitimacy. Overall, the site is well-maintained, content-rich, and trustworthy for its target audience.
Three Commas™threecommas.com
Retail · United States
77Low
NIS2 17 · GDPR 70
NIS2 17 · GDPR 70
Three Commas™ is an e-commerce apparel company co-founded by billionaire Mark Cuban, targeting entrepreneurs and fashion consumers. The website is built on the Shopify platform, leveraging modern web technologies and third-party marketing tools such as Facebook Pixel and Shopify Analytics. The site presents a professional and consistent brand image with a focus on apparel sales. Technically, the site is well-structured with good mobile optimization and moderate performance. Security posture is adequate with HTTPS enforced and domain transfer protection enabled, but lacks DNSSEC and security headers. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is trustworthy but could improve transparency and security practices.
Outgrowoutgrow.co
Technology · United States
91Low
NIS2 17 · GDPR 70
NIS2 17 · GDPR 70
Outgrow is a technology company specializing in interactive content creation tools such as quizzes, calculators, chatbots, and assessments aimed at marketers to generate leads and increase engagement. The company positions itself as a leading SaaS platform in the marketing technology space, offering a comprehensive suite of products that enhance user interaction and conversion rates. The website demonstrates a mature digital presence with extensive use of modern analytics and marketing technologies, hosted on a reliable CDN infrastructure. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, though there is room for improvement in security headers and explicit security policies. Privacy compliance is moderate due to the absence of explicit privacy and cookie policies in the analyzed content. Overall, the site is professional, trustworthy, and well-optimized for user experience and SEO.
Plurality Digital Inc. dba Shopliftshoplift.ai
E-commerce · United States
84Low
NIS2 22 · GDPR 100
NIS2 22 · GDPR 100
Shoplift is a SaaS company specializing in conversion rate optimization and A/B testing tools purpose-built for Shopify stores. Founded in 2023 and operating under Plurality Digital Inc., Shoplift holds the Shopify Plus Certified status, positioning itself as a trusted and innovative player in the e-commerce optimization space. The platform empowers marketers to run experiments across Shopify themes and templates without developer dependencies, enhancing store profitability. Technically, the website is built on Webflow, uses modern JavaScript libraries like jQuery, integrates Google Tag Manager for analytics, and employs Cloudflare Turnstile captcha for bot protection. The site is well-optimized for performance, mobile responsiveness, and accessibility, with a professional design and clear navigation. Security posture is solid with HTTPS enforced and cookie consent implemented, though additional security headers and explicit security policies could improve maturity. WHOIS data is privacy protected but consistent with the business timeline and no suspicious patterns are detected. Overall, Shoplift demonstrates a strong digital presence, credible business model, and good security hygiene, making it a reliable service provider in its niche.

Hospitality
76Low
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website www.lesarcs-peiseyvallandry.com serves as the official platform for purchasing ski passes, pedestrian passes, funicular tickets, and altitude experiences in the Les Arcs Peisey Vallandry mountain area, part of the Paradiski ski region. It targets tourists and skiers visiting this region, offering e-commerce services for access to mountain facilities. The site uses modern frontend technologies such as React and integrates tracking and consent management tools like Google Tag Manager and Privacy Center SDK. The design is professional and mobile-optimized, providing a good user experience.
- AdOpt
goadopt.io
Technology · United States
79Low
NIS2 47 · GDPR 100
NIS2 47 · GDPR 100
AdOpt is a privacy compliance SaaS platform specializing in cookie consent management and multi-regulation compliance, serving over 40,000 companies globally. The company offers a comprehensive solution that includes consent storage, tag scanning, multilingual support, and integrations with popular marketing and analytics tools. Technically, the website is built on modern frameworks such as Next.js and React, hosted on Cloudflare, and optimized for performance and mobile responsiveness. Security posture is strong with HTTPS enforced and standard security headers present, although DNSSEC is not enabled and no explicit security policies are published. Overall, the platform demonstrates a mature digital presence with a focus on privacy and usability.
- Gerresheimer
gerresheimer.com
Healthcare · Germany
77Low
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Gerresheimer is a global leader in manufacturing pharmaceutical primary packaging and drug delivery systems, serving the pharma, biotech, cosmetics, diagnostics, and medical device industries. The company operates over 40 production sites worldwide and emphasizes sustainability, quality, and innovation. Their website reflects a mature digital presence built on TYPO3 CMS, with modern design and good mobile optimization. The site includes investor relations and compliance information, indicating a transparent corporate posture. Security-wise, the site enforces HTTPS and uses a consent management platform for GDPR compliance, but lacks explicit security headers and a public security policy. The absence of WHOIS data is unusual but the website content and branding strongly support legitimacy. Overall, the site is professional, secure, and compliant with privacy regulations, though improvements in security transparency and WHOIS clarity are recommended.
- Genentech
gene.com
Healthcare · United States
86Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Genentech is a leading biotechnology company specializing in biopharmaceutical research and development, serving healthcare professionals, patients, and investors. The website reflects a mature enterprise with consistent branding and comprehensive content focused on breakthrough science and patient care. Technically, the site employs modern JavaScript libraries, integrates Google Tag Manager for analytics, and uses OneTrust for cookie consent, indicating a strong digital maturity. Security posture is robust with HTTPS, security headers, and privacy compliance, though explicit security and incident response policies are not publicly detailed. Overall, the site is trustworthy and professionally maintained, with minor gaps in public security disclosures.
Softrsoftr.app
Technology
83Low
NIS2 22 · GDPR 100
NIS2 22 · GDPR 100
Softr is a technology company offering a no-code platform to build custom AI-powered business applications, portals, and internal tools. The platform targets businesses and teams seeking to streamline workflows without coding, positioning itself strongly in the no-code SaaS market with over 800,000 teams globally. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content describing their services and solutions. Technically, Softr leverages modern web technologies including Webflow CMS, Google Tag Manager, Meta Pixel, Microsoft Clarity, and Cookiebot for privacy compliance and analytics. The site is well-optimized for performance, mobile responsiveness, and SEO. Security posture is solid with HTTPS enforced and cookie consent mechanisms, though explicit security headers and incident response information are not publicly detailed. The WHOIS data is unavailable due to privacy protection or query issues, but the website's branding, integrations, and market presence strongly indicate legitimacy. Overall, Softr demonstrates a high level of digital maturity and business credibility with room for enhanced transparency in security policies and contact information.
Manufacture Merciermercier.cc
Retail · France
78Low
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
Manufacture Mercier is a heritage French brand specializing in premium cycling apparel, leveraging a century-old legacy dating back to 1919. The company operates an e-commerce platform built on Shopify, targeting discerning cyclists seeking high-quality textiles designed in France and manufactured in Europe. The website reflects a strong brand identity with rich multimedia content and a professional design that enhances user experience and trust. Technically, the site employs modern web technologies and integrates multiple marketing and analytics tools, ensuring robust performance and customer engagement. Security posture is solid with HTTPS enforcement and privacy compliance, although explicit security policies and incident response details are absent. The domain WHOIS data is unavailable, which introduces some uncertainty regarding domain registration legitimacy, but the overall digital presence and branding suggest a credible business. Strategic recommendations include publishing security policies, improving transparency on incident response, and addressing WHOIS data gaps to enhance trust.
BayWa r.e.baywa-re.com
Energy · Germany
78Low
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
BayWa r.e. is a globally recognized renewable energy company specializing in the development, trading, and servicing of sustainable energy projects including solar, wind, and bioenergy. The company operates under the parent company BayWa AG and maintains a strong market position in the energy sector with a focus on innovation and sustainability. Their website reflects a professional and comprehensive digital presence, targeting investors, industry professionals, and commercial clients. Technically, the site is built on modern frameworks such as Nuxt.js and Vue.js, with good mobile optimization and SEO practices. Security-wise, the site enforces HTTPS and employs standard security headers, though it lacks a publicly available security policy or incident response details. The absence of WHOIS data for the domain is a notable anomaly that slightly impacts trust but does not overshadow the overall professionalism of the site. Strategic recommendations include publishing detailed security and vulnerability disclosure policies and improving transparency around incident response.
- Epta Finland
epta-finland.com
Retail · Finland
80Low
NIS2 2 · GDPR 80
NIS2 2 · GDPR 80
Epta Finland is a specialized Finnish sales company established in 2003, providing comprehensive refrigeration solutions and services primarily to the Finnish food retail sector. The company operates multiple offices across Finland and emphasizes sustainable refrigeration technologies. Their business model focuses on product sales, installation, maintenance, and after-sales services, positioning themselves as a market leader in their niche. The website reflects a mature digital presence with professional design, clear navigation, and multilingual support. Technically, the site is built on Drupal 10 with modern front-end libraries and integrates marketing and analytics tools such as Google Tag Manager and Pardot. Security posture is solid with HTTPS and cookie consent mechanisms, though some improvements in security headers and incident response transparency are recommended. The absence of WHOIS domain registration data is a notable concern, suggesting either privacy protection or registration issues, which slightly impacts trustworthiness. Overall, the site is professional, compliant with GDPR, and serves its business purpose effectively.
- Advantech Co.
advantech.com
Technology · Taiwan
84Low
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
Advantech Co. is a globally recognized enterprise specializing in IoT intelligent systems, industrial automation, embedded computing, and healthcare IT solutions. The company positions itself as a leader in Industry 4.0 and edge computing, offering a broad portfolio of hardware and software products designed to enable industrial intelligence and digital transformation. Their market presence is supported by comprehensive product lines, certifications such as IEC 62443, and a strong ecosystem of business partners. The website reflects a mature digital infrastructure with modern technologies and active engagement through social media and educational platforms.
UltaHostultahost.com
Technology · United States
78Low
NIS2 55 · GDPR 83
NIS2 55 · GDPR 83
UltaHost is a technology company specializing in web hosting and domain registration services, targeting individuals and businesses seeking reliable and fast hosting solutions. Founded in 2019 and based in Delaware, USA, UltaHost positions itself as a leader in fast hosting with a broad portfolio including shared, VPS, dedicated, and specialized hosting services. The company leverages AI-powered tools to enhance customer experience and domain management. Technically, the website employs modern web technologies such as jQuery, Bootstrap 5, and integrates analytics and marketing tools like Google Analytics, Hotjar, and Tidio Chat. The infrastructure uses Cloudflare DNS for performance and security. Security posture is solid with HTTPS enforcement and client transfer protection on the domain, though improvements are possible by enabling DNSSEC and adding security headers. Privacy compliance is addressed with cookie consent and policies, but incident response and vulnerability disclosure information are absent. Overall, UltaHost demonstrates a professional and trustworthy online presence with good business credibility and technical maturity.
- Alexion Pharmaceuticals, Inc.
ultomiris.com
Healthcare · United States
76Low
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Alexion Pharmaceuticals, Inc. operates the ultomiris.com website as an official patient resource for ULTOMIRIS®, a prescription drug treating rare diseases such as NMOSD, gMG, aHUS, and PNH. The site provides comprehensive patient education, safety information, and personalized support programs, positioning Alexion as a specialized leader in rare disease pharmaceuticals. The website is well-branded, professionally designed, and targets patients and caregivers seeking treatment information and support. Technically, the site leverages modern frameworks like Bootstrap and Sitecore CMS, integrates analytics and advertising tools responsibly with consent mechanisms, and is hosted on AWS infrastructure. Security posture is solid with HTTPS and domain protections, though DNSSEC is not enabled and some security headers are missing. Privacy compliance is strong with clear policies and cookie consent management. Overall, the site reflects a mature digital presence aligned with healthcare industry standards.
Registrant of reelup.ioreelup.io
Technology · New Zealand
76Low
NIS2 2 · GDPR 85
NIS2 2 · GDPR 85
ReelUp is a specialized SaaS company offering shoppable video solutions primarily targeting Shopify merchants and online retailers. Their platform enables e-commerce businesses to convert social media videos into interactive, shoppable content, enhancing customer engagement and boosting sales. The company is relatively new, founded in 2022, and operates from New Zealand. Their market position is niche but well integrated within the Shopify ecosystem, leveraging third-party tools like Judge.me for reviews and Microsoft Clarity for analytics. Technically, the website is built on Shopify using the Dawn theme, incorporating modern technologies such as React 18 and jQuery. The infrastructure is hosted on Shopify's CDN with Cloudflare DNS, ensuring good performance and mobile optimization. Analytics and marketing tools are well integrated, including Google Tag Manager and Microsoft Clarity, providing moderate user tracking capabilities. From a security perspective, the site enforces HTTPS and uses standard security practices, though it lacks DNSSEC and explicit security headers like CSP. There is no visible security policy or incident response contact, which are areas for improvement. Privacy compliance is basic, with no explicit privacy or cookie policies found on the homepage, though a cookie consent mechanism is implied. Overall, the website presents a professional and trustworthy front with good business credibility and technical maturity. The risk profile is low, but improvements in privacy transparency and security hardening are recommended to enhance trust and compliance.
Swiss National Banksnb.ch
Finance · Switzerland
83Low
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
The Swiss National Bank (SNB) operates as Switzerland's central bank, providing essential services including monetary policy implementation, issuance of banknotes and coins, payment transaction facilitation, asset investment, and financial stability oversight. The website serves a broad audience including the general public, financial market participants, media, researchers, and government entities. It positions itself as a key national financial institution with a strong market presence and government backing. Technically, the website employs modern web technologies such as JavaScript, SVG icons, and CSS, likely managed via a custom CMS. It demonstrates excellent performance, mobile optimization, accessibility, and SEO practices. The site uses HTTPS with strong SSL configuration and includes a cookie consent mechanism aligned with GDPR requirements. From a security perspective, the site enforces HTTPS, avoids exposing sensitive data, and implements secure forms. However, explicit security policies and incident response contacts are not published, and no vulnerability disclosure or security.txt files are found. Analytics are conducted via a custom SNB service with moderate user tracking and a two-year data retention policy. Overall, the website is professional, trustworthy, and compliant with privacy regulations, with a high legitimacy score based on WHOIS data consistency. Strategic recommendations include publishing explicit security policies, incident response contacts, and vulnerability disclosure mechanisms to enhance transparency and security posture.