Medium-risk security reports
99,067 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,190001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
36,801–36,850 of 99,067
AMSilkamsilk.com
Other
61Medium
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
AMSilk is a biotechnology company specializing in sustainable silk protein innovation aimed at revolutionizing various industries with biogenius materials. The website presents a professional image with clear branding and a focus on sustainable biotech solutions. The technical infrastructure is based on WordPress CMS with modern web technologies and includes a cookie consent mechanism via Cookiebot, indicating some level of privacy awareness. However, the absence of a publicly accessible privacy policy and terms of service, as well as missing WHOIS registration details, slightly detracts from the overall trustworthiness. Security posture is moderate with room for improvement in security headers and explicit data protection policies. Overall, the website is functional, well-designed, and targets industry professionals interested in biotech materials.
Biosyntia ApSbiosyntia.com
Healthcare · Denmark
64Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Biosyntia ApS is a Danish company specializing in the sustainable production of natural ingredients for nutrition, hair health, and skin health products. Their product portfolio includes BioB7, ForskoPro, CitriVive, and eraGlow, targeting manufacturers and partners in the health and beauty sectors. The company positions itself as a niche player focusing on sustainability and natural alternatives. The website is built on the Webflow platform, utilizing modern web technologies such as jQuery, Google Fonts, and Typekit, with moderate performance and good mobile optimization. Security measures include the use of Google reCAPTCHA to prevent automated abuse, but the site lacks visible security headers and formal privacy or cookie policies, which are important for compliance and trust. The absence of WHOIS registration data for the domain is a significant concern, as it raises questions about domain legitimacy despite the professional appearance of the website. Overall, the website presents a good user experience and professional content but requires improvements in security posture and privacy compliance to enhance trust and regulatory adherence.
- AGC Biologics
agcbio.com
Healthcare · United States
71Medium
NIS2 10 · GDPR 73
NIS2 10 · GDPR 73
AGC Biologics operates as a global contract development and manufacturing organization (CDMO) specializing in biologics and cell & gene therapies. Their website presents a professional and comprehensive overview of their services, including protein expression biologics, pDNA, mRNA, viral vectors, and genetically engineered cells. The company targets biopharmaceutical and biotech firms seeking outsourced manufacturing solutions. Technically, the website is built on HubSpot CMS, integrates Google Analytics and Tag Manager, and uses modern web technologies such as Font Awesome and Flickity sliders. The site is mobile optimized and exhibits good SEO and accessibility basics. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers and explicit incident response information are absent. The WHOIS data is missing or not publicly available, which raises some concerns about domain registration transparency, but the website's professional presentation and compliance with privacy regulations mitigate this risk. Overall, the site scores well on content quality, technical implementation, and privacy compliance, with room for improvement in security best practices and business contact transparency.
- Automotive News
autonews.com
Media · United States
71Medium
NIS2 25 · GDPR 70
NIS2 25 · GDPR 70
Automotive News is a leading media organization specializing in automotive industry news, including coverage of car manufacturers, dealerships, electric vehicles, and market trends. The website offers a rich content experience with news articles, data centers, events, digital editions, and multimedia such as videos and podcasts. It targets automotive professionals, dealerships, manufacturers, and enthusiasts, operating under the parent company Crain Communications. The site demonstrates a mature digital infrastructure with modern technologies like React, Adobe DTM, and various analytics and marketing tools, ensuring a fast and mobile-optimized user experience. Security posture is strong with HTTPS, security headers, and consent management, though explicit contact and security policy details are limited on the site. WHOIS data is missing or unavailable, which is unusual but the site’s branding and content quality strongly support its legitimacy. Overall, the site is professional, trustworthy, and compliant with privacy regulations, making it a reliable source for automotive industry information.
Education · United States
72Medium
NIS2 47 · GDPR 53
NIS2 47 · GDPR 53
The Massachusetts Institute of Technology (MIT) is a globally recognized educational and research institution focused on advancing knowledge in science, technology, and related fields. The website serves a diverse audience including prospective and current students, faculty, researchers, alumni, and the general public. It offers comprehensive information on education, research, innovation, admissions, campus life, and alumni engagement. The site is well-branded, professionally designed, and provides rich content aligned with MIT's mission. Technically, the website is built on Drupal CMS and leverages modern web technologies including SVG graphics, asynchronous JavaScript loading, and integration with Google Analytics and Facebook Pixel for analytics and marketing. The site is mobile-optimized, accessible, and performs well with fast loading times. Security best practices are observed with HTTPS enforcement, security headers, and anonymized IP tracking. From a security perspective, the site demonstrates a strong posture with no visible vulnerabilities or exposed sensitive data. However, there is room for improvement in privacy compliance, particularly in implementing explicit cookie consent mechanisms and publishing a public security policy or incident response contact. The absence of WHOIS data is noted but likely due to registrar privacy policies rather than malicious intent. Overall, MIT's website is a high-quality, trustworthy digital presence that effectively supports its educational and research mission. Strategic recommendations include enhancing privacy compliance, publishing security policies, and maintaining vigilance on third-party scripts to sustain security and trust.
The Freelancer by Contentlycontently.net
Media
55Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The Freelance Creative by Contently is a specialized media platform providing daily news, insights, and resources tailored to freelancers and gig economy professionals. The website serves as a niche content hub offering articles, gig listings, and newsletters to support freelance creatives. It operates under the parent company Contently, with a domain established since 2011, reflecting a mature and stable online presence. The platform leverages WordPress CMS with a modern tech stack including jQuery, Font Awesome, and marketing integrations such as Marketo and Mailchimp. SEO practices are well implemented with Yoast SEO and structured data enhancing discoverability. Security posture is solid with HTTPS enforced and domain status protections, though improvements are recommended in DNSSEC adoption and security headers. Privacy compliance is basic, lacking explicit cookie consent mechanisms and detailed privacy policies. Contact information is primarily via web forms, with no direct emails or phone numbers publicly listed. Overall, the site demonstrates good professionalism, content quality, and technical maturity suitable for its target audience.
AppSumosumo.com
Technology
69Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
AppSumo is a well-established e-commerce platform founded in 2010 that specializes in offering lifetime deals and discounts on software and digital products targeted primarily at entrepreneurs, small businesses, and marketers. The platform has positioned itself as a leading marketplace in the technology and e-commerce sectors, providing a wide range of productivity, marketing, and content tools without monthly fees. The website demonstrates excellent content quality, professional design, and a consistent brand experience, supported by a large user base and positive trust indicators such as high Google ratings and money-back guarantees. Technically, AppSumo leverages a modern technology stack including React and Next.js frameworks, integrates multiple marketing and analytics tools such as Klaviyo, Facebook Pixel, Google Tag Manager, and Stripe for payments. The site is hosted on infrastructure associated with Amazon Registrar, Inc., likely AWS, ensuring reliable performance and fast loading times. Mobile optimization and accessibility are well implemented, contributing to a positive user experience. From a security perspective, the website enforces HTTPS, employs domain status protections to prevent unauthorized changes, and uses asynchronous loading of third-party scripts to minimize risk. However, DNSSEC is not enabled, and there is no publicly available dedicated security policy or vulnerability disclosure program. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with clear privacy and cookie policies and consent mechanisms in place. Overall, AppSumo presents a low-risk profile with a strong business credibility and technical foundation. Strategic recommendations include enabling DNSSEC, publishing a dedicated security policy and incident response contacts, and establishing a vulnerability disclosure program to further enhance trust and security posture.
VKvk.com
Technology · Russia
71Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
VK is a leading European social networking platform founded in 1997, offering a wide range of services including messaging, video hosting, music streaming, and mini apps. It serves over 100 million active users, positioning itself as a major player in the technology and media industry primarily in Russia. The website demonstrates a mature digital infrastructure leveraging modern JavaScript frameworks like React and MobX, with a strong emphasis on performance and user experience. Security practices are solid with HTTPS enforcement and domain transfer protections, although explicit security policies and incident response information are not publicly detailed. Overall, VK maintains a high level of trustworthiness and professionalism in its online presence.
- Valve Corporation
steampowered.com
Technology
73Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Steam, operated by Valve Corporation, is a leading global digital distribution platform for video games and related software. It offers a comprehensive marketplace for purchasing, discussing, and creating games, serving a worldwide audience of gamers and developers. The platform is recognized for its extensive catalog, community features, and integration with gaming hardware such as Steam Deck. Technically, the website employs modern web technologies including jQuery, responsive design, and content delivery via Akamai CDN, ensuring fast and reliable user experiences across multiple platforms including Windows, MacOS, and Linux. Security posture is strong with HTTPS enforcement and likely robust security headers, though explicit headers are not visible in the HTML. Privacy and terms of service policies are comprehensive and accessible, indicating good compliance with data protection regulations such as GDPR. No direct contact emails or phone numbers are publicly listed on the main store page, which is typical for large digital platforms. Overall, Steam demonstrates a mature, secure, and user-friendly digital presence with high trustworthiness and professional branding.
Grand Toursgrandtours.se
Hospitality · Sweden
66Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Grand Tours is a well-established Swedish travel agency specializing in curated, quality travel experiences since 1986. The company offers a diverse portfolio of travel themes including river cruises, train journeys, long-term stays, cultural tours, and seasonal trips such as Christmas and New Year travels. Their market position is strong within the niche of personalized and content-rich travel services targeting adult travelers seeking comfort and quality. Technically, the website is built on WordPress with modern SEO and tracking tools such as Yoast SEO and Google Tag Manager, demonstrating a mature digital presence. Security posture is solid with HTTPS, security headers, and reCAPTCHA integration, although explicit security policies and incident response contacts are not publicly disclosed. Overall, the site is professional, trustworthy, and compliant with GDPR, featuring cookie consent mechanisms and privacy policies. The WHOIS data provided is incomplete due to querying a subdomain rather than the main domain, which slightly reduces trustworthiness but does not detract from the site's legitimacy. Strategic recommendations include enhancing security transparency and adding vulnerability disclosure information.
PRO Medlemsresorpromedlemsresor.se
Hospitality · Sweden
66Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
PRO Medlemsresor is a specialized travel agency serving members of PRO, a Swedish pensioners' organization. The company offers themed travel experiences focusing on activities, community, and cultural enrichment tailored for senior travelers. Their market position is niche but well-established within the Swedish senior travel segment, leveraging strong partnerships with PRO and related organizations. Technically, the website is built on WordPress with modern SEO and privacy compliance tools, including cookie consent and GDPR-aligned privacy policies. Security posture is strong with HTTPS, security headers, and anti-bot measures like reCAPTCHA. However, the lack of WHOIS data for the exact domain queried introduces some uncertainty in domain registration legitimacy, though the website content and partner references strongly support authenticity. Overall, the site is professional, secure, and compliant, serving a clear target audience effectively.
Reseskaparnareseskaparna.se
Hospitality · Sweden
65Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Reseskaparna is a Swedish travel company specializing in curated, content-rich group and themed tours led by expert tour leaders. Their offerings include cultural, music, culinary, wellness, and long-term travel experiences, targeting travelers seeking quality and immersive travel. The company is part of the WE Travel Group and has been operating since 2008, establishing a solid market presence in the Swedish travel sector. Technically, the website is built on WordPress with modern tracking and marketing tools, including Google Tag Manager, ActiveCampaign, and reCAPTCHA for form security. The site is well-optimized for mobile and SEO, with a professional design and clear navigation. Security posture is good with HTTPS enforced and no exposed sensitive data, though DNSSEC is not enabled and some security headers are missing. Privacy compliance is strong with GDPR-aligned cookie consent and a comprehensive privacy policy. Overall, the site demonstrates a mature digital presence with trustworthy business credibility.
Historiska Resorhistoriskaresor.se
Hospitality · Sweden
66Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Historiska Resor is a specialized Swedish tour operator offering thematic historical and cultural travel experiences led by expert guides. The company is part of the WE Travel Group and targets history enthusiasts seeking curated group tours and custom travel arrangements. The website is professionally designed, content-rich, and well-structured, providing clear navigation and multiple contact options including phone, email, and forms. Technically, the site is built on WordPress with modern libraries and includes standard security measures such as HTTPS, reCAPTCHA, and cookie consent mechanisms. However, the absence of WHOIS domain registration data raises some concerns about domain legitimacy verification. No explicit security policy or incident response information is published, which could be improved to enhance trust and compliance. Overall, the site demonstrates a good security posture and privacy compliance with GDPR.
NYATI Safarinyati-safari.dk
Hospitality · Denmark
61Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
NYATI Safari is a Danish travel company specializing in luxury safari experiences primarily in South Africa's Kruger National Park and other African destinations. With over 26 years of experience and more than 40,000 guests served, they offer tailored safari packages, luxury lodges, and combined travel experiences including beach and city tours. The website is professionally designed, content-rich, and targets Scandinavian travelers seeking premium safari vacations. Technically, the site is built on TYPO3 CMS, uses modern JavaScript libraries, and is hosted on a CDN for performance. Security posture is good with HTTPS, reCAPTCHA on forms, and integrity attributes on scripts, though some security headers and DNSSEC are missing. Privacy compliance is adequate with a clear privacy policy and cookie policy, but no explicit consent mechanism or security policy is published. Overall, the site is trustworthy, professional, and well-positioned in its niche market.
Kulturresor Europakulturresor-europa.se
Hospitality · Sweden
71Medium
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Kulturresor Europa is a Swedish tour operator specializing in cultural group travel across various European destinations. The website offers a broad range of travel packages including active tours, river cruises, culinary and opera-themed trips, targeting Swedish-speaking travelers interested in immersive cultural experiences. The company positions itself as a niche leader in cultural group travel within Sweden, providing detailed travel content and a user-friendly booking interface. Technically, the website is built on a custom CMS with ASP backend, utilizing common JavaScript libraries such as jQuery and jQuery UI, and integrates marketing and analytics tools like Google Tag Manager and Trustpilot. The site is mobile-optimized with good SEO practices and includes GDPR-compliant privacy and cookie policies. Security posture is moderate; HTTPS is used, but security headers are missing and the jQuery version is outdated, which could pose risks. No WHOIS data was found for the exact www subdomain, which warrants further verification of domain registration details. Overall, the website is professional, trustworthy, and well-suited for its target audience, but could improve security and transparency aspects.
- Aller travel
allertravel.no
Hospitality · Norway
53Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
Aller travel is a Norwegian travel company specializing in curated group tours, long-term vacations, and cruises, targeting Norwegian-speaking travelers seeking guided and personalized travel experiences. The website is professionally designed with good content quality and clear navigation, supporting a positive user experience. Technically, the site employs modern marketing and analytics tools such as Google Tag Manager, Facebook SDK, and Cookiebot for cookie consent management, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS usage and cookie consent, but lacks visible security headers and published privacy policies, which are areas for improvement. Overall, the business appears legitimate and trustworthy, though the absence of public WHOIS data due to privacy protection limits domain registration transparency. Strategic recommendations include publishing comprehensive privacy and terms policies, enhancing security headers, and providing clear contact information to improve compliance and trust.
Alive.dkalive.dk
Hospitality · Denmark
50Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Alive.dk is a well-established Danish event and corporate travel agency founded in 1999, specializing in tailored events and firm group travels. The company positions itself as a creative and passionate partner delivering memorable and inspiring experiences for corporate clients. Their market presence is supported by a strong portfolio of reputable clients and certifications such as EcoVadis and Green Tourism. Technically, the website is built on WordPress with Elementor and integrates modern tools like Google Tag Manager and Vimeo for multimedia content. The site is well-optimized for SEO and mobile devices, providing a good user experience. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and explicit security policies could be improved. Privacy compliance is well addressed with clear privacy and cookie policies. Overall, the website reflects a credible and professional business with a strong digital presence.
Nyhavn Rejsernyhavn.dk
Hospitality · Denmark
67Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
Nyhavn Rejser is a Danish travel agency specializing in customized and luxury travel experiences including safaris, cruises, and cultural trips. The website is professionally designed with good navigation and mobile optimization, leveraging modern technologies such as Bootstrap, Umbraco CMS, and Cookiebot for consent management. The presence of Google Tag Manager indicates moderate user tracking for analytics and marketing purposes. Security posture is adequate with HTTPS usage and cookie consent, but lacks visible security headers and published security policies. WHOIS data is unavailable, limiting domain trust verification, but the website content and business presentation appear legitimate and professional.
- Stjernegaard Rejser
stjernegaard-rejser.dk
Hospitality · Denmark
66Medium
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Stjernegaard Rejser is a Danish travel agency with over 35 years of experience, specializing in guided tours with Danish tour leaders and individual travel arrangements worldwide. The company targets Danish-speaking travelers seeking curated travel experiences and offers a range of services including cruises and travel lectures. The website reflects a mature business with consistent branding and professional content, positioning it as a reputable player in the hospitality sector in Denmark. Technically, the website employs modern web technologies including Google Tag Manager, reCAPTCHA, and Cookiebot for privacy compliance, indicating a good level of digital maturity. The site is mobile-optimized and uses structured data to enhance SEO and business information visibility. Security-wise, the site enforces HTTPS and uses bot protection mechanisms, but lacks some advanced security headers and published security policies. The cookie consent implementation is comprehensive and GDPR compliant, reflecting good privacy practices. Overall, the website presents a low-risk profile with no signs of malicious activity or suspicious content. Strategic recommendations include enhancing security headers, publishing a security policy, and adding vulnerability disclosure information to further improve trust and compliance.
Smilrejsersmilrejser.dk
Hospitality · Denmark
60Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Smilrejser is a Danish travel company specializing in group tours with Danish-speaking guides, offering cultural, hiking, and city travel experiences. The company positions itself as a trusted operator with 30 years of experience, targeting Danish-speaking travelers seeking well-organized group travel. The website is professionally designed using modern technologies such as React and Next.js, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS and cookie consent mechanisms, though improvements in security headers and incident response transparency are recommended. Overall, the website presents a credible and trustworthy business with strong market positioning in the Danish travel sector.
Gislev Rejser A/Sgislev-rejser.dk
Transportation · Denmark
64Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
Gislev Rejser A/S is a well-established Danish travel agency founded in 1946, specializing in organized travel packages including bus tours, flights, cruises, and themed trips with Danish guides. The company holds a strong market position as an award-winning travel arranger, recognized as Denmark's best travel organizer in 2024. Their website reflects a professional and comprehensive digital presence, offering over 160 travel destinations and various trip types tailored to Danish travelers. Technically, the site employs a mix of legacy and modern JavaScript libraries, integrates Google Tag Manager and Cookiebot for analytics and consent management, and provides a responsive and accessible user experience. Security posture is adequate with HTTPS and consent mechanisms, but lacks advanced security headers and public security policies. The absence of WHOIS data limits domain trust verification, though the website content and business information appear legitimate and professional. Overall, the site is safe, user-friendly, and compliant with GDPR, but could improve transparency on security and incident response.
—
67Medium
NIS2 2 · GDPR 65
NIS2 2 · GDPR 65
- 游族网络
youzu.com
Technology · China
64Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
游族网络 is a prominent Chinese gaming platform specializing in web and mobile games, offering a variety of popular titles such as '少年三国志', '绯色回响', and '权力的游戏'. The website demonstrates a mature digital presence with a modern tech stack including React and Next.js, providing a responsive and visually appealing user experience. However, the absence of WHOIS registration data and lack of visible privacy and security policies indicate gaps in transparency and compliance. Security posture is moderate with no detected blocking or WAF, but missing security headers and policies suggest room for improvement. Overall, the platform is legitimate and well-positioned in the gaming industry but should enhance its security and privacy practices to strengthen trust and compliance.
- Phaistos
phaistosnetworks.gr
Media · Greece
51Medium
NIS2 17 · GDPR 43
NIS2 17 · GDPR 43
Phaistos is a well-established digital advertising and R&D company based in Greece, operating since 1997. The company specializes in delivering tailored advertising solutions that connect brands with their target audiences across various digital platforms including websites, OTT & TV apps, and DooH sectors. Their market position is strong within the Greek advertising ecosystem, supported by partnerships with numerous agencies and media suppliers. The website reflects a professional and consistent brand image with clear messaging and comprehensive contact information. Technically, the website is built on WordPress with modern integrations such as Google Analytics and reCAPTCHA for security and tracking. The site is mobile-optimized and demonstrates good SEO and accessibility practices, although some improvements in accessibility and security headers could be made. Performance is moderate, with a clean and structured design. From a security perspective, the site uses HTTPS and implements basic security measures like CAPTCHA and cookie consent. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. No critical vulnerabilities or suspicious elements were detected. Privacy compliance is addressed with a privacy policy and cookie banner, indicating GDPR awareness. Overall, the website presents a low-risk profile with strong business credibility and a good security posture. Strategic recommendations include enhancing security headers, publishing security policies, and improving accessibility to further strengthen trust and compliance.
Technology · United States
66Medium
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
NLX is a technology company specializing in a no-code platform for building conversational AI applications, leveraging patented Voice+ technology and generative AI to enable advanced voice and chat interactions. The company targets a broad audience from individual builders to large enterprises, positioning itself as a leader in conversational AI with a strong client base including major global brands. The technical infrastructure is modern and robust, utilizing Next.js, React, and cloud hosting on AWS and DigitalOcean, with good performance and mobile optimization. Security posture is strong with HTTPS, domain transfer protections, and cookie consent management, though DNSSEC is not enabled and some security headers could be improved. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, NLX demonstrates a mature, professional digital presence with a solid market position and trustworthy domain registration.
Abion ABdomaininfo.com
Technology · Sweden
73Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Domaininfo.com is a well-established domain registration service operated by Abion AB, a Swedish company founded in 1997. The website offers domain registration, transfer services, and trademark monitoring, targeting businesses and individuals seeking domain management solutions. The company is transitioning its services to a new platform, Abion Core, indicating ongoing modernization efforts. The website presents professional branding, clear contact information, and social media presence, supporting its market credibility. Technically, the website employs modern JavaScript frameworks such as Knockout.js, integrates Google Analytics for user tracking, and is hosted with Oracle Cloud DNS services. The site is mobile-optimized with good SEO practices but lacks advanced security configurations such as DNSSEC and security headers. Performance is moderate, and accessibility is basic but functional. From a security perspective, the site uses HTTPS and has domain status prohibitions to prevent unauthorized changes. However, the absence of DNSSEC and security headers, along with limited privacy and security policy disclosures, represent areas for improvement. No critical vulnerabilities or WAF protections were detected, and the WHOIS data confirms the legitimacy and consistency of the domain registration. Overall, the website scores well in business credibility and content quality but has moderate technical and security posture scores. Strategic enhancements in security policies, DNSSEC implementation, and privacy compliance would strengthen trust and resilience.
Government · Sweden
69Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Post- och telestyrelsen (PTS) is the Swedish government agency responsible for regulating electronic communications and postal services in Sweden. The website pts.se serves as an official information portal providing news, events, and resources related to its regulatory functions and digital inclusion initiatives. The agency holds a strong market position as the national authority in its sector, targeting Swedish citizens, businesses, and stakeholders involved in communication services. Technically, the website employs a modern and responsive design with a likely Episerver CMS backend, supported by custom JavaScript and SVG icons. Hosting is managed via Telia's DNS infrastructure, indicating a stable and reputable hosting environment. The site demonstrates good mobile optimization, accessibility, and SEO practices, although some security headers are not explicitly observed. From a security perspective, the site uses HTTPS and a cookie consent mechanism aligned with GDPR requirements. However, DNSSEC is not enabled, and there is no public security policy or incident response contact information. No vulnerabilities or exposed sensitive data were detected. Overall, the security posture is solid but could be improved with additional headers and transparency. The overall risk assessment is low, with the site showing high legitimacy, professional content, and compliance with privacy regulations. Strategic recommendations include enabling DNSSEC, publishing security policies, and enhancing HTTP security headers to further strengthen trust and resilience.
Aliantcanalconfidencial.com.br
Other · Brazil
71Medium
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Aliant is a well-established Brazilian company specializing in ethical whistleblowing and reporting channels, serving over 1000 organizations and millions of users for more than 25 years. The company offers a comprehensive suite of services including complaint channels, emergency reporting, diversity and inclusion channels, and LGPD compliance solutions. Their market position is strong, supported by notable client logos and certifications such as Pró-Ética. Technically, the website is built on WordPress with a modern tech stack including multiple analytics and marketing tools, ensuring good performance and SEO optimization. Security posture is solid with HTTPS, CSP headers, and reCAPTCHA integration, though additional security headers could enhance protection. Privacy and cookie policies are present and GDPR compliant, with consent mechanisms in place. Overall, the website is professional, trustworthy, and content-rich, targeting businesses seeking compliance and ethical reporting solutions.
IOS - Instituto da Oportunidade Socialios.org.br
—
52Medium
NIS2 25 · GDPR 65
NIS2 25 · GDPR 65
TOTVSprodutividadetecnologica.com.br
Technology · Brazil
56Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
The website 'IPT - Índice de Produtividade Tecnológica' is a professional research platform commissioned by TOTVS and developed by H2R Insights & Trends. It focuses on evaluating technological productivity across various Brazilian sectors, particularly related to ERP and complementary technologies. The site offers access to multiple sector-specific studies and reports, targeting Brazilian businesses interested in technology adoption and productivity gains. Technically, the site employs modern web technologies including Google Tag Manager for analytics and HubSpot for form management, hosted with Google Domains DNS services. The design is professional, mobile-optimized, and content is well-structured in Brazilian Portuguese. Security posture is moderate with HTTPS implied but lacks explicit security headers and published security policies. Privacy compliance is basic, with a cookie consent mechanism present but no privacy policy or terms of service pages found. Overall, the domain registration is consistent and trustworthy, with no blocking or WAF detected, and no suspicious WHOIS data. Recommendations include publishing privacy and terms policies, enhancing security headers, and adding clear contact and incident response information.
- TOTVS TECHFIN
totvstechfin.com.br
Finance · Brazil
67Medium
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
TOTVS TECHFIN is a joint venture between TOTVS, Brazil's largest technology company, and Itaú, the largest private bank in Latin America. The company offers personalized financial services tailored for businesses, especially clients using TOTVS ERP systems. Their services include credit products, payment solutions such as Pix and boleto híbrido, and cash flow management tools. The website reflects a strong market position supported by major industry players and targets Brazilian businesses seeking integrated financial technology solutions. Technically, the site is built on WordPress with modern SEO and analytics tools, hosted on AWS infrastructure, and optimized for mobile devices. Security posture is good with HTTPS and no visible vulnerabilities, though explicit security policies and incident response contacts are absent. Privacy compliance is basic, with a cookie consent mechanism present but no clear privacy or terms of service pages. Overall, the website is professional, trustworthy, and business-focused, with room for improvement in transparency and security disclosures.
- RD Station
rdstation.com
Technology · Brazil
69Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
RD Station is a leading Brazilian SaaS company specializing in marketing automation, CRM, and sales enablement software. Their platform offers a comprehensive suite of tools designed to help businesses automate marketing campaigns, manage sales pipelines, and enhance customer engagement. The website reflects a mature digital presence with extensive product information, integrations, and educational resources, positioning RD Station as a market leader in Latin America. Technically, the website leverages modern web technologies including React and Next.js, served via AWS Cloudfront CDN, ensuring fast performance and excellent mobile optimization. SEO and accessibility practices are well implemented, contributing to a professional user experience. Security posture is strong with HTTPS enforced and appropriate security headers, though explicit security policies and incident response details are not publicly disclosed. Overall, the site demonstrates a robust security and privacy compliance framework with GDPR-aligned privacy and cookie policies. However, the absence of public WHOIS data and direct contact information slightly reduces transparency. The domain's legitimacy is supported by the professional quality and breadth of services offered, though WHOIS data unavailability warrants cautious monitoring. Strategic recommendations include publishing detailed security policies, establishing a vulnerability disclosure program, and providing clear security contact channels to enhance trust and compliance. Continued focus on transparency and security culture will support RD Station's strong market position and customer confidence.
Other · Ireland
59Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
The website at transposedigital.ie is currently inaccessible, presenting a 403 Forbidden error page likely enforced by Cloudflare's security mechanisms. Due to this blockage, no substantive business content, contact information, or policy documents are available for analysis. The domain is registered with Hosting Ireland since 2018, indicating a legitimate registration history consistent with an Irish business entity. However, the lack of accessible content and security best practices significantly limits the ability to assess the company's market position, services, or compliance posture. The technical infrastructure shows use of Cloudflare DNS, but no further technology or CMS details are discernible. Security posture is weak due to lack of visible HTTPS enforcement and security headers. Privacy and cookie policies are absent, and no contact or incident response information is provided.
Spatiemailcoach.app
Technology · Belgium
74Medium
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
Mailcoach is a specialized email marketing platform developed by Spatie, targeting creators, developers, startups, and marketers. It offers a comprehensive suite of email marketing tools including campaigns, automations, transactional emails, and a developer-friendly API, with options for both SaaS and self-hosted deployments. The platform positions itself as a lightweight, feature-rich alternative to larger email marketing providers, emphasizing control, extensibility, and cost efficiency. The website reflects a professional and consistent brand image with strong customer testimonials and clear calls to action.
ARIAQariaq.ch
Education · Switzerland
61Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
ARIAQ is a Swiss-based company specializing in quality and performance training and consulting services. With over 30 years of experience, it offers a wide range of professional courses and consulting in quality management, regulatory compliance, and operational excellence. The website is well-structured, professionally designed, and targets organizations and professionals seeking to improve their quality systems and performance. Technically, the site is built on Drupal 10 with modern frameworks like Bootstrap and includes lazy loading and analytics integrations. Security posture is good with HTTPS and cookie consent mechanisms, though some security headers could be improved. Overall, the site is trustworthy, compliant with GDPR, and provides a positive user experience.
- Uupdate AG
update.ch
Technology · Switzerland
56Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
update AG is a Swiss-based communication agency specializing in modern communication solutions for companies, organizations, and government bodies. They offer a broad range of services including web solutions, custom web applications, social media consulting, and modular complete solutions tailored to client needs. The company has a strong market presence in Switzerland, serving notable clients in culture, education, healthcare, and associations. Their website reflects a professional and consistent brand image with clear navigation and comprehensive content. Technically, the site uses ProcessWire CMS and Matomo analytics, indicating a modern and privacy-conscious infrastructure. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though the absence of security headers and explicit security policies suggests room for improvement. Privacy compliance is good with a comprehensive privacy policy but lacks a cookie consent mechanism. Overall, the website is trustworthy, well-maintained, and suitable for its business purpose.
Holzbau Schweizholzbau-schweiz.ch
Other · Switzerland
69Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Holzbau Schweiz is a Swiss industry association representing timber construction companies primarily in the German-speaking regions and the Ticino area. The website serves as a platform for advocacy, networking, and information dissemination for its members. It positions itself as a regional trade organization with a focus on supporting the timber construction sector. The content is professionally presented in German, targeting industry professionals and companies within Switzerland. Technically, the website is built on WordPress with SEO optimization via Yoast and employs Cookiebot for GDPR-compliant cookie management. Analytics tools such as Google Analytics and Hotjar are used to monitor user interactions, with appropriate consent mechanisms in place. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers could be improved. No critical vulnerabilities or suspicious content were detected. Overall, the site is trustworthy, professional, and compliant with privacy regulations, though it lacks explicit contact information and formal security or incident response policies.
Real Estate · Switzerland
60Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
handwerker.ch is a leading Swiss online platform specializing in rating, monitoring, and comparing handwerk and construction companies. It offers over 8,000 certified businesses with real-time data, certifications, and awards, serving customers, professionals, investors, and companies seeking quality and transparency in the Swiss construction sector. The platform integrates advanced features such as the Schweizer Baubranchen Index (SBI) and KMU ratings to provide reliable decision-making tools. Technically, the website employs modern web technologies including Google Analytics, Google reCAPTCHA v3, and slick carousel for UI components, ensuring a responsive and user-friendly experience. Security measures include HTTPS enforcement and CSRF tokens, although explicit security policies and incident response contacts are not published. Overall, the site demonstrates a strong security posture with room for improvement in formal security disclosures. The website is well-structured, professionally designed, and highly trustworthy, with no signs of adult or questionable content, making it suitable for a general audience. The domain registration data aligns with the business claims, reinforcing legitimacy and trust.
Schweizer Fachmedien GmbHenergierundschau.ch
Energy · Switzerland
65Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
energieRUNDSCHAU is a specialized Swiss energy industry magazine published by Schweizer Fachmedien GmbH. The website provides current news, feature articles, and e-magazines focused on the energy sector, targeting professionals and stakeholders within Switzerland. The business operates as a niche media publication with a consistent brand presence and a clear focus on energy-related content. Technically, the website is built on WordPress CMS using common plugins such as Visual Composer and integrates Google Analytics and reCAPTCHA for analytics and security. The site enforces HTTPS and uses modern web technologies, providing a moderate to good performance and mobile optimization. Security posture is solid with HTTPS and form protections, though it lacks advanced security headers and a vulnerability disclosure policy. Privacy compliance is evident with a comprehensive privacy policy, but cookie consent mechanisms are missing. Contact information is clearly provided, enhancing business credibility. Overall, the website is professional, trustworthy, and well-positioned within its market niche.
- einrichtenschweiz
einrichtenschweiz.ch
Manufacturing · Switzerland
54Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
einrichtenschweiz is a Swiss industry umbrella organization representing furniture manufacturers, furniture trade professionals, and interior decorators. The website serves as a professional portal offering information about the association's three main sections, services, vocational education, and industry news. It targets Swiss furniture sector stakeholders and provides resources such as legal advice, expert opinions, and member benefits. The site is well-branded and consistent with the organization's mission. Technically, the website is built on WordPress using Elementor and several plugins for enhanced functionality, including Google Analytics for visitor tracking. The site is mobile-optimized and uses modern web technologies such as Bootstrap and SVG support. Performance is moderate with good SEO and accessibility basics in place. From a security perspective, the site enforces HTTPS with strong SSL configuration and includes security headers. It offers a Google Analytics opt-out mechanism but lacks a visible cookie consent banner and published security or incident response policies. No vulnerabilities or exposed sensitive data were detected. Overall, the website is trustworthy and professional with minor gaps in privacy compliance related to cookie consent. It is suitable for its target audience and maintains a good security posture for an industry association portal.
bauRUNDSCHAUbaurundschau.ch
Media · Switzerland
66Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
bauRUNDSCHAU is a Swiss online magazine focused on the construction, architecture, and real estate sectors, providing industry news, insights, and event coverage. The website targets professionals and enthusiasts within Switzerland's building and environmental technology markets. It operates on a WordPress platform with modern plugins for SEO and advertising, reflecting a moderate to good level of digital maturity. Security posture is solid with HTTPS and no visible vulnerabilities, but lacks published security policies or incident response information. Privacy compliance is limited due to missing explicit privacy and cookie policies. Overall, the site is professional, content-rich, and trustworthy, though improvements in privacy transparency and security disclosures are recommended.
VADIAN.NET AGbaugewerbe.ch
Real Estate · Switzerland
61Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
baugewerbe.ch is an established online platform operated by VADIAN.NET AG, serving as a comprehensive directory and marketplace for construction-related companies in Switzerland. The site offers extensive company profiles, job listings, industry news, and seminars, targeting construction professionals and businesses within the Swiss market. The platform positions itself as a key resource for SMEs in the construction sector, facilitating business visibility and networking. Technically, the website employs modern web technologies including Bootstrap, jQuery, FontAwesome, and Owl Carousel, supported by Cloudflare for CDN and security. The site is mobile-optimized with good SEO practices and moderate performance. Analytics are implemented via Google Tag Manager and Cloudflare Insights, enabling moderate user tracking. From a security perspective, the site enforces HTTPS and benefits from Cloudflare's security features. Security headers are present, and no obvious vulnerabilities or exposed sensitive data were detected. However, the absence of a visible cookie consent mechanism and dedicated security or incident response policies indicates room for improvement in privacy compliance and security transparency. Overall, the website demonstrates a solid business credibility and technical foundation with good content quality and user experience. Strategic enhancements in privacy compliance and security policy publication would further strengthen its trustworthiness and regulatory adherence.
BAUBIBLE AGbaubible.ch
Other · Switzerland
54Medium
NIS2 10 · GDPR 35
NIS2 10 · GDPR 35
The website www.baubible.ch is a small-scale site hosted on the Wix platform, primarily serving as an informational or placeholder site with minimal content and no visible business or contact information. The technical infrastructure relies on Wix's standard scripts and hosting, indicating a basic digital maturity level. Security posture is weak due to the absence of HTTPS enforcement details, security headers, and privacy or cookie policies. No incident response or vulnerability disclosure information is present, limiting trust and compliance assurances. Overall, the site presents a low-risk profile due to minimal content but lacks professional and security best practices, suggesting the need for significant improvements in privacy, security, and content quality.
Other
63Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website emploi-batiment.ch is currently inaccessible due to an active CAPTCHA challenge implemented by a third-party service (captcha-delivery.com), indicating the presence of a Web Application Firewall or bot protection mechanism. This prevents access to any meaningful content or business information on the site. Consequently, no privacy policies, contact details, or business descriptions are available for analysis. The technical infrastructure appears minimal, with only CAPTCHA-related scripts loaded and no visible CMS or hosting details. Security posture cannot be properly assessed due to lack of accessible content and absence of security headers or SSL information. Overall, the site presents a high risk of poor user experience and low trustworthiness due to the lack of accessible content and transparency.
Other · Switzerland
63Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website schreiner-jobs.ch is currently inaccessible due to an active CAPTCHA security mechanism, likely implemented as a Web Application Firewall (WAF) or bot protection. This prevents access to any meaningful content or business information. The site appears to be related to job listings for carpenters (schreiner in German) in Switzerland, but no explicit business details, contact information, or policies are available for review. The technical infrastructure is minimal, with only JavaScript related to CAPTCHA delivery detected. Security posture is weak due to lack of visible HTTPS enforcement and security headers. Privacy and compliance documentation are absent. Overall, the site’s risk profile is elevated due to lack of transparency and accessibility, limiting trust and usability.
Other · Switzerland
63Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website reinigungs-jobs.ch is currently inaccessible due to a CAPTCHA security mechanism implemented by DataDome, which acts as a Web Application Firewall (WAF) or bot protection. This prevents access to the actual website content, limiting the ability to analyze business details, technical infrastructure, and security posture. The domain name suggests a focus on cleaning job listings in Switzerland, but no content or metadata confirms this. The technical footprint is minimal, with only JavaScript related to CAPTCHA detected. No privacy, cookie, or terms of service policies are found, and no contact or business information is accessible. Security headers and SSL configuration details are unavailable due to the blocked content. Overall, the site appears to have poor content quality, minimal technical implementation, and low trustworthiness based on the accessible data.
Other
63Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website immobilien-jobs.ch is currently inaccessible due to a Web Application Firewall (WAF) security challenge implemented via DataDome CAPTCHA. This prevents retrieval of actual website content, metadata, or business information. The visible HTML contains only minimal JavaScript and iframe elements related to the CAPTCHA service, with no privacy policies, contact information, or business descriptions available. The domain uses privacy protection for WHOIS data, limiting transparency about ownership and legitimacy. Due to these access restrictions, a comprehensive security and compliance evaluation cannot be performed. The technical infrastructure appears minimal with no detected CMS or advanced frameworks. Security posture is weak as no security headers or HTTPS confirmation are visible. Overall, the site scores low on content quality, privacy compliance, and business credibility.
Other
63Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website holzbau-jobs.ch is currently inaccessible due to a Web Application Firewall (WAF) security challenge that presents a CAPTCHA from an external provider, preventing access to any meaningful content. As a result, no business information, metadata, or contact details are available for analysis. The site appears to be minimal and lacks visible privacy, cookie, or terms of service policies. Technically, the site loads JavaScript related to CAPTCHA services but does not reveal any CMS, frameworks, or hosting details. The security posture cannot be fully assessed due to the blocked content, but no security headers or SSL information were detected in the provided data. Overall, the site scores very low on content quality, technical implementation, security, privacy compliance, and business credibility due to the lack of accessible content and transparency.
Other · Switzerland
63Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website hlk-jobs.ch appears to be a job listing or recruitment related site based in Switzerland, as inferred from the domain and URL. However, the entire website content is blocked by a CAPTCHA security mechanism provided by captcha-delivery.com, which prevents access to any meaningful content or metadata. This limits the ability to analyze the business model, services, or contact information. The site lacks visible privacy, cookie, or terms of service policies, and no contact details or social media links are present in the accessible content. Technically, the site uses a bot protection service but does not reveal any CMS, frameworks, or hosting details. Security posture cannot be fully assessed due to lack of accessible data and absence of security headers or SSL information. Overall, the site shows low transparency and minimal content, resulting in a low trust and security score.
jobchannel aghandwerker-job.ch
Manufacturing · Switzerland
64Medium
NIS2 2 · GDPR 58
NIS2 2 · GDPR 58
handwerker-job.ch is a specialized Swiss job platform focusing on craftsmen and craftswomen employment opportunities across various trades and regions in Switzerland. Operated by jobchannel ag, it offers comprehensive job listings, salary data, labor market insights, and company profiles, targeting skilled tradespeople seeking employment. The platform integrates partner ratings and provides a user-friendly interface with filtering by trade and region. Technically, the website employs modern JavaScript libraries, Google Analytics, and Tag Manager for tracking, with responsive design and good SEO practices. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though it lacks explicit security policies and incident response contacts. Overall, the site is professional, trustworthy, and compliant with privacy regulations, serving a niche market effectively.