Low-risk security reports
14,261 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,165001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
3,651–3,700 of 14,261
- Italian Trade Agency
machinesitalia.org
Manufacturing · Italy
76Low
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Machines Italia is a well-established B2B platform operated by the Italian Trade Agency, focused on connecting North American manufacturers with Italian machinery suppliers and associations. The website offers comprehensive sector information, events, educational programs, and B2B services, positioning itself as a key resource in the manufacturing and automation industry. The platform targets manufacturers, academic institutions, and public/private organizations interested in Italian technological innovations. Technically, the site is built on Drupal 10 with modern frameworks and libraries, ensuring good mobile optimization and user experience. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and DNSSEC could be improved. Privacy compliance is evident with GDPR-aligned cookie policies and privacy statements. Overall, the site demonstrates high professionalism, trustworthiness, and business credibility.
Nike, Inc.nike.com
Retail · Finland
78Low
NIS2 2 · GDPR 73
NIS2 2 · GDPR 73
Nike, Inc. operates a globally recognized e-commerce platform delivering innovative sportswear, footwear, and related services. The Finnish localized site targets athletes and consumers in Finland, offering a comprehensive product range with a strong brand presence. The website leverages modern web technologies including React and Next.js frameworks, supported by advanced analytics and performance monitoring tools such as New Relic and Adobe Experience Platform. Security posture is robust with HTTPS enforcement, comprehensive security headers, and no visible vulnerabilities. Privacy compliance is well addressed with clear policies and consent mechanisms. The absence of WHOIS data is likely due to registry privacy policies and does not detract from the site's legitimacy. Overall, Nike's digital infrastructure demonstrates high maturity, supporting a seamless and secure user experience.
Crédit Agricolecredit-agricole.fr
Finance · France
82Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Crédit Agricole is a major French banking and insurance group offering a wide range of retail financial services including bank accounts, insurance, savings, investments, and credit products. The website targets individual customers ('particulier') and provides comprehensive information and digital services including secure login, contact options, and assistance chatbots. The technical infrastructure is modern, leveraging Adobe Experience Manager CMS, jQuery, Bootstrap, and third-party chat and privacy management tools. Security posture is strong with HTTPS, session management, CAPTCHA on forms, and cookie consent mechanisms, though explicit security policies and incident response contacts are not published. WHOIS data is unavailable from AFNIC, but the website's branding, content quality, and official social media presence strongly indicate legitimacy. Overall, the site is professional, secure, and compliant with privacy regulations, suitable for its enterprise-scale banking business.
AvalonKingavalonking.com
E-commerce · United States
76Low
NIS2 10 · GDPR 85
NIS2 10 · GDPR 85
AvalonKing is a specialized e-commerce business focused on providing high-quality automotive ceramic coating products directly to consumers. Established in 2017, the company has positioned itself as a leading provider of DIY ceramic coating kits with a strong reputation supported by thousands of positive customer reviews. The website is professionally designed, mobile-optimized, and offers clear navigation and comprehensive product information. The business targets automotive enthusiasts and vehicle owners seeking durable and effective car protection solutions. Technically, the site is built on the Shopify platform, leveraging modern JavaScript libraries and multiple marketing and analytics integrations, ensuring a robust digital presence and good performance. Security posture is strong with HTTPS enforced, domain registration consistent and stable, and privacy compliance evident through detailed policies and consent mechanisms. No critical vulnerabilities or blocking mechanisms were detected, indicating a trustworthy and well-maintained online store.
- Sensitech Inc.
sensitech.com
Transportation · United States
81Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Sensitech Inc. is a well-established company specializing in supply chain visibility solutions, particularly focusing on real-time temperature monitoring and cold chain logistics for industries such as life sciences, food, and industrial sectors. The company operates under the parent organization Carrier Global Corporation, indicating a strong market position and corporate backing. Their website reflects a mature digital presence with comprehensive product and solution offerings, targeting business customers requiring advanced supply chain monitoring technologies. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and integrates third-party services like Google Tag Manager and OneTrust for analytics and privacy compliance. The site is mobile-optimized, accessible, and SEO-friendly, with a professional design and clear navigation structure. The use of Carrier CMS suggests a tailored content management approach. From a security perspective, the website enforces HTTPS and implements cookie consent mechanisms, indicating attention to privacy and regulatory compliance. However, explicit security headers are not clearly visible in the provided data, and no dedicated security or incident response policies are published on the site. The WHOIS data for the domain is unavailable or not found, which is unusual for a company of this stature but does not detract significantly from the overall trustworthiness given the strong branding and parent company association. Overall, Sensitech's website demonstrates a high level of professionalism, technical maturity, and compliance with privacy standards, making it a trustworthy and credible source for its target audience. Strategic improvements in publishing explicit security policies and ensuring WHOIS transparency could further enhance trust and security posture.
PUMA Europe GmbHpuma.com
Retail · Germany
81Low
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
PUMA Europe GmbH operates a professional e-commerce platform targeting the Finnish market under the global PUMA brand, a leading sportswear company founded in 1948. The website offers footwear, apparel, and accessories with a strong focus on performance and lifestyle products. The platform is built on Salesforce Commerce Cloud, integrating advanced personalization and analytics tools such as Emarsys and Google Tag Manager, reflecting a mature digital infrastructure. Security posture is robust with HTTPS enforcement, cookie consent mechanisms, and no visible vulnerabilities, although explicit security policies and incident response contacts are not publicly detailed. Overall, the site demonstrates high professionalism, strong branding consistency, and compliance with GDPR, supporting a high trustworthiness rating.
Cognigy GmbHcognigy.ai
Technology · Germany
82Low
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Cognigy GmbH is a German-based technology company specializing in conversational AI solutions designed to automate and enhance customer service operations. Positioned as a leader in the conversational AI market, as evidenced by its recognition in the 2025 Gartner Magic Quadrant, Cognigy offers a comprehensive AI platform that supports voice and chat AI agents, agent assist tools, and integrations with major contact center platforms. The company targets enterprise customers seeking to deploy AI-powered customer service automation across multiple channels and languages. Technically, the website is built on the HubSpot CMS platform, leveraging modern web technologies including JavaScript, CSS3, and HTML5, with embedded video content hosted on Vimeo. The site demonstrates good digital maturity with mobile optimization, accessibility considerations, and SEO best practices. Analytics and marketing tools such as Google Tag Manager and HubSpot Analytics are employed with appropriate cookie consent mechanisms, reflecting compliance with privacy regulations including GDPR. From a security perspective, the site enforces HTTPS with strong SSL configuration and implements key security headers such as Content-Security-Policy and Strict-Transport-Security. No exposed sensitive data or vulnerable libraries were detected. However, explicit incident response contacts and a vulnerability disclosure policy are not publicly available, representing areas for improvement. Overall, the website presents a professional, trustworthy, and secure digital presence consistent with a reputable technology enterprise. The absence of WHOIS data is a minor concern but is offset by strong business and trust indicators. Strategic recommendations include enhancing transparency around security incident response and vulnerability reporting to further strengthen trust and compliance.
PUMA Europe GmbHpuma.cz
Retail · Germany
81Low
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
PUMA Europe GmbH operates a professional e-commerce platform targeting the Czech market and broader European region, offering footwear, apparel, and accessories under the globally recognized Puma brand. The company is a large enterprise with a long history dating back to 1948 and is part of the Puma SE group. The website reflects a mature digital presence with advanced personalization and marketing technologies integrated, including Salesforce Commerce Cloud and Emarsys. The site is well-structured, mobile-optimized, and provides comprehensive business and contact information, enhancing user trust and engagement. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms in place, although explicit incident response contacts and vulnerability disclosure policies could be improved. Overall, the domain and website demonstrate high legitimacy and professionalism consistent with a global retail brand.
Nexudus Limitednexudus.com
Technology · United Kingdom
79Low
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Nexudus Limited operates a leading SaaS platform specializing in coworking space management software. The company offers a comprehensive suite of tools including automated billing, smart bookings, access control, member management, and analytics, targeting coworking operators and flexible workspace managers globally. With over 3000 spaces powered in more than 90 countries since 2012, Nexudus holds a strong market position as an innovative and scalable solution provider in the coworking technology sector. The website reflects a mature digital presence with professional design, clear navigation, and extensive content tailored to its audience. Technically, the website is built on WordPress with modern SEO and analytics integrations including Yoast SEO, HubSpot, Google Analytics, and LinkedIn Insight. It leverages Cloudflare for DNS and CDN services, ensuring fast performance and robust hosting infrastructure. The site is mobile-optimized and accessible, with comprehensive SEO metadata and structured data enhancing search visibility. From a security perspective, the site enforces HTTPS with strong domain registration protections and uses reputable third-party scripts. However, it lacks publicly available security policies or incident response information and does not publish a vulnerability disclosure or security.txt file. Privacy and cookie policies are present and indicate GDPR compliance, supporting user data protection. Overall, Nexudus demonstrates a high level of professionalism, technical maturity, and business credibility. The risk profile is low with no detected vulnerabilities or suspicious patterns. Strategic recommendations include enabling DNSSEC, publishing formal security policies, and establishing a vulnerability disclosure program to further enhance trust and security posture.
- WP Engine
wpengine.com.au
Technology · Australia
78Low
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
WP Engine is a leading managed WordPress hosting platform established in 2010, serving over 1.5 million customers globally. The company offers a comprehensive suite of hosting solutions tailored for developers, agencies, enterprises, and small businesses, emphasizing performance, security, and expert support. Their market position is strong, supported by a broad partner ecosystem including Flywheel, Local, and StudioPress. Technically, the website leverages modern frameworks such as Next.js and React, with a focus on fast loading times, mobile optimization, and SEO best practices. Security posture is robust with enterprise-grade protections, proactive monitoring, and compliance with standards like SOC-2 and ISO-27001, although some technical security headers and DNSSEC are not fully implemented. Privacy compliance is weak due to the absence of visible privacy and cookie policies. Overall, WP Engine presents a professional, trustworthy, and technically mature digital presence.
- BFM Bourse
tradingsat.com
Finance · France
82Low
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
TradingSat.com is a French-language financial news and stock market advice website affiliated with the BFM media brand, a well-known French news network. The site offers real-time stock quotes, technical analysis, market news, and trading tools targeted at investors and traders interested in the French and global stock markets. It operates a business model combining advertising revenue with subscription-based premium services such as portfolio management. The website is professionally designed, mobile-optimized, and integrates multiple third-party analytics and advertising technologies, reflecting a mature digital infrastructure. Security-wise, the site enforces HTTPS and implements cookie consent mechanisms, but lacks some advanced security headers and explicit incident response policies. The absence of WHOIS registration data is a notable anomaly, potentially indicating privacy protection or a registration issue, which slightly impacts trustworthiness. Overall, the site presents a moderate risk profile with good content quality and compliance posture.
NextRadioTVrmcbfmplay.com
Media · France
79Low
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
RMC BFM PLAY is a French media streaming platform operated by NextRadioTV, offering live and replay video content from channels such as RMC Découverte, RMC Story, BFMTV, and BFM Business. The platform targets a general French-speaking audience interested in news, entertainment, and discovery programs. The website demonstrates a professional design and consistent branding aligned with its parent company. Technically, it leverages modern web technologies including Angular and integrates advanced consent management and analytics tools, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though explicit security headers and incident response policies are not publicly documented. Overall, the site is trustworthy and compliant with GDPR, but the absence of WHOIS registration data and explicit contact information slightly reduces transparency.
- Carrier
carrier.com
Energy
84Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Carrier is a globally recognized leader in intelligent climate and energy solutions, serving both residential and commercial markets as well as cold chain logistics. The website reflects a mature enterprise with a strong focus on innovation, sustainability, and customer-centric solutions. The digital infrastructure employs modern technologies including Bootstrap, Google Tag Manager, and OneTrust for privacy compliance, indicating a well-maintained and professional online presence. Security posture is robust with HTTPS enforcement and security headers, although explicit security policies and incident response information are not publicly detailed. Overall, the site is trustworthy and professionally managed, though WHOIS data is unavailable from the provided raw output, which warrants further verification. Strategic recommendations include enhancing transparency around security and incident response, and publishing clearer contact information for support and security inquiries.
Viessmann Climate Solutionsviessmann-climatesolutions.com
Energy · Germany
76Low
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Viessmann Climate Solutions is a well-established global provider of efficient climate and renewable energy solutions, with a history dating back over 100 years. The company offers a comprehensive portfolio including heating, cooling, ventilation, and digital services, targeting both residential and commercial customers. The website reflects a mature digital presence with professional design, clear navigation, and multilingual support. Technically, the site uses modern technologies such as Adobe Experience Manager, Google Tag Manager, and Usercentrics for consent management, indicating a good level of digital maturity. Security posture is solid with HTTPS and consent mechanisms, though some security headers could be improved. The absence of WHOIS data for the domain is a notable anomaly that reduces trust slightly but does not outweigh the strong corporate branding and content quality. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.
uvex safetyuvex-safety.de
Manufacturing · Germany
81Low
NIS2 2 · GDPR 73
NIS2 2 · GDPR 73
uvex safety is a well-established manufacturer and provider of personal protective equipment (PPE) and occupational safety products, primarily targeting business customers and safety professionals. The company offers a broad portfolio including safety helmets, protective eyewear, hearing protection, respiratory masks, gloves, footwear, and workwear. The website reflects a mature digital presence with comprehensive product information, dealer locator tools, and digital PSA solutions, positioning uvex safety as a key player in the manufacturing sector focused on workplace safety in Germany and beyond. Technically, the website is built on TYPO3 CMS with modern JavaScript frameworks and leverages Amazon Cloudfront CDN for fast content delivery. It employs Google Tag Manager for analytics and tracking, and implements cookie consent management compliant with GDPR. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a high level of digital maturity. From a security perspective, the site enforces HTTPS with strong SSL configuration and includes standard security headers. Cookie consent and privacy policies are comprehensive and transparent. However, the absence of publicly available WHOIS data for the domain www.uvex-safety.com introduces some uncertainty regarding domain registration transparency. No security policy or incident response information is explicitly published, and no vulnerability disclosure mechanism is evident. Overall, the website presents a professional, trustworthy, and secure digital front for uvex safety’s business operations. The main risk lies in the lack of WHOIS transparency, which should be addressed to enhance trust. Strategic recommendations include publishing explicit security policies, establishing a vulnerability disclosure program, and providing direct security contact channels.
Deliveroodeliveroostudents.co.uk
Transportation · United Kingdom
81Low
NIS2 25 · GDPR 100
NIS2 25 · GDPR 100
Deliveroo is a well-established online food and grocery delivery platform operating primarily in the UK and multiple international markets. The analyzed page focuses on a student partnership offering free delivery and exclusive discounts through the Deliveroo Plus Silver subscription, targeting students aged 18 and over enrolled in higher education. The company leverages a modern technology stack including React and Next.js, ensuring a fast, mobile-optimized, and accessible user experience. Security posture is strong with HTTPS, security headers, and consent management in place, although explicit security policies and incident response contacts are not publicly detailed. Overall, the website demonstrates high professionalism, trustworthiness, and compliance with privacy regulations, making it a reliable platform for its target audience.
KNX Associationknx.org
Technology · Belgium
80Low
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
KNX Association is a globally recognized standards organization specializing in smart home and building automation solutions. The website targets professionals in the automation industry, offering certification, training, and software tools such as ETS6. The organization positions itself as a leader with over 500 manufacturer members and 8000 certified products, emphasizing sustainability, security, and IoT integration. The website is professionally designed, well-structured, and provides comprehensive resources for its audience. Technically, the site uses a modern CMS (Weblication®), integrates various JavaScript libraries including jQuery and YouTube APIs, and employs HTTPS with good SSL configuration. The site is moderately optimized for performance and mobile devices, with good SEO practices and accessibility features. Privacy and cookie policies are clearly presented, indicating GDPR compliance. Security posture is solid with HTTPS and secure form handling, though explicit security headers and vulnerability disclosure mechanisms are absent. No critical vulnerabilities or suspicious content were detected. WHOIS data is privacy protected, which is typical for such organizations, and does not raise legitimacy concerns. Overall, the website reflects a mature digital presence with strong business credibility and a good security baseline. Strategic improvements in security headers and incident response transparency would enhance trust further.
- COFIDIS a.s.
cofidis.cz
Finance · Czech Republic
85Low
NIS2 35 · GDPR 85
NIS2 35 · GDPR 85
Cofidis a.s. operates as a consumer finance provider in the Czech Republic, offering a range of loan products including classic loans, flexible loans, loan consolidation, and insurance. The company is part of the larger Cofidis group headquartered in France, leveraging over 40 years of international experience. The website is professionally designed, mobile responsive, and provides clear navigation and product information tailored to Czech consumers seeking fair financing solutions. The company maintains a strong market position with verified customer reviews and industry awards, enhancing trust and credibility. Technically, the website employs modern JavaScript libraries such as jQuery and Underscore.js, integrates advanced analytics and marketing tools including Piano Analytics and Google Marketing Platform, and uses a custom framework (Devb). The site is optimized for both desktop and mobile platforms with good accessibility and SEO practices. Security is enforced via HTTPS and cookie consent mechanisms, though explicit security headers are not detected in the provided data. From a security and compliance perspective, the site demonstrates good privacy practices with a comprehensive GDPR-compliant privacy policy and cookie consent banner. However, the absence of WHOIS data raises concerns about domain registration transparency. No critical vulnerabilities or exposed sensitive data were found. The site lacks explicit security policies or incident response contacts, which could be improved. Overall, Cofidis.cz presents a trustworthy and professional online presence for consumer finance services in the Czech market. Strategic improvements in domain registration transparency and enhanced security headers would further strengthen its security posture and trustworthiness.
Kytary.czkytary.cz
Retail · Czech Republic
82Low
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
Kytary.cz is a well-established Czech e-commerce retailer specializing in musical instruments and related accessories. Founded in 2000, it holds a strong market position in the Czech Republic with the largest stock availability and competitive pricing. The website offers a broad range of products including guitars, keyboards, drums, sound equipment, and lighting, targeting musicians and music enthusiasts primarily in the Czech market. Their business model focuses on online sales with value-added services such as extended warranties, free delivery over a threshold, and installment payment options. Technically, the website employs a modern tech stack including jQuery, Bootstrap, Google Analytics, and Facebook SDK, hosted on Czech hosting providers. The site is mobile-optimized with good SEO and accessibility basics. Security posture is solid with HTTPS, security headers, and use of reCAPTCHA, though explicit security policies and incident response information are not published. Overall, the site is professional, trustworthy, and compliant with GDPR, though improvements in security transparency and accessibility could be made.
Nadácia SPPnadaciaspp.sk
Energy · Slovakia
76Low
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Nadácia SPP is a Slovak non-profit foundation established in 2002, focused on supporting activities and projects in health protection, culture, education, volunteering, and regional development. It operates various grant programs and partnership projects aimed at improving community welfare across Slovakia. The foundation is affiliated with SPP, a major energy company, enhancing its credibility and market position. The website reflects a mature digital presence with clear branding, comprehensive content, and a user-friendly interface targeting non-profit organizations, communities, and institutions in Slovakia. Technically, the website is built on WordPress using Oxygen Builder, with modern JavaScript libraries like jQuery and integration of Google Tag Manager for analytics. It employs GDPR-compliant cookie management and contact forms for newsletter subscriptions, indicating a good level of digital maturity and privacy awareness. The site is mobile-optimized and accessible, with good SEO practices. From a security perspective, the site uses HTTPS with strong SSL configuration and cookie consent mechanisms. While some security headers are not explicitly detected, the overall posture is solid with no visible vulnerabilities or exposed sensitive data. However, the absence of a published security policy or incident response contact is noted. Overall, Nadácia SPP's website is professional, trustworthy, and compliant with privacy regulations, supporting its mission as a reputable non-profit foundation. Strategic recommendations include enhancing security headers, publishing a security policy, and adding vulnerability disclosure information to further strengthen trust and security posture.
GBGgbg.com
Technology
79Low
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
GBG is a professional enterprise specializing in identity verification and fraud prevention solutions. Their website presents a comprehensive range of services targeting businesses that require secure and reliable customer identity validation. The company positions itself as a market leader with a broad client base and offers advanced technology-driven solutions including biometric verification, document authentication, and fraud risk management. The website is well-designed, mobile-optimized, and uses modern analytics and monitoring tools to ensure performance and user experience. Security posture is strong with HTTPS enforced and monitoring tools in place, though explicit security headers and policies could be improved. Privacy compliance is addressed with clear cookie and privacy policies, including GDPR adherence. However, the absence of WHOIS data for the domain introduces some uncertainty about domain registration legitimacy, warranting further investigation. Overall, GBG demonstrates a mature digital presence with a solid business model and trustworthy online representation.
Orest Bidaorestbida.com
Technology
81Low
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Orest Bida is a freelance web designer and developer offering bespoke high-performance and secure web solutions. The website serves as a professional portfolio showcasing the individual's skills and projects, targeting clients seeking freelance web design and development services. The business operates independently with a small scale and has been active since 2018. Technically, the site is built using the Eleventy static site generator, hosted with Cloudflare DNS and registrar services, and optimized for mobile and SEO. The site employs HTTPS with a good SSL configuration but lacks DNSSEC and security headers, which are recommended for enhanced security. No privacy or cookie policies are present, and contact is provided solely via a contact form without direct email or phone numbers. Social media presence is established on GitHub, Codepen, and Twitter, supporting professional credibility. Overall, the website is well-designed, user-friendly, and trustworthy, but could improve privacy compliance and security posture by adding relevant policies and headers.
Alaio Inc.bitrix24.net
Technology · United States
79Low
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
Bitrix24, operated by Alaio Inc., is a comprehensive SaaS platform offering a free online workspace for businesses, integrating CRM, task management, collaboration, and sales tools. It targets businesses and teams seeking to streamline sales, communication, and project management. The platform is positioned as a mature and established player in the business software market, offering extensive features including AI-powered CoPilot tools across various modules. Technically, the website leverages the Bitrix Framework and modern web technologies, with good mobile optimization and SEO practices. Security posture is moderate with HTTPS usage and cookie consent mechanisms, though security headers and incident response details are not evident. The site is transparent with privacy and cookie policies, showing GDPR compliance. Overall, Bitrix24 presents a professional, trustworthy, and feature-rich platform with room for security enhancements.
Targitotargito.com
E-commerce · Czech Republic
80Low
NIS2 17 · GDPR 65
NIS2 17 · GDPR 65
Targito operates as a data platform focused on personalized communication and email marketing for e-commerce businesses, primarily targeting the Czech Republic market. The website presents a professional and consistent brand image with clear navigation and multilingual support. Technically, the site is built on WordPress with modern marketing and analytics tools integrated, including Google Analytics, Facebook Pixel, and LinkedIn Insight Tag. Security posture is adequate with HTTPS and reCAPTCHA usage, though some security headers and explicit privacy policies are missing. The absence of WHOIS registration data reduces trustworthiness and calls for further verification. Overall, the site is functional and business-oriented but would benefit from enhanced transparency and security documentation.
Trusted Shopstrustedshops.ch
E-commerce · Switzerland
78Low
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Trusted Shops operates a professional and well-branded website focused on providing trust and certification services for online shops, primarily targeting the Swiss and broader European e-commerce market. The platform offers key services such as shop certification, buyer protection with a money-back guarantee, and authentic customer reviews, positioning itself as a leading community of trust with millions of shoppers and tens of thousands of shops. The website is built on a modern WordPress infrastructure with Bootstrap and integrates advanced SEO and analytics tools, reflecting a mature digital presence. Security posture is strong with HTTPS enforced and consent management implemented, though explicit security headers could be improved. The absence of WHOIS data for the domain www.trstd.com raises some legitimacy concerns, but the overall professional content and trusted brand association mitigate immediate risks. Strategic recommendations include enhancing privacy disclosures and verifying domain registration details to strengthen trust.
Loqatepostcodeanywhere.co.uk
Technology · United Kingdom
87Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Loqate is a global provider of address verification, data validation, and geocoding services, operating under the parent company GBG. The company targets businesses across multiple sectors including retail, fintech, logistics, and utilities, offering a comprehensive suite of APIs and integrations to improve data quality and customer experience worldwide. The website demonstrates a mature digital presence with excellent content quality, professional design, and strong privacy compliance mechanisms including GDPR-aligned cookie consent. Technically, the site leverages modern analytics and monitoring tools such as Microsoft Application Insights, Google Analytics, and OneTrust, hosted likely on Microsoft Azure infrastructure, ensuring good performance and mobile optimization. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response information are not publicly available. The absence of WHOIS data is a notable anomaly but does not detract significantly from the overall trustworthiness given the company's established market position and branding. Strategic recommendations include publishing detailed security and incident response policies, adding vulnerability disclosure mechanisms, and providing direct contact information for security and support purposes.
Macronmacron.com
Retail
84Low
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
Macron is a prominent European sportswear brand operating a professional e-commerce platform built on Magento with a modern Hyvä theme. The website offers a broad range of sportswear products and supports worldwide shipping, targeting athletes, sports teams, and retail consumers globally. The technical infrastructure leverages multiple third-party analytics and marketing tools, including Google Tag Manager, Hotjar, Microsoft Clarity, and reCAPTCHA, indicating a mature digital presence. The site implements comprehensive cookie consent and privacy mechanisms aligned with GDPR requirements, enhancing user trust and compliance. Security posture is strong with HTTPS enforced and CSRF protections in place, though explicit security headers could be better documented. The absence of WHOIS data for the domain is a notable anomaly that slightly reduces trustworthiness but does not detract from the professional presentation and functionality of the site.
Hlavní stránka | Marius Pedersen a.s.mariuspedersen.cz
Other
81Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
The website www.mariuspedersen.cz is currently inaccessible or blocked, with WHOIS data indicating no registration entries found for the domain. This lack of registration data and minimal website content prevents a comprehensive analysis of the business, its services, or its market position. The absence of privacy policies, contact information, and security disclosures further limits the ability to assess compliance and security posture. Technically, no technologies, frameworks, or hosting details could be identified due to the lack of accessible content. Security posture cannot be evaluated meaningfully, and no trust indicators or certifications are present. Overall, the domain's legitimacy and operational status are questionable, and the website appears non-functional or protected by unknown mechanisms.
- PREGIS, a.s.
pregis.cz
Technology · Czech Republic
79Low
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
PREGIS, a.s. is a Czech-based technology company specializing in the implementation, migration, and operation of SAP information systems, particularly SAP S/4HANA. With over 20 years of experience, they provide comprehensive SAP-related services including custom software development, training, outsourcing, and customer support. Their clientele includes notable enterprises such as ŠKODA AUTO and Nikon CEE GmbH, positioning them as a trusted SAP partner in their market segment. The website reflects a professional and business-focused approach, targeting companies seeking SAP ERP solutions and digital transformation services. Technically, the website is built on WordPress CMS, utilizing modern JavaScript libraries and Google Tag Manager for analytics. It features a cookie consent mechanism compliant with GDPR, ensuring user privacy preferences are respected. The site is mobile-optimized with good SEO practices and moderate performance. However, some security best practices such as explicit security headers are not visibly implemented. From a security perspective, the site enforces HTTPS and uses cookie consent controls, but lacks published security policies or incident response information. The absence of WHOIS data for the domain reduces transparency and trustworthiness from a domain registration perspective. No critical vulnerabilities or exposed sensitive data were detected in the content. Overall, the security posture is good but could be improved with additional headers and published policies. The overall risk assessment is moderate with a recommendation to enhance domain transparency, implement security headers, and provide clearer contact information. The website is safe for general audiences, with no adult or questionable content detected. Strategic improvements in security and compliance documentation would strengthen trust and professional credibility.
Preciosapreciosa.com
Manufacturing · Czech Republic
84Low
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Preciosa Group is a well-established manufacturer specializing in crystals, fine jewelry stones, designer lighting, traditional Czech beads and glass, and related machinery and packaging solutions. The company operates globally with a presence on six continents and serves a B2B audience in various manufacturing and decorative sectors. The website reflects a professional and consistent brand image with comprehensive content about their divisions and products. Technically, the site uses modern web technologies including Angular framework and Google Tag Manager for analytics, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are absent. The missing WHOIS data is a concern for domain legitimacy but the overall digital footprint suggests a credible business. Strategic recommendations include enhancing security headers, publishing security policies, and improving contact transparency.
- Fédération Française de Judo
ffjudo.com
Government · France
78Low
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
The Fédération Française de Judo operates the official website www.ffjudo.com, serving as the national governing body for judo and associated disciplines in France. The site provides comprehensive information on governance, competitions, training, and community engagement, targeting judo practitioners, clubs, and enthusiasts. The federation maintains a strong market position as the authoritative body for judo in France, supported by partnerships with related organizations and a clear focus on sport development and ethical practice. Technically, the website employs a modern technology stack including Matomo for analytics, TikTok and Facebook pixels for marketing, and various JavaScript libraries for UI enhancements. The site is well-optimized for mobile and accessibility, with good SEO practices and structured data for enhanced search engine visibility. Privacy compliance is robust, featuring a consent management platform and clear policies aligned with GDPR. Security posture is solid with HTTPS enforced and no visible vulnerabilities in the content. However, the absence of HTTP security headers and a public security.txt file indicates room for improvement in security best practices. The WHOIS data is notably missing or inaccessible, which is unusual for an official federation site, but the website's professional presentation and external references support its legitimacy. Overall, the site presents a low-risk profile with strong business credibility and technical maturity. Strategic recommendations include enhancing security headers, publishing vulnerability disclosure information, and verifying domain registration details to strengthen trust and compliance.
PetOpeto.com.au
Retail · Australia
77Low
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
PetO is a large Australian retail and e-commerce business specializing in dog and cat supplies. The company operates both online and through physical stores, positioning itself as Australia's largest dog and cat store. The website is built on the BigCommerce platform, leveraging modern e-commerce technologies and integrating multiple marketing and analytics tools such as Google Analytics, Facebook Pixel, and HubSpot. The technical infrastructure is solid with HTTPS enforced and Cloudflare DNS used, although DNSSEC is not enabled. Security posture is adequate but could be improved by adding explicit security policies and vulnerability disclosure mechanisms. Privacy compliance is basic, with a cookie consent banner present but no visible privacy policy or terms of service. Overall, the website is professional and trustworthy but would benefit from enhanced transparency and security documentation.
E-commerce · Vietnam
76Low
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
BOGOS is a specialized SaaS application designed to enhance Shopify stores by providing dynamic promotional tools such as free gifts, bundles, upsells, and discounts. The company positions itself strongly within the e-commerce sector, targeting Shopify merchants aiming to increase sales and customer satisfaction. The website demonstrates a high level of professionalism with comprehensive content, strong branding, and clear calls to action, supported by positive user reviews and strategic partnerships within the Shopify ecosystem. Technically, the site is built on WordPress with modern JavaScript libraries and integrates multiple analytics and marketing tools, ensuring a robust digital presence. Security measures include HTTPS enforcement and use of reCAPTCHA, though explicit security headers and policies could be improved. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and consistency. The absence of explicit privacy and cookie policies is a notable gap in compliance. Strategic recommendations include enhancing privacy compliance, publishing security policies, and enabling DNSSEC to strengthen domain security.
Alcoa Corporationalcoa.com
Manufacturing · United States
83Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Alcoa Corporation is a leading global aluminum producer focused on sustainable manufacturing and innovation. The company operates across the upstream aluminum value chain including bauxite mining, alumina refining, and aluminum smelting. Their website reflects a mature digital presence with comprehensive corporate information, investor relations, sustainability initiatives, and career opportunities. Technically, the site uses modern frameworks such as Bootstrap and jQuery, integrates Google Analytics and Microsoft Clarity for analytics, and implements a cookie consent mechanism compliant with GDPR. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers and explicit security policies could be improved. WHOIS data was not retrievable from the raw output, but the website's professional presentation and external references strongly support legitimacy. Overall, the site is well-designed, trustworthy, and serves its business and stakeholder audiences effectively.
Corneliani S.p.A.corneliani.com
Retail · Italy
83Low
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
Corneliani S.p.A. is a well-established Italian luxury menswear brand specializing in high-end clothing, shoes, and accessories. The company targets discerning male customers seeking timeless elegance and quality craftsmanship. The website serves as an official e-commerce platform offering the latest collections, gift cards, and store locator services, supporting a global audience with multiple language and country versions. The business model focuses on direct retail through an online store, complemented by physical retail presence. Technically, the website is built on the Magento Commerce platform, leveraging modern JavaScript libraries such as RequireJS, KnockoutJS, and jQuery. It integrates advanced marketing and payment tools including Google Tag Manager, Klarna, Amazon Pay, and Hotjar for analytics and user experience enhancement. The site is mobile optimized and demonstrates good SEO and accessibility practices. From a security perspective, the site enforces HTTPS, uses reCAPTCHA on login forms, and applies secure cookie settings. However, some security headers are not explicitly visible in the HTML source and could be verified or improved. No explicit security policy or incident response contact is published, which could be enhanced to improve trust and compliance. Overall, the website presents a professional and trustworthy front for Corneliani's luxury retail business. The main concern is the absence of WHOIS registration data, which is unusual for a commercial domain and slightly reduces domain trustworthiness. This may be due to privacy protection or a WHOIS server issue. Strategic recommendations include verifying domain registration details, enhancing security headers, and publishing a security policy and incident response information.
OSRAM Ceska republika s.r.o.osram.cz
Manufacturing · Czech Republic
83Low
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
OSRAM Ceska republika s.r.o. operates a professional corporate website focused on innovative and sustainable lighting solutions, targeting B2B customers in automotive, industrial, and entertainment sectors. The company is positioned as a global leader in optical and lighting technologies, supported by its parent company ams OSRAM. The website provides comprehensive product information, contact details, and links to global and regional OSRAM sites, reflecting a mature digital presence. Technically, the website employs modern JavaScript libraries, Algolia search, and a consent management platform (Usercentrics), alongside Google Tag Manager for analytics and tracking. The site is mobile-optimized with good SEO practices and accessible navigation, although accessibility features are basic. Security posture is solid with HTTPS enforced and consent mechanisms in place, but lacks explicit security headers and dedicated security policy pages. The absence of WHOIS data limits domain registration trust analysis, but the website's professional branding, structured data, and consistent content strongly indicate legitimacy. No adult or questionable content is present, and privacy compliance is well addressed with clear policies and consent banners. Overall, the website demonstrates a good balance of business credibility, technical implementation, and privacy compliance, with room for improvement in security transparency and domain registration visibility.
HELUKABEL® CZ s.r.ohelukabel.cz
Manufacturing · Czech Republic
77Low
NIS2 2 · GDPR 73
NIS2 2 · GDPR 73
HELUKABEL® CZ s.r.o is a leading international manufacturer and supplier of cables, wires, and cable accessories, operating primarily in the manufacturing, energy, and transportation sectors. Founded in 1978, the company maintains a strong market position with a large operational footprint across 43 countries and 76 branches. Their website reflects a professional and comprehensive digital presence, targeting industrial and infrastructure customers with a broad portfolio of products and services including custom cable solutions and energy chains. The company emphasizes sustainability, evidenced by their EcoVadis Bronze Medal and compliance with DIN, REACH, and RoHS certifications. Technically, the website employs modern web technologies such as Bootstrap, jQuery, and Piwik PRO analytics, ensuring a responsive and user-friendly experience. The site is well-structured with good SEO practices and mobile optimization, although accessibility features could be enhanced. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, but the absence of explicit security headers and a security.txt file suggests room for improvement in security best practices. From a security and compliance perspective, the site demonstrates GDPR compliance with clear privacy and cookie policies and provides comprehensive contact information. However, the lack of WHOIS data for the domain introduces a minor trust concern, though the overall legitimacy is supported by consistent business information and certifications. No critical vulnerabilities or malicious content were detected. Overall, HELUKABEL's website is a professional, secure, and trustworthy platform that effectively supports their business operations and customer engagement. Strategic enhancements in security headers, incident response transparency, and accessibility would further strengthen their digital maturity and risk posture.
- Hiplok
hiplok.com
Transportation
78Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Hiplok is a specialized e-commerce business focused on providing innovative bike security solutions including locks for bikes, motorbikes, e-bikes, and scooters. The company emphasizes product quality with Sold Secure Insurance Rated locks and offers lifetime warranties, positioning itself as a trusted niche player in the transportation security market. The website is built on a modern WordPress platform with WooCommerce, integrating various marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and Klaviyo, indicating a mature digital marketing strategy. Technically, the site is well-structured, mobile optimized, and uses HTTPS with a valid SSL certificate, though it lacks some advanced security headers and explicit privacy and terms policies. The domain is long-established since 2009, registered transparently without privacy protection, which supports the legitimacy of the business. Overall, the security posture is moderate with room for improvement in policy transparency and security headers. The website content is safe for general audiences and professionally presented.
UVEX ARBEITSSCHUTZ GMBHuvex-safety.com
Manufacturing · Germany
81Low
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
UVEX ARBEITSSCHUTZ GMBH operates the uvex safety website, a professional platform offering a wide range of personal protective equipment (PPE) designed and certified in Germany. The company targets business clients, safety professionals, and retailers, positioning itself as a leading manufacturer and distributor of occupational safety products including helmets, glasses, gloves, footwear, and respirators. The website reflects a mature digital presence with comprehensive product information, dealer locator tools, and advisory content.
HexArmorhexarmor.com
Manufacturing · United States
79Low
NIS2 2 · GDPR 100
NIS2 2 · GDPR 100
HexArmor is a well-established global leader in the manufacturing and distribution of high-performance personal protective equipment (PPE), including gloves, eyewear, helmets, hearing protection, and body protection. The company targets safety professionals and industrial workers, providing innovative and reliable safety solutions designed to improve workplace safety and compliance. Their market position is strong, supported by extensive product lines and educational content that reinforce their brand as a trusted PPE provider. Technically, the website demonstrates a mature digital infrastructure with modern tracking and marketing technologies such as Google Tag Manager, Hotjar, and Facebook Pixel. The site is mobile-optimized, well-structured, and SEO-friendly, with good performance and accessibility features. The use of cookie consent tools and privacy policies indicates a commitment to privacy compliance. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, but lacks explicit security headers and a public security policy or incident response contact. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS registration data is a concern but may be due to privacy protection or registrar policies. Overall, the website is professional, trustworthy, and secure with minor areas for improvement in security transparency and WHOIS data clarity. Strategic recommendations include enhancing security headers, publishing a security policy, and verifying domain registration details to improve trustworthiness.
- uvex group
uvex-group.com
Manufacturing · Germany
81Low
NIS2 2 · GDPR 58
NIS2 2 · GDPR 58
The uvex group is a large, internationally recognized manufacturer specializing in safety, sports, and leisure products. The company operates multiple strong brands and maintains a significant presence in Germany and Europe, with a focus on in-house production and quality control. Their website reflects a mature digital infrastructure built on TYPO3 CMS, leveraging modern web technologies and CDN delivery for optimal performance and user experience. Privacy compliance is well addressed through a comprehensive privacy policy and cookie consent management via Usercentrics. Security posture is strong with HTTPS enforcement and secure form handling, though explicit security policies and incident response contacts are not publicly detailed. Overall, the site projects professionalism and trustworthiness consistent with a large manufacturing enterprise.
Thomas Publishing Companythomasnet.com
Manufacturing · United States
78Low
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
Thomasnet.com is a leading B2B industrial supplier discovery platform operated by Thomas Publishing Company, with over 125 years of history connecting buyers and suppliers in North America. The website offers extensive services including supplier discovery, instant quotes, product catalogs, CAD models, and advertising solutions for suppliers. It targets procurement professionals, engineers, and business owners in manufacturing and industrial sectors. Technically, the site is built on modern frameworks such as React and Next.js, leveraging multiple analytics and marketing tools to optimize user experience and business insights. The website is well-optimized for SEO, mobile responsiveness, and accessibility, providing a professional and trustworthy user interface. Security posture is strong with HTTPS enforcement and bot protection, though explicit security policies and incident response information are not publicly disclosed. WHOIS data is unavailable, likely due to privacy or registry restrictions, but the site’s long-standing market presence and trust signals mitigate concerns. Overall, Thomasnet.com demonstrates a mature digital infrastructure and solid business credibility, with recommendations to enhance transparency around security and incident response.
Influ2 | Contact-Level Advertisinginflu2.com
Technology
84Low
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
Influ2 operates as a technology company specializing in contact-level advertising, offering a SaaS platform that enables highly targeted advertising campaigns for B2B marketers. The website presents a professional and modern design, integrating multiple marketing and analytics tools such as HubSpot, Google Analytics, Microsoft Clarity, and Hotjar, indicating a mature digital marketing infrastructure. However, the absence of WHOIS data raises concerns about the domain's registration legitimacy, which should be verified to ensure trustworthiness. Security posture is moderate with no visible critical vulnerabilities, but the lack of explicit privacy and cookie policies suggests compliance gaps. Overall, the website is functional and business-oriented but would benefit from enhanced transparency and security best practices.
- GroundTruth
xad.com
Technology
82Low
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
GroundTruth, formerly known as xAd, is a leading location-based advertising platform that provides advertisers with powerful tools to drive in-store visits and real business results. The company offers a comprehensive suite of targeting products and media channels, leveraging its proprietary Blueprints technology and a global footprint across 21 countries. The website reflects a mature digital presence with professional branding, extensive use of modern marketing and analytics technologies, and a strong focus on privacy compliance. While the WHOIS data is unavailable, the website content and social media presence support the legitimacy of the business. The technical infrastructure is built on WordPress with integrations of multiple third-party analytics and advertising tools, ensuring robust tracking and user engagement capabilities. Security posture is good with HTTPS enforced and no obvious vulnerabilities, though some security headers could be improved. Overall, the site provides a trustworthy and professional experience for its target audience of advertisers and marketers.
Deliveroodeliveroo.net
Transportation · United Kingdom
81Low
NIS2 25 · GDPR 100
NIS2 25 · GDPR 100
Deliveroo is a prominent UK-based online food delivery platform founded in 2012, offering a wide range of services including food, groceries, pharmacy, and gift deliveries. The company operates a large-scale digital marketplace connecting consumers with local restaurants and delivery riders, positioning itself as a leader in the transportation and e-commerce sectors within the UK. The website reflects a mature digital presence with a professional design, clear navigation, and mobile-optimized interfaces, supported by modern web technologies such as React and Next.js. Deliveroo employs robust security measures including HTTPS, security headers, and bot protection, alongside comprehensive privacy and cookie policies that demonstrate GDPR compliance. However, explicit security policies and incident response contacts are not publicly detailed, representing an area for improvement. Overall, the website is trustworthy, well-maintained, and aligned with the company's business model and market position.
Deliveroodeliveroo.com
Transportation · United Kingdom
81Low
NIS2 25 · GDPR 100
NIS2 25 · GDPR 100
Deliveroo is a well-established online food delivery platform founded in 2012, operating primarily in the United Kingdom with a strong international presence. The company connects consumers with local restaurants, grocery stores, pharmacies, and gift services, offering fast and convenient delivery options. Deliveroo's market position is strong, supported by a large user base, extensive restaurant partnerships, and a robust rider network. The website reflects a mature digital presence with excellent design, clear navigation, and mobile optimization, supporting a seamless user experience across platforms. Technically, the site leverages modern frameworks such as React and Next.js, integrates Google Tag Manager for analytics, and employs OneTrust for cookie consent management, indicating a high level of digital maturity. Security-wise, the website enforces HTTPS, implements key security headers, and uses bot protection services, demonstrating a solid security posture. However, there is room for improvement in publishing explicit security policies and incident response contacts. Overall, the website is professional, trustworthy, and compliant with GDPR, making it a reliable platform for users and partners alike.
Deliveroodeliveroo.es
Transportation · United Kingdom
79Low
NIS2 25 · GDPR 85
NIS2 25 · GDPR 85
Deliveroo is a well-established online food delivery platform founded in 2012, operating primarily in the United Kingdom and several international markets. The company connects consumers with local restaurants, takeaways, supermarkets, and other shops, offering fast delivery services typically within 30 minutes. Deliveroo also provides corporate food delivery solutions and gift card services, positioning itself as a leader in the food delivery sector with a strong digital presence and mobile app availability. The website reflects a mature business with consistent branding and comprehensive service offerings.
Deliveroodeliveroo.nl
Transportation · United Kingdom
79Low
NIS2 25 · GDPR 85
NIS2 25 · GDPR 85
Deliveroo is a well-established online food delivery platform founded in 2012, operating primarily in the United Kingdom with a strong international presence. The company connects consumers with local restaurants, grocery stores, pharmacies, and gift providers, offering fast and convenient delivery services. Their business model leverages a marketplace approach, generating revenue through delivery fees, service charges, and partnerships with restaurants and riders. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive service offerings including corporate catering and gift cards.
Deliveroodeliveroo.it
Transportation · Italy
81Low
NIS2 25 · GDPR 100
NIS2 25 · GDPR 100
Deliveroo.it is a well-established online food and grocery delivery platform operating in Italy since 2014. It connects consumers with local restaurants and shops, offering convenient takeaway and grocery delivery services. The website demonstrates a strong market position with a large user base and comprehensive service offerings including partner and rider recruitment as well as corporate meal solutions. The platform is supported by modern web technologies such as Next.js and React, ensuring a fast, responsive, and accessible user experience across devices. Security measures include HTTPS enforcement, robust security headers, and bot protection via PerimeterX, reflecting a mature security posture. Privacy compliance is well addressed with clear privacy and cookie policies and active consent mechanisms. Overall, the website is professional, trustworthy, and aligned with industry best practices.
Deliveroo.iedeliveroo.ie
Transportation · Ireland
84Low
NIS2 25 · GDPR 100
NIS2 25 · GDPR 100
Deliveroo.ie is a prominent online food and grocery delivery platform operating in Ireland, offering consumers convenient access to local restaurants and shops. The company leverages a robust digital infrastructure including modern web frameworks and cloud-based hosting to deliver a seamless user experience across web and mobile platforms. The website demonstrates strong branding consistency, comprehensive legal and privacy documentation, and effective integration of consent management tools. Security posture is solid with HTTPS enforcement, security headers, and bot protection, although DNSSEC is not enabled and no explicit incident response contacts are published. Overall, the platform is well-positioned in the Irish market with a large user base and extensive partner network.