Low-risk security reports
14,261 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,165001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
3,751–3,800 of 14,261
Continental AGcontinental.com
Transportation · Germany
82Low
NIS2 47 · GDPR 50
NIS2 47 · GDPR 50
Continental AG is a leading global manufacturer specializing in tires and automotive technology solutions. The website presents comprehensive corporate information, investor relations, sustainability initiatives, and career opportunities, targeting automotive manufacturers, industrial clients, and end consumers. The site is built on TYPO3 CMS with modern web technologies and includes GDPR-compliant consent management. Security posture is strong with HTTPS and content security policies, though additional security headers could enhance protection. The absence of WHOIS data is unusual but the website content and branding strongly support legitimacy. Contact is primarily via web forms, with no direct emails or phone numbers publicly listed. Overall, the site reflects a mature digital presence suitable for a large enterprise.
American Heart Associationshopheart.org
Non-profit · United States
85Low
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
ShopHeart.org is the official merchandise e-commerce store for the American Heart Association (AHA), a large non-profit organization dedicated to cardiovascular health. The website offers branded products such as apparel, pins, cookbooks, and educational materials, with proceeds supporting the AHA's mission. The site is built on the Shopify platform using the Impulse theme, integrating modern e-commerce technologies and analytics tools to provide a smooth user experience. The presence of privacy and cookie policies with consent mechanisms reflects a commitment to regulatory compliance. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although formal security policy and incident response information are not publicly available. WHOIS data is privacy protected, which is typical for non-profit entities, and does not detract from the site's legitimacy given the consistent branding and official social media links. Overall, the site demonstrates a professional and trustworthy online presence aligned with the American Heart Association's brand and mission.
The LEGO® Grouplego.com
Retail · Finland
80Low
NIS2 25 · GDPR 85
NIS2 25 · GDPR 85
The LEGO® Group is a globally recognized enterprise specializing in the design, manufacture, and retail of LEGO building toys and related merchandise. The website serves as an official e-commerce platform targeting a broad audience including children, families, and adult LEGO enthusiasts. It offers a comprehensive product catalog, digital content, and a loyalty program to enhance customer engagement. The company is a subsidiary of Kirkbi A/S and has a long-standing market presence since its founding in 1932. Technically, the website employs modern web technologies such as React and Next.js, optimized for performance and mobile responsiveness. It integrates analytics via New Relic and uses advanced image formats like WebP for efficient content delivery. The site demonstrates good SEO practices and accessibility features, ensuring a high-quality user experience. From a security perspective, the website enforces HTTPS, implements multiple security headers, and avoids exposing sensitive data. While no explicit incident response or vulnerability disclosure policies are publicly available, the overall security posture is strong. Privacy and cookie policies are comprehensive and GDPR compliant, reflecting a mature approach to data protection. Overall, the website is professional, trustworthy, and well-aligned with the LEGO brand. The absence of WHOIS data is likely due to registry restrictions and does not detract from the site's legitimacy. Strategic recommendations include enhancing transparency around security policies and incident response to further build user trust.
- BBIMCO
bimco.org
Transportation · Denmark
82Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
BIMCO is a globally recognized membership organization serving the maritime shipping industry, providing contracts, regulatory affairs, training, and expert knowledge. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content tailored to shipowners, charterers, shipbrokers, and agents worldwide. Technically, the site leverages modern JavaScript frameworks, analytics, and performance optimizations, hosted on a secure HTTPS platform with strong security headers and cookie consent mechanisms. Security posture is robust with no visible vulnerabilities, though explicit security policies and incident response details are absent. Overall, BIMCO's website demonstrates high professionalism and trustworthiness, supporting its market leadership in the shipping sector.
- DSV Panalpina A/S
mydsv.com
Transportation · Denmark
78Low
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
DSV Panalpina A/S operates the myDSV platform, a digital logistics and transportation service portal targeting business customers globally. The website provides shipment tracking and customer engagement features, leveraging modern web technologies such as Angular and integrating third-party services like LivePerson for chat and Google Analytics for user behavior insights. The platform demonstrates a mature digital infrastructure with CDN hosting and cookie consent mechanisms aligned with GDPR requirements. Security posture is solid with HTTPS enforced and domain transfer protections in place, though improvements in security headers and incident response disclosures are recommended. Overall, the site is professional, trustworthy, and compliant with privacy regulations, supporting DSV's position as a leading logistics provider.
Ecograecogra.org
Technology · United Kingdom
81Low
NIS2 47 · GDPR 68
NIS2 47 · GDPR 68
eCOGRA is a well-established independent certification and testing laboratory specializing in the online gambling and iGaming sector. Founded in 2003 and headquartered in the United Kingdom, the company offers a comprehensive suite of services including game testing, ISO certification, alternative dispute resolution, and cybersecurity services. With over 20 years of experience and accreditations across 47 jurisdictions, eCOGRA holds a strong market position as a trusted compliance partner for operators and software providers. Their website reflects a professional and authoritative presence, featuring detailed service descriptions, client testimonials, and multiple accreditations that reinforce their credibility. Technically, the website is built on WordPress with modern JavaScript libraries such as jQuery and Swiper.js, integrated with Google Tag Manager and HubSpot for analytics and marketing automation. The site is hosted behind Cloudflare DNS and CDN services, ensuring good performance and security. Mobile optimization and accessibility are well addressed, and SEO best practices are implemented through meta tags and structured data. Security measures include HTTPS enforcement and Google reCAPTCHA Enterprise for form protection, although DNSSEC is not enabled and some security headers could be improved. From a security posture perspective, eCOGRA demonstrates strong adherence to industry standards, notably ISO 27001, and maintains rigorous operational independence and integrity policies. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of a published security.txt and explicit incident response contacts suggests room for enhancement in vulnerability disclosure and incident management transparency. Overall, eCOGRA presents a low-risk profile with a mature digital infrastructure and strong business credibility. Strategic recommendations include enabling DNSSEC, implementing additional security headers, publishing a security.txt file, and providing clear incident response contact information to further strengthen trust and compliance.
The Scottish Governmentscotland.gov.uk
Government · United Kingdom
91Low
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
The Scottish Government website serves as the official digital presence for the devolved government of Scotland, providing comprehensive information on policies, news, publications, consultations, and statistics. It targets residents, stakeholders, and the general public interested in Scottish governance and public services. The site is authoritative and well-positioned as a primary source of government information. Technically, the website employs modern web technologies including JavaScript, Google Tag Manager, and Plausible Analytics, with a strong emphasis on accessibility, mobile optimization, and SEO best practices. The site is well-structured with clear navigation and uses structured data to enhance search engine understanding. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, though explicit security headers are not evident in the provided data. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is privacy protected, which is typical and justified for government domains, and the domain is highly legitimate based on trust signals and domain usage. Overall, the website demonstrates a high level of professionalism, security, and compliance, making it a trustworthy and reliable source for its audience.
- AAlexion Pharmaceuticals, Inc.
nmosdyourway.com
Healthcare
76Low
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
The website nmosdyourway.com serves as an educational platform providing a podcast series focused on neuromyelitis optica spectrum disorder (NMOSD) patients worldwide. Developed by Alexion Pharmaceuticals, a part of AstraZeneca Rare Disease, the site aims to support patients and caregivers through expert and patient-hosted content. The business model centers on patient education and advocacy, positioning itself as a trusted resource in the rare disease healthcare sector. The site leverages a mature technical infrastructure including Sitecore CMS and Adobe Analytics, hosted on AWS, ensuring reliable performance and moderate user tracking for analytics purposes. Privacy and cookie compliance are well implemented with clear policies and consent mechanisms linked to the parent company’s legal pages. However, direct contact information and explicit security policies are not present on the site, which could be improved to enhance user trust and incident response readiness. Overall, the site demonstrates a good security posture with HTTPS enabled and no visible vulnerabilities, but could benefit from additional security headers and transparency around security practices. The domain registration is consistent with a legitimate new campaign site, supporting the credibility of the business. The content is safe for general audiences, with no adult or explicit material detected.
- InfoJobs
infojobs.net
Technology · Spain
77Low
NIS2 17 · GDPR 85
NIS2 17 · GDPR 85
InfoJobs is a leading Spanish online job portal providing a platform for job seekers and employers to connect. The website offers job listings, company searches, salary information, and training resources, positioning itself as a comprehensive employment resource in Spain. The platform targets primarily Spanish-speaking users seeking employment opportunities or recruitment services. Technically, the site employs modern JavaScript libraries and analytics tools such as Google Tag Manager, Segment, and Braze, alongside a robust consent management system to comply with GDPR. The website is well-structured, mobile-optimized, and uses HTTPS with appropriate security headers, reflecting a mature digital infrastructure. Security posture is solid with no visible vulnerabilities, though the absence of a public security policy or incident response contact is noted. The WHOIS data is unavailable or not found, which slightly reduces trustworthiness but does not detract significantly from the site's legitimacy given its professional presentation and market position. Overall, InfoJobs demonstrates a strong business and technical foundation with good privacy compliance and user experience.
Prometricprometric.com
Education · United States
81Low
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Prometric is a global enterprise specializing in secure assessment design and delivery solutions, serving test takers, certification bodies, educational institutions, and professional organizations. The company offers a broad portfolio of services including assessment development, global delivery, candidate experience enhancement, and AI-powered exam development. Their market position is strong as a leader in secure testing with a vast network of test centers worldwide. The website reflects a mature digital presence with multi-language support and comprehensive resources for various stakeholders. Technically, the website is built on modern technologies including Craft CMS, Tailwind CSS, and integrates Google Tag Manager and Facebook Pixel for analytics and marketing. The site is mobile-optimized, accessible, and SEO-friendly, with a moderate performance profile. Security best practices are evident with HTTPS enforcement, security headers, CSRF protection, and a detailed cookie consent mechanism. Security posture is robust with no visible vulnerabilities or exposed sensitive data. However, the absence of explicit incident response contacts and vulnerability disclosure mechanisms suggests areas for improvement. Privacy compliance is well addressed with a comprehensive privacy policy, cookie consent banner, and GDPR indicators. Business credibility is high, supported by professional content, consistent branding, and trust signals. Overall, the website presents a low-risk profile with strong business and technical foundations. Strategic enhancements in transparency around incident response and vulnerability disclosure would further strengthen trust and security posture.
Globoglobo.com
Media · Brazil
76Low
NIS2 17 · GDPR 85
NIS2 17 · GDPR 85
Globo.com is a leading Brazilian media portal providing comprehensive news, sports, and entertainment content to a broad general audience primarily in Brazil. The website is well-branded and professionally designed, reflecting its position as a major enterprise within the Grupo Globo media conglomerate. It offers a variety of digital services including live streaming, advertising, and extensive editorial content. The site targets a general audience with up-to-date information on national and international events.
- MMiele
mieleforlife.co.nz
Retail · New Zealand
77Low
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Miele For Life is a dedicated membership loyalty website targeting existing Miele appliance owners in New Zealand, offering exclusive benefits such as discounts, events, and customer care. The website is built on WordPress with modern technologies including Bootstrap, jQuery, Google Tag Manager, and reCAPTCHA, hosted behind Akamai CDN infrastructure. The site demonstrates good digital maturity with mobile optimization, SEO best practices, and a clear content structure focused on recipes, offers, and member engagement. Security posture is solid with HTTPS enforced and bot protection via reCAPTCHA, though minor issues such as missing DNSSEC and a broken GTM script fetch exist. Privacy compliance is well addressed with a cookie consent mechanism and clear links to privacy and terms pages. Overall, the domain registration and website content are consistent and trustworthy, reflecting a legitimate and professional brand presence.
Institute of Physicsiop.org
Education · United Kingdom
86Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
The Institute of Physics (IOP) is a well-established professional body and learned society dedicated to promoting physics in the UK and Ireland. The website serves as a comprehensive platform for physicists, educators, students, and the general public, offering membership services, educational resources, policy advocacy, events, and publications. The organization holds a strong market position as a leading physics institution with international collaborations and a focus on inclusivity and accessibility. Technically, the website is built on the Drupal CMS platform, leveraging modern web technologies including Google Tag Manager for analytics and OneTrust for cookie consent management. The site demonstrates good performance, excellent mobile optimization, and accessibility features, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS, employs standard security headers, and integrates cookie consent mechanisms, indicating a solid security posture. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not publicly available, representing areas for improvement. Overall, the website is professional, trustworthy, and compliant with privacy regulations such as GDPR. The lack of WHOIS data is mitigated by the site's transparency and consistent branding. Strategic recommendations include publishing detailed security policies, adding vulnerability disclosure information, and enhancing direct security contact options to further strengthen trust and compliance.
- Flexmail
flexmail.nl
Technology · Netherlands
82Low
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
Flexmail is a well-established email marketing platform founded in 1998, offering a comprehensive suite of services including campaign management, marketing automation, and CRM segmentation. The company targets small business owners and marketing professionals primarily in the Netherlands and Belgium. The website demonstrates a mature technical infrastructure leveraging modern frameworks such as React and Gatsby, with integrations for analytics and marketing tools like Google Analytics, Hotjar, and Zapier. Security posture is strong with HTTPS and a strict Content-Security-Policy, though DNSSEC is not enabled and some security headers could be improved. Privacy compliance is limited due to the absence of explicit privacy and cookie policies in the provided content. Overall, the website is professional, trustworthy, and technically sound, but could enhance transparency and compliance documentation.
Havas CX Networkhavascx.com
Other · United States
77Low
NIS2 2 · GDPR 65
NIS2 2 · GDPR 65
Havas CX is a global customer experience consulting network operating under the Havas Group umbrella. Founded in 2020, it brings together over 1,800 CX specialists across 19 countries to deliver meaningful customer experiences through strategy, design, and engagement services. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content tailored to business clients seeking CX transformation. Technically, the site is built on WordPress with modern frameworks and integrates analytics and consent management tools, indicating a good level of digital maturity. Security posture is solid with HTTPS and domain protections, though improvements like DNSSEC and security headers could enhance it further. Privacy compliance is well addressed with accessible policies and cookie consent mechanisms. Overall, the site projects high business credibility and trustworthiness with no critical security or content safety concerns.
Healthcare · Canada
76Low
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
The National Nursing Assessment Service (NNAS) operates as a credentialing body for internationally educated nurses aiming to practice in Canada. It provides streamlined services including expedited and regular credentialing for nursing professions such as RN, LPN, and RPN. The organization positions itself as the primary gateway for nursing professionals entering the Canadian healthcare system, supported by comprehensive resources and educational content. The website reflects a professional and trustworthy presence with clear navigation and a focus on user experience. Technically, the website is built on WordPress with modern SEO and analytics tools such as Yoast SEO, Google Tag Manager, and LinkedIn Insight tags. The site is mobile-optimized and accessible, with good performance metrics. However, there is room for improvement in security headers and explicit privacy and cookie policy disclosures. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. The absence of security headers and incident response information suggests moderate security maturity. No vulnerabilities or suspicious patterns were detected in the content or scripts. The lack of WHOIS data is typical for Canadian domains but reduces transparency. Overall, the website presents a low-risk profile with strong business credibility and technical implementation. Strategic improvements in privacy compliance and security policy transparency would enhance trust and regulatory alignment.
Folio ASfolio.no
Finance · Norway
79Low
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
Folio AS operates a modern, simple online banking platform tailored for small businesses and self-employed individuals in Norway. The service is delivered in partnership with Sparebanken Norge, providing a full suite of banking products including business accounts, payment cards, and integrated accounting tools. The website demonstrates a strong market position with high customer satisfaction and a clear focus on ease of use and transparency. Technically, the site is built on a modern Next.js framework with React, optimized for performance and mobile responsiveness. Security posture is robust with HTTPS, security headers, and consent management in place, though explicit security policies and incident response information are not publicly detailed. Overall, Folio presents a trustworthy and professional digital presence with room for improvement in transparency around security and contact details.
Eimskipeimskip.com
Transportation · Iceland
84Low
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
Eimskip is a prominent Icelandic transportation company specializing in freight forwarding and logistics services across the North Atlantic and globally. The company offers a comprehensive range of services including liner shipping, warehousing, global forwarding by sea, air, and road, trucking, terminal operations, and customs handling. Their market position is strong in the North Atlantic region with a global network and subsidiaries such as Ship-log Thailand and Faroe Ship. The website reflects a professional and consistent brand image with detailed business and investor information. Technically, the website employs modern web technologies including Google Analytics, Google Tag Manager, CookieHub for cookie consent, and client-side libraries like htmx and hyperscript. The site is mobile-optimized, accessible, and SEO-friendly with proper meta tags and structured navigation. Performance is moderate with good user experience and fast loading images. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, but lacks explicit security headers such as Content-Security-Policy and X-Frame-Options. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data for the domain is a concern, potentially indicating privacy protection or registration inconsistencies, which slightly lowers the trust score. Overall, the website is safe, professional, and business-focused with no adult or questionable content. The main risk lies in the incomplete WHOIS information, which should be investigated further to confirm domain legitimacy. Strategic recommendations include enhancing security headers, publishing incident response contacts, and implementing a security.txt file for vulnerability disclosures.
- MMarkmonitor
markmonitor.com
Technology
84Low
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
Markmonitor operates as a leading corporate domain portfolio management service provider, offering domain strategy, guidance, and personalized support to business clients. The website reflects a mature, enterprise-level digital presence with strong branding and professional content tailored to corporate audiences. Technically, the site is built on WordPress with modern SEO and performance optimizations, including lazy loading scripts and responsive design, ensuring a fast and accessible user experience. Security posture is solid with HTTPS enforced and some script-based security monitoring, though explicit security policies and headers could be improved. The absence of WHOIS registration data is a notable anomaly, suggesting privacy protection or registry issues, which slightly impacts trust but does not detract from the overall professional presentation. Privacy and cookie policies are not explicitly found, indicating room for compliance enhancement. Overall, the site is trustworthy and well-positioned in its market segment but would benefit from improved transparency and security documentation.
- Dialpad, Inc
dialpad.com
Technology · United States
77Low
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Dialpad, Inc is a leading AI-powered customer communications platform founded in 2011 and headquartered in San Francisco, USA. The company offers a suite of cloud-based communication solutions including AI-enhanced contact centers, outbound sales tools, and always-on AI agents designed to improve customer service and sales efficiency. Positioned as an enterprise-grade solution, Dialpad integrates with major platforms such as Salesforce, Microsoft Teams, and Google Workspace, targeting businesses seeking advanced AI-driven communication capabilities. The website reflects a mature digital presence with excellent content quality, professional design, and clear navigation tailored for business users. Technically, the website leverages modern frameworks like Next.js and React, supported by robust analytics and tracking tools including Segment, Amplitude, and FullStory. The platform is optimized for performance and mobile responsiveness, ensuring a seamless user experience across devices. Security is a priority, with HTTPS enforcement, SOC 2 and HIPAA certifications, and comprehensive privacy policies indicating strong compliance and data protection practices. The security posture is solid, with appropriate security headers and no evident vulnerabilities. However, the absence of a public vulnerability disclosure or incident response contact suggests areas for improvement in transparency and readiness. Overall, Dialpad demonstrates a high level of business credibility and technical sophistication, making it a trustworthy provider in the AI communications space.
Já hf.ja.is
E-commerce · Iceland
78Low
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Já hf. operates the website ja.is, a leading Icelandic local search and e-commerce platform established in 2002. The site facilitates connections between people and businesses in Iceland, offering product listings, advertising services, and mobile applications for iOS and Android. The company maintains a strong market position as a trusted local directory and marketplace. Technically, the website employs modern frameworks such as Vue.js, integrates advanced analytics and monitoring tools including Google Analytics, Segment, and New Relic, and uses Amazon AWS Cloudfront for hosting and CDN services. The site is well-optimized for performance and mobile devices, with good SEO and accessibility features. Security-wise, the site enforces HTTPS, uses cookie consent mechanisms, and integrates security monitoring, though it could improve by enabling DNSSEC and adding explicit security headers. Privacy compliance is robust with clear policies and consent banners. Overall, the website demonstrates a mature digital presence with high trustworthiness and professional business credibility.
- Faroe Ship
faroeship.com
Transportation · Faroe Islands
84Low
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
Faroe Ship is a well-established shipping and logistics company based in the Faroe Islands, with a history dating back to 1919. The company serves as a key regional transport hub in the North Atlantic, offering a comprehensive range of services including liner shipping, terminal operations, warehousing, cold storage, trucking, and special transports. Their website reflects a mature digital presence with clear service descriptions, customer portals, and updated news sections, positioning them as a leading logistics provider in their region. Technically, the website employs modern web technologies such as htmx and hyperscript for interactivity, integrates Google Tag Manager for analytics, and uses CookieHub for cookie consent management. The site is mobile-optimized, accessible, and SEO-friendly, indicating a strong digital maturity. The domain is secured with HTTPS, and domain registration details align with the company’s claims, enhancing trustworthiness. From a security perspective, the site demonstrates good practices including HTTPS enforcement, domain status protections, and cookie consent mechanisms. However, there is room for improvement by enabling DNSSEC, publishing explicit security policies, and adding a security.txt file to facilitate vulnerability disclosures. No critical vulnerabilities or exposed sensitive data were detected. Overall, Faroe Ship’s website presents a professional, secure, and compliant digital front that supports their business operations effectively. The risk level is low, with recommendations focused on enhancing DNS security and formalizing security policies to further strengthen their security posture.
- PParcelforce Worldwide
parcelforce.com
Transportation · United Kingdom
78Low
NIS2 2 · GDPR 85
NIS2 2 · GDPR 85
Parcelforce Worldwide operates as a leading parcel delivery service in the UK, integrated closely with Royal Mail to provide comprehensive parcel shipping, tracking, and management services for both business and consumer customers. The website reflects a mature digital presence with a focus on user experience, mobile optimization, and clear service offerings. Technically, the site is built on Drupal 9 with modern performance and analytics tools, hosted behind Akamai CDN, ensuring reliable delivery and moderate performance. Security posture is solid with HTTPS and consent management, though explicit security headers and a public security policy are absent. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces transparency but does not detract significantly from the site's legitimacy given the strong branding and partner links. Overall, the site is professional, trustworthy, and well-positioned in the transportation and logistics sector.
- ILUNION
ilunion.com
Non-profit · Spain
76Low
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
ILUNION is a Spanish enterprise focused on social inclusion and diversity, operating a business model that combines economic profitability with social impact by creating quality employment for people with disabilities and vulnerable groups. The company is positioned as a leader in diversity and transformation with a broad portfolio of services including hospitality, retail, consulting, and wellbeing. Technically, the website is built on Drupal CMS with modern front-end frameworks and integrates analytics and marketing tools such as Google Tag Manager and Visual Website Optimizer. The site demonstrates excellent accessibility, mobile optimization, and SEO practices. Security posture is good with HTTPS and cookie consent mechanisms, though explicit security headers could be improved. The WHOIS data is missing, which slightly reduces domain trustworthiness, but the website's content, branding, and external links to Grupo Social ONCE and subsidiaries strongly support legitimacy. Overall, ILUNION presents a professional, trustworthy, and socially responsible digital presence.
- National Multiple Sclerosis Society
nationalmssociety.org
Healthcare · United States
81Low
NIS2 25 · GDPR 88
NIS2 25 · GDPR 88
The National Multiple Sclerosis Society is a well-established non-profit organization dedicated to supporting individuals affected by multiple sclerosis through research funding, advocacy, education, and community programs. The website serves as a comprehensive resource hub for patients, caregivers, healthcare professionals, and donors. It features extensive content including news, events, support groups, and educational materials, positioning the organization as a leader in the MS community. Technically, the website leverages Salesforce Experience Cloud and integrates multiple modern technologies and trusted payment processors, reflecting a mature digital infrastructure. Security posture is strong with HTTPS, strict Content-Security-Policy, and secure payment integrations, although additional security headers could enhance protection. Privacy compliance is robust with clear policies and consent mechanisms. Overall, the site demonstrates high professionalism, trustworthiness, and user-centric design, supporting the organization's mission effectively.
BETC Placesbetcplaces.com
Real Estate · France
77Low
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
BETC Places is a consulting firm specializing in creating meaningful living places that blend tangible and intangible elements such as history, community, and emotion. The company targets businesses and organizations involved in real estate development and place-making. The website is built on a modern Nuxt.js framework, indicating a good level of digital maturity, with mobile optimization and a professional design. Security posture is moderate, with HTTPS implied but lacking explicit security headers and incident response information. Privacy compliance is basic, with a cookie consent mechanism but no visible privacy policy or terms of service. Overall, the website presents a professional image but would benefit from enhanced transparency and security practices.
- Information Commissioner's Office
ico.org.uk
Government · United Kingdom
81Low
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
The Information Commissioner's Office (ICO) is the UK's independent regulator responsible for upholding information rights and data protection laws. The website serves as a comprehensive resource for individuals, public bodies, and organizations, providing guidance, complaint mechanisms, and enforcement information. The ICO holds a strong market position as the national data protection authority with a clear mission to empower citizens and organizations through information rights. Technically, the website is built on a modern CMS (Umbraco), employs responsive design, and integrates cookie consent and analytics tools responsibly. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security policies and incident response information are not publicly detailed. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with GDPR and UK data protection standards.
Findomesticfindomestic.it
Finance · Italy
77Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Findomestic is a well-established Italian financial services company specializing in personal loans, mortgages, credit cards, and other banking products. The website presents a professional and user-friendly interface powered by Adobe Experience Manager, with strong mobile optimization and accessibility features. The company provides clear contact information and social media presence, enhancing trust and customer engagement. The cookie consent mechanism is robust, leveraging OneTrust to ensure GDPR compliance. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security policies and incident response contacts are not published. Overall, the website reflects a mature digital infrastructure suitable for a large financial institution.
Flexmailflexmail.eu
Technology · Belgium
83Low
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
Flexmail is a well-established Belgian email marketing platform founded in 2003, offering a comprehensive SaaS solution for campaign management, marketing automation, and CRM segmentation. The website presents a professional and modern design built on React and Gatsby, integrating multiple marketing and analytics tools such as Google Analytics, Hotjar, and Facebook Pixel. Security posture is strong with strict Content-Security-Policy headers and HTTPS enforcement. However, the absence of visible privacy and cookie policies, as well as contact information, reduces privacy compliance and business credibility scores. Overall, the site is accessible, trustworthy, and technically sound but would benefit from enhanced transparency and compliance documentation.
- mediamid digital services GmbH
mediamid.com
Technology · Austria
90Low
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
mediamid digital services GmbH is a specialized provider of Digital Asset Management solutions based in Vienna, Austria, with over 20 years of experience. Their offerings include Enterprise Digital Asset Management, Media Asset Management, Video Asset Management, and Order Management, targeting enterprises, marketing departments, archives, and NGOs. The company has a solid market position supported by industry awards and a professional online presence. Technically, the website leverages modern frameworks such as PrimeFaces and Bootstrap, integrates Google Analytics with privacy considerations, and employs CAPTCHA for form security. The security posture is strong with HTTPS enforcement and secure cookie settings, though some security headers are missing. However, the absence of WHOIS data for the domain raises concerns about domain legitimacy, which should be further investigated. Privacy compliance is limited due to missing explicit privacy and terms of service pages. Overall, the website is professional, secure, and business-focused, but domain registration transparency and privacy policy publication need improvement.
Outfindooutfindo.com
Technology
76Low
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Outfindo is a technology company specializing in AI-driven guided selling software and product data enrichment solutions aimed at enhancing the online shopping experience for e-commerce businesses. Their platform leverages proprietary AI agents to analyze customer behavior and automate product data management, positioning them as an innovative player in the e-commerce technology sector. The website is professionally designed, mobile-optimized, and integrates multiple marketing and analytics tools such as HubSpot, Facebook Pixel, and Microsoft Clarity, reflecting a mature digital infrastructure. Security posture is generally good with HTTPS enforced and consent management implemented; however, the absence of explicit security policies, incident response details, and WHOIS transparency slightly reduce trustworthiness. Overall, the site is safe, well-structured, and business credible, though improvements in security transparency and domain registration clarity are recommended.
Amioamio.io
E-commerce
81Low
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Amio is a specialized SaaS company providing an AI chatbot platform tailored for e-commerce businesses. Their solution leverages GPT technology and product feeds to automate customer support, enhance product discovery, and increase online sales conversions. The company positions itself as a cost-saving and efficiency-enhancing partner for online shops, integrating seamlessly with popular e-commerce platforms and helpdesk systems. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content about their offerings and integrations. Technically, the website is built on Webflow CMS, utilizing modern web technologies including Google Tag Manager and analytics tools, with a strong focus on performance and mobile optimization. The presence of cookie consent management and privacy policies indicates attention to privacy compliance. However, explicit security policies and incident response information are not publicly available, which could be improved. Security posture is generally strong with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. The absence of WHOIS data due to privacy protection is common for technology companies and does not detract from the legitimacy of the business. Overall, the site demonstrates a high level of professionalism and trustworthiness, suitable for its target market. Recommendations include enhancing security headers, publishing incident response and vulnerability disclosure information, and maintaining transparency in data protection practices to further strengthen trust and compliance.
—
81Low
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
That's it. Nutritionthatsitfruit.com
Retail · United States
80Low
NIS2 2 · GDPR 58
NIS2 2 · GDPR 58
That's it. Nutrition operates a professional e-commerce website specializing in healthy fruit bars and snacks made from 100% real fruit. The company targets health-conscious consumers seeking vegan, gluten-free, kosher, and non-GMO snack options. The website is built on the Shopify platform, leveraging a modern tech stack with extensive marketing and analytics integrations including Google Analytics, Facebook Pixel, TikTok Pixel, and Yotpo for customer reviews. The site demonstrates excellent design quality, mobile optimization, and user experience, supporting a strong market position in the healthy snack niche. However, the absence of WHOIS registration data introduces some uncertainty regarding domain legitimacy, although the professional presentation and consistent branding mitigate this risk.
- KKohl's
kohls.com
Retail · United States
78Low
NIS2 2 · GDPR 58
NIS2 2 · GDPR 58
Kohl's is a major US retail and e-commerce company specializing in clothing, home goods, and related products. The website demonstrates a mature digital infrastructure with advanced personalization, analytics, and performance monitoring technologies. The site is professionally designed, mobile-optimized, and provides comprehensive privacy and cookie policies, reflecting a strong commitment to user experience and regulatory compliance. Security posture is robust with HTTPS enforcement and security headers, though explicit security policies and vulnerability disclosures are not publicly available. The absence of WHOIS data is unusual but likely due to privacy protections; overall, the domain and website appear legitimate and trustworthy.
Manufacturing · Germany
88Low
NIS2 17 · GDPR 65
NIS2 17 · GDPR 65
Unternehmensgruppe Gretsch-Unitas operates as a leading manufacturer and supplier of window and door technology, automatic entrance systems, and building management systems. The company serves a broad market including architects, builders, and facility managers, offering comprehensive hardware and system solutions under its GU, BKS, FERCO, and GU Automatic brands. The website reflects a mature digital presence with detailed product and service information, consistent branding, and active social media engagement. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and includes GDPR-compliant cookie management via Usercentrics. Security posture is solid with HTTPS and secure forms, though it lacks explicit security policies and incident response contacts. Overall, the domain appears legitimate despite missing WHOIS data, supported by professional content and branding.
Kon-Tiki museetkon-tiki.no
Hospitality · Norway
77Low
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
Kon-Tiki museet is a specialized cultural museum located in Norway, dedicated to the life and expeditions of Thor Heyerdahl. The museum offers exhibitions, educational programs, and events focused on Heyerdahl's voyages and related anthropological explorations. It targets a general audience interested in history and exploration, operating primarily as a small-sized institution with a clear focus on cultural heritage. Technically, the website is built on the Squarespace platform, leveraging modern web technologies and integrating tracking tools such as Google Tag Manager and Facebook Pixel. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, the website enforces HTTPS with HSTS and uses reCAPTCHA to protect forms, but lacks some advanced security headers and does not publish explicit security or privacy policies. The absence of WHOIS data due to privacy protection is common and does not detract from the site's legitimacy. Overall, the website is trustworthy and professionally maintained, though it would benefit from enhanced privacy and security disclosures.
GTS ALIVE s.r.o.isic.cz
Education · Czech Republic
79Low
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
GTS ALIVE s.r.o. operates the ISIC.cz website, providing internationally recognized student and youth discount cards in the Czech Republic. The company has a strong market position with a history dating back to 2000, offering various card types including ISIC Scholar and teacher cards. The website is well-structured, targeting students and young people, and provides comprehensive information about its services and benefits. Technically, the site employs modern JavaScript libraries and is hosted on Amazon AWS, ensuring reliable performance and scalability. Privacy compliance is robust, with clear cookie consent mechanisms managed by Cookiebot and detailed privacy policies in Czech. Security posture is good, with HTTPS enforced and no critical vulnerabilities detected, although some security headers could be improved. Overall, the site demonstrates professionalism and trustworthiness, with transparent advertising and tracking practices. No contact emails or phone numbers were explicitly found in the analyzed content, and no terms of service or explicit security policies were detected.
WeTransferwetransfer.com
Technology · Netherlands
77Low
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
WeTransfer is a well-established technology company specializing in online file transfer services, enabling users worldwide to send large files quickly and efficiently. Founded in 2007 and headquartered in the Netherlands, it holds a leading market position with a freemium business model offering both free and paid subscription plans. The website reflects a professional and modern digital presence with excellent content quality and user experience, targeting both general users and business customers. The technical infrastructure is robust, leveraging modern web technologies such as React and Next.js, hosted on Amazon AWS, and integrating secure payment processing via Stripe. The site demonstrates good performance, mobile optimization, and accessibility, supported by comprehensive SEO and metadata implementation. Security posture is strong with HTTPS enforced, appropriate security headers, and no detected vulnerabilities or exposed sensitive data. However, DNSSEC is not enabled, and no explicit security policy or vulnerability disclosure page was found, representing areas for improvement. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. Overall, WeTransfer presents a low-risk profile with a high trustworthiness rating, suitable for professional and personal use. Strategic recommendations include enabling DNSSEC, publishing a security policy, and adding a security.txt file to enhance transparency and security readiness.
IQVIA Digitallassomarketing.io
Healthcare · United States
83Low
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
IQVIA Digital is a leading healthcare marketing solutions provider specializing in delivering personalized, data-driven engagement platforms and services to pharma companies, agencies, partners, and publishers. As a subsidiary of IQVIA, it leverages advanced clinical and behavioral data to empower healthcare marketers with integrated omnichannel solutions that drive better outcomes. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content tailored to its B2B audience. Technically, the site is built on the HubSpot CMS platform, utilizing modern web technologies including Google Tag Manager and Brightcove for video delivery. The site is mobile-optimized and accessible, with good SEO practices and structured data enhancing search visibility. Analytics and tracking are implemented responsibly with privacy compliance in mind. From a security perspective, the site uses HTTPS and secure HubSpot forms but lacks explicit security headers, which could be improved. No vulnerabilities or exposed sensitive data were detected. Privacy policies and cookie consent mechanisms are present and comprehensive, supporting GDPR compliance. However, the absence of WHOIS domain registration data raises concerns about domain legitimacy verification, warranting further investigation. Overall, IQVIA Digital presents a trustworthy and professional online presence with strong business credibility and technical maturity. Strategic improvements in security headers and domain registration transparency would further enhance its security posture and trustworthiness.
Integrateintegrate.com
Technology
77Low
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
Integrate is a technology company specializing in lead management and data governance solutions for enterprise B2B marketers. Their platform focuses on ensuring lead data is clean, compliant, and actionable, enabling marketers to optimize revenue generation. The website demonstrates a mature digital presence with comprehensive content, customer success stories, and a clear value proposition. Technically, the site is built on WordPress with modern JavaScript libraries and integrates analytics and marketing tools such as HubSpot and Google Tag Manager. Security posture is strong with HTTPS enforced and privacy mechanisms in place, though some security headers could be improved. WHOIS data is unavailable, likely due to privacy protection, but the website's professionalism and trust signals support legitimacy. Overall, Integrate presents a robust, enterprise-grade SaaS offering with a well-optimized web presence.
- Alukov
alukov.sk
Real Estate · Slovakia
77Low
NIS2 2 · GDPR 73
NIS2 2 · GDPR 73
Alukov is a reputable European manufacturer specializing in high-quality pool enclosures and terrace coverings, targeting homeowners and businesses seeking premium outdoor enclosure solutions. The website reflects a medium-sized business with a consistent brand presence and a good level of content quality and user experience. Technically, the site employs modern JavaScript libraries and analytics tools, including Google Analytics, Google Tag Manager, and Facebook Pixel, indicating a mature digital infrastructure. Security posture is adequate with HTTPS enabled and no visible sensitive data exposure, though the absence of explicit security headers and privacy policies suggests room for improvement. Overall, the risk profile is moderate with recommendations to enhance privacy compliance and security best practices.
Healthcare · United Kingdom
78Low
NIS2 14 · GDPR 80
NIS2 14 · GDPR 80
The Tropical Health and Education Trust (THET) operates as a non-profit organization focused on supporting health workers globally through partnerships, capacity building, and policy work. The website positions THET as an established entity with a clear mission and vision to improve healthcare access worldwide. Their key services include grant management, volunteer programs, and digital transformation initiatives, targeting health workers, donors, and global health stakeholders. The organization is UK-based with a charity registration number, reinforcing its legitimacy. Technically, the website is built on WordPress with modern JavaScript libraries and integrations such as Google Tag Manager, Hotjar, and Google reCAPTCHA to enhance user experience and security. The site demonstrates good mobile optimization, accessibility, and SEO practices, although some security headers are missing. Performance is moderate, with room for optimization. From a security perspective, the site uses HTTPS and employs reCAPTCHA on forms, indicating a baseline security posture. However, the absence of visible security headers and a cookie consent mechanism suggests areas for improvement in compliance and defense-in-depth strategies. The WHOIS data is unavailable due to privacy protection or query issues, but the website's content and trust signals mitigate concerns about legitimacy. Overall, the website presents a professional, trustworthy, and content-rich platform for THET's mission. Strategic recommendations include enhancing security headers, implementing explicit cookie consent, publishing incident response policies, and improving WHOIS transparency where possible.
Drukzohelloprint.be
Retail · Belgium
79Low
NIS2 10 · GDPR 83
NIS2 10 · GDPR 83
Drukzo is an established online printing service provider targeting the Belgian market, offering a wide range of print products such as flyers, brochures, banners, and stickers. The company positions itself as a cost-effective and quality-focused print shop, leveraging e-commerce to reach both consumers and businesses. The website is professionally designed with consistent branding and clear navigation, supporting a positive user experience. Technically, the site employs modern web technologies including Vue.js, Algolia search, and integrates multiple analytics and marketing tools such as Google Analytics, Segment, and Convert Experiments. Security posture is solid with HTTPS enforcement, cookie consent mechanisms, and standard security headers, although explicit security and incident response policies are not publicly available. WHOIS data is restricted due to DNS Belgium policies, which is typical for .be domains, but the overall trust indicators and business presence suggest legitimacy. Privacy compliance is well addressed with a comprehensive cookie policy and GDPR-aligned consent management. Overall, Drukzo demonstrates a mature digital presence suitable for its business model, with room for improvement in transparency of security policies and direct contact information.
Nextivanextiva.com
Technology
78Low
NIS2 55 · GDPR 88
NIS2 55 · GDPR 88
Nextiva is a well-established technology company founded in 2006, specializing in unified customer experience management platforms. Their offerings include business phone services, team communications, and AI-powered contact center solutions, targeting businesses seeking integrated communication tools. The website reflects a mature digital presence with professional design, comprehensive content, and strong branding consistency. Technically, the site is built on WordPress with modern SEO and analytics tools, ensuring good performance and mobile optimization. Security posture is strong with HTTPS and security headers, though explicit security policies and incident response details are not publicly disclosed. Overall, the site demonstrates high professionalism and trustworthiness, though the absence of WHOIS data slightly reduces domain trust.
- ai.mobirise.com
mobirise.ws
Technology
76Low
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
The website chatgpt.com/g/g-yg5WelQdV-ai-website-builder offers a free AI-powered website builder tool developed by ai.mobirise.com. It targets general users interested in creating websites easily by providing a generator that allows inputting site details in any language and downloading the generated site as a zip file for hosting anywhere. The site uses modern web technologies including React and Cloudflare DNS services, indicating a moderate level of digital maturity and performance optimization. Security posture is strong with HTTPS enabled and domain locked with multiple EPP status prohibitions, although DNSSEC is not enabled and some security headers are not explicitly detected. Privacy compliance is weak due to the absence of privacy and cookie policies, and no contact or incident response information is provided. Overall, the site is safe for general audiences and professionally presented but lacks some compliance and transparency features.
Pracuj.plpracuj.pl
Other · Poland
78Low
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Pracuj.pl is a leading Polish job portal focused on providing job offers, employer profiles, and career advice primarily for specialists and managers in Poland and abroad. The platform offers a comprehensive set of services including job listings, employer branding, legal and tax information, and salary reports, positioning itself as a key player in the Polish recruitment market. Technically, the website leverages modern web technologies such as React and Next.js, supported by Google services for analytics and marketing, ensuring a responsive and user-friendly experience. Security-wise, the site enforces HTTPS and follows good practices, though it lacks some advanced security headers and public security policies. The absence of WHOIS data is typical for .pl domains and does not detract from the site's legitimacy. Overall, Pracuj.pl demonstrates a mature digital presence with good business credibility and moderate privacy compliance, suitable for its market segment.
- Tropical Health and Education Trust (THET)
globalhealthpartnerships.org
Healthcare · United Kingdom
78Low
NIS2 14 · GDPR 80
NIS2 14 · GDPR 80
The Tropical Health and Education Trust (THET) operates as a UK-based non-profit organization dedicated to supporting health workers globally through partnerships, grant management, policy work, and volunteer programs. The website positions THET as an established entity with a clear mission and vision focused on universal health coverage and quality healthcare access worldwide. The organization targets health professionals, donors, volunteers, and policy makers, leveraging partnerships and digital transformation to advance its goals. Technically, the website is built on WordPress with a modern tech stack including jQuery, Google Tag Manager, Hotjar, and Google reCAPTCHA for security and analytics. The site demonstrates good mobile optimization, accessibility, and SEO practices, although some improvements in security headers and cookie consent mechanisms could enhance compliance and security posture. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms, with no visible vulnerabilities or exposed sensitive data. However, the absence of explicit security headers and incident response information suggests room for improvement. WHOIS data is unavailable due to privacy protection, which is common and justified for non-profits, but it slightly reduces trust signals. Overall, the website is professional, trustworthy, and well-maintained, with strong content quality and business credibility. Strategic recommendations include enhancing security headers, implementing cookie consent, and publishing security policies to further strengthen compliance and user trust.
Amgenamgen.be
Healthcare · Belgium
76Low
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
Amgen is a global leader in biotechnology, focusing on innovative medicines and healthcare solutions. The website presents a professional and comprehensive digital presence targeting healthcare professionals, patients, and partners. The technical infrastructure includes modern JavaScript libraries such as VideoJS and Cookiebot for video and cookie consent management, respectively, with Google Tag Manager for analytics and marketing. Security posture is strong with HTTPS enforced and content security policies in place, though additional headers could enhance protection. Privacy compliance is robust, with clear GDPR adherence and cookie consent mechanisms. Overall, the website reflects a mature enterprise-level digital asset with high trustworthiness and professionalism.
FLOWSPARKSflowsparks.com
Education
76Low
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
FLOWSPARKS operates as an online platform providing an authoring tool and learning management system (LMS) designed to enable users to create, manage, and update digital learning materials efficiently. The company targets businesses and organizations seeking accessible e-Learning development solutions, positioning itself as a provider of user-friendly and scalable e-Learning technology. The website content and branding are consistent and professional, supporting a medium-sized business profile within the education technology sector. Technically, the website leverages modern web technologies including Webflow CMS, Google Analytics, Google Tag Manager, Cookiebot for consent management, and various marketing and tracking tools such as Leadinfo and Pardot. Hosting appears to be supported by Cloudflare, enhancing performance and security. The site is mobile-optimized with good SEO and accessibility features, providing a positive user experience. From a security perspective, the website enforces HTTPS and implements a detailed cookie consent mechanism, reflecting good privacy practices. However, explicit security headers and a published security policy or incident response contact are absent, representing areas for improvement. The extensive use of third-party tracking and marketing services indicates a high level of user data collection, which is managed through consent but requires transparent privacy disclosures. Overall, the website is professionally designed and functional, but the absence of WHOIS registration data and lack of explicit privacy and contact information reduce trustworthiness. Strategic recommendations include publishing comprehensive privacy and security policies, enhancing security headers, and providing clear contact channels to improve compliance and user confidence.