Medium-risk security reports
99,067 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,188001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
35,801–35,850 of 99,067
Airbnbairbnb.se
Hospitality · Sweden
55Medium
NIS2 25 · GDPR 10
NIS2 25 · GDPR 10
Airbnb is a globally recognized online marketplace specializing in vacation rentals, unique travel experiences, and hosting services. The website targets travelers and hosts worldwide, offering access to millions of listings across more than 220 countries and regions. The platform's business model revolves around connecting hosts with guests, facilitating bookings and experiences through a digital marketplace. The website is localized for Sweden, supporting the Swedish language and currency, and is part of a broader global network of Airbnb localized sites. Technically, the website employs modern web technologies including React 18, Google Tag Manager, and Partytown for script management. It integrates mapping services such as Google Maps and Mapbox, enhancing user experience for location-based searches. The site demonstrates good mobile optimization, accessibility, and SEO practices, contributing to a positive user experience. From a security perspective, the site enforces HTTPS and uses some security best practices such as Content Security Policy for third-party widgets and script isolation via Partytown. However, explicit security headers and publicly available security policies are not evident in the provided content. No vulnerabilities or exposed sensitive data were detected. Privacy compliance indicators such as privacy and cookie policies are not clearly found in the analyzed content, which suggests room for improvement in transparency and user consent management. Overall, Airbnb's Swedish website presents a professional, trustworthy, and technically sound platform consistent with its global brand. The absence of WHOIS data for the exact domain queried is a minor anomaly but does not detract significantly from the site's legitimacy. Strategic recommendations include enhancing privacy disclosures, publishing security policies, and improving security header implementation to further strengthen trust and compliance.
Airbnb, Inc.airbnb.nl
Hospitality · Netherlands
66Medium
NIS2 25 · GDPR 10
NIS2 25 · GDPR 10
Airbnb, Inc. operates a leading global online marketplace for vacation rentals and travel experiences, connecting millions of hosts and guests worldwide. The website www.airbnb.nl serves the Dutch market with localized content and services, reflecting Airbnb's enterprise-level digital presence. The platform leverages modern web technologies including React, Mapbox, and Google Tag Manager to deliver a fast, mobile-optimized, and accessible user experience. Security is robust with HTTPS, CSP, and other security headers implemented, though explicit public security policies and incident response details are not disclosed. Privacy and cookie policies are comprehensive and GDPR compliant, supporting user trust and regulatory adherence. Overall, the website demonstrates high professionalism, strong business credibility, and a mature technical infrastructure.
Airbnb, Inc.airbnb.gr
Hospitality · Greece
71Medium
NIS2 25 · GDPR 25
NIS2 25 · GDPR 25
Airbnb.gr is the Greek localized website of Airbnb, Inc., a global leader in the hospitality industry offering a peer-to-peer online marketplace for vacation rentals, unique homes, and travel experiences. The site targets travelers and hosts in Greece and worldwide, providing access to millions of listings across 220+ countries. The business model is based on facilitating short-term lodging and experiences through an easy-to-use digital platform. The website reflects Airbnb's strong market position and brand recognition with professional design and comprehensive content.
Airbnb, Inc.airbnb.pt
Hospitality · Portugal
69Medium
NIS2 25 · GDPR 10
NIS2 25 · GDPR 10
Airbnb, Inc. operates a leading global online marketplace for short-term vacation rentals and experiences, connecting travelers with hosts worldwide. The www.airbnb.pt website serves the Portuguese market, offering localized content and services consistent with Airbnb's global brand. The platform supports millions of listings and provides a seamless user experience for booking accommodations and activities. Technically, the site employs modern web technologies including React and advanced performance optimizations, ensuring fast load times and mobile responsiveness. Security measures such as HTTPS, comprehensive security headers, and error monitoring via Bugsnag demonstrate a mature security posture. Privacy and cookie policies are comprehensive and GDPR compliant, reflecting strong regulatory adherence. Overall, the website is professional, trustworthy, and well-aligned with Airbnb's enterprise stature.
Airbnbairbnb.at
Hospitality · Austria
69Medium
NIS2 25 · GDPR 10
NIS2 25 · GDPR 10
Airbnb is a global online marketplace specializing in vacation rentals, unique travel experiences, and hosting services. The website targets travelers and hosts worldwide, offering millions of listings across over 220 countries and regions. The Austrian localized site (www.airbnb.at) reflects Airbnb's strong market position as a leader in the hospitality industry with a well-established brand and extensive service offerings. Technically, the website leverages modern web technologies including React 18, Partytown for script management, Google Tag Manager, and Mapbox for mapping services. The site is well-optimized for mobile devices, includes accessibility features, and employs security best practices such as HTTPS and Content Security Policy headers. Performance is moderate, with room for optimization. From a security perspective, the site demonstrates a mature posture with strong SSL configuration and security headers. However, it lacks visible privacy and cookie policies, security incident response information, and vulnerability disclosure mechanisms, which are important for compliance and user trust. No critical vulnerabilities or suspicious domains were detected. Overall, the site is professional, trustworthy, and safe for general audiences. Strategic improvements in privacy transparency, contact information, and security disclosures would enhance compliance and user confidence.
Airbnbairbnb.hu
Real Estate · Hungary
69Medium
NIS2 25 · GDPR 10
NIS2 25 · GDPR 10
Airbnb.hu is the Hungarian localized website of Airbnb, a global leader in the peer-to-peer lodging and experiences marketplace. The platform offers millions of vacation rentals and experiences worldwide, targeting travelers and hosts. The website is professionally designed with excellent user experience and strong branding consistency. Technically, it leverages modern web technologies including React, Partytown for script isolation, and integrates with Google Analytics and Tag Manager for tracking and performance monitoring. Security posture is strong with HTTPS enforced and some security best practices observed, though explicit security policies and incident response contacts are not publicly visible. Privacy compliance is partial due to missing explicit privacy and cookie policies in the provided HTML snapshot. Overall, the site is trustworthy and well-positioned in the hospitality industry.
Airbnbairbnb.cz
Hospitality · Czech Republic
58Medium
NIS2 25 · GDPR 10
NIS2 25 · GDPR 10
Airbnb.cz is the Czech localized version of Airbnb, a leading global online marketplace for short-term vacation rentals and experiences. The platform connects hosts offering homes, apartments, and unique stays with travelers worldwide. The website demonstrates a mature digital infrastructure leveraging modern web technologies such as React, Google Tag Manager, and map services like Mapbox and Gaode. Security is robust with HTTPS enforcement and security headers, although explicit privacy and cookie policies were not found in the provided HTML snippet, indicating room for improvement in privacy compliance visibility. The domain WHOIS data is unavailable, likely due to privacy protection, which is common for large enterprises but reduces transparency. Overall, the site is professional, trustworthy, and well-optimized for user experience and SEO.
Airbnbairbnb.co.kr
Hospitality · South Korea
73Medium
NIS2 25 · GDPR 35
NIS2 25 · GDPR 35
Airbnb is a leading global online marketplace specializing in vacation rentals, experiences, and hosting services. The localized Korean website targets travelers seeking diverse lodging options and unique travel experiences across more than 220 countries and regions. The platform leverages modern web technologies including React and integrates mapping services such as Google Maps and Mapbox to enhance user experience. The site is well-branded, professionally designed, and optimized for mobile devices, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforced and some security best practices observed, though additional security headers could improve defenses. Privacy compliance indicators are limited on the main page, with no explicit privacy or cookie policies detected, which slightly impacts compliance scoring. Overall, the website demonstrates high business credibility and technical maturity, consistent with Airbnb's enterprise status and global market position.
Airbnbairbnb.pl
Hospitality · Poland
58Medium
NIS2 25 · GDPR 10
NIS2 25 · GDPR 10
Airbnb.pl is the Polish localized version of Airbnb, a global online marketplace for vacation rentals, experiences, and hosting services. The website offers access to millions of listings worldwide, targeting travelers and hosts seeking short-term lodging and unique experiences. The site is professionally designed, leveraging modern web technologies such as React and integrates various mapping and analytics services to enhance user experience and operational insights. Security posture is strong with HTTPS and some security best practices implemented, though explicit security headers could be improved. Privacy and cookie policies are not clearly present in the provided content, indicating room for compliance enhancement. Overall, the domain and website appear legitimate and consistent with Airbnb's global brand presence.
—
75Medium
NIS2 25 · GDPR 50
NIS2 25 · GDPR 50
Airbnb, Inc.airbnb.dk
Hospitality · Denmark
66Medium
NIS2 25 · GDPR 10
NIS2 25 · GDPR 10
Airbnb.dk is the Danish localized website of Airbnb, Inc., a global leader in the hospitality and vacation rental industry. The platform offers millions of vacation homes, cabins, and beach houses across more than 220 countries and regions worldwide. The website is professionally designed, highly accessible, and optimized for mobile devices, providing a seamless user experience for travelers and hosts alike. The business model centers on an online marketplace connecting hosts with guests, facilitating short-term rentals and experiences. Airbnb holds a strong market position as a trusted and innovative platform in the hospitality sector. Technically, the website leverages modern web technologies including React 18, Google Tag Manager, and Partytown for script management, alongside map services like Mapbox and Google Maps API. The infrastructure supports fast loading times, good SEO practices, and accessibility features, reflecting a mature digital presence. The site employs robust security measures such as HTTPS, Content Security Policy, and consent-based tracking mechanisms, ensuring user data protection and compliance with GDPR. Security posture is strong with no evident vulnerabilities or exposed sensitive information. However, explicit security policies and incident response contacts are not publicly detailed, representing an area for improvement. Privacy and cookie policies are comprehensive and clearly communicated, supporting regulatory compliance. Overall, Airbnb.dk demonstrates a high level of business credibility, technical sophistication, and user trustworthiness. The risk assessment is low given the brand's global reputation and secure web practices. Strategic recommendations include publishing detailed security policies, establishing a vulnerability disclosure program, and enhancing incident response transparency to further strengthen trust and compliance.
Airbnb, Inc.airbnb.com.br
Hospitality · Brazil
62Medium
NIS2 25 · GDPR 35
NIS2 25 · GDPR 35
Airbnb, Inc. operates a leading global online marketplace for short-term vacation rentals and experiences, serving millions of travelers and hosts worldwide. The Brazilian localized website offers access to millions of listings across more than 220 countries and regions, targeting travelers seeking diverse accommodation options and unique experiences. The business model centers on connecting hosts and guests through a digital platform, generating revenue via service fees and commissions. Airbnb holds a strong market position as a pioneer and leader in the hospitality sharing economy.
Airbnbairbnb.fr
Hospitality · France
69Medium
NIS2 25 · GDPR 10
NIS2 25 · GDPR 10
Airbnb is a leading global online marketplace specializing in vacation rentals, unique accommodations, and travel experiences. The company operates a large-scale platform connecting travelers with hosts worldwide, offering millions of listings across more than 220 countries. The website is professionally designed, multilingual, and optimized for mobile devices, reflecting a mature digital infrastructure. Technically, Airbnb employs modern web technologies such as React and integrates analytics and error tracking tools like Google Tag Manager and Bugsnag, ensuring robust performance and monitoring capabilities. Security posture is strong with HTTPS enforcement, CSRF protection, and security headers, although explicit security policies and incident response contacts are not publicly detailed. Overall, Airbnb's website demonstrates high trustworthiness, excellent user experience, and compliance with privacy regulations including GDPR. The absence of WHOIS data is likely due to privacy protection, which is justified for a company of this scale. Strategic recommendations include publishing detailed security and incident response policies to enhance transparency and trust.
Airbnb, Inc.airbnb.es
Real Estate · Spain
69Medium
NIS2 25 · GDPR 10
NIS2 25 · GDPR 10
Airbnb, Inc. operates a leading global online marketplace for vacation rentals, experiences, and related services. The Spanish localized website (airbnb.es) targets travelers and hosts in Spain and Spanish-speaking regions, offering millions of listings worldwide. The platform is well-established with a strong market position and a comprehensive service offering that includes accommodations and experiences. Technically, the website employs modern web technologies such as React, Google Tag Manager, and Mapbox, ensuring a fast, mobile-optimized, and accessible user experience. Security practices are robust with HTTPS enforcement, CSRF protection, and error monitoring via Bugsnag, although explicit security and privacy policy documentation is not directly visible in the provided HTML snapshot. Overall, the site demonstrates high professionalism and trustworthiness, though improvements in privacy compliance transparency and incident response disclosures are recommended.
—
56Medium
NIS2 25 · GDPR 10
NIS2 25 · GDPR 10
Airbnbairbnb.de
Hospitality · Germany
66Medium
NIS2 25 · GDPR 10
NIS2 25 · GDPR 10
Airbnb is a leading global online marketplace specializing in vacation rentals, experiences, and hosting services. The platform connects travelers with hosts offering diverse accommodations worldwide, with a strong presence in Germany as evidenced by the localized German website. The business model is based on facilitating peer-to-peer short-term lodging and travel experiences, positioning Airbnb as a dominant player in the hospitality industry. The website demonstrates a mature digital infrastructure leveraging modern technologies such as React, Mapbox, and Google Tag Manager, ensuring a fast, responsive, and accessible user experience. Security practices include HTTPS enforcement and CSRF protections, though explicit security headers and policies are not visible in the provided content. Privacy compliance indicators such as privacy and cookie policies are not detected in the analyzed HTML, which may impact compliance posture. Overall, the domain registration and DNS configurations align with Airbnb's enterprise-grade infrastructure, supporting the legitimacy and trustworthiness of the platform.
BugSnagbugsnag.com
Technology · United States
66Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
BugSnag is a leading SaaS provider specializing in real-time application performance and error monitoring, helping software development teams maintain stable and performant applications. As part of the SmartBear portfolio, BugSnag serves enterprise clients including Amazon, Netflix, and Shopify, positioning itself as a trusted solution in the developer tools market. The website demonstrates a mature digital presence with professional design, clear navigation, and comprehensive content focused on its core services of error monitoring, performance monitoring, and distributed tracing. Technically, the site leverages modern frameworks like Astro, integrates analytics via Google Tag Manager, and employs best practices in security with HTTPS and security headers. However, the absence of publicly available WHOIS data and explicit security policies slightly reduces transparency. Overall, BugSnag presents a strong security posture with room for improvement in incident response communication and direct contact information availability.
SANITEX SIAepromo.lv
Retail · Latvia
67Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
SANITEX SIA operates the ePROMO.lv website, a Latvian retail platform targeting professionals and gourmet consumers with a focus on food service and cash & carry offerings. The company maintains a solid market position in Latvia, providing exclusive products and comprehensive services including promotional content and customer loyalty programs. The website is well-designed, mobile-optimized, and integrates modern web technologies such as React and Next.js, hosted behind Cloudflare for performance and security. Privacy and cookie policies are comprehensive and GDPR compliant, with explicit consent mechanisms in place. However, the site lacks a dedicated security policy and incident response information, which could enhance trust and transparency. Overall, the security posture is strong with HTTPS enforcement and security headers, but there is room for improvement in vulnerability disclosure and security communication. The website is safe for general audiences, with no adult or questionable content detected.
Lakrids by Johan Bülow GmbHlakridsbybulow.de
E-commerce · Germany
61Medium
NIS2 2 · GDPR 60
NIS2 2 · GDPR 60
Lakrids by Johan Bülow GmbH operates a premium e-commerce platform specializing in gourmet Danish licorice and chocolate products. The company positions itself as a luxury confectionery brand with a strong commitment to sustainability and social responsibility, evidenced by its B Corp certification. The website targets gourmet food consumers seeking high-quality, innovative confectionery experiences. Technically, the site is built on the BigCommerce platform, leveraging modern web technologies and multiple analytics and advertising integrations, including Google Tag Manager, Microsoft Clarity, and Amazon Ads TagRocket. The site demonstrates good mobile optimization and SEO practices, although accessibility features could be improved. Security posture is strong with HTTPS enforced and appropriate security headers in place, but the absence of a visible privacy policy and terms of service pages slightly reduces privacy compliance scores. Overall, the domain registration data aligns well with the business claims, indicating a trustworthy and legitimate online presence.
Armstark GmbHarmstark.com
Retail · Austria
64Medium
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
Armstark GmbH is a well-established Austrian family business specializing in wellness products such as whirlpools, lagoon spas, swim spas, infrared cabins, and saunas. Founded in 1994, the company positions itself as a quality-focused retailer with a strong customer service orientation. Their website reflects a mature digital presence with e-commerce capabilities and extensive product information targeting wellness consumers in Austria and surrounding regions. Technically, the site is built on WordPress with WooCommerce and employs modern SEO and analytics tools, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies could be improved. The absence of WHOIS domain registration data is a notable concern, slightly impacting trustworthiness. Overall, the site is professional, compliant with GDPR, and safe for general audiences.
- Jaguar
jaguar.at
Transportation · Austria
65Medium
NIS2 2 · GDPR 73
NIS2 2 · GDPR 73
Jaguar is a premium automotive brand with a long heritage dating back to 1935, focusing on innovation and breaking conventions. The website targets customers in Austria and German-speaking markets, offering a comprehensive range of vehicles including electric, hybrid, and performance models, alongside services such as leasing, approved used cars, rentals, and accessories. The site is professionally designed with consistent branding and high-quality content, reflecting Jaguar's market position as a luxury car manufacturer. Technically, the website leverages modern technologies including Adobe Experience Manager CMS, Adobe Target for marketing personalization, Google Tag Manager for analytics, and performance monitoring tools like Boomerang and Helix RUM. The site is well optimized for performance, mobile responsiveness, accessibility, and SEO, ensuring a smooth user experience. From a security perspective, the site enforces HTTPS, employs consent management for GDPR compliance, and avoids exposing sensitive data. While some advanced security headers could be added, the overall security posture is strong with no visible vulnerabilities. The WHOIS data is privacy protected, which is typical for large brands, and no suspicious patterns are detected. Overall, the website presents a trustworthy, professional, and secure digital presence for Jaguar in Austria, supporting its business goals and customer engagement effectively.
Outletcity Metzingenoutletcity.com
Retail · Germany
72Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Outletcity Metzingen is a prominent designer outlet shopping center located in Germany, offering customers discounts up to 80% on a wide range of fashion and lifestyle brands. The website serves as a digital storefront and information portal for visitors, emphasizing its retail offerings and visitor services. The company positions itself as a leading retail destination in the German market with a focus on designer brands and discount shopping. Technically, the website employs modern front-end technologies such as Tailwind CSS and asynchronous JavaScript loading, ensuring a responsive and user-friendly experience across devices. Privacy and cookie policies are well implemented, reflecting GDPR compliance. Security posture is solid with HTTPS and security headers in place, though the absence of a public security policy and vulnerability disclosure reduces transparency. The WHOIS data for the domain is missing, which is unusual and slightly impacts trust, but the professional presentation and consistent branding mitigate concerns. Overall, the website is well designed, secure, and compliant, serving its retail audience effectively.
- CConnoisseur Circle
ccircle.cc
Media · Austria
61Medium
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Connoisseur Circle is a well-established luxury media platform focusing on travel, hospitality, and lifestyle content primarily for German-speaking audiences. The website offers a broad range of services including news, hotel ratings, awards, and B2B subscription services, positioning itself as a key player in the luxury travel media sector. The business model leverages content publishing combined with advertising and subscription revenue streams. Technically, the site is built on TYPO3 CMS, integrates modern cookie consent management via Cookiebot, and uses Matomo and Facebook Pixel for analytics and marketing. The site demonstrates good digital maturity with responsive design and structured navigation. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities. Privacy compliance is well addressed with detailed cookie categories and GDPR-aligned consent mechanisms. However, contact information and explicit security policies are not prominently available, which could be improved. Overall, the site is professional, trustworthy, and suitable for its target audience.
Bold Commerceboldcommerce.com
Technology · Canada
68Medium
NIS2 20 · GDPR 53
NIS2 20 · GDPR 53
Bold Commerce is a Canadian technology company specializing in e-commerce checkout and payment integration solutions. Their flagship product, Bold Booster, connects payment companies to multiple open-source e-commerce platforms through a single integration, simplifying payment options for merchants. The company also offers a suite of Shopify apps and advanced checkout experiences such as Agentic Checkout and Headless Checkout. Bold Commerce positions itself as a leader in modernizing payments and checkout processes for merchants and payment providers alike. Technically, the website is built on a modern React/Next.js framework, leveraging various marketing and analytics tools including Google Tag Manager, Hotjar, HubSpot, and multiple social media pixels. The site is well-optimized for performance, mobile responsiveness, and SEO, with comprehensive metadata and structured data enhancing search visibility. Hosting and DNS are managed via Cloudflare, ensuring reliability and security. From a security perspective, Bold Commerce demonstrates a strong posture with HTTPS enforcement, cookie consent mechanisms, a bug bounty program, and a dedicated trust and security page. No critical vulnerabilities or exposed sensitive data were detected. Privacy policies and terms of service are clearly accessible, indicating compliance with GDPR and other regulations. The domain registration data aligns well with the business claims, reinforcing legitimacy. Overall, Bold Commerce presents a professional, trustworthy, and technically mature online presence. The company is well-positioned in the e-commerce technology sector, with a clear focus on payment innovation and merchant experience enhancement.
Bold Commerceboldapps.net
Technology · Canada
68Medium
NIS2 20 · GDPR 53
NIS2 20 · GDPR 53
Bold Commerce is a well-established Canadian technology company specializing in ecommerce checkout and payment integration solutions. Their flagship product, Bold Booster, simplifies payment gateway integration across multiple open-source ecommerce platforms, enabling merchants to access advanced payment options such as Apple Pay, Google Pay, and PayPal Fastlane. The company targets payment companies and merchants seeking modernized checkout experiences and operates a robust partner ecosystem including Shopify and Magento. The website reflects a mature digital presence with comprehensive content, clear navigation, and strong branding consistency. Technically, the website leverages modern web technologies including Next.js and React, supported by Cloudflare DNS and CDN services. It integrates multiple marketing and analytics tools such as Google Analytics, HubSpot, Hotjar, and Facebook Pixel, demonstrating a sophisticated digital marketing infrastructure. The site is mobile-optimized, fast-loading, and accessible, with proper SEO and metadata implementation. From a security perspective, Bold Commerce enforces HTTPS, employs standard security headers, and maintains a bug bounty program to encourage vulnerability reporting. The domain registration data is consistent with the business claims, and no suspicious patterns or vulnerabilities were detected. Privacy and cookie policies are present with consent mechanisms, indicating compliance with GDPR and other privacy regulations. Overall, Bold Commerce presents a high level of professionalism, security maturity, and business credibility. The website is safe for general audiences and supports extensive user tracking for marketing purposes. Strategic recommendations include enabling DNSSEC for enhanced DNS security, publishing a security.txt file for vulnerability disclosure, and explicitly listing security frameworks or certifications to further boost trust.
Education · Portugal
69Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
b-on is a Portuguese digital knowledge platform operated by the Fundação para a Ciência e a Tecnologia (FCT) and developed by FCCN. It provides access to scientific journals, e-books, and other academic resources primarily targeting students, researchers, health professionals, and publishers within Portugal. The platform is positioned as a key national resource for academic content access and open access initiatives. Technically, the website is built on WordPress with modern JavaScript libraries and integrates analytics tools such as Google Analytics and Hotjar. The site is mobile optimized and offers a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enforced and secure forms, but lacks visible security headers and vulnerability disclosure mechanisms. Privacy compliance is basic, with no cookie consent banner detected and limited explicit GDPR indicators. Overall, the website is trustworthy and professionally maintained, with strong government and research institution affiliations.
CIÊNCIAVITAEcienciavitae.pt
Government · Portugal
74Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
CIÊNCIAVITAE is a Portuguese national platform dedicated to managing scientific curricula, providing visibility and integration of researchers' academic and scientific information. The platform serves students, researchers, and institutions, offering tools for CV creation, visualization, and institutional management. It is supported by Portuguese governmental and European funding entities, positioning it as a trusted and authoritative resource in the national scientific ecosystem. Technically, the website is built on WordPress with modern web technologies including jQuery, Bootstrap, and Google Fonts, and incorporates GDPR-compliant cookie consent mechanisms. The site is mobile-optimized and demonstrates good SEO and accessibility practices. Security-wise, the site enforces HTTPS and uses cookie consent management but lacks explicit security headers and published incident response policies. No vulnerabilities or exposed sensitive data were detected. Overall, the website presents a professional, trustworthy, and compliant digital presence aligned with its governmental and scientific mission.
República Portuguesagov.pt
Government · Portugal
70Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
The website gov.pt serves as the official digital portal for the Portuguese government, providing citizens, residents, and businesses with access to a wide range of public services and institutional information. It holds a strong market position as the primary gateway for government digital services in Portugal, targeting a broad audience including individuals and economic entities. The portal's business model revolves around government digital transformation and public service delivery online. Technically, the site leverages modern web technologies such as React and Next.js, ensuring fast performance, mobile optimization, and accessibility compliance. The infrastructure appears robust, with secure HTTPS connections and comprehensive security headers, reflecting a mature digital presence. From a security perspective, the portal demonstrates a solid posture with enforced HTTPS, security best practices, and no visible vulnerabilities. However, explicit security policies and incident response details are not prominently published, which could be improved to enhance transparency and trust. Overall, the risk assessment is low given the official nature, strong security measures, and compliance with privacy regulations. Strategic recommendations include publishing detailed security and incident response policies, establishing a vulnerability disclosure program, and enhancing data protection officer visibility to further strengthen trust and compliance.
SIA DEPO DIYdepo.ee
Retail · Estonia
55Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
DEPO is a well-established retail chain operating primarily in the Baltic region, focusing on home improvement, garden, food, and related retail sectors. The company maintains a professional online presence with a multilingual WordPress-based website, offering both physical store information and online shopping options. The website is well-structured, with clear navigation and consistent branding, targeting a general consumer audience in Estonia and neighboring countries. Technically, the site uses modern web technologies including Bootstrap, jQuery, and Google Maps API, supported by popular WordPress plugins such as WPBakery and Yoast SEO, indicating a mature digital infrastructure. Security posture is adequate with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and explicit incident response policies. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness. The site does not contain any adult or questionable content and maintains a good level of privacy compliance with GDPR considerations. Strategic recommendations include enhancing security headers, publishing security policies, and continuous monitoring of third-party scripts to maintain a strong security posture.
DEPO DIY LT UABdepo-diy.lt
Retail · Lithuania
55Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
DEPO DIY LT UAB is a medium-sized retail company operating primarily in Lithuania and the Baltic region, specializing in home improvement, gardening, food products, pet supplies, and construction materials. The company maintains multiple physical store locations and an online presence, targeting general consumers interested in DIY and home-related products. The website is built on WordPress with multilingual support, leveraging common plugins such as WPBakery Page Builder and Yoast SEO to enhance user experience and search engine visibility. The technical infrastructure is modern and moderately optimized for performance and mobile devices. Security posture is adequate with HTTPS enforced and cookie consent implemented, though additional security headers and explicit security policies could improve resilience. The domain registration is consistent with the business age and shows no suspicious patterns, though the registrar being an academic institution is unusual but not necessarily problematic. Overall, the website is professional, trustworthy, and compliant with basic privacy regulations, making it a reliable digital asset for the company.
- PPage Not Found
fdp-plr.ch
Other
55Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website at fdp-plr.ch currently serves only a 404 error page indicating that the requested content is not available or does not exist. There is no accessible business information, contact details, or policy documentation on the site. The site is built on the TYPO3 CMS platform as evidenced by the error page branding. Due to the lack of content, the website's market position, business model, and services cannot be determined. Technically, the site shows minimal implementation with no visible security headers or analytics, and no evidence of HTTPS from the provided data. The security posture is weak due to lack of visible security best practices and absence of privacy or cookie policies. Overall, the site is not currently functional for end users or business purposes, resulting in a low trust and credibility score.
Technology · United States
74Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
Instana is a technology product under the umbrella of International Business Machines Corporation (IBM), specializing in application performance monitoring and observability solutions targeted at enterprise IT and DevOps teams. The website analyzed is a login page for Instana, featuring IBM branding and links to IBM's privacy and terms of use pages, indicating strong corporate integration and trustworthiness. The business model is primarily enterprise SaaS and software licensing, with a market position as a leading APM provider within IBM's portfolio. Technically, the website employs modern web standards including HTML5, CSS, and JavaScript, leveraging IBM's Carbon Design System for UI consistency. Hosting is inferred to be on Amazon AWS based on DNS servers. The site demonstrates moderate performance and basic mobile optimization. Accessibility and SEO features are present but could be enhanced. No CMS or analytics tools were detected in the provided content. From a security perspective, the site uses HTTPS and secure form inputs for login, with domain registration status clientTransferProhibited adding protection against unauthorized transfers. However, DNSSEC is not enabled, and no explicit security headers or vulnerability disclosure mechanisms were found. Privacy compliance is supported by links to IBM's comprehensive privacy policy, though no cookie consent mechanism is present on this page. Overall, the website presents a professional, secure, and trustworthy interface consistent with an enterprise-grade technology product. Recommendations include implementing DNSSEC, adding security headers, publishing a security policy and incident response contacts, and introducing a cookie consent mechanism to enhance privacy compliance and security posture.
- Nano IT SIA
nano.lv
Technology · Latvia
63Medium
NIS2 2 · GDPR 43
NIS2 2 · GDPR 43
Nano IT SIA operates as the leading hosting service provider in Latvia, specializing in web hosting, email hosting, domain registration, VPS, and server colocation services. The company targets Latvian businesses and individuals requiring reliable and scalable hosting solutions. Their market position is strong, supported by a large client base managing over 30,000 domains and a reputation for responsive customer support. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to their audience. Technically, the website employs modern web technologies including jQuery, Bootstrap, Select2, and FontAwesome, integrated with WHMCS for client management and e-commerce functionality. The site is mobile-optimized and uses Google Tag Manager for analytics and advertising tracking, with a robust cookie consent mechanism ensuring GDPR compliance. Performance is moderate with good SEO and accessibility basics. From a security perspective, the site uses HTTPS and mentions advanced data center protections such as DDoS mitigation and 24/7 monitoring. However, explicit security policies and incident response details are not publicly disclosed. No critical vulnerabilities or exposed sensitive data were detected in the HTML content. The WHOIS data aligns with the business claims, reinforcing domain legitimacy. Overall, Nano IT SIA presents a trustworthy and professional online presence with strong business credibility and compliance posture. Strategic improvements could include publishing detailed security policies and enhancing HTTP security headers to further strengthen their security posture.
wpOpuswpopus.com
Technology
65Medium
NIS2 2 · GDPR 95
NIS2 2 · GDPR 95
wpOpus is a recently launched WordPress plugin and site builder focused on enhancing the Gutenberg editor with advanced custom blocks, ready-made demos, and drag-and-drop functionality. The company targets WordPress users and digital creators seeking to build websites efficiently without coding. The website presents a professional and modern design with good SEO practices and structured data, indicating a mature digital presence despite the recent domain registration in mid-2024. Technically, the site leverages WordPress core technologies, popular plugins like Contact Form 7 and Moove GDPR compliance, and modern JavaScript modules, ensuring a robust and extensible platform. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks advanced DNS security (DNSSEC) and visible security headers. Privacy compliance is partial, with a cookie consent mechanism but no visible privacy policy or terms of service. Overall, the site is trustworthy and functional but would benefit from enhanced transparency and security documentation.
Bidtellectbidtellect.com
Technology
69Medium
NIS2 2 · GDPR 95
NIS2 2 · GDPR 95
Bidtellect, now part of Simpli.fi, operates as a leading advertising success platform specializing in programmatic advertising solutions and workflow software. The company serves over 2,000 media teams, agencies, and brands, offering a comprehensive omnichannel suite including contextual, native, CTV, mobile, and display advertising. The platform executes a high volume of campaigns monthly, demonstrating significant market presence and operational scale. Technically, the website is built on WordPress using the Divi theme, with modern SEO and GDPR compliance plugins, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enabled and domain transfer protections, though improvements such as DNSSEC and security headers are recommended. Privacy compliance is strong with clear policies and cookie consent mechanisms. Overall, the website presents a professional, trustworthy, and business-focused digital presence with no critical security or content safety issues detected.
Technology
71Medium
NIS2 2 · GDPR 70
NIS2 2 · GDPR 70
Find-searcher.com is a newly established web search interface launched in 2025, providing users with a simple search bar featuring autocomplete suggestions. The site redirects search queries internally to a search results page. The business model appears to be centered around offering search services, targeting a general audience. The website employs third-party consent management tools to comply with GDPR regulations and uses analytics services such as Microsoft Clarity for user behavior tracking. However, the domain is very new, limiting historical trust indicators. Technically, the website uses legacy jQuery 1.11.3 and integrates consent management scripts from consentmanager.net. The site is hosted under a domain registered with PublicDomainRegistry.com and uses DNS servers from ztomy.com. Performance is moderate with basic mobile optimization and accessibility features. No CMS or major frameworks are detected, indicating a custom-built or lightweight platform. From a security perspective, the site lacks DNSSEC and does not show evidence of security headers like CSP or HSTS. The use of an outdated jQuery version may expose the site to known vulnerabilities. The domain registration is minimal with no registrant details, which reduces trustworthiness. The site does implement a cookie consent mechanism and privacy policy, which supports basic privacy compliance. Overall, the website is functional but basic in design and security posture. It is suitable for general audiences and does not contain adult or explicit content. Strategic improvements in security hardening, domain trust signals, and richer business information would enhance credibility and compliance.
Technology
65Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website cdn-fileserver.com currently serves as a placeholder with no substantive content or business information. It appears to be a content delivery or file server platform but displays a message indicating content is unavailable. The technical infrastructure includes Cloudflare DNS, Akamai CDN, Media.net advertising, and ConsentManager for cookie consent, reflecting a moderate level of digital maturity. However, the absence of privacy policies, terms of service, and contact information limits its professionalism and trustworthiness. Security posture is moderate with HTTPS enabled but lacks DNSSEC and security headers, and WHOIS data shows inconsistencies such as a future domain creation date, raising legitimacy concerns. Overall, the site is safe content-wise but lacks business credibility and comprehensive compliance documentation.
- Europcar
europcar.ch
Transportation · Switzerland
75Medium
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
Europcar Switzerland operates a leading car rental service with a large fleet and extensive station network across Switzerland and worldwide. The company targets both leisure and business customers, offering a wide range of vehicles including eco-friendly and commercial options. The website is built on modern web technologies such as Nuxt.js and Vue.js, with good performance and mobile optimization. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though a dedicated security policy page is absent. Overall, the site reflects a mature digital presence aligned with a reputable global brand.
Switzerland Cheese Marketing AGswitzerlandcheesemarketing.ch
Other · Switzerland
73Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Switzerland Cheese Marketing AG is the central organization representing the Swiss cheese industry, dedicated to promoting Swiss cheese both domestically and internationally. The website serves as a comprehensive platform for industry stakeholders, media professionals, and consumers interested in Swiss cheese, offering educational resources, marketing information, and event details. The organization holds a strong market position as the leading promoter of Swiss cheese, supported by a professional and consistent brand presence. Technically, the website is built on the TYPO3 CMS platform, utilizing modern web technologies including JavaScript, CSS, and integrations with Google Tag Manager and Sentry for analytics and error monitoring. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. From a security perspective, the website enforces HTTPS, employs multiple security headers, and uses a consent management platform to comply with GDPR. No critical vulnerabilities or exposed sensitive data were detected. However, the site lacks explicit security policy and incident response information, which could enhance its security posture. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance, making it a reliable source for Swiss cheese marketing and industry information. Strategic recommendations include publishing a dedicated security policy, incident response contacts, and vulnerability disclosure information to further strengthen trust and security readiness.
- DDynapps
dynapps.ch
Technology · Switzerland
74Medium
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Dynapps is a Swiss-based expert partner specializing in Odoo ERP implementation and custom software development, serving a broad range of industries including manufacturing, healthcare, energy, and retail. The company holds a strong market position as the leading Odoo Gold Partner in Switzerland and has been recognized as the Best Odoo Partner in Europe 2024. Their business model focuses on delivering tailored digital solutions to SMEs and large enterprises, leveraging local expertise combined with international standards. The website reflects a professional and comprehensive digital presence with clear navigation, multilingual support, and detailed service offerings. Technically, the website is built on the Odoo CMS platform, utilizing modern web technologies such as Bootstrap and FontAwesome, and integrates analytics and marketing tools like Google Tag Manager, Google Analytics, Cookiebot, and Leadinfo. The site is mobile-optimized and accessible, with good SEO practices and performance. Privacy compliance is well addressed with explicit privacy and cookie policies and consent mechanisms. From a security perspective, the site enforces HTTPS and uses CSRF tokens, but lacks explicit security headers and publicly available incident response or vulnerability disclosure policies. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the website's business claims, supporting legitimacy and trustworthiness. Overall, Dynapps demonstrates a mature digital infrastructure and a strong security posture with room for improvement in formal security policy disclosures. The website is safe, professional, and trustworthy, making it a reliable partner for Odoo ERP solutions in Switzerland and Europe.
Education · Romania
66Medium
NIS2 17 · GDPR 28
NIS2 17 · GDPR 28
Universitatea Transilvania din Brașov is a well-established public university in Romania with a strong academic and research presence. The website reflects a mature digital infrastructure built on Joomla CMS, integrating modern JavaScript libraries and Google services for enhanced user experience and security. The institution provides comprehensive academic programs, research opportunities, and cultural activities, targeting students, researchers, and academic partners. The website is professionally designed, mobile-optimized, and regularly updated with news and events, supporting its market position as a leading educational institution in the Central Region of Romania. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though some improvements in security headers and incident response transparency are recommended.
Education · Romania
59Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Universitatea de Vest din Timișoara (UVT) is a prominent educational institution in Romania, providing higher education and research services. The website serves as an official portal for students, faculty, and visitors, offering information about academic programs, events, and institutional news. The site is built on WordPress with Elementor, indicating a modern and maintainable digital infrastructure. UVT demonstrates compliance with GDPR through clear privacy and cookie policies and implements a cookie consent mechanism. Security posture is solid with HTTPS enabled and no visible critical vulnerabilities, though additional security headers could enhance protection. Overall, the site reflects a professional and trustworthy academic entity with a good balance of usability and compliance.
Education · Portugal
74Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Universidade da Beira Interior (UBI) is a Portuguese public higher education institution located in Covilhã, Portugal. It offers a wide range of undergraduate, graduate, and doctoral programs, alongside active research and innovation initiatives. The university targets students, researchers, academic staff, and international candidates, positioning itself as a regional leader with international partnerships such as UNITA. The website reflects a well-established academic institution with comprehensive educational services and student support.
HETS Fribourghets-fr.ch
Education · Switzerland
70Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
HETS Fribourg is a Swiss higher education institution specializing in social work education, research, and continuing education. The website clearly targets students, professionals, and researchers interested in social work, offering bachelor and master programs, research projects, and service prestations. The institution holds a solid regional market position in Fribourg, Switzerland, with a professional and well-branded online presence. Technically, the website uses modern technologies including Umbraco CMS, Bootstrap, and integrates analytics and consent management tools such as Microsoft Clarity and Axeptio. The site is mobile-optimized and accessible with good SEO practices. Security posture is good with HTTPS enforced and cookie consent implemented, though explicit security headers and policies are absent. Contact information is clearly provided, enhancing business credibility. Overall, the website is trustworthy and professionally maintained.
- Swiss Safety Center AG
safetycenter-shop.ch
Other · Switzerland
61Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Swiss Safety Center AG operates the SafetyCenter-Shop, an e-commerce platform specializing in safety, health protection, and certification materials for businesses. The company offers a comprehensive range of products including handbooks, checklists, e-learnings, and guidelines to support compliance with safety standards and legal requirements. The website targets organizations seeking to improve workplace safety and certification readiness, positioning itself as a trusted partner in the safety sector within Switzerland. Technically, the website is built on the ePages storefront platform, utilizing modern JavaScript libraries such as jQuery, RequireJS, and integrates multiple analytics and marketing tools including Google Analytics, Google Tag Manager, HubSpot, and LinkedIn Insight. The site demonstrates good mobile optimization, accessibility features, and SEO practices, contributing to a positive user experience. From a security perspective, the site enforces HTTPS with strong SSL configuration and employs privacy-conscious analytics settings such as IP anonymization. A cookie consent banner is present, supporting GDPR compliance. However, the site lacks explicit security headers and a public security policy or incident response contact, which are recommended for enhanced security posture. Overall, the website is professional, trustworthy, and compliant with relevant privacy regulations. It effectively serves its niche market with quality content and a solid technical foundation. Strategic improvements in security policy transparency and header implementation would further strengthen its security stance.
- Connoisseur Circle Reiseservice GmbH
ccircle.shop
Media · Austria
73Medium
NIS2 2 · GDPR 73
NIS2 2 · GDPR 73
Connoisseur Circle Reiseservice GmbH operates a specialized luxury travel media platform targeting affluent travelers primarily in German-speaking countries. The company offers print and digital magazine subscriptions, travel news, and exclusive travel deals, supported by a membership community. The website is professionally designed and hosted on Shopify, leveraging modern e-commerce and subscription technologies. The technical infrastructure is robust, with integration of live chat, subscription management, and analytics tools. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are absent. Overall, the site presents a trustworthy and professional digital presence aligned with its niche market.
- Premium Residences
premiumresidences.cc
Real Estate · Austria
56Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Premium Residences is a specialized luxury real estate platform showcasing high-end properties primarily in Austria and other select global locations. The website targets affluent buyers and investors seeking premium residential properties. The platform offers curated listings with detailed descriptions and integrates modern technologies such as Google Maps for enhanced user experience. Technically, the site is built on a Laravel-based custom CMS using Alpine.js and Livewire, with assets hosted on Amazon S3, indicating a modern and scalable infrastructure. Security posture is solid with HTTPS enforced and no exposed sensitive data, though improvements can be made by adding security headers and explicit incident response contacts. Privacy compliance is partial with a privacy policy present but lacking cookie consent mechanisms. Overall, the site is professional and trustworthy but could enhance user trust and compliance by addressing these gaps.
Falstafffalstaff-living.com
Media · Austria
69Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Falstaff LIVING is a German-language online magazine focused on interior design, architecture, culinary arts, and luxury lifestyle. It operates as part of the Falstaff media brand, targeting design and lifestyle enthusiasts primarily in Austria and German-speaking regions. The website features rich editorial content, multimedia elements, and integrates advertising and subscription services. Technically, the site uses modern web frameworks such as Laravel Livewire, Bootstrap, and various JavaScript libraries, ensuring a responsive and engaging user experience. Security posture is good with HTTPS and CSRF protections, though some security headers could be improved. Privacy and cookie policies are not explicitly found in the analyzed content, indicating room for compliance enhancement. WHOIS data is unavailable, which slightly reduces trust but the professional presentation and consistent branding support legitimacy.
FoodBrokerfoodbroker.se
Retail · Sweden
60Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
FoodBroker is a Swedish-based distribution and sales partner specializing in fresh and colonial food products, serving grocery, online, and foodservice markets primarily in Sweden and Finland. The company offers comprehensive services including distribution, sales force management, key account management, and brand ownership. Their website reflects a professional and modern digital presence built on Nuxt.js and Vue.js, with good mobile optimization and fast performance. Security measures include HTTPS and Google reCAPTCHA on contact forms, though some security headers and formal policies are absent. Privacy and cookie policies are missing, indicating compliance gaps. Contact information is clearly presented with multiple channels including email, phone, and a contact form. Overall, the website is trustworthy and well-maintained, but improvements in privacy compliance and security transparency are recommended.
- Företagande.se
foretagande.se
Media · Sweden
53Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
Företagande.se is a well-established Swedish digital media platform focused on serving entrepreneurs and small business owners. Founded in 2005, it offers a comprehensive range of services including news articles, business templates, forums, online courses, and newsletters. The platform positions itself as Sweden's largest digital meeting place for entrepreneurs, leveraging a membership model combined with advertising and sponsored content revenue streams. Its target audience is primarily Swedish-speaking entrepreneurs seeking business guidance and community engagement. Technically, the website employs a modern tech stack including JavaScript frameworks, Google Tag Manager, reCAPTCHA, and Cloudflare DNS services. The site is built likely on a Laravel-based CMS with responsive design and good SEO practices. Performance is moderate with good mobile optimization, though accessibility features could be enhanced. The hosting and domain registration are consistent with the business's Swedish identity. From a security perspective, the site uses HTTPS with good SSL configuration and includes CSRF protection and CAPTCHA on forms. However, DNSSEC is not enabled, and explicit security headers like Content-Security-Policy are not detected, representing areas for improvement. No vulnerability disclosure or incident response policies are publicly available. Privacy and cookie policies are present with consent mechanisms, indicating basic GDPR compliance. Overall, Företagande.se presents a trustworthy and professional online presence with solid business credibility and moderate security posture. Strategic improvements in DNS security, security headers, and transparency around incident response would enhance its security maturity and compliance standing.