High-risk security reports
36,503 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,165001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
3,501–3,550 of 36,503
Casinoblecasinoble.ie
Other · Ireland
45High
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Casinoble is a well-established online gambling guide focused on providing comprehensive and expert information about casino games and sports betting, primarily targeting the Irish market. Founded in 2016, it has grown into an international brand with content available in over 25 languages. The website offers detailed reviews, comparisons, educational content, and promotes responsible gambling. Technically, the site is built on WordPress with modern analytics and tracking tools, optimized for mobile and SEO. Security posture is strong with HTTPS and recognized certifications, though some security headers and DNSSEC could be improved. Overall, Casinoble demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations.
Other
45High
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website onlinecasino-nj.com is currently inaccessible, serving a 403 Forbidden error page that blocks all content access. The domain is registered since 2017 with GoDaddy.com, LLC and is set to expire in 2026. The site appears to be related to online casino gambling targeted at New Jersey users, as inferred from the domain name. However, no actual business content, contact information, or policies are available on the site due to the access restriction. Technically, the site is hosted on SiteGround with standard DNS configuration but lacks DNSSEC and security headers. No analytics or tracking scripts are detected. Privacy and cookie policies are absent, indicating poor privacy compliance. The overall website quality and user experience are poor given the lack of accessible content and navigation. Security posture is basic with room for improvement in headers and SSL configuration. The domain registration is consistent and legitimate but the site itself is currently non-functional for visitors.
Other
49High
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website casinoservice.org is currently inaccessible, returning a 403 Forbidden error page that blocks access to any meaningful content. The domain is registered since 2013 with GoDaddy.com, LLC and uses SiteGround nameservers, indicating a stable and mature registration. However, the lack of accessible content, absence of privacy, cookie, or terms of service policies, and no visible contact or business information severely limit the ability to assess the business or security posture. No scripts, analytics, or security headers are detected, and DNSSEC is not enabled. Overall, the site appears to be down or access restricted, resulting in a very low AI score and limited insights.
Other
49High
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website nettikasinot247.com is currently inaccessible, returning a 403 Forbidden error page that blocks access to any meaningful content. The domain is registered since 2016 with GoDaddy.com, LLC and hosted on SiteGround servers. No business information, contact details, privacy or cookie policies, or security policies are present on the site. The lack of accessible content and security best practices significantly limits the ability to assess the business or technical maturity of the website. The site does not employ DNSSEC, nor does it present any security headers, which are important for domain and web security. Overall, the website's security posture is weak, and the absence of privacy compliance and business credibility indicators further reduces trustworthiness.
- AAbwasserbeseitigung Rendsburg
abwasser-rendsburg.de
Energy · Germany
48High
NIS2 — · GDPR —
NIS2 — · GDPR —
Abwasserbeseitigung Rendsburg is a municipal utility service responsible for wastewater disposal and treatment in the city of Rendsburg and surrounding areas including Büdelsdorf. The organization operates a dedicated sewage treatment plant and provides related services such as property drainage management. The website serves as an informational portal for residents and businesses, offering updates, contact information, and access to service-related forms. The market position is that of a local government service provider with a clear focus on environmental and public utility functions. Technically, the website is built on the Contao Open Source CMS platform, utilizing standard web technologies including HTML5, CSS, JavaScript, and jQuery. The site is hosted on infrastructure associated with Schleupen, a known service provider. While the site is functional and moderately optimized for mobile devices, it lacks advanced SEO and accessibility features. The absence of modern security headers and cookie consent mechanisms indicates room for improvement in technical security and privacy compliance. From a security perspective, the site uses HTTPS and includes CSRF tokens in forms, which are positive indicators. However, no explicit security policies, incident response contacts, or vulnerability disclosure mechanisms are present. The WHOIS data aligns well with the website's municipal nature, showing consistent domain registration and no privacy protection, supporting legitimacy. Overall, the security posture is moderate but could benefit from enhanced headers, policies, and transparency. The overall risk assessment is low given the nature of the business and the absence of sensitive data exposure or suspicious activity. Strategic recommendations include implementing security headers, adding cookie consent and privacy enhancements, publishing security and incident response policies, and updating technical components to modern standards to improve trust and compliance.
Other
45High
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
The website bnursingmidwiferys.org currently serves only a 404 Not Found error page, indicating that the site content is inaccessible or not yet published. The domain is registered with LiquidNet Ltd. since July 2022 and is valid until 2026, but the lack of any meaningful content or metadata suggests the site is either under development or abandoned. There are no visible business descriptions, contact information, or user engagement features. Technically, the site lacks HTTPS enforcement and security headers, which are critical for secure web presence. No privacy or cookie policies are present, indicating non-compliance with common data protection regulations. Overall, the site’s security posture is weak, and the business credibility is low due to the absence of content and transparency.
- WWeingut Hauser
weingut-hauser.de
Retail · Germany
44High
NIS2 — · GDPR —
NIS2 — · GDPR —
Weingut Hauser is a traditional German winery located in Bötzingen am Kaiserstuhl with over 200 years of history. The company specializes in producing and selling a variety of regional wines including Burgunder, Spätburgunder, Müller-Thurgau, Riesling, and Gewürztraminer, as well as pilzwiderstandsfähige (fungus-resistant) grape varieties. Their business model focuses on quality wine production, direct sales, and wine tasting experiences, targeting wine enthusiasts and regional customers. The website reflects a well-established small business with consistent branding and a clear presentation of their offerings. Technically, the website is built on WordPress using the Enfold theme, hosted on Kasserver infrastructure. It employs standard web technologies such as jQuery and MediaElement.js, and includes SEO optimizations and mobile responsiveness. The site uses HTTPS with good SSL configuration and implements a GDPR-compliant cookie consent mechanism. However, there is room for improvement in accessibility and security headers. From a security perspective, the site enforces HTTPS and has implemented cookie consent, but lacks explicit security policies and incident response contacts. No vulnerabilities or exposed sensitive data were detected. The absence of terms of service and security policy pages suggests an opportunity to enhance trust and compliance. Overall, the security posture is solid but could benefit from additional formal documentation and security headers. The overall risk assessment is low, with no signs of malicious activity or blocking mechanisms. Strategic recommendations include publishing a security policy, adding incident response contacts, enhancing security headers, and maintaining up-to-date software. These steps will improve compliance, security posture, and user trust.
- Ddoppelpunkt werbeagentur
doppelpunkt.org
Media · Germany
45High
NIS2 17 · GDPR 65
NIS2 17 · GDPR 65
Doppelpunkt Werbeagentur is a small, established German advertising agency founded in 2001, specializing in corporate design, marketing, photography, 3D visualization, webshops, and print media. The website is professionally designed with good content quality and consistent branding, targeting businesses seeking advertising and marketing services in Germany. Technically, the site uses standard web technologies including HTML, CSS, JavaScript, and jQuery, with Google Analytics and Google Tag Manager for analytics and tracking. The site lacks a cookie consent mechanism and DNSSEC, which are areas for improvement. Security posture is moderate with no explicit security headers detected and no DNSSEC enabled. The domain registration data is consistent with the business claims, indicating high legitimacy. Overall, the website is functional, trustworthy, and compliant with GDPR, though it could enhance security and privacy features.
- AAntesto s.r.o.
infineo.cz
Finance · Czech Republic
43High
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Antesto s.r.o. operates the INFINEO platform, a Czech Republic-based SaaS web application designed for financial advisors to create tailored financial analyses and manage client data efficiently. The platform emphasizes independence from financial institutions, offering objective financial planning tools accessible via any internet-connected device. INFINEO targets individual advisors and firms, providing customization options and API integrations to meet diverse client needs. Technically, the website employs modern web technologies including JavaScript, Google Tag Manager, Google Analytics, and Facebook Pixel for analytics and marketing. The site features responsive design optimized for mobile devices, ensuring accessibility and usability across platforms. However, some security headers are missing, and privacy compliance elements such as cookie consent and privacy policies are not evident. From a security perspective, the site uses HTTPS with a strong SSL certificate, ensuring encrypted data transmission. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data limits domain legitimacy verification, but the website content and company information appear professional and trustworthy. Strategic improvements include adding privacy and cookie policies, security headers, and incident response information to enhance compliance and security posture.
Aktyvių piliečių fondasapf.lt
Non-profit · Lithuania
36High
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Aktyvių piliečių fondas (APF) is a Lithuanian non-profit organization focused on strengthening civil society by providing funding and support to civil society organizations and projects. Supported by the EEA and Norway Grants, APF operates as a grant fund with a clear mission to empower vulnerable groups and promote active citizenship in Lithuania. The website is professionally designed using WordPress, featuring multilingual support and comprehensive content about funding opportunities, project results, and training events. The technical infrastructure includes modern web technologies and analytics tools, ensuring good performance and user experience. Security posture is adequate with HTTPS and cookie consent mechanisms in place, though improvements in security headers and incident response transparency are recommended. Overall, APF presents a trustworthy and credible online presence aligned with its non-profit mission.
- Kauno klinikos
kaunoklinikos.lt
Healthcare · Lithuania
44High
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Kauno klinikos is a prominent Lithuanian healthcare institution offering a broad spectrum of medical services including surgeries, diagnostics, emergency care, and specialized clinics. The website reflects a well-established enterprise with a large patient base and extensive medical staff. It serves patients, healthcare professionals, and researchers with multilingual support and comprehensive patient resources. The institution is linked to academic and governmental partners, reinforcing its market position as a leading healthcare provider in Lithuania. Technically, the website employs a modern but standard technology stack including jQuery, Bootstrap, FontAwesome, and Google services such as Analytics and reCAPTCHA. The site is mobile-optimized with good navigation and content quality. However, some security best practices like security headers and vulnerability disclosure are missing, indicating room for improvement in security posture. Security-wise, the site uses HTTPS and implements Google reCAPTCHA on forms, demonstrating basic security hygiene. The absence of explicit security policies and security headers suggests moderate security maturity. No WAF or blocking mechanisms were detected, and WHOIS data is consistent and transparent, supporting the legitimacy of the domain. Overall, the website is professional, trustworthy, and compliant with privacy regulations such as GDPR. Strategic improvements in security headers, incident response transparency, and accessibility could enhance the security and compliance posture further.
- VVšĮ Respublikinė Panevėžio ligoninė
panevezioligonine.lt
Healthcare · Lithuania
40High
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
VšĮ Respublikinė Panevėžio ligoninė is a well-established public healthcare institution in Lithuania, founded in 2007. It provides a broad range of medical services including consultations, diagnostics, treatment, and rehabilitation, serving patients primarily in the Panevėžys region. The website reflects a professional and comprehensive digital presence with clear navigation, multilingual support, and extensive patient education resources. The institution maintains active communication channels including email, phone, and social media platforms, enhancing accessibility and engagement with its audience. The business model is focused on public healthcare service delivery, supported by government and healthcare partners.
Healthcare · Lithuania
41High
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
VšĮ Vilniaus universiteto ligoninė Santaros klinikos is a leading university hospital in Lithuania providing comprehensive healthcare services including emergency care, specialist consultations, pediatric and adult treatments, and biomedical research. The institution is well-established with a founding date of 1998 and maintains a strong online presence with professional content and clear patient-oriented information. The website demonstrates a moderate to high level of digital maturity, utilizing modern web technologies such as jQuery, Swiper.js, and Google reCAPTCHA to enhance user experience and security. Privacy and cookie policies are clearly presented and GDPR compliant, reflecting a commitment to data protection. Security posture is good with HTTPS enforced and bot protection in place, though some security headers are missing and no explicit vulnerability disclosure or incident response contacts are published. Overall, the website is trustworthy, professional, and safe for general audiences, supporting the hospital's mission and services effectively.
VšĮ Mediapressanestumokalendorius.lt
Healthcare · Lithuania
36High
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
The website nestumokalendorius.lt represents a Lithuanian non-profit organization, VšĮ Mediapressa, focused on providing educational print and digital materials for pregnant women and new parents. The site offers free and purchasable publications, collaborates with healthcare providers, and supports parental education initiatives. The business is well-established with a domain age consistent with its history and partnerships with notable Lithuanian healthcare entities. Technically, the site is built on WordPress with WooCommerce and uses modern plugins and analytics tools, providing a good user experience and mobile optimization. Security posture is adequate with HTTPS and some security headers, but lacks explicit privacy and cookie policies, which are compliance gaps. Overall, the site is trustworthy, professionally maintained, and serves a clear educational mission.
- HOSTINGER operations, UAB
auginulietuva.lt
Education · Lithuania
42High
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Auginu Lietuvą is a Lithuanian national educational initiative providing a multimedia learning platform focused on pregnancy, childbirth, and newborn care. The platform offers scientifically based information and expert advice aimed at strengthening parenting skills. It targets parents and families in Lithuania and distributes content via a website and mobile applications on Android and iOS. The project is relatively new, founded in 2022, and hosted by HOSTINGER operations, UAB. Technically, the website uses modern web technologies including Vue.js, Google reCAPTCHA v3, and integrates social media SDKs for Facebook and Apple Sign-In. The platform is mobile-optimized and provides a good user experience with clear navigation and multimedia content. Hosting is stable and the domain registration is consistent with the business timeline. From a security perspective, HTTPS is enforced and bot protection via reCAPTCHA is implemented. However, the site lacks visible security headers and a cookie consent mechanism, which are important for GDPR compliance. No vulnerabilities or exposed sensitive data were detected. Contact information is clearly provided, but no formal security or incident response policies are published. Overall, the website is professional, trustworthy, and safe for general audiences. Strategic improvements in privacy compliance and security headers would enhance the platform's security posture and regulatory adherence.
- Textereien Manuela Reich
textereien.ch
Other · Switzerland
44High
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Textereien Manuela Reich is a small Swiss-based professional text and content creation service provider specializing in website content, print materials, proofreading, and consulting. The business emphasizes personalized service, creativity, and quality, targeting individuals and businesses needing professional writing support. The website is well-structured, professionally designed, and provides clear contact information and a comprehensive privacy policy, reflecting a mature digital presence. Technically, the site uses standard modern web technologies including HTML5, CSS3, jQuery, and Modernizr, hosted by a reputable Swiss provider. Security posture is moderate with some best practices observed such as CAPTCHA on the contact form and detailed privacy disclosures, but lacks visible security headers and cookie consent mechanisms. No vulnerabilities or suspicious elements were detected. Overall, the site is trustworthy and professional, with room for improvement in security hardening and privacy transparency.
Other
44High
NIS2 17 · GDPR 15
NIS2 17 · GDPR 15
The website dn20.de is currently inaccessible, returning a 403 Forbidden error page that blocks access to any meaningful content. Due to this restriction, no business information, metadata, or technical details could be extracted from the site. The domain is registered with standard GoDaddy name servers and shows no signs of privacy protection or suspicious WHOIS patterns, but the lack of accessible content limits trust and credibility assessments. Technically, the site lacks visible security headers, privacy policies, or contact information, indicating poor digital maturity and security posture. Overall, the site appears to be either under maintenance, misconfigured, or intentionally restricted, resulting in a very low AI score and inability to perform a comprehensive analysis.
Mangold Photovoltaik GmbHmangold-photovoltaik.de
Energy · Germany
39High
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
Mangold Photovoltaik GmbH is a German company specializing in photovoltaic solar energy solutions, offering a comprehensive range of products and services including solar modules, inverters, mounting, maintenance, and expert consulting. With over 20 years of experience and TÜV Rheinland certification, the company holds a strong regional market position in Schwäbisch Gmünd, Germany. Their business model focuses on direct sales, installation, and customer education through training courses. Technically, the website is built on custom HTML with JavaScript libraries such as jQuery and Highslide, hosted on kasserver.com. While the site is accessible and content-rich, it lacks advanced security headers and cookie consent mechanisms, which are recommended for improved GDPR compliance and security posture. Overall, the website demonstrates good professionalism and trustworthiness but could benefit from enhanced security and privacy features.
energy4me, planergie agenergy4me.ch
Energy · Switzerland
49High
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
energy4me, operated by planergie ag, is a Swiss-based company specializing in solar energy solutions including photovoltaic systems, energy storage, and energy management primarily serving the Bern and Herzogenbuchsee regions. The company positions itself as an agile, motivated, and innovative provider focused on sustainable energy self-sufficiency for homes and businesses. Their website reflects a professional and consistent brand image with clear service offerings and customer testimonials, indicating a strong local market presence. Technically, the website is built on WordPress using the Genesis Framework and Mai Theme Engine, incorporating modern web technologies such as jQuery and SEO optimizations via Yoast. The site is mobile-optimized and performs moderately well, though there is room for improvement in accessibility and security headers. Analytics are implemented via Google Analytics and Google Tag Manager, with moderate user tracking. From a security perspective, the site uses HTTPS with good SSL configuration but lacks several security headers and explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is partially met with a comprehensive privacy policy and terms of service, but the absence of a cookie consent mechanism is a gap. Overall, the website is trustworthy and professional with a solid business foundation and technical implementation. Strategic improvements in security headers, cookie consent, and incident response documentation would enhance compliance and security posture, further strengthening user trust and regulatory adherence.
- Stoehr Haustechnik
stoehr-solar.de
Energy · Germany
44High
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
Stoehr Haustechnik is a small German company operating in the energy sector, specializing in solar technology and building technology services. The website is built on Joomla CMS using the Helix Ultimate template framework and incorporates modern technologies such as Bootstrap, jQuery, and Google Maps API. Usercentrics is used for cookie consent management, indicating some level of GDPR compliance awareness. However, the site lacks explicit privacy policy, terms of service, and visible contact information, which are critical for full compliance and user trust. Security posture is good with HTTPS and CSRF protections in place, but there is room for improvement in transparency and user communication. Overall, the website is functional and moderately professional but would benefit from enhanced compliance documentation and clearer contact channels.
Energiewendegenossenschaft Region Winterthurewg-winterthur.ch
Energy · Switzerland
48High
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Energiewendegenossenschaft Region Winterthur (ERW) is a Swiss non-profit cooperative focused on enabling members to build their own photovoltaic solar installations in the Winterthur region. The cooperative operates on a cost-covering basis, leveraging member labor to reduce costs and providing expert support in planning, financing, and regulatory processes. With over 300 projects completed, ERW holds a strong local market position supported by partnerships with organizations like swissolar and sicherheits-charta. The website is built on WordPress with the Divi theme and integrates marketing tools such as HubSpot forms. It offers a good user experience with clear navigation and relevant content tailored to its target audience of environmentally conscious individuals interested in solar energy self-construction. Security posture is solid with HTTPS and no exposed sensitive data, though improvements in security headers and incident response documentation are recommended. Privacy compliance is adequate with a comprehensive privacy policy but lacks a cookie consent mechanism. Overall, the website reflects a trustworthy and professional organization with a clear mission and community focus.
- Solarfuxx GmbH
solarfuxx.de
Energy · Germany
47High
NIS2 2 · GDPR 43
NIS2 2 · GDPR 43
Solarfuxx GmbH is a German-based company specializing in photovoltaic solar energy solutions, energy storage, e-mobility charging infrastructure, and heating/climate technology integration. With over 15 years of regional experience, they serve customers primarily in the North Rhine-Westphalia region, offering consulting, installation, and ongoing support. Their website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive service descriptions. The company demonstrates strong business credibility through certifications and memberships in recognized industry organizations. Technically, the website employs standard web technologies including HTML5, CSS, and JavaScript, with cookie consent mechanisms implemented for GDPR compliance. Hosting is provided by websupport.cz, as indicated by the domain's nameservers. Performance is moderate with good mobile optimization and SEO practices. However, no advanced frameworks or CMS platforms are detected, suggesting a custom or lightweight site build. From a security perspective, the site uses HTTPS and employs email obfuscation to reduce spam. Cookie consent is implemented with opt-in functionality, supporting privacy compliance. However, security headers are not explicitly detected, and no published security or incident response policies are found. No vulnerabilities or suspicious patterns are evident, and the domain registration data aligns well with the business claims, supporting legitimacy. Overall, the website presents a trustworthy and professional digital presence with good privacy compliance and moderate security posture. Strategic improvements could include adding explicit security headers, publishing security policies, and enhancing accessibility features to further strengthen the security and compliance posture.
Sun4energy Heinz Streit GmbHsun4energy.ch
Energy · Switzerland
49High
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Sun4energy Heinz Streit GmbH is a small Swiss company specializing in sustainable energy solutions, primarily focusing on photovoltaic systems, carport solar systems, and wind power installations. The company operates regionally in the Seeland area, offering comprehensive consulting, planning, and turnkey installation services for solar energy projects. Their website reflects a professional and consistent brand image with clear service offerings and contact information. Technically, the site is built on WordPress with a custom theme, uses modern web technologies, and integrates Google Analytics for visitor tracking with appropriate cookie consent mechanisms. Security posture is solid with HTTPS enforced, though some security headers and formal policies are absent. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.
Energy · Switzerland
48High
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
BÜHLER ENTREPRISES MONTHEY (BEM) is a Swiss-based company specializing in electrical engineering, industrial studies, and turnkey installation services. The company operates primarily in the energy and manufacturing sectors, offering services such as electrical installations, industrial electricity, electrotechnical assemblies, energy solutions including photovoltaic solar systems, and automation. The website positions BEM as a regional player focused on quality and partnership with clients, supported by certifications like IQNet and SQS. The business model centers on providing integrated, customized solutions from concept to realization, targeting industrial and commercial clients in the Monthey region of Switzerland. Technically, the website is built on Joomla CMS and uses common JavaScript libraries such as jQuery and Bootstrap. The site is moderately optimized for performance and mobile devices, with a basic level of accessibility and SEO. The design is professional and consistent with the company branding, providing clear navigation and relevant content. However, the site lacks modern security headers and does not display privacy or cookie policies, indicating gaps in compliance and security best practices. From a security perspective, the website uses HTTPS, which is a positive indicator, but it lacks important security headers like Content Security Policy and HSTS. There are no visible forms on the homepage, reducing immediate attack surface, but the absence of privacy and cookie policies suggests non-compliance with GDPR requirements. No analytics or tracking scripts were detected, implying minimal user tracking. The WHOIS data is consistent with the business claims, showing no privacy protection or suspicious registration patterns, supporting the legitimacy of the domain. Overall, the website is functional and professional but requires improvements in privacy compliance and security hardening. Adding privacy and cookie policies, implementing security headers, and enhancing mobile optimization would strengthen the site's security posture and user trust. The business is credible and well-positioned in its sector, but digital maturity can be improved to meet modern standards.
Junod Wasser + Wärme AGjunodag.ch
Energy · Switzerland
49High
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Junod Wasser + Wärme AG is a Swiss-based company specializing in energy-related services including solar panel installations, heating systems, sanitary installations, and building modernization. Established in 1990, the company serves the Wil region with a focus on sustainable and efficient energy solutions. Their website reflects a professional and consistent brand image, highlighting partnerships with reputable energy and solar companies, which strengthens their market position as a regional specialist. Technically, the website is built on WordPress using modern plugins such as Yoast SEO and WPBakery Page Builder, ensuring good SEO and mobile responsiveness. The site uses HTTPS with an excellent SSL configuration, but lacks some security headers and cookie consent mechanisms, which are areas for improvement. No tracking or advertising scripts were detected, indicating a privacy-conscious approach. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and no visible vulnerabilities or exposed sensitive data. However, the absence of published security policies, incident response information, and vulnerability disclosure mechanisms suggests room for maturity in security governance. The WHOIS data is consistent with the business claims, showing a legitimate and established domain. Overall, the website is trustworthy, professional, and well-maintained, but could enhance compliance and security posture by implementing cookie consent, security headers, and publishing relevant policies.
Energy · Germany
49High
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
DAVICE DachBAU & Service GmbH & Co. KG is a German small business specializing in roofing construction, roof renovation, and photovoltaic system installation. The company positions itself as a regional expert providing tailored roofing and solar energy solutions to homeowners and businesses. Their website is professionally designed using Joomla CMS and features multimedia content such as videos and image sliders to showcase their services. Contact information is clearly provided, including email, phone, and physical address, enhancing business credibility. Technically, the website employs modern web technologies including Bootstrap and Smart Slider 3, with a responsive design optimized for mobile devices. The hosting is managed via kasserver.com nameservers, indicating a professional hosting environment. The website implements a cookie consent mechanism compliant with GDPR requirements, although no explicit security policy or incident response information is present. From a security perspective, the site uses HTTPS and obfuscates email addresses to reduce spam risk. However, it lacks visible security headers and dedicated security or incident response pages. No analytics or tracking scripts were detected, indicating minimal user tracking and good privacy compliance. The domain WHOIS data is limited but consistent with the hosting provider, with no suspicious patterns detected. Overall, the website is trustworthy and professional, with good content quality and privacy compliance. Security posture is moderate with room for improvement in headers and incident response transparency. The business is well represented online, targeting customers interested in sustainable roofing and solar energy solutions.
- TBS-Team GmbH
tbs-team.de
Energy · Germany
46High
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
TBS-Team GmbH is a well-established German company specializing in photovoltaic systems, fire protection, and electrical engineering services. With over 20 years of experience and more than 3,000 installed photovoltaic systems, the company holds a strong market position in Bavaria and across Germany. Their website is professionally designed using WordPress and Elementor, featuring clear navigation and contact options including email, phone, and a secure contact form with Google reCAPTCHA v3 integration. The company demonstrates a solid security posture with HTTPS and spam protection, though there is room for improvement in security headers and explicit security policies. Privacy compliance is supported by a comprehensive privacy policy, but cookie consent mechanisms are not evident. Overall, the website reflects a credible and trustworthy business with a focus on renewable energy and technical services.
Kurt Wöll Bedachungs GmbHwoell-bedachungen.de
Energy · Germany
49High
NIS2 2 · GDPR 80
NIS2 2 · GDPR 80
Kurt Wöll Bedachungs GmbH is a small German company specializing in roofing services and photovoltaic system installations. The company positions itself as a reliable partner for new construction, renovation, and repair projects, offering expert consultation and comprehensive support throughout the project lifecycle. Their market presence is local to regional, focusing on residential and commercial clients requiring roofing and solar energy solutions. The website reflects a professional business with clear service offerings and partnerships with reputable industry suppliers. Technically, the website is built on WordPress using Elementor and common plugins such as Contact Form 7 and Complianz for GDPR compliance. Hosting is provided by a German hosting provider, ensuring good performance and regional compliance. The site is mobile-optimized and SEO-friendly, with structured data enhancing search visibility. Security practices include HTTPS enforcement and cookie consent mechanisms, though some advanced security headers and policies are not explicitly published. From a security perspective, the site maintains a good posture with encrypted connections and GDPR-compliant data collection via contact forms. However, it lacks a publicly available security policy or incident response contacts, which could be improved to enhance trust and readiness. No vulnerabilities or suspicious activities were detected in the analysis. Overall, the website is trustworthy, professionally maintained, and compliant with relevant privacy regulations. Strategic improvements in security transparency and header implementation would further strengthen its security posture and user trust.
- EBITSCHenergietechnik GmbH
ebitsch-energietechnik.de
Energy · Germany
45High
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
EBITSCHenergietechnik GmbH is a well-established German company specializing in renewable energy solutions, particularly photovoltaic systems, battery storage, and heat pumps. Founded in 1990, it has a strong regional presence with over 45 employees and more than 5000 completed solar projects. The company holds multiple industry certifications and awards, reinforcing its market credibility. The website reflects a professional digital presence built on WordPress with modern plugins and themes, providing a good user experience and clear navigation. Security posture is solid with HTTPS and some security headers, though improvements in cookie consent and vulnerability disclosure are recommended. Overall, the site is trustworthy and aligns well with the company's business claims.
Skupina KAREL DVOŘÁKdvorak.cz
Real Estate · Czech Republic
47High
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Skupina KAREL DVOŘÁK is a Czech real estate group specializing in leasing retail and commercial spaces across a diverse portfolio including shopping centers, office buildings, hotels, industrial parks, and cultural venues. The company positions itself as a reliable partner with over 20 years of experience, targeting businesses seeking quality commercial properties in strategic locations. The website is professionally designed using WordPress with modern SEO and cookie compliance tools, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks visible security headers and explicit incident response information. The absence of WHOIS data limits domain legitimacy verification, posing a moderate risk. Overall, the site is business-focused, safe, and functional but could improve transparency and security practices.
Hrvatska udruga IBCLChusd.hr
Healthcare · Croatia
40High
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Hrvatska udruga IBCLC is a Croatian non-profit association dedicated to breastfeeding counseling and support. The organization provides educational resources, organizes symposia, and publishes an annual newsletter to promote breastfeeding awareness and best practices. Their website serves as an information hub for parents, healthcare professionals, and breastfeeding counselors, positioning them as a niche healthcare entity within Croatia. Technically, the website is built on WordPress using Elementor and related plugins, with a moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled, but lacks security headers and formal privacy/cookie policies, indicating room for compliance improvements. Overall, the site is trustworthy and professionally maintained, but could enhance its privacy and security frameworks to better align with GDPR and modern web standards.
Non-profit · Croatia
48High
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Hrvatska udruga za promicanje primaljstva is a Croatian non-profit association dedicated to promoting midwifery. The organization provides educational resources, community engagement, and organizes events such as symposiums to support midwives and related healthcare professionals. The website serves as an information hub for members and the public, featuring news, educational content, and membership services. The association is well-established with a domain registered since 2013 and operates primarily within Croatia.
Healthcare
37High
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
EFNNMA is a European non-profit forum dedicated to nursing and midwifery associations, collaborating closely with WHO Europe to support healthcare workers and promote sector progress. The website serves as an information hub featuring news, webinars, and policy messages targeted at healthcare professionals and stakeholders. Technically, the site is built on WordPress with common plugins and frameworks such as Bootstrap and jQuery, hosted via Register SpA. The site is moderately optimized for performance and mobile use but lacks advanced SEO and accessibility features. Security posture is basic with HTTPS enabled but missing DNSSEC and security headers, and no explicit privacy or cookie policies, indicating compliance gaps. Overall, the site is trustworthy and professional but would benefit from enhanced security and privacy compliance measures.
Eesti Tervishoiutöötajate Kutseliitkutseliit.eu
Healthcare · Estonia
39High
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Eesti Tervishoiutöötajate Kutseliit (ETK) is the largest professional association representing healthcare workers in Estonia. The organization focuses on protecting members' labor and socio-economic rights, providing continuous information and training, and advocating for improved living standards and safe working environments. The website reflects a well-structured non-profit entity with a clear mission and active partnerships. Technically, the site is built on WordPress with modern plugins and uses HTTPS with Cloudflare Turnstile captcha for form security. However, explicit privacy and terms of service pages are not found, and security headers are not detected, indicating room for improvement in compliance and security posture. Overall, the site is professional, trustworthy, and serves its target audience effectively.
Sünnitusmajade Fondaitaalustadaelu.ee
Non-profit · Estonia
38High
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Sünnitusmajade Fond is a small Estonian non-profit organization dedicated to supporting maternity hospitals through charitable events and exhibitions. Founded in 2000, it has a focused mission to raise awareness and funds for childbirth-related causes. The website is built on WordPress and hosted by Zone Media OÜ, reflecting a moderate level of technical maturity with caching and responsive design. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is functional and professional but could improve in transparency and security documentation.
Zone Media OÜperekool.ee
Education · Estonia
42High
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Perekool.ee is a well-established Estonian family and parenting portal operated by Zone Media OÜ since 2010. It offers a comprehensive range of articles, community forums, and resources focused on pregnancy, childbirth, and parenting. The website targets parents and expecting parents in Estonia, positioning itself as a trusted local leader in the parenting education sector. The business model revolves around content provision and community engagement, supported by advertising and partnerships. Technically, the site is built on WordPress with modern plugins for SEO, analytics, and cookie compliance, hosted by Zone Media OÜ. The site demonstrates good digital maturity with responsive design and structured data implementation. Security posture is solid with HTTPS enforced and anti-spam measures, though some security headers could be improved. Privacy compliance is strong with GDPR-aligned cookie consent and a comprehensive privacy policy. Overall, the site is professional, trustworthy, and safe for general audiences.
Gandro Paštasgandropastas.lt
Retail · Lithuania
41High
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Gandro Paštas is a Lithuanian small business operating an e-commerce platform focused on providing gift boxes for newborns and infants. The business partners with various brands to offer products and discount coupons, enhancing value for new parents. The website is built on WordPress with WooCommerce, leveraging modern SEO and marketing tools such as Yoast SEO Premium and MailPoet. The technical infrastructure is solid with HTTPS enabled and integration of Google Analytics and Facebook Pixel for marketing insights. Security posture is moderate with room for improvement in security headers and cookie consent mechanisms. The business demonstrates compliance awareness with GDPR through privacy policies and consent checkboxes in registration forms. Overall, the website is professional, trustworthy, and well-positioned in its niche market.
StepArcsteparc.lt
Other · Lithuania
42High
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
StepArc is a Lithuanian-based advertising and printing agency specializing in traditional advertising, printing services, graphic design, and business gift production. The company targets a general audience seeking comprehensive advertising and printing solutions. The website is built on WordPress using the Divi theme, integrating popular marketing and analytics tools such as Google Analytics, Google Tag Manager, and Facebook Pixel, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks explicit security headers and formal security policies. Privacy compliance is limited due to the absence of a dedicated privacy policy and terms of service pages. Overall, the website presents a professional and trustworthy image consistent with a small local business.
- Agentura Život spol. s r.o.
zivot.cz
Government · Czech Republic
33High
NIS2 0 · GDPR 0
NIS2 0 · GDPR 0
Agentura Život spol. s r.o. is a Czech security agency established in 1990, providing comprehensive physical security services including protection of persons, property, and event security. The company holds recognized certifications such as ISO 9001, ISO 27001, and OHSAS 18001, indicating a mature integrated management system. Their client base includes government entities and commercial organizations, positioning them as a trusted medium-sized security service provider in the Czech Republic. Technically, the website uses common web technologies like Bootstrap, jQuery, and Google Analytics, but lacks HTTPS enforcement and modern security headers, which weakens its security posture. The absence of privacy and cookie policies also indicates compliance gaps. Overall, the site is professional and content-rich but requires improvements in security and privacy compliance to align with best practices.
Kompostujkompostuj.cz
Non-profit · Czech Republic
46High
NIS2 25 · GDPR 10
NIS2 25 · GDPR 10
Kompostuj.cz is a well-established Czech non-profit organization dedicated to promoting bio-waste sorting and recycling awareness across the Czech Republic. The website reflects a medium-sized organization with a clear focus on environmental education and sustainability. The business model centers on communication and advocacy rather than commercial activities, positioning it as a trusted entity in the non-profit environmental sector. The website's content is relevant and professionally presented, targeting a general audience interested in ecological topics. Technically, the website is built on WordPress using popular themes and plugins such as Astra, Elementor, and Smart Slider 3. It employs modern web technologies including JavaScript libraries and Google Analytics for tracking. The site is mobile-optimized and demonstrates good SEO practices, although performance is moderate. Accessibility features are basic but present. From a security perspective, the site uses HTTPS with excellent SSL configuration, but lacks advanced security headers and explicit security policies. No vulnerabilities or exposed sensitive data were detected in the analyzed content. Privacy compliance is weak due to the absence of privacy and cookie policies, which is a notable gap given the use of tracking technologies. Overall, the website is trustworthy and professionally maintained but would benefit from enhanced privacy compliance and security hardening. Strategic improvements in these areas would strengthen user trust and regulatory adherence.
ABEMabem.org.br
Healthcare · Brazil
40High
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
ABEM is a Brazilian non-profit association dedicated to supporting people affected by Multiple Sclerosis through emotional support, information, and awareness campaigns. The organization has a strong presence in Brazil with over 41 years of activity and serves more than 12,000 people directly. Their website reflects a professional and consistent brand image, targeting patients, families, and donors. Technically, the site is built on WordPress using the Astra theme and Ultimate Addons for Gutenberg, hosted by HostGator Brazil, and integrates Google Analytics and Tag Manager for tracking. Security posture is solid with HTTPS and no visible vulnerabilities, but lacks published security policies and incident response contacts. Privacy compliance is limited due to missing privacy and cookie policies. Overall, the site is trustworthy and well-positioned in its niche but could improve compliance and security transparency.
joimax GmbHjoimax.com
Healthcare · Germany
49High
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
joimax GmbH operates a professional and comprehensive website focused on endoscopic minimally invasive spine surgery solutions. The company positions itself as a leader in this specialized healthcare sector, offering innovative products and extensive training programs. The website is well-structured, visually appealing, and targets both healthcare professionals and patients. Technically, the site is built on WordPress with modern plugins and frameworks, including consent management and analytics integration, reflecting a mature digital infrastructure. Security posture is good with HTTPS and consent mechanisms, though some security headers and policies could be improved. The absence of WHOIS data slightly reduces trust but the overall professional presentation and consistent branding support legitimacy. Privacy compliance is strong with GDPR-aligned policies and cookie consent. Overall, the site demonstrates a solid balance of business credibility, technical implementation, and privacy awareness.
- WEBHOUSE, s.r.o.
visitroznov.cz
Hospitality · Czech Republic
45High
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
The website visitroznov.cz serves as a comprehensive tourism portal for Rožnov pod Radhoštěm, a town in the Czech Republic. It provides visitors with information on accommodation, cultural events, sports activities, and local attractions, positioning itself as a key regional resource for tourists and locals alike. The site is operated by WEBHOUSE, s.r.o., a Czech company specializing in web design and content management systems. The business model focuses on promoting local tourism and hospitality services through curated content and event calendars. Technically, the website employs standard web technologies including HTML5, CSS3, and JavaScript, with integrations for Google Analytics, Google Tag Manager, and Google Translate for multilingual support. It uses the VISMO CMS platform, which is tailored for municipal and tourism websites. The site demonstrates good mobile optimization and basic accessibility features, with a moderate performance profile. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism compliant with GDPR. However, it lacks explicit security policies, incident response contacts, and advanced security headers, which could be improved. No vulnerabilities or suspicious content were detected, and the domain registration data aligns well with the website's purpose and location, indicating legitimacy. Overall, visitroznov.cz is a trustworthy and professionally maintained tourism information portal with solid business credibility and adequate technical implementation. Strategic enhancements in security policies and transparency could further strengthen its compliance and user trust.
- Sport-Santé
sport-sante.lu
Healthcare · Luxembourg
45High
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Sport-Santé is a Luxembourg-based non-profit federation focused on promoting therapeutic physical activities for patients with chronic diseases. Managed by the Fédération Luxembourgeoise des Associations de Sport de Santé (FLASS), it serves as a recognized label and resource hub offering information, events, and videos to support health through physical activity. The website is well-structured, multilingual, and optimized for SEO, targeting patients and healthcare professionals in Luxembourg. Technically, it is built on WordPress with modern plugins and libraries, providing a good user experience across devices. Security posture is solid with HTTPS and cookie consent mechanisms, though it lacks explicit security headers and published security policies. The absence of WHOIS data limits domain trust verification, but the presence of official partnerships and consistent branding supports legitimacy. Overall, the site is professional, informative, and trustworthy within its healthcare niche.
- Združenie Sclerosis multiplex Nádej
tatrydunaj.sk
Non-profit · Slovakia
42High
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
The website tatrydunaj.sk represents a Slovak non-profit organization 'Združenie Sclerosis multiplex Nádej' that organizes an annual cycling event to raise awareness and support for multiple sclerosis patients. The event, now in its 12th year, is well-established and targets young adults and the general public to promote early diagnosis and solidarity. The website is professionally designed using WordPress with modern technologies such as Bootstrap and jQuery, and it integrates SEO best practices via Yoast SEO. Social media integration and multimedia content enhance engagement. Security posture is solid with HTTPS and DNSSEC enabled, and Google reCAPTCHA is used to protect forms. However, the site lacks formal privacy and cookie policies, as well as explicit security incident contacts or vulnerability disclosures, which are important for compliance and trust. Overall, the site is trustworthy and effective for its mission but could improve compliance and security transparency.
Enasisenasis.fr
Education · France
43High
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
Enasis.fr is a specialized educational platform serving the fire and rescue services sector in France. It provides a Moodle-based learning environment with training resources and consortium collaboration tools. The platform targets professionals and organizations within emergency services, positioning itself as a niche government or public sector educational service. The website is well-branded, consistent, and offers multilingual support with a focus on French and English. Technically, it leverages mature open-source technologies such as Moodle, YUI, and jQuery, hosted on OVH infrastructure, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced and privacy-conscious analytics via Matomo, though it lacks explicit security headers and published security policies. Privacy compliance is supported by visible cookie consent and GDPR-aligned privacy policies. Overall, the site is professional, trustworthy, and safe for general audiences.
Guadeloupe Numériqueguadeloupe-numerique.fr
Technology · France
48High
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Guadeloupe Numérique is a regional digital platform established in 2015, focused on supporting digital transformation and services for individuals, professionals, students, and local communities in Guadeloupe. The website provides information, training, events, and digital support services, positioning itself as a key regional player in digital inclusion and development. The platform uses Drupal 7 CMS and integrates modern web technologies such as Bootstrap and jQuery, with a moderate performance profile and good mobile optimization. Security posture is solid with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and incident response transparency. Overall, the website is professional, trustworthy, and compliant with GDPR cookie consent requirements, though it lacks explicit privacy and security policy pages on the main domain.
Europe Guadeloupeeurope-guadeloupe.fr
Government · France
36High
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Europe Guadeloupe is a public sector informational website representing the European Union's engagement and solidarity policies in the Guadeloupe region. The site serves as a regional portal to disseminate information about EU programs and initiatives aimed at regional development and convergence. It targets a general audience including residents, stakeholders, and interested parties in Guadeloupe and the EU. Technically, the website is built on WordPress with the Divi theme and uses modern web technologies including Google Analytics and FontAwesome. The site is well-optimized for SEO and mobile devices, with a good user experience and clear navigation. Security posture is solid with HTTPS enforced and reCAPTCHA implemented, though some security headers could be improved. Privacy compliance is basic with a cookie consent mechanism but no explicit privacy policy detected in the provided content. Overall, the domain WHOIS data is not publicly available, likely due to privacy protection, which is typical for such informational sites. No suspicious or malicious indicators were found. The website is trustworthy and professionally maintained, serving its informational purpose effectively.
- Guadeloupe Formation
guadeloupeformation.com
Education · France
45High
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Guadeloupe Formation is a regional public administrative institution dedicated to professional training, orientation, and insertion services in Guadeloupe. Established in 2007, it offers a broad range of training programs targeting employees, job seekers, and the general public. The institution emphasizes pre-qualification, qualification, and support throughout the training journey. The website reflects a well-structured, professional presence with clear navigation and relevant content tailored to its audience. It maintains an active social media presence and displays recognized certifications such as Qualiopi, enhancing its credibility. Technically, the website is built on Joomla CMS using modern libraries like jQuery and Bootstrap, hosted by OVH sas. It employs HTTPS with good SSL configuration and integrates Google Analytics, Facebook SDK, and OneSignal for push notifications. Cookie consent mechanisms are implemented, though a dedicated privacy policy page is not found. The site is mobile-optimized and performs moderately well. From a security perspective, the site uses HTTPS and reCAPTCHA for forms but lacks DNSSEC and explicit security headers. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent with the business profile, showing a long-established domain without privacy protection, indicating transparency. Overall, the security posture is adequate but could be improved with additional headers and published security policies. The overall risk is low, with no signs of malicious activity or suspicious content. Strategic recommendations include enhancing DNS security, publishing privacy and security policies, and implementing security headers to strengthen protection and compliance.
- WEBPHORMAT Internetagentur
webphormat.de
Technology · Germany
45High
NIS2 2 · GDPR 43
NIS2 2 · GDPR 43
WEBPHORMAT Internetagentur is a small, established internet agency based in Germany, specializing in TYPO3 CMS programming, WordPress, and Shopware online shops. With over 20 years of experience and more than 200 successful projects, the company serves businesses and advertising agencies primarily in the Saarland and Rheinland-Pfalz regions. Their service offerings include consulting, web design, development, hosting, maintenance, and SEO optimization. The website reflects a professional and consistent brand image with clear contact information and a portfolio of references. Technically, the website is built on TYPO3 CMS with Bootstrap and uses modern web technologies including FontAwesome and Google Fonts. Hosting is provided by SchlundTech, and the site employs Matomo analytics for privacy-conscious user tracking. The site is mobile optimized, accessible, and SEO friendly, with a moderate performance profile. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms compliant with GDPR. However, it lacks explicit security headers and does not provide visible security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. Overall, the security posture is good but could be improved with additional headers and documented policies. The overall risk assessment is low, with no signs of malicious activity or content safety concerns. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and maintaining regular audits of third-party scripts to ensure ongoing security and compliance.