Medium-risk security reports
99,067 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,190001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
36,851–36,900 of 99,067
Other · Switzerland
63Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website gaertner-jobs.ch appears to be a job listing platform focused on gardener positions in Switzerland. However, the site content is inaccessible due to an active CAPTCHA security mechanism, which prevents full content analysis and user access. The lack of visible business information, contact details, and policies limits the ability to assess the company's market position or services offered. Technically, the site uses JavaScript and external CAPTCHA scripts but lacks visible security headers or HTTPS confirmation. The security posture is weak due to content blocking and absence of compliance indicators. Overall, the site presents a high risk for users due to limited transparency and accessibility. Strategic recommendations include removing or optimizing the CAPTCHA challenge for legitimate users, implementing HTTPS and security headers, and publishing clear privacy and contact information to improve trust and compliance.
Other · Switzerland
63Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website baustellenanzeiger.ch is currently inaccessible due to a CAPTCHA security mechanism implemented by a Web Application Firewall (WAF), specifically a DataDome CAPTCHA. This prevents any meaningful extraction of content, metadata, or business information from the site. The domain appears to be privacy protected, which is common for small or personal websites, but no registrant details or business credentials are publicly available to verify legitimacy or business operations. The technical infrastructure is minimal with only JavaScript related to CAPTCHA detected, and no other technologies or CMS platforms identified. Security posture cannot be fully assessed due to lack of accessible content and headers. Overall, the site is protected against automated access, which limits analysis and reduces transparency.
jobchannel agbaukader-jobs.ch
Real Estate · Switzerland
64Medium
NIS2 2 · GDPR 58
NIS2 2 · GDPR 58
baukader-jobs.ch is a specialized online job platform focused on construction management and leadership roles within Switzerland. Operated by jobchannel ag, it serves a niche market by providing targeted job listings, career advice, salary information, and company profiles with integrated employer ratings. The platform is well-positioned in the Swiss real estate and construction recruitment sector, catering primarily to professionals seeking leadership positions in construction projects. Technically, the website employs modern web technologies including JavaScript, jQuery, Bootstrap, and integrates Google Tag Manager and Analytics for tracking and marketing purposes. The site is mobile-optimized, accessible, and SEO-friendly, providing a good user experience with clear navigation and filtering capabilities. The platform uses HTTPS with strong SSL configuration, ensuring secure data transmission. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism compliant with GDPR. However, it lacks explicit security headers and a published security policy or incident response contact, which are areas for improvement. No vulnerabilities or exposed sensitive data were detected in the content. The WHOIS data aligns well with the business profile, indicating legitimacy and consistency. Overall, baukader-jobs.ch is a professional, trustworthy job platform with a solid technical foundation and good privacy compliance. Strategic enhancements in security policy transparency and security headers would further strengthen its security posture and trustworthiness.
jobchannel agbauingenieur-jobs.ch
Transportation · Switzerland
67Medium
NIS2 2 · GDPR 58
NIS2 2 · GDPR 58
bauingenieur-jobs.ch is a specialized job platform operated by jobchannel ag, focusing on civil engineering job listings in Switzerland. It offers job search, company profiles, salary information, and career advice tailored to civil engineers. The platform integrates third-party company ratings from Kununu to enhance trust and user decision-making. The website is well-structured, mobile-optimized, and provides a good user experience with clear navigation and relevant content for its target audience. Technically, it uses modern web technologies including JavaScript, jQuery, Bootstrap, and Google Tag Manager for analytics and marketing. Security posture is solid with HTTPS enforced and secure form handling, though it lacks some advanced security headers and a published security policy. Privacy compliance is addressed with a clear privacy policy and cookie consent mechanism, aligned with GDPR requirements. Overall, the domain registration and WHOIS data confirm legitimacy and consistency with the business claims, supporting a trustworthy online presence.
Other · Switzerland
63Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website architekten-jobs.ch appears to be a platform related to job listings in the architecture sector, as inferred from the domain name. However, the actual website content is fully blocked by a CAPTCHA security mechanism, preventing access to any meaningful content or business information. The site lacks visible metadata, structured data, or contact details, which limits the ability to assess its business model or market position. Technically, the site uses JavaScript and external CAPTCHA services but does not reveal any CMS or hosting details. The security posture is weak due to the absence of visible HTTPS or security headers, and no privacy or cookie policies are present, indicating poor compliance with data protection standards. Overall, the site is inaccessible for detailed analysis and scores low on content quality, security, and privacy compliance.
- BIO-TECHNOPARK® Schlieren-Zürich
bio-technopark.ch
Healthcare · Switzerland
51Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
BIO-TECHNOPARK® Schlieren-Zürich operates a nationally and internationally recognized science park focused on life sciences, providing modern laboratory, production, and office spaces to approximately 60 companies and 80 university research groups. The organization supports knowledge and technology transfer, company formation, and development through services such as coaching, consulting, and networking events. The website is professionally designed, multilingual, and provides relevant business and news content targeting life science companies, research institutions, and startups. Technically, the website is built on WordPress with multilingual support via WPML, uses jQuery 1.11.1, and integrates Google Analytics and Google Tag Manager for tracking. While the site is functional and moderately optimized for performance and SEO, it uses an outdated jQuery version that may pose security risks. Mobile optimization and accessibility are basic but adequate. No explicit cookie consent mechanism or comprehensive privacy compliance features are detected. From a security perspective, the site uses HTTPS (implied), but no security headers were detected in the HTML content. There is no visible security policy or incident response contact information. The outdated jQuery library is a notable vulnerability. No exposed sensitive data or critical security issues were found. Privacy compliance is basic, with a privacy policy page present but no cookie consent banner. Overall, the website presents a professional and trustworthy image with good business credibility and content quality. However, improvements in security practices, privacy compliance, and technical modernization are recommended to enhance the security posture and user trust.
- Publicontext AG
investrends.ch
Finance · Switzerland
58Medium
NIS2 17 · GDPR 85
NIS2 17 · GDPR 85
Investrends.ch is a Swiss-based professional news platform operated by Publicontext AG, targeting professional investors with up-to-date news and trends in asset management and finance. The website offers a variety of services including news articles, newsletters, event listings, advertorials, and a job board focused on the investment sector. It maintains a strong market position within the niche of Swiss financial news for professionals, supported by partnerships with reputable financial institutions and asset managers. Technically, the site is built on the ProcessWire CMS and utilizes a range of JavaScript libraries and analytics tools such as Matomo and Google Analytics, with privacy-conscious configurations like IP anonymization and cookie consent mechanisms. The site is mobile-optimized and features good SEO practices, though some technical debt is noted with the use of an outdated jQuery version and missing security headers. From a security perspective, the site enforces HTTPS and implements cookie consent and email obfuscation to protect user data. However, it lacks explicit security headers and uses an outdated JavaScript library, which could pose risks. No incident response or security policy information is publicly available. The WHOIS data confirms the legitimacy of the domain ownership by Publicontext AG in Switzerland, consistent with the website's business claims. Overall, investrends.ch presents a professional and trustworthy platform for its target audience, with good privacy compliance and business credibility. Security improvements are recommended to enhance protection and trust further.
jobchannel agemploi-bancassurance.ch
Finance · Switzerland
60Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
emploi-bancassurance.ch is a specialized Swiss job platform focusing on bancassurance employment opportunities, operated by jobchannel ag. It offers a comprehensive range of services including job listings, salary calculators, employer profiles, and career advice tailored to banking and insurance sectors. The platform targets job seekers and employers within Switzerland's financial services industry, positioning itself as a niche leader with a professional and user-friendly interface. Technically, the site employs modern web technologies such as JavaScript, jQuery, Bootstrap, and integrates Google Analytics and Tag Manager for tracking and marketing purposes. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site enforces HTTPS and includes cookie consent mechanisms, but lacks explicit security policies or incident response contacts. No vulnerabilities or suspicious elements were detected, and the domain registration aligns well with the business identity, supporting legitimacy. Overall, the website scores well on content quality, technical implementation, privacy compliance, and business credibility, making it a trustworthy and effective platform for its target audience.
jobchannel agversicherungsjobs-schweiz.ch
Finance · Switzerland
64Medium
NIS2 17 · GDPR 58
NIS2 17 · GDPR 58
versicherungsjobs-schweiz.ch is a specialized online job platform focused on the Swiss insurance industry, operated by jobchannel ag. It provides comprehensive job listings, career advice, and company profiles tailored to insurance professionals and job seekers in Switzerland. The platform integrates trusted partner services such as Kununu for employer reviews, enhancing its market position as a niche leader in insurance recruitment. Technically, the website employs modern web technologies including JavaScript, jQuery, Bootstrap, and Google Tag Manager, ensuring a responsive and user-friendly experience. The site is well-optimized for SEO and mobile devices, with clear navigation and professional design. Security-wise, the site enforces HTTPS and uses secure forms with validation, though it lacks explicit security headers and a published security policy. Privacy compliance is addressed with a clear privacy policy, cookie consent mechanism, and GDPR considerations. Overall, the website demonstrates a solid security posture and business credibility with no critical vulnerabilities detected.
Other
62Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website banken-stellen.ch is currently inaccessible due to a CAPTCHA security mechanism implemented via captcha-delivery.com, which blocks direct content access. As a result, no meaningful business information, contact details, or policies are available on the landing page. The site appears to be a placeholder or protected entry point rather than a fully developed business website. The lack of visible content and metadata limits the ability to assess the company's market position or services. Technically, the site uses a third-party CAPTCHA service to mitigate automated access, but no other technologies or CMS platforms are detectable. Security posture cannot be fully evaluated due to the blocking mechanism, but no HTTPS or security headers are evident in the provided data. Overall, the site shows low digital maturity and minimal transparency, which impacts trust and credibility.
Other · Switzerland
63Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website emploi-commercial.ch is currently inaccessible due to a CAPTCHA challenge implemented by a bot protection service (captcha-delivery.com). This security mechanism blocks automated access and prevents retrieval of actual website content, metadata, or business information. Consequently, no meaningful business description, contact details, or compliance policies are available for analysis. The site appears to be minimal or placeholder content behind this WAF. From a technical perspective, the site uses JavaScript and external CAPTCHA scripts but lacks visible SEO metadata, structured data, or security headers in the provided HTML snippet. The performance and user experience cannot be fully assessed but are likely poor due to the blocking mechanism. Security posture is weak or unknown due to lack of accessible data. No HTTPS or SSL information was provided, and no privacy or cookie policies were found. The presence of a CAPTCHA indicates some level of bot protection but also limits transparency and accessibility. Overall, the site currently presents a high risk for users and analysts due to inaccessibility and lack of visible compliance or security information. Strategic recommendations include removing or adjusting the WAF to allow legitimate access, implementing standard security headers and HTTPS, and publishing clear privacy and cookie policies to improve trust and compliance.
Other
63Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
The website emploi-administration.ch is currently inaccessible due to a CAPTCHA security mechanism implemented by captcha-delivery.com, which acts as a web application firewall or bot protection layer. This prevents access to any meaningful content, metadata, or business information. As a result, no privacy policies, contact details, or business descriptions are available for analysis. The technical infrastructure appears minimal, with only CAPTCHA-related scripts loaded. Security posture cannot be properly assessed due to lack of accessible content and headers. Overall, the site appears to be either under protection or in a restricted state, limiting any comprehensive evaluation.
jobchannel agverwaltungs-jobs.ch
Government · Switzerland
66Medium
NIS2 17 · GDPR 58
NIS2 17 · GDPR 58
verwaltungs-jobs.ch is a specialized Swiss job platform focusing on public administration positions across Switzerland. Operated by jobchannel ag, it offers job listings, subscription services, company profiles, and career advice tailored to the public sector. The platform targets job seekers interested in government and administrative roles, providing a comprehensive and localized job search experience. Technically, the website employs modern web technologies including JavaScript, Bootstrap, and integrates Google Analytics and Tag Manager for analytics and marketing. The site is mobile-optimized, accessible, and SEO-friendly, ensuring a good user experience. Security-wise, the site enforces HTTPS, uses cookie consent mechanisms, and avoids exposing sensitive data, though it lacks some advanced security headers and a public security policy. Overall, the website is legitimate, professional, and trustworthy with no detected security or privacy red flags.
jobchannel agkv-stelle.ch
Education · Switzerland
66Medium
NIS2 17 · GDPR 58
NIS2 17 · GDPR 58
kv-stelle.ch is a specialized Swiss job board focused on kaufmännisch-betriebswirtschaftliche (commercial/business administration) positions. It operates under jobchannel ag and partners with the Kaufmännischer Verband Schweiz, providing a comprehensive platform for job seekers and employers in this niche. The site offers job listings, alerts, career advice, and salary recommendations, targeting professionals and companies in Switzerland's commercial sector. Technically, the website employs modern web technologies including JavaScript, Bootstrap, and Google Analytics, with responsive design and good SEO practices. Security posture is solid with HTTPS enforced and privacy compliance mechanisms in place, including a detailed privacy policy and cookie consent. However, there is room for improvement in publishing explicit security policies and incident response contacts. Overall, the website is professional, trustworthy, and well-positioned in its market niche.
- Coinis Ltd.
coinis.com
Technology · Montenegro
73Medium
NIS2 47 · GDPR 68
NIS2 47 · GDPR 68
Coinis Ltd. operates a mature and globally positioned traffic monetization platform and advertising network targeting publishers, advertisers, and affiliates. Founded in 2005 and headquartered in Montenegro, the company offers a suite of services including affiliate programs, search SDK, contextual ads, push notifications, and a self-serve advertising platform. The website reflects a professional and consistent brand presence with comprehensive content and clear navigation, supporting a high level of user engagement and trust. Technically, the site employs modern JavaScript libraries, is hosted behind Cloudflare, and demonstrates good performance and mobile optimization. Security posture is strong with HTTPS enforced and domain registration protections in place, though some improvements such as enabling DNSSEC and publishing explicit security policies could enhance trust further. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, Coinis presents a credible and professional digital presence aligned with its business objectives.
- fleka doo
fleka.me
Technology · Montenegro
54Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Fleka doo is a Montenegro-based UX/UI agency specializing in crafting digital products including websites, mobile apps, and software solutions. Established since 2008, the company positions itself as a medium-sized technology service provider with a strong portfolio including government and banking clients. Their key services encompass product discovery, UX/UI design, software development, and digital strategy consulting. The website reflects a professional and modern digital presence with clear service descriptions and client trust signals. Technically, the site is built on Angular 17, uses modern fonts and icons, and integrates analytics and tracking tools such as Google Analytics, Facebook Pixel, and Hotjar. Security posture is good with HTTPS enforced and no visible vulnerabilities, though explicit security headers and privacy policies are missing. Overall, the site is well-optimized for performance, mobile, and SEO, but lacks some compliance documentation. The domain WHOIS data is unavailable or privacy-protected, which is common for such businesses and does not raise immediate concerns. Contact information is present but email addresses are hidden behind interaction. Social media presence is active across major platforms. Recommendations include publishing privacy and cookie policies, adding security headers, and providing incident response contacts to enhance trust and compliance.
Codeuscodeus.me
Technology · Montenegro
53Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Codeus is a Montenegro-based software development company specializing in web and mobile applications, system design, and consultancy services. Established in 2014, it serves clients locally and internationally, including the USA and EU markets. The company presents a professional and consistent brand image with a clear portfolio and team information, positioning itself as a reliable partner for software solutions. Technically, the website employs modern web technologies such as Bootstrap, jQuery, Revolution Slider, and Google Maps API. It uses HTTPS and includes CSRF protection tokens, indicating a baseline security posture. Analytics tools like Google Analytics and LinkedIn Insight are integrated, reflecting moderate digital maturity. Security-wise, the site lacks some best practices such as security headers and published policies for privacy and cookies, which are important for GDPR compliance and user trust. No critical vulnerabilities or exposed sensitive data were detected. The domain is privacy protected but has a long registration history consistent with the business age. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security hardening to improve user trust and regulatory adherence.
Data Designdatadesign.me
Technology · Montenegro
72Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Data Design is a Montenegro-based IT engineering and consulting company specializing in business information systems, including ERP, e-commerce, transport, and legal sector solutions. Founded in 2011, the company offers cloud-based software products and consulting services aimed at improving business processes for small to medium enterprises. Their market position is supported by ISO 9001 and ISO 27001 certifications and a portfolio of diverse clients. The website is professionally designed with good content quality and clear navigation, targeting business customers primarily in the Balkan region. Technically, the site uses common web technologies such as jQuery, Font Awesome, and Owl Carousel, hosted behind Cloudflare DNS, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS and domain transfer protections but lacks DNSSEC and security headers. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and professional but could improve in security and privacy transparency.
- Bild Studio
bild-studio.com
Technology · Montenegro
59Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
Bild Studio is a medium-sized digital creative agency based in Podgorica, Montenegro, specializing in IT, marketing, and design services. The company offers full-cycle development, product design, branding, and digital transformation strategy services, serving a diverse client base with a professional and modern website presence. The agency demonstrates a solid market position with over 80 employees and multiple case studies showcasing their work. Technically, the website is built on WordPress with Tailwind CSS and integrates Google Tag Manager and Hotjar for analytics and user behavior tracking. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks explicit security headers and public security policies. The absence of WHOIS domain registration data is a notable concern, impacting trust and legitimacy assessments. Overall, the website is professional and functional but would benefit from enhanced security transparency and domain registration verification.
Fondacija Čini Dobrocinidobro.me
Technology · Montenegro
61Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Fondacija Čini Dobro is a Montenegro-based non-profit foundation focused on fostering digital change through education, green initiatives, and support for digital service development. The foundation collaborates with socially responsible companies and targets youth and technology professionals to create opportunities in the ICT sector. The website reflects a medium-sized organization with a clear mission and active partnership ecosystem. Technically, the site is built on WordPress with modern plugins and integrates Google Analytics for user insights. The site is mobile-optimized and well-structured, providing a professional user experience. Security posture is good with HTTPS and domain transfer lock, but lacks DNSSEC and published security policies. Privacy compliance is partial, with cookie consent but missing privacy and terms pages. Overall, the foundation presents a trustworthy and credible digital presence.
Technology · Belgium
69Medium
NIS2 47 · GDPR 80
NIS2 47 · GDPR 80
The Council of European Professional Informatics Societies (CEPIS) is a well-established non-profit organization representing 30 national informatics associations across Europe. Founded in 1997, CEPIS promotes best practices for IT professionals and users, focusing on advocacy, education, and professional development within the European IT sector. The website reflects a professional and consistent brand image, targeting IT professionals, policymakers, and educators. It offers information on events, projects, and expert groups, supporting its mission to advance informatics in Europe. Technically, the website is built on WordPress with modern plugins such as Yoast SEO, Formidable Forms, and Google Tag Manager integration. The site is mobile-optimized, moderately performant, and includes SEO best practices. Privacy compliance is strong, with a clear privacy policy, cookie consent mechanism, and GDPR adherence. However, some security best practices like DNSSEC and security headers could be improved. Security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. The absence of a published security policy or incident response contact is a minor gap. The domain registration data is consistent with the organization's identity, showing a long history and legitimacy. Social media presence on Facebook, Twitter, and LinkedIn further supports trust. Overall, CEPIS.org is a credible, professional, and secure website serving its niche audience effectively. Strategic improvements in security headers and incident response transparency would enhance its security maturity and trustworthiness.
IFIPifip.org
Technology
67Medium
NIS2 2 · GDPR 65
NIS2 2 · GDPR 65
IFIP (International Federation for Information Processing) is a global organization dedicated to researchers and professionals in the computing field. It facilitates research, develops standards, and promotes information sharing within the global computing community. The website reflects a professional and consistent brand image, targeting an audience of computing professionals and researchers worldwide. The business model is non-profit and focused on community and knowledge advancement rather than commercial activities. Technically, the website is built on WordPress using the Divi theme, incorporating modern web fonts and Matomo analytics for user tracking. The site is mobile-optimized and SEO-friendly, though some accessibility features appear basic. Security posture is generally good with HTTPS enabled and no obvious vulnerabilities, but lacks advanced security headers and explicit security policies. Privacy compliance is weak due to missing privacy and cookie policies and no consent mechanisms. WHOIS data is unavailable, limiting domain trust assessment, but the website content and branding suggest legitimacy. Overall, the site is functional and professional but would benefit from enhanced privacy and security disclosures.
- Learning Pool
people-analytix.ch
Education · United Kingdom
70Medium
NIS2 70 · GDPR 80
NIS2 70 · GDPR 80
Learning Pool is an established enterprise-level provider of online learning platforms and content, founded in 2003 and headquartered in the UK. The company offers a comprehensive suite of adaptive, AI-driven workplace learning solutions tailored to improve workforce skills, compliance, and engagement. Their platform leverages data-driven insights and integrates advanced AI features such as AI Coach and AI Assess to personalize learning experiences. The website demonstrates a mature digital presence with professional design, clear navigation, and extensive content targeting organizations seeking scalable learning solutions. Technically, the site is hosted on AWS and built on HubSpot CMS, utilizing modern web technologies and marketing tools. Security posture is strong, with ISO 27001, Cyber Essentials, and SOC 2 TYPE 2 certifications, encrypted communications, and annual penetration testing. However, the absence of explicit privacy and terms of service pages slightly reduces privacy compliance scores. Overall, the site is trustworthy, secure, and professionally maintained, reflecting a credible business with a strong market position in education technology.
Domaininfo ABports.domains
Technology · Sweden
70Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Domaininfo AB operates as a domain registrar specializing in registering domain names across multiple top-level domains globally. The company is currently transitioning its services to a new platform called Abion Core, indicating a strategic shift or upgrade in their service delivery. Their market position is that of a specialized registrar with a focus on trademark clearinghouse monitoring and domain transfer services. The website is professionally designed, targeting businesses and individuals seeking domain registration services, primarily in Sweden. Technically, the site uses modern JavaScript frameworks and Google Analytics for tracking, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and explicit GDPR compliance statements. The WHOIS data is missing or indicates the domain may be unregistered or expired, which raises concerns about domain legitimacy despite the professional website presence. Overall, the site is functional and trustworthy but requires attention to domain registration status and enhanced security and privacy policies.
- PPhaistos Networks S.A.
adman.gr
Technology · Greece
61Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
ADMAN is a specialized advertising technology platform developed by Phaistos Networks S.A., offering cross media campaign management and ad serving services primarily targeting advertisers and publishers in Greece. The platform positions itself as a leading ad serving solution in the Greek market, emphasizing advanced targeting and creative management capabilities. The website content is professional and business-focused, with clear branding and a consistent message aligned with the parent company. Technically, the site uses standard web technologies including SVG graphics, CSS, JavaScript, and Google Analytics for tracking. The site is accessible, mobile-optimized, and SEO-friendly, though some modern security headers and cookie consent mechanisms are missing. Security posture is moderate with HTTPS enabled but lacking explicit security policies or vulnerability disclosures. Overall, the domain registration data is consistent with the business claims, supporting legitimacy and trustworthiness.
Technology
70Medium
NIS2 2 · GDPR 65
NIS2 2 · GDPR 65
now.gg is a technology company operating a cloud gaming platform that allows users to play popular games online for free without downloads or installations. The platform targets gamers and general internet users seeking instant access to games on any device. The website demonstrates a modern technical infrastructure leveraging Next.js, Firebase, and AI-powered search capabilities, indicating a mature digital presence optimized for mobile and desktop users. Security posture is adequate with HTTPS enforced and consent management implemented, though it lacks explicit privacy policies, terms of service, and visible security headers, which are areas for improvement. Overall, the platform appears legitimate and professionally maintained, with a moderate risk profile due to missing compliance documentation and contact transparency.
- AAhead Group
aheadgroup.se
Media · Sweden
62Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
Ahead Group is a prominent agency network operating across the Nordic region, comprising 15 agencies and 500 employees. The company specializes in a broad range of communication services including brand strategy, content creation, PR, financial and sustainability communication, and more. Their business model focuses on providing tailored expert teams to clients, emphasizing measurable growth through 'Accountable Creativity'. The network includes several award-winning agencies, reinforcing their strong market position in the Nordic media and communications sector. Technically, the website is built on modern frameworks such as Next.js and React, hosted on AWS infrastructure, delivering fast performance and excellent mobile optimization. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though improvements can be made by adding security headers and formalizing security policies. Privacy compliance is partially addressed with a linked privacy policy, but lacks cookie consent mechanisms. Overall, the website presents a professional and trustworthy digital presence, though the absence of WHOIS data for the domain introduces some uncertainty regarding domain registration legitimacy.
Aller Leisure A/Sallerleisure.com
Hospitality · Denmark
74Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Aller Leisure A/S is a Danish travel group specializing in group and individual quality travel across Denmark, Europe, and worldwide. The company operates multiple travel agency brands, serving thousands of customers annually with unique travel experiences. The website is built on WordPress with modern front-end technologies and integrates Cookiebot for cookie consent management, reflecting a moderate level of digital maturity. Security posture is generally good with HTTPS enforced and domain transfer protection, but lacks visible security headers and explicit privacy and terms policies. The site is professionally designed, mobile-optimized, and provides clear navigation and branding consistent with the travel industry. Overall, Aller Leisure presents as a credible and established travel business with room for improvement in privacy transparency and security best practices.
SMT Datasmtdata.com
Technology · Denmark
59Medium
NIS2 17 · GDPR 95
NIS2 17 · GDPR 95
SMT Data is a Denmark-based software solutions and services company specializing in IT Business Intelligence (ITBI™) focused on mainframe cost optimization and transparency. Established in 2004, the company offers a specialized platform that integrates technical and financial IT data to provide actionable insights, enabling organizations to optimize capacity and reduce costs. Their market position is strengthened by recognized certifications such as ISO 27001 and SOC 2 Type II, and a client base including reputable enterprises. The website reflects a mature digital presence with excellent content quality, clear navigation, and strong branding consistency. Technically, the website is built on WordPress with modern SEO and analytics tools including Yoast SEO, Google Analytics, Matomo, and Cookie Information for consent management. The site is mobile-optimized, accessible, and performs moderately well. Security posture is robust with HTTPS, reCAPTCHA, and adherence to industry standards, though DNSSEC is not enabled and some security headers could be improved. Privacy compliance is strong with a comprehensive cookie consent mechanism and GDPR-aligned privacy policy. Overall, SMT Data demonstrates a high level of professionalism and trustworthiness with no detected vulnerabilities or suspicious elements. The domain age and WHOIS data corroborate the company's legitimacy. Strategic recommendations include enabling DNSSEC, publishing a security.txt file, and enhancing security headers to further strengthen security and compliance.
- 游族网络
yoozoo.com
Technology · China
63Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
游族网络 is a large Chinese technology company specializing in global game development and publishing. The company has a strong international presence with over 1000 partners and distribution in more than 200 countries, serving nearly 1 billion users worldwide. Their portfolio includes well-known titles such as the '少年三国志' series and licensed games like '权力的游戏:凛冬将至'. The website is professionally designed, mobile-optimized, and provides comprehensive business and product information primarily in Chinese. Technical infrastructure includes modern front-end libraries such as jQuery, Swiper.js, and Tailwind CSS, supporting a responsive and interactive user experience. Security posture is moderate with HTTPS enforced but lacks visible advanced security headers and cookie consent mechanisms. WHOIS data is unavailable, which raises some concerns about domain registration transparency but does not detract significantly from the business credibility given the extensive content and official partnerships. Overall, the website represents a mature digital presence with room for improvement in privacy compliance and security best practices.
- Graham Johnson Medical Media
fivth.com
Media
61Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
The website 'Graham Johnson Medical Media' appears to be a small-scale medical media service provider, targeting medical professionals and related audiences. The site is built on the Wix platform, utilizing Wix's Thunderbolt framework and standard polyfills for compatibility. The content is basic but relevant to medical media production. However, the absence of WHOIS registration data raises concerns about domain legitimacy and trustworthiness. The site lacks essential compliance documents such as privacy and cookie policies, and no contact information is provided, which limits business credibility. Technically, the site is moderately optimized for mobile and performance but lacks advanced security configurations and headers. Overall, the security posture is weak, and privacy compliance is minimal, exposing potential risks for visitors and the business.
Cascadeurcascadeur.com
Technology
55Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Cascadeur.com is the official website for Cascadeur, a standalone 3D keyframe animation software that leverages AI-assisted tools to simplify and accelerate the animation process. The company targets a broad audience including animators, game developers, riggers, and indie developers, offering a niche product with advanced features such as quick rigging, animation unbaking, and AI-powered auto-posing. The website demonstrates a professional design with good content relevance and clear navigation, supported by modern technologies like Bootstrap, Video.js, and Google Tag Manager. Security posture is adequate with HTTPS, CSRF protection, and reCAPTCHA integration, though improvements such as enabling DNSSEC and adding security headers are recommended. Privacy compliance is weak due to the absence of explicit privacy and cookie policies. Overall, the domain registration is consistent and legitimate, supporting the business credibility. The site actively engages users through multiple social media channels and community platforms.
Helpshift, Inc.helpshift.com
Technology · United States
74Medium
NIS2 17 · GDPR 95
NIS2 17 · GDPR 95
Helpshift, Inc. is a well-established technology company founded in 2012, specializing in AI-first customer service platforms. The company offers a comprehensive suite of services including Help Center, Messaging, AI and Automation, and Agent Workspace, targeting businesses seeking advanced customer support solutions. Positioned as a leader in AI-enhanced customer service, Helpshift integrates skilled human specialists with state-of-the-art technology to deliver seamless support experiences. The website reflects a mature digital infrastructure built on WordPress and Elementor, with modern analytics and SEO practices in place. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response contacts are not prominently published. Overall, Helpshift presents a professional, trustworthy online presence with clear business credibility and compliance with privacy regulations. The absence of WHOIS data slightly reduces trust but is offset by consistent branding and detailed business information.
Nekki Limitedninjaparty.com
Technology
63Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Ninja Party is an online multiplayer game developed by Nekki Limited, known for popular titles like Shadow Fight and Vector. The website showcases the game’s features including diverse play modes, cross-platform play, and a content creator program. The business targets gamers interested in fast-paced parkour and combat gameplay, leveraging multiple platforms including mobile and Steam. The site is professionally designed with rich multimedia content and active social media engagement, reflecting a mature digital presence. Technically, the site is built on WordPress with modern web technologies such as Yoast SEO, Google Tag Manager, and Lottie animations, providing good performance and mobile optimization. Security posture is adequate with HTTPS and domain protection statuses, though improvements like DNSSEC and security headers are recommended. Privacy compliance is partial with a privacy policy present but lacking cookie consent mechanisms and terms of service. Overall, the site is trustworthy and well-positioned in the gaming market, with room for enhanced security and compliance documentation.
Nekkifight.me
Technology · United States
55Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Fight.me is an online competitive fight club management game developed by Nekki, a reputable game developer with a large global player base. The website presents a professional and modern interface targeting gamers interested in strategy and digital collectibles. The technical infrastructure leverages modern JavaScript frameworks, Google reCAPTCHA, and multiple analytics and marketing tools, indicating a mature digital presence. Security posture is adequate with HTTPS and anti-bot measures, but lacks some advanced security headers and explicit incident response information. Privacy compliance is basic with a privacy policy and terms of use present, but no cookie consent mechanism or GDPR explicit statements. Overall, the site is trustworthy and well-positioned in the gaming market but could improve privacy and security transparency.
Nekkishadowfight2.com
Technology
53Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Shadow Fight 2 is a well-established digital game product developed and promoted by Nekki. The website serves primarily as a promotional platform linking to various app stores and social media channels, targeting gamers interested in fighting and RPG genres. The business model focuses on digital distribution and community engagement through multiplayer modes. Technically, the site uses legacy JavaScript libraries and basic web technologies with moderate performance and basic mobile optimization. Security posture is moderate but lacks modern security headers and DNSSEC, and no privacy or cookie policies are present, indicating compliance gaps. The domain registration is consistent and mature, supporting legitimacy. Overall, the site is professional but could improve in privacy compliance and security best practices.
Nekkishadowfight3.com
Technology
56Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Shadow Fight 3 is a mobile fighting action-RPG game developed by Banzai.Games and published by Nekki. The website serves as a promotional platform targeting gamers interested in immersive 3D fighting games on mobile platforms. It provides direct links to app stores for iOS and Android, social media channels, and a privacy policy hosted on the parent company's site. The business operates in the technology sector with a medium-sized presence and a consistent brand identity. The domain age and WHOIS data align well with the company's timeline and legitimacy. Technically, the website uses a modern JavaScript stack including jQuery, Google Tag Manager, Google Analytics, and Yandex Metrika for analytics and tracking. The site is mobile-optimized with good design quality and user experience. However, there is no evidence of CMS usage or advanced frameworks. Hosting appears to be managed via Russian DNS providers with GoDaddy as registrar. Performance is moderate with room for improvement in accessibility and SEO. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, it lacks DNSSEC, security headers, and explicit cookie consent mechanisms. No vulnerability disclosures or incident response contacts are published. The privacy policy is present but basic, and GDPR compliance indicators are minimal. Overall security posture is moderate but could be enhanced with standard best practices. The overall risk assessment is low with no critical issues detected. Strategic recommendations include enabling DNSSEC, adding security headers, implementing cookie consent, and publishing security policies to improve trust and compliance. The site is safe for general audiences with no adult or questionable content detected.
- Nekki Limited
shadowfight.com
Technology
58Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Shadow Fight Arena is a well-established mobile fighting game promoted by Nekki Limited, a company with a long-standing presence since 2001. The website effectively targets mobile gamers interested in PvP fighting games, offering rich content about game characters, gameplay, and download options across multiple platforms. The business model is free-to-play with in-app purchases, supported by a strong social media presence and community engagement via newsletters. Technically, the website employs modern JavaScript libraries such as jQuery, Swiper, and Bootstrap, ensuring good mobile optimization and user experience. However, performance is moderate and accessibility features are basic. SEO is adequately addressed with proper meta tags and structured content. From a security perspective, the site uses HTTPS and integrates Google Tag Manager for analytics and marketing. However, it lacks visible security headers and a cookie consent mechanism, which are important for GDPR compliance and overall security posture. No incident response or vulnerability disclosure information is provided, indicating room for improvement in security transparency. Overall, the website is professional, trustworthy, and content-rich, but could enhance its security and privacy compliance to better protect users and align with regulatory requirements.
Netmarblenetmarble.com
Technology
68Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Netmarble is a well-established gaming company with a domain registered since 2001, indicating a mature presence in the digital entertainment industry. The website serves as a corporate portal showcasing their newest game titles and exclusive content, targeting the gaming community. The business model revolves around game development, publishing, and digital content distribution. The site uses modern web technologies including Google Tag Manager and Microsoft Clarity for analytics and user behavior tracking, with a cookie consent mechanism in place to comply with privacy regulations such as GDPR. Technically, the website is hosted on a robust CDN infrastructure (Akamai), ensuring good performance and availability. The site is HTTPS enabled with domain transfer protections, but lacks DNSSEC and some advanced security headers, which could be improved. The content is minimal but professional, with basic mobile optimization and accessibility features. No direct contact information or detailed security policies are published on the main page, which limits transparency in incident response readiness. From a security perspective, the site demonstrates good baseline practices including HTTPS enforcement and cookie consent. However, the absence of explicit security policies, vulnerability disclosure mechanisms, and security.txt files suggests room for maturity improvement. No vulnerabilities or suspicious patterns were detected in the provided content or WHOIS data. Overall, the domain registration and website content align well, supporting a high legitimacy score. The overall risk is moderate with recommendations to enhance DNS security, publish security policies, and improve accessibility and mobile responsiveness. These steps would strengthen trust and compliance posture while supporting the company’s market position in the competitive gaming industry.
- CContently
contently.com
Technology · United States
69Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Contently is a well-established enterprise content marketing platform founded in 2010, specializing in AI-powered content creation and LLM optimization services. The company targets large enterprise brands seeking to scale content production efficiently with a combination of technology and expert freelance creators. Their market position is strong, supported by notable client logos and positive testimonials. Technically, the website is built on WordPress with a mature tech stack including Google Tag Manager, Pardot, and various analytics and marketing tools. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Security posture is good with HTTPS and domain transfer protections, but could be enhanced by enabling DNSSEC and security headers. Privacy compliance is partial, with a comprehensive privacy policy but lacking a cookie consent mechanism. Overall, the website is professional, trustworthy, and safe for general audiences.
Loopia ABloopia.se
Technology · Sweden
70Medium
NIS2 10 · GDPR 10
NIS2 10 · GDPR 10
Loopia AB is a well-established Swedish company founded in 1999, specializing in domain registration, web hosting, and website building services. It holds a leading market position in Sweden and operates under the parent company team.blue. The website offers a comprehensive range of services including WordPress hosting, AI-powered site builders, email hosting, VPS, and e-commerce solutions. The company targets individuals and businesses seeking reliable and easy-to-use online presence solutions. Technically, the website employs modern web technologies such as Bootstrap, jQuery, Google reCAPTCHA, and integrates third-party services like Trustpilot and Intelecom chat for enhanced user engagement and trust. The site is mobile-optimized, well-structured, and professionally designed, providing a positive user experience.
Technology · Denmark
70Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Ascio Technologies is a medium-sized, ICANN accredited domain registrar specializing in domain portfolio management services through a global network of over 600 partners. The company offers comprehensive domain services including all TLDs, SSL certificates, and reseller-focused solutions. The website reflects a professional and consistent brand presence with clear business information and legal compliance documentation. Technically, the site is built on WordPress with modern plugins and analytics tools, providing good performance and mobile optimization. Security posture is solid with HTTPS and reCAPTCHA usage, though improvements in security headers and incident response transparency are recommended. The absence of WHOIS data for the domain is a notable anomaly but does not significantly detract from the overall legitimacy given the strong business indicators. Strategic recommendations include enhancing security headers, adding explicit incident response policies, and implementing cookie consent mechanisms to improve GDPR compliance and user trust.
Other
67Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
The website at zifornd.com is currently inaccessible, returning a 403 Forbidden error page with no visible content or metadata. This prevents any meaningful analysis of the business operations, services, or digital presence. The domain is registered since 2015 with a reputable registrar and has a long registration period, indicating a legitimate registration. Hosting appears to be on Amazon AWS infrastructure based on DNS servers. Due to the lack of accessible content, no privacy, cookie, or terms of service policies are available, and no contact or social media information can be extracted. The security posture cannot be fully assessed but is likely weak given the absence of security headers and DNSSEC. Overall, the site is effectively blocked from public access, resulting in a very low AI score and limited insights.
Uncountableuncountable.com
Technology · United States
75Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Uncountable operates as a cloud-based software platform specializing in unified laboratory informatics and management solutions tailored for enterprise R&D teams across industries such as chemicals, pharmaceuticals, advanced materials, and food & agriculture. The company positions itself as a market leader, providing integrated ELN, LIMS, visualization, and predictive modeling tools to accelerate innovation from research through commercialization. The website reflects a mature digital presence with extensive customer testimonials, case studies, and industry-specific solutions, targeting medium to large enterprises primarily in the United States. Technically, the website leverages modern web technologies including Webflow CMS, HubSpot marketing and analytics tools, Google Analytics, Facebook Pixel, LinkedIn Insight, and Bing UET tags. The site is well-optimized for performance, mobile responsiveness, and accessibility, with a professional design and clear navigation. Security posture is strong with HTTPS enforced and no visible vulnerabilities, although explicit security headers could be better documented and an incident response or vulnerability disclosure page is absent. The WHOIS data is not publicly available, showing no match for the domain, which suggests privacy protection or registrar restrictions. Despite this, the website's professionalism, customer references, and security measures indicate a legitimate and trustworthy business. Privacy and cookie policies are present and comprehensive, with consent mechanisms in place, supporting GDPR compliance. Overall, Uncountable's website demonstrates a high level of digital maturity and business credibility, with minor recommendations to enhance security transparency and incident response readiness. The risk profile is low, and the platform appears well-positioned to serve its target market effectively.
t&p Bochum und Bernt-p.com
Technology · Germany
52Medium
NIS2 10 · GDPR 68
NIS2 10 · GDPR 68
The website t-p.com represents a specialized technology company focused on laboratory automation and LIMS software solutions, primarily serving laboratory and scientific research sectors in Germany. The company has a mature domain presence dating back to 1996, indicating established operations. The website is built on WordPress using the Divi theme and optimized with Rocket Lazy Load scripts, reflecting a moderate level of digital maturity. SEO is enhanced via Yoast SEO plugin, and performance optimizations are in place. Security posture is adequate with HTTPS enabled and domain transfer protections, but lacks advanced security headers and explicit security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is professional and trustworthy but could improve transparency and compliance.
- TThermo Fisher Scientific
thermofisher.com
Healthcare · Finland
70Medium
NIS2 17 · GDPR 85
NIS2 17 · GDPR 85
Thermo Fisher Scientific is a global enterprise specializing in scientific instrumentation, pharmaceutical, and biotechnology services. The website targets scientific researchers and healthcare professionals, offering technology and services to make the world healthier, cleaner, and safer. The company maintains a strong market position with a professional and consistent brand presence. Technically, the website is built on Adobe Experience Manager CMS, leveraging modern JavaScript libraries and Adobe Launch for tag management. The site is mobile-optimized, accessible, and SEO-friendly. Security posture is strong with HTTPS, security headers, and a comprehensive privacy and cookie policy managed via TrustArc. However, the absence of WHOIS data limits domain registration transparency. Overall, the site reflects a mature digital infrastructure suitable for an enterprise-level healthcare technology provider.
Splashlake GmbHsplashlake.com
Technology · Germany
50Medium
NIS2 47 · GDPR 50
NIS2 47 · GDPR 50
Splashlake GmbH is a specialized technology company focused on providing smart laboratory data integration and management solutions. Their platform connects various laboratory instruments and systems such as LIMS, ELN, and ERP to streamline scientific data workflows. Positioned as a niche B2B provider, Splashlake targets laboratories and research organizations in biotech, pharma, and industrial sectors. The company emphasizes vendor-neutral, scalable, and cloud-ready solutions to meet modern laboratory data challenges. Technically, the website is built on WordPress with Elementor and optimized for performance using NitroPack. It employs modern web standards, responsive design, and accessibility best practices, reflecting a mature digital infrastructure. Security-wise, the site enforces HTTPS and includes standard security headers, but lacks explicit published security policies or vulnerability disclosure mechanisms. The absence of WHOIS registration data is a notable concern, though the website provides detailed company information and verifiable business identifiers, suggesting legitimacy. Overall, Splashlake presents a professional and trustworthy online presence with room for improvement in transparency around security and domain registration.
Scifeonscifeon.com
Technology · Denmark
63Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Scifeon is a Denmark-based technology company specializing in a modular, cloud-native Electronic Lab Notebook (ELN) and Laboratory Information Management System (LIMS) platform tailored for biotech, pharmaceutical, and regulated laboratory environments. Founded in 2016, the company offers a SaaS solution designed by scientists to mirror real lab workflows, emphasizing traceability, compliance, and adaptability. Their platform integrates seamlessly with existing lab systems and supports rapid deployment via Microsoft Azure cloud infrastructure. The website presents a professional and consistent brand image, supported by customer testimonials and partnerships with notable biotech firms.
qualitype GmbHqualitype.de
Technology · Germany
55Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
qualitype GmbH is a German-based software company specializing in digital laboratory processes, with over 20 years of international experience. Their core offerings include the award-winning LIMS and Lab Execution System SAMPLES, software solutions for laboratory devices compliant with IVDR, quality monitoring systems, and forensic software through their subsidiary Qualitype Forensics GmbH. The company targets laboratories, biotech, forensic institutions, and medical device manufacturers, positioning itself as a trusted partner with a strong focus on quality and innovation. Technically, the website is built on TYPO3 CMS with modern libraries such as jQuery and Bootstrap, offering a responsive and professional user experience. The site implements GDPR-compliant cookie management with granular user consent options and maintains good SEO and accessibility standards. While HTTPS is enforced, the site could improve by adding explicit security headers and publishing incident response information. From a security perspective, qualitype GmbH demonstrates a mature posture with ISO 9001:2015 certification and active participation in the German cybersecurity alliance. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of a public vulnerability disclosure or security.txt file suggests room for improvement in transparency and incident readiness. Overall, the website and business present a high level of professionalism, trustworthiness, and compliance, with a solid technical foundation and clear business focus. Strategic enhancements in security headers and incident response communication would further strengthen their security posture.
Pragmatis GmbHpragmatis.de
Technology · Germany
61Medium
NIS2 2 · GDPR 55
NIS2 2 · GDPR 55
Pragmatis GmbH is a specialized technology company focused on providing laboratory and technical data management software solutions, including LIMS, LES, LIS, CAQ, AQS, MES, and ELN systems. With over 30 years of experience, the company offers both on-premises and cloud-based solutions tailored to laboratory and technical environments. Their market position is that of a niche expert with long-standing customer relationships and a modernized product portfolio. The website reflects a professional and consistent brand image targeting laboratory and technical professionals seeking reliable data management systems. Technically, the website is built on Joomla CMS with Bootstrap and jQuery frameworks, integrating Google Analytics and Google Tag Manager for analytics and marketing. The site is mobile-optimized and performs moderately well, with a cookie consent mechanism compliant with GDPR. Hosting appears to be via rzone.de nameservers, indicating a German hosting provider. The technical infrastructure is modern but could benefit from enhanced security headers and accessibility improvements. From a security perspective, the site enforces HTTPS and employs email cloaking and cookie consent for privacy. However, no explicit security policies or incident response contacts are published, and security headers are not detected. There are no visible vulnerabilities or exposed sensitive data. The overall security posture is moderate, with room for improvement in formalizing security policies and enhancing technical defenses. Overall, the website is trustworthy, professional, and compliant with privacy regulations. It serves its target audience effectively but could enhance its security transparency and technical hardening to further strengthen its risk profile.