Low-risk security reports
14,261 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,165001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
3,901–3,950 of 14,261
PrintFriendlyprintfriendly.com
Technology
79Low
NIS2 2 · GDPR 70
NIS2 2 · GDPR 70
PrintFriendly is an established online service providing PDF tools and web page print optimization solutions. The website offers users the ability to convert files to and from PDF format, edit documents, and sign them digitally. The service targets a broad general audience including individuals and businesses needing easy-to-use document management tools. Technically, the website is built on modern frameworks such as Next.js and React, with Tailwind CSS for styling, and integrates Google services for analytics and identity management. The site is performant, mobile-optimized, and SEO-friendly. Security-wise, the site enforces HTTPS and includes standard security headers, but lacks a publicly available security policy or incident response contacts. WHOIS data is missing or unavailable, which raises some concerns about domain registration transparency, though the website itself appears professional and trustworthy. Overall, the site demonstrates a mature digital presence with room for improvement in transparency and security disclosures.
Bardy Diagnosticsbardydx.com
Healthcare · United States
76Low
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Bardy Diagnostics is a specialized healthcare technology company focused on ambulatory ECG monitoring solutions, notably the CAM Patch and BDxCONNECT portal. Founded in 2013 by a physician entrepreneur, the company positions itself as a niche leader in cardiac monitoring technology with a strong emphasis on clinical accuracy and patient care. The website reflects a professional and medically credible brand, supported by clinical studies and endorsements from healthcare professionals. Technically, the site is built on WordPress with Elementor, leveraging modern analytics and monitoring tools such as Google Tag Manager and New Relic, indicating a mature digital infrastructure. Security posture is solid with HTTPS and monitoring scripts, though explicit security headers and policies could be improved. The absence of WHOIS data for the domain is a concern but is mitigated by strong branding and association with Baxter International. Overall, the site is trustworthy, well-designed, and compliant with privacy standards, serving healthcare professionals and patients effectively.
Hillromhillrom.pl
Healthcare · Poland
84Low
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
Hillrom is a global medical technology provider specializing in medical equipment and healthcare solutions for hospitals and healthcare providers. The Polish localized website targets healthcare professionals and institutions in Poland, offering a wide range of products and services including patient monitoring, surgical workflow optimization, and medical furniture. The company is a subsidiary of Hill-Rom Holdings, Inc., founded in 2020, with a strong global presence as evidenced by multiple international site versions and language options. The website is professionally designed, mobile-optimized, and uses modern web technologies such as Adobe Experience Manager, React.js, and advanced analytics tools.
Hillromhillrom.nl
Healthcare · Netherlands
84Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Hillrom is a leading enterprise in the healthcare technology sector, specializing in medical equipment and connected care solutions for hospitals and healthcare providers. The company operates globally with a strong presence in the Netherlands and is a subsidiary of Hill-Rom Holdings, Inc. Their website reflects a professional and comprehensive digital presence, targeting healthcare professionals and institutions with a broad portfolio of products and services aimed at improving patient outcomes and clinical efficiency. Technically, the website leverages modern technologies including Adobe Experience Manager, React.js, and robust analytics tools such as Matomo and Google Tag Manager, ensuring a responsive and user-friendly experience. Security posture is strong with HTTPS enforcement, security headers, and form validation, although explicit security policies and incident response details are not publicly disclosed. Overall, the website demonstrates high trustworthiness and compliance with GDPR, supported by clear privacy and cookie policies with consent mechanisms.
Site Maintenance | Hillromhillrom.my
—
79Low
NIS2 2 · GDPR 65
NIS2 2 · GDPR 65
Hillromhillrom.at
Healthcare · Austria
86Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Hillrom is a global medical technology company specializing in connected care solutions that improve the lives of patients and healthcare providers. The company offers a broad portfolio of products including smart beds, patient monitoring systems, safe lifting and transport solutions, and clinical workflow tools. Positioned as a subsidiary of Baxter International, Hillrom targets healthcare institutions and professionals with innovative medical equipment and integrated digital solutions. The website reflects a professional and enterprise-grade digital presence with consistent branding and comprehensive content tailored to healthcare audiences. Technically, the website is built on Adobe Experience Manager with React.js components, leveraging modern web technologies and analytics platforms such as Matomo and Google Tag Manager. The site demonstrates good mobile optimization, accessibility, and SEO practices. Security is well addressed with HTTPS, security headers, and secure form validations, although explicit security policies and incident response contacts are not publicly disclosed. The absence of WHOIS data due to privacy protection limits domain registration insights, but the overall digital footprint, including structured data and external domain relationships, supports the legitimacy of the business. Privacy compliance is strong with GDPR-aligned policies and cookie consent mechanisms. No adult or unsafe content is present, making the site suitable for general audiences. Overall, Hillrom's website presents a mature, secure, and professional platform that aligns with its enterprise healthcare market position, though improvements in transparency around security policies and incident response would enhance trust further.
Hillromhillrom.se
Healthcare · Sweden
84Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Hillrom is a global medical technology provider specializing in connected care solutions, patient monitoring, surgical workflow optimization, and smart medical equipment. The company operates under the parent entity Hill-Rom Holdings, Inc., with a strong presence in Sweden as evidenced by the localized website hillrom.se. The website targets healthcare providers and hospitals, offering comprehensive product and service information tailored to the Swedish market. Technically, the site leverages modern web technologies including React, Adobe Experience Manager CMS, and integrates advanced analytics and marketing tools such as Matomo and Google Tag Manager. Security posture is robust with HTTPS enforcement, security headers, and cookie consent mechanisms, though public security policies and incident response details are not disclosed. Overall, the website demonstrates a mature digital presence aligned with enterprise healthcare standards.
Hillromhillrom.ch
Healthcare · Switzerland
86Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Hillrom is a leading medical technology provider specializing in connected care solutions and medical equipment for hospitals and healthcare providers. The company operates globally with a strong presence in Switzerland, supported by a professional and well-structured website that targets healthcare professionals and institutions. The website demonstrates a mature digital infrastructure leveraging Adobe Experience Manager, modern analytics, and consent management tools. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though explicit security policies and incident response contacts are not publicly visible. Overall, the website reflects a reputable enterprise with consistent branding and trustworthy business information.
Hillromhillrom.be
Healthcare · Belgium
84Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Hillrom is a global healthcare technology company specializing in medical equipment and connected care solutions aimed at improving patient outcomes and healthcare provider efficiency. The website presents a professional and comprehensive digital presence with multilingual support, targeting healthcare providers and institutions. The company operates under the parent entity Hill-Rom Holdings, Inc., with a focus on innovative healthcare solutions such as patient recovery acceleration, clinical communication, and surgical workflow optimization. Technically, the website leverages modern web technologies including React, Adobe Experience Manager, and integrates advanced analytics and consent management tools, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforcement, security headers, and form validation, though public security policies and incident response contacts are not explicitly published. Overall, the site demonstrates good compliance with privacy regulations including GDPR, supported by detailed privacy and cookie policies. The WHOIS data is privacy protected, consistent with corporate domain practices in Belgium, and does not raise legitimacy concerns. Strategic recommendations include enhancing transparency around security policies and incident response, and publishing vulnerability disclosure information to further strengthen trust and security culture.
Hillromhillrom.fr
Healthcare · France
84Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Hillrom is a global medical technology company specializing in connected care solutions and medical equipment for hospitals and healthcare providers. The website presents a professional and comprehensive digital presence, targeting healthcare professionals with detailed product and solution offerings. The company is positioned as an enterprise-level player in the healthcare sector, with a strong brand and multiple regional sites supporting localized content. Technically, the website uses modern frameworks such as React and Adobe Experience Manager, with good mobile optimization and accessibility features. Security posture is strong with HTTPS, security headers, and secure forms, though explicit security policies and incident response contacts are not publicly detailed. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. WHOIS data is unavailable due to AFNIC restrictions on .fr domains, which slightly reduces transparency but is typical for this domain type. Overall, the website is trustworthy, professional, and well-maintained.
Baxterhillrom.eu
Healthcare
81Low
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
The website hillrom.baxter.eu is a professionally designed portal representing Hillrom and Welch Allyn solutions under the Baxter brand. It targets healthcare professionals in Europe, offering detailed information about medical devices, capital equipment, and connected healthcare solutions. The site emphasizes improving patient outcomes and supporting healthcare teams with innovative products and educational resources. The business model is B2B, focusing on healthcare providers and institutions, positioning Baxter as a leading player in critical and surgical care products. Technically, the site is built on Drupal 10, uses modern video streaming technologies like Brightcove and VideoJS, and integrates Google Tag Manager for analytics and cookie consent management. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforced, standard security headers present, and no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not published, representing areas for improvement. Overall, the site is trustworthy, professional, and aligned with Baxter's corporate standards.
Hillromhillrom.lat
Healthcare · United States
83Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Hillrom, a subsidiary of Baxter, is a prominent medical technology provider specializing in supplying medical equipment and healthcare solutions primarily targeting hospitals and healthcare providers in Latin America. The website reflects a professional and consistent brand presence aligned with Baxter's corporate identity, offering a range of healthcare products and services. The content is well-structured and localized in Spanish to serve the Latin American market effectively. Technically, the site leverages modern web technologies including React, Adobe Experience Manager, and integrates analytics and consent management tools such as Google Analytics and OneTrust, indicating a mature digital infrastructure. Security-wise, the website enforces HTTPS and employs cookie consent mechanisms, but lacks explicit security policies or vulnerability disclosure information, suggesting room for improvement in transparency and incident response readiness. Overall, the domain registration data aligns well with the business claims, supporting the legitimacy and trustworthiness of the site.
Hillromhillrom.ca
Healthcare · Canada
84Low
NIS2 35 · GDPR 88
NIS2 35 · GDPR 88
Hillrom is a recognized medical technology provider specializing in supplying medical equipment and healthcare solutions to hospitals and caregivers. The company operates globally with a strong presence in Canada and is a subsidiary of Baxter International Inc. Their website demonstrates a professional and consistent brand image, targeting healthcare providers and institutions with solutions aimed at improving patient outcomes and clinical efficiency. The digital infrastructure is built on modern technologies including Adobe Experience Manager, React.js, and integrates advanced analytics and consent management tools. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though there is room for improvement in explicit security headers and published security policies. The absence of WHOIS data for the Canadian domain suggests privacy protection or domain registration nuances, common in enterprise environments. Overall, the website is trustworthy, well-structured, and compliant with basic privacy standards, serving as a credible digital front for Hillrom's healthcare offerings.
Hillromhillrom.de
Healthcare · Germany
84Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Hillrom is a leading medical technology provider specializing in connected care solutions and medical equipment for hospitals and healthcare providers. The company operates primarily in the healthcare sector with a strong enterprise presence and is a subsidiary of Hill-Rom Holdings, Inc. Their website targets healthcare professionals, patients, and caregivers, offering solutions that enhance patient monitoring, clinical communication, and surgical efficiency. The digital infrastructure is modern, leveraging Adobe Experience Manager as CMS, React.js for frontend, and Cloudflare for hosting and DNS services. Analytics are implemented via Matomo and Google Tag Manager, with a cookie consent mechanism in place. Security posture is solid with HTTPS enforced and Cloudflare protection, though explicit security policies and vulnerability disclosures are not publicly available. Overall, the website is professional, well-branded, and trustworthy, with room for improvement in privacy compliance documentation and explicit security disclosures.
Hillromhillrom.co.uk
Healthcare · United Kingdom
77Low
NIS2 35 · GDPR 88
NIS2 35 · GDPR 88
Hillrom is a prominent medical technology provider specializing in supplying medical equipment and connected care solutions to hospitals and healthcare providers globally. The company operates under the legal name Hill-Rom Holdings, Inc., with a significant presence in the United Kingdom and other international markets. Their website reflects a professional and enterprise-grade digital presence, targeting healthcare professionals, caregivers, and patients with a broad portfolio of healthcare solutions including patient monitoring, surgical workflow optimization, and safe patient handling. The company is a subsidiary of Baxter International, reinforcing its market position and credibility. Technically, the website leverages modern web technologies such as Adobe Experience Manager for content management, React.js for frontend interactivity, and integrates analytics tools like Matomo and Google Tag Manager. The site is well-optimized for mobile devices, accessibility, and SEO, with a clear navigation structure and consistent branding. Cookie consent mechanisms are implemented, indicating attention to privacy compliance, although explicit privacy and terms of service pages were not detected in the provided content. From a security perspective, the website enforces HTTPS with strong SSL configurations and employs multiple security headers to protect against common web vulnerabilities. No exposed sensitive data or vulnerable libraries were identified. However, the absence of a published security policy, incident response contacts, and vulnerability disclosure mechanisms suggests areas for improvement in transparency and security maturity. Overall, the website presents a trustworthy and professional front for Hillrom, with minor gaps in privacy documentation and WHOIS data availability. Strategic enhancements in privacy policy visibility and security communication would further strengthen their digital trust and compliance posture.
- ROCHE s.r.o., Diagnostics Division
roche-diagnostics.cz
Healthcare · Czech Republic
81Low
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
Roche Diagnostics is a leading global healthcare company specializing in innovative diagnostic products and services focused on disease prevention, diagnosis, monitoring, screening, and treatment. The website targets healthcare professionals and patients, offering a comprehensive portfolio including centralized and point-of-care solutions, molecular diagnostics, and customer support services. The company maintains a strong market position with consistent branding and professional content tailored for the Czech Republic market. Technically, the site leverages Adobe Experience Manager CMS, integrates advanced analytics and marketing tools such as Datadog RUM, Google Tag Manager, Marketo Munchkin, and Adobe DTM, and is hosted on a robust cloud infrastructure likely powered by AWS. The website is well-optimized for performance, mobile responsiveness, accessibility, and SEO, reflecting a mature digital presence. From a security perspective, the site enforces HTTPS, employs cookie consent mechanisms, and uses security-focused third-party scripts. However, explicit security policies, incident response details, and vulnerability disclosure mechanisms are not publicly available, representing an area for improvement. The WHOIS data for the subdomain diagnostics.roche.com is unavailable, which is typical for corporate subdomains and does not detract from the site's legitimacy. Overall, the website demonstrates a high level of professionalism, security, and compliance with privacy regulations, making it a trustworthy digital asset for Roche Diagnostics in the Czech Republic.
Angelini Pharma Zug S.p.A.angelinipharma.ch
Healthcare · Switzerland
82Low
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Angelini Pharma Zug S.p.A. is a well-established pharmaceutical division of Angelini Industries based in Switzerland, with a history spanning over 100 years. The company operates internationally with a focus on mental health, epilepsy, and consumer healthcare, employing approximately 15 people at its Zug location and over 3,000 worldwide. The website reflects a professional and consistent brand image, targeting healthcare professionals, patients, and partners. The business model centers on pharmaceutical research, development, and commercialization, positioning Angelini Pharma as a leader in the European healthcare market. Technically, the website employs modern JavaScript libraries such as jQuery, Slick Carousel, and Magnific Popup, alongside Piwik PRO for analytics with privacy-conscious features. The site is mobile-optimized with good SEO and accessibility basics, hosted on secure HTTPS infrastructure. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms aligned with GDPR. However, explicit security policies and incident response contacts are not published, and security headers are not evident. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent with the business claims, showing no privacy protection or suspicious patterns, supporting the domain's legitimacy. Overall, Angelini Pharma's website demonstrates a strong business credibility and privacy compliance posture, with good technical implementation and security practices. Strategic improvements could focus on publishing dedicated security policies and enhancing security headers to further strengthen trust and compliance.
Angelini Pharma Deutschland GmbHharmoniamentis.de
Healthcare · Germany
77Low
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Harmonia Mentis is an online platform operated by Angelini Pharma Deutschland GmbH, focusing on epilepsy education and awareness in Germany. The website offers a broad range of content tailored to patients, relatives, and healthcare professionals, including articles, podcasts, and news about epilepsy research and treatment. The platform positions itself as a trusted resource in the healthcare sector, supported by a reputable pharmaceutical company with a clear focus on neurological health. Technically, the site employs modern JavaScript libraries and analytics tools, ensuring a responsive and user-friendly experience across devices. Privacy and cookie policies are well implemented, reflecting compliance with GDPR requirements. Security posture is solid with HTTPS enforced and secure login mechanisms, though some improvements in security headers and incident response transparency are recommended. Overall, the website demonstrates a professional and trustworthy presence with a strong focus on healthcare education.
Angelini Pharmaangelinipharma.es
Healthcare · Spain
78Low
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Angelini Pharma España is a large, international healthcare company specializing in pharmaceutical products with a strong focus on mental health, central nervous system disorders, pain management, rare diseases, and consumer healthcare products. The company operates as a subsidiary of Angelini S.p.a. and maintains a significant presence across multiple European countries and the USA. Their website reflects a professional and consistent brand image, targeting healthcare professionals and consumers interested in health solutions. The site offers comprehensive information about their therapeutic areas, pipeline, partnerships, and corporate responsibility initiatives. Technically, the website employs modern JavaScript libraries such as jQuery, Slick Carousel, and Magnific Popup, alongside Piwik PRO for analytics and cookie consent management. The site is mobile-optimized with good SEO and accessibility features, although some accessibility and security headers could be improved. Hosting details are not explicitly disclosed but the infrastructure appears stable and performant. From a security perspective, the site uses HTTPS with good SSL configuration and implements cookie consent mechanisms aligned with GDPR requirements. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not present, which could be areas for enhancement. No critical vulnerabilities or suspicious patterns were detected in the content or WHOIS data. Overall, Angelini Pharma España presents a trustworthy, professional, and compliant digital presence suitable for its industry and audience. Strategic improvements in security headers and transparency policies would further strengthen its security posture and user trust.
Angelini Pharma Slovenská republika, s.r.o.angelinipharma.sk
Healthcare · Slovakia
78Low
NIS2 2 · GDPR 73
NIS2 2 · GDPR 73
Angelini Pharma Slovenská republika, s.r.o. operates a professional pharmaceutical website focused on central nervous system (CNS) disorders, pain management, rare diseases, and consumer health products. The company is positioned as a leading player in these sectors within Slovakia and broader European markets, supported by its parent company Angelini S.p.a. The website provides comprehensive corporate information, research and development insights, and product details tailored to healthcare professionals and consumers. The presence of multiple country-specific Angelini Pharma domains indicates a broad regional footprint. Technically, the website employs modern JavaScript libraries such as jQuery, Slick Carousel, and Magnific Popup, alongside privacy-focused analytics via Piwik PRO. The site is well-optimized for mobile devices and demonstrates good SEO practices. Hosting and resource domains are consistent with the Angelini corporate group, and asynchronous script loading supports moderate performance. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms aligned with GDPR requirements. However, explicit security headers and published security policies or incident response information are absent, representing areas for improvement. No vulnerabilities or exposed sensitive data were detected in the HTML content. The WHOIS data indicates privacy protection for domain registration, which is justified for this business type and does not raise legitimacy concerns. Overall, the website is professional, trustworthy, and compliant with privacy regulations, though it could enhance its security posture by publishing explicit policies and improving header configurations. The lack of direct contact emails or phone numbers on the site is noted but does not significantly detract from credibility given the corporate nature and presence of physical address and social media channels.
Angelini Pharma UK & Irelandangelinipharma.co.uk
Healthcare · United Kingdom
77Low
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Angelini Pharma UK & Ireland operates as a pharmaceutical company focusing on brain health and epilepsy-related health solutions. It is part of the larger Angelini Industries group, with a professional and consistent online presence targeting healthcare professionals and patients. The website provides comprehensive information about the company, its products, and corporate responsibility initiatives. Technically, the site uses modern JavaScript libraries and analytics tools, ensuring a good user experience with mobile optimization and clear navigation. Security posture is solid with HTTPS and anonymized analytics, though some security headers and explicit security policies are missing. WHOIS data is unavailable due to domain naming rules errors, which slightly impacts trust but does not detract from the overall legitimacy given the professional content and clear company information.
Angelini Pharma Portugal Unipessoal Lda.angelinipharma.pt
Healthcare · Portugal
78Low
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Angelini Pharma Portugal Unipessoal Lda. operates a professional and comprehensive website focused on pharmaceutical products and healthcare solutions, particularly in Central Nervous System (CNS), pain, rare diseases, and consumer health sectors. The company is positioned as a medium-sized healthcare entity with a strong market presence in Portugal and Europe, supported by certifications such as Top Employer Europe 2025. The website demonstrates good content quality, clear navigation, and consistent branding, targeting healthcare professionals and consumers. Technically, the site uses modern JavaScript libraries and analytics tools, with moderate performance and good mobile optimization. Security posture is solid with HTTPS and some security best practices, though some headers could be improved. Privacy and cookie policies are present and GDPR compliant, but no explicit security or incident response policies were found. Overall, the site is trustworthy, professional, and safe for general audiences.
Angelini Pharma Austria GmbHharmoniamentis.at
Healthcare · Austria
79Low
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
HarmoniaMentis is a specialized healthcare information platform operated by Angelini Pharma Austria GmbH, focusing on brain health topics such as epilepsy and depression. The website provides medically scientific content tailored for both healthcare professionals and interested patients, including articles, videos, and event information. The platform integrates a secure login and registration system for medical professionals, indicating a controlled access to specialized content. Technically, the website employs modern JavaScript libraries and analytics tools, including Piwik PRO for user behavior tracking, and is built on the Umbraco CMS platform. The site is mobile-optimized with good design and navigation clarity. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and incident response policies are not evident. WHOIS data is unavailable, which slightly reduces transparency but does not detract significantly from the site's legitimacy given the strong corporate branding and professional content. Overall, the website presents a trustworthy and professional digital presence for Angelini Pharma Austria GmbH in the healthcare education sector.
Intellumexceedlms.com
Technology
78Low
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
Intellum is a leading enterprise technology company specializing in AI-driven learning management systems designed to enhance training, certifications, and engagement at scale. Their platform leverages decades of expertise and advanced AI capabilities to deliver personalized learning experiences, AI-powered content authoring, virtual classrooms, and comprehensive analytics. The company targets large enterprises and is trusted by Fortune 500 companies, emphasizing security and compliance with SOC 2 Type II certification. Technically, the website is built on modern frameworks such as Webflow CMS and integrates multiple marketing and analytics tools including Google Tag Manager, Marketo, Facebook Pixel, and LinkedIn Insight Tag. The site demonstrates excellent performance, mobile optimization, and accessibility, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS, employs reCAPTCHA for form protection, and maintains strong security headers. However, explicit security policies and incident response information are not publicly detailed, suggesting room for improvement in transparency. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, Intellum presents a highly professional and trustworthy online presence with a strong focus on AI-enhanced enterprise learning solutions. The lack of WHOIS data indicates privacy protection, which is justified for this business type. Strategic recommendations include publishing detailed security policies and vulnerability disclosures to further enhance trust and compliance.
JustRelate Group GmbHscrivito.com
Technology · Germany
86Low
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Scrivito is a cloud-based, decoupled/headless enterprise web CMS platform developed by JustRelate Group GmbH, targeting enterprise customers, marketing teams, editors, and developers. The platform emphasizes flexibility, rapid development, and omnichannel content delivery. The website presents a professional and modern interface with clear segmentation of benefits for different user roles and includes testimonials from reputable enterprise clients. Technically, the site uses modern JavaScript frameworks and cloud infrastructure, delivering fast performance and excellent mobile optimization. Security posture is good with HTTPS and cookie consent mechanisms, though explicit security headers and incident response information are not published. The absence of WHOIS data is a notable anomaly that impacts domain trustworthiness. Overall, the site is professional, secure, and compliant with privacy regulations, suitable for enterprise use.
Healthcare · United States
78Low
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
The American Society for Clinical Pathology (ASCP) operates a comprehensive and professionally designed website serving over 100,000 pathologists and laboratory professionals. The organization focuses on education, certification, and advocacy to improve patient care within the healthcare sector. Their market position is strong as a leading professional society in clinical pathology, offering a broad range of services including training, credentialing, and member resources. The website content is rich, well-structured, and targeted to healthcare professionals and students, reflecting a mature and established entity. Technically, the website employs a modern technology stack including Bootstrap, jQuery, and multiple analytics and marketing tools such as HubSpot, Microsoft Clarity, and Google Tag Manager. Hosting is on Microsoft Azure, ensuring reliable performance and scalability. The site is mobile-optimized, accessible, and SEO-friendly, contributing to a positive user experience. From a security perspective, the site enforces HTTPS, uses multiple security headers, and does not expose sensitive data. However, explicit security policies and incident response information are not publicly available, indicating room for improvement in transparency and preparedness. Privacy and cookie policies are present with consent mechanisms, supporting GDPR compliance. WHOIS data is privacy protected, which is typical for professional organizations, and does not raise immediate concerns. Overall, the website demonstrates a high level of professionalism, security, and compliance suitable for its audience and business model. Strategic recommendations include publishing detailed security and incident response policies, establishing a vulnerability disclosure program, and enhancing transparency around data protection roles to further strengthen trust and compliance.
- WWebex
webex.com
Technology
80Low
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
Webex, a Cisco brand, is a leading provider of collaboration and customer experience solutions, offering industry-leading video conferencing, cloud calling, and contact center services that support hybrid work environments for businesses of all sizes. The website demonstrates a mature digital presence with comprehensive product information, clear navigation, and professional branding consistent with Cisco's corporate identity. Technically, the site leverages modern technologies including Brightcove video players, Adobe Helix RUM for performance monitoring, and Adobe Experience Manager as its CMS, ensuring a fast, accessible, and SEO-optimized user experience. Security posture is strong with HTTPS enforcement, appropriate security headers, and no visible vulnerabilities, although explicit security policies and incident response contacts are not published. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site reflects a high level of business credibility and technical maturity, suitable for an enterprise-grade SaaS provider.
- Nemours Children's Health
nemours.org
Healthcare · United States
77Low
NIS2 2 · GDPR 58
NIS2 2 · GDPR 58
Nemours Children's Health is a large, nationally recognized pediatric healthcare system serving multiple states including Delaware, New Jersey, Pennsylvania, and Florida. The organization offers a wide range of pediatric specialties and services, supported by a professional and well-structured website that targets families, children, and healthcare professionals. The website leverages modern technologies such as Adobe Experience Manager and PostHog analytics, indicating a mature digital infrastructure. Security posture is strong with HTTPS, security headers, and secure forms, though there is room for improvement in publishing explicit security policies and incident response information. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website presents a trustworthy and professional image consistent with a reputable healthcare provider.
Usersnapusersnap.com
Technology
82Low
NIS2 47 · GDPR 85
NIS2 47 · GDPR 85
Usersnap is a mature SaaS company founded in 2011, specializing in user feedback and product development platforms. It serves product teams, developers, and customer support teams by providing tools for visual feedback capture, in-app surveys, changelogs, and integrations with popular workflow tools. The company positions itself as a market leader with over 10,000 customers including reputable brands. The website reflects a professional and well-branded presence with excellent content quality and user experience. Technically, the website is built on Webflow CMS and hosted on AWS infrastructure, leveraging modern analytics and marketing technologies such as Amplitude, Mixpanel, Hotjar, and Google Tag Manager. The site is mobile-optimized, fast, and SEO-friendly, demonstrating a high level of digital maturity. From a security perspective, the site enforces HTTPS, uses domain status protections, and implements cookie consent mechanisms. While explicit security headers are not fully visible in the HTML, the overall posture is strong with no exposed sensitive data or vulnerabilities detected. The WHOIS data confirms domain legitimacy and consistency with the business claims. Overall, Usersnap presents a low-risk profile with strong business credibility, good privacy compliance, and a secure technical foundation. Strategic recommendations include enabling DNSSEC, publishing an incident response contact, and enhancing security headers to further strengthen security posture.
Mastodon gGmbHmastodon.online
Technology
84Low
NIS2 17 · GDPR 58
NIS2 17 · GDPR 58
Mastodon.online is a non-profit operated Mastodon server run by Mastodon gGmbH, providing decentralized social networking services as part of the fediverse. The platform targets general users interested in open, ad-free social media alternatives. The website demonstrates a solid technical infrastructure using modern web technologies such as Ruby on Rails and React, hosted on Exoscale. It offers good mobile optimization and accessibility, with a clean and professional design. Security posture is strong with HTTPS enforcement and appropriate security headers, though DNSSEC is not enabled and privacy policies could be more comprehensive. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the service.
Technology · Germany
81Low
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website at https://www.gmx.net/consent-management/ appears to be a page related to GMX, a well-known free email service provider primarily serving German-speaking users. However, the page content is inaccessible, displaying an error message and a redirect form to the homepage, indicating a failure to load the intended consent management content. The technical infrastructure includes modern JavaScript libraries for consent and permission management, but the actual page content is missing or blocked. The WHOIS data for the domain www.gmx.net is not publicly available, with the WHOIS query returning no match, which is unusual for a major domain and reduces trustworthiness. Security posture is weak due to lack of visible security headers and no privacy or cookie policies found on this page. Overall, the site shows signs of incomplete or blocked content, limiting the ability to fully assess its security and compliance status.
- UNICEF
unicef.org
Non-profit
86Low
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
UNICEF is a globally recognized non-profit organization dedicated to protecting the rights and welfare of children worldwide. The website serves as a comprehensive platform to communicate UNICEF's mission, campaigns, research, and ways to get involved. It targets a broad international audience including donors, partners, and the general public interested in child welfare. The site is well-branded, professionally designed, and provides extensive content aligned with UNICEF's global mandate. Technically, the website is built on Drupal CMS and integrates multiple modern analytics and marketing tools such as Google Tag Manager, Hotjar, and LinkedIn Insight. The site demonstrates good mobile optimization, accessibility, and SEO practices, ensuring a positive user experience across devices. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, reflecting a strong privacy posture. However, explicit security headers are not detected, and there is no visible security.txt file for vulnerability disclosure. No vulnerabilities or exposed sensitive data were found, indicating a mature security posture suitable for a high-profile non-profit. Overall, the website is trustworthy, professional, and compliant with privacy regulations such as GDPR. The absence of WHOIS data is likely due to privacy protection and does not detract from the site's legitimacy. Strategic recommendations include enhancing security headers, publishing a security.txt file, and providing dedicated security contact information to further strengthen trust and security readiness.
J&J Foundationjnjfoundation.com
Non-profit
80Low
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
The J&J Foundation website represents a philanthropic entity likely affiliated with Johnson & Johnson, focusing on community and social initiatives. The site targets a general audience including potential donors and community partners. The business model is non-profit, with key services centered on charitable programs. The website uses modern web technologies including Google Analytics, Microsoft Clarity, and a CMS platform likely Brightspot. It is mobile optimized and uses HTTPS for secure communications. However, the absence of WHOIS registration data and lack of visible privacy policies or contact information reduce trustworthiness. Security posture is moderate with standard tracking and cookie consent mechanisms but lacks explicit security headers and incident response information. Overall, the site is functional but could improve transparency and compliance documentation.
Healthcare · Poland
77Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Centrum Medyczne ENEL-MED Spółka Akcyjna operates a private healthcare center in Poland, providing medical consultations, diagnostics, and specialist treatments. Established in 1999, it holds a strong market position as a reputable private medical service provider. The website reflects a professional healthcare business with a clear focus on patient services and compliance with privacy regulations. Technically, the site is built on WordPress with modern integrations such as Google Tag Manager, Google Analytics, and Cookiebot for GDPR compliance. Security measures include HTTPS, reCAPTCHA, and cookie consent mechanisms, though additional security headers could enhance protection. No critical vulnerabilities or blocking mechanisms were detected, indicating a stable and accessible online presence. Overall, the website demonstrates good digital maturity and adherence to privacy standards, supporting the company's credibility and trustworthiness.
- Falck Polska
falck.pl
Healthcare · Poland
88Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Falck Polska operates as a leading medical transport service provider in Poland, serving both public contracts under the National Health Fund (NFZ) and individual clients. The website presents a professional and consistent brand image aligned with the healthcare transportation sector. Technically, the site leverages modern cloud infrastructure, including Azure CDN and Microsoft Application Insights for telemetry, alongside Google Tag Manager for analytics. The cookie consent mechanism is comprehensive and GDPR-compliant, reflecting good privacy practices. Security posture is strong with HTTPS enforced and security headers present, though explicit security policies and incident response contacts are absent. WHOIS data is unavailable due to privacy protection, which is typical for .pl domains and does not raise immediate concerns. Overall, the website is well-structured, secure, and trustworthy, with room for improvement in transparency and contact information.
Free and Premium Responsive WordPress Themes | Catch Themescatchthemes.com
—
79Low
NIS2 2 · GDPR 95
NIS2 2 · GDPR 95
MGC Diagnostics Corporationmgcdiagnostics.com
Healthcare · United States
79Low
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
MGC Diagnostics Corporation is a specialized medical technology company focused on providing non-invasive diagnostic systems for cardiorespiratory health. The company offers a range of products including pulmonary function testing equipment, metabolic testing, and diagnostic software solutions. Positioned as a leading global provider in the healthcare sector, MGC Diagnostics serves hospitals, clinics, and medical research organizations with a strong emphasis on quality, accuracy, and customer support. The company is a subsidiary of CAIRE Inc., expanding its reach and service capabilities in the cardiorespiratory healthcare market. Technically, the website is built on a modern stack including jQuery and slick carousel, with responsive design and basic accessibility features. The site is hosted via GoDaddy and uses ExpressionEngine CMS. Performance is moderate with good SEO and mobile optimization. Security practices include HTTPS enforcement and CSRF tokens, but lack advanced security headers and DNSSEC, indicating room for improvement in security hardening. The security posture is solid but not exemplary, with no critical vulnerabilities detected but missing some best practices such as DNSSEC and explicit security policies. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Business credibility is high with consistent branding, clear contact information, and trust signals such as FDA 510K clearance for software. Overall, the website presents a professional and trustworthy front for a medium-sized healthcare technology company. Strategic recommendations include enhancing DNS security, implementing security headers, and publishing formal security and incident response policies to further strengthen trust and compliance.
- Lutrija Bosne i Hercegovine
lutrijabih.ba
Government · Bosnia and Herzegovina
79Low
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
Lutrija Bosne i Hercegovine is the official national lottery operator of Bosnia and Herzegovina, providing a range of lottery and betting services including Loto 6/39, TV Bingo, and sports betting. The organization targets adult users within the country and operates both online and offline channels, including mobile applications. The website reflects a mature digital presence with modern technologies such as Bootstrap, jQuery, and integration with Google Analytics and Facebook SDK for analytics and marketing. Security practices include HTTPS enforcement, login authentication via AJAX, and cookie consent mechanisms, supported by ISO 27001 and WLA certifications that enhance trust. However, some security headers are not explicitly detected, and incident response contact details are not publicly available. Overall, the site is professional, compliant with privacy regulations, and focused on responsible gaming.
Novartis Greecenovartis.gr
Healthcare · Greece
79Low
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
Novartis Greece operates as a regional branch of the global pharmaceutical leader Novartis AG, focusing on redefining medical practice through innovative scientific data and digital technologies. The company targets improving and extending human lives by developing pioneering therapies addressing significant medical needs. The website reflects a mature digital presence with localized Greek content, professional design, and comprehensive compliance with privacy and cookie regulations. Technically, the site is built on Drupal CMS, integrates modern analytics and marketing tools, and demonstrates good performance and accessibility standards. Security posture is strong with HTTPS enforcement, security headers, and no visible vulnerabilities, although public security policies and incident response contacts are not explicitly published. The absence of WHOIS data is a notable anomaly but does not undermine the site's legitimacy given the corporate branding and content quality. Overall, Novartis Greece's website is a trustworthy, professional platform supporting its business objectives in the healthcare sector.
YouBeHeroyoubehero.com
Non-profit · Greece
77Low
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
YouBeHero is a Greek non-profit platform established in 2017 that enables users to convert commissions from their online purchases into donations to charitable organizations without any additional cost. The platform targets socially conscious Greek consumers and supports 151 registered organizations. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, jQuery, and integrates Google Analytics and Tag Manager for tracking. The domain is registered with GoDaddy and uses Cloudflare DNS services, ensuring reliable hosting and DNS management. Security posture is solid with HTTPS enforced and CSRF protections, though improvements could be made by enabling DNSSEC and adding security headers. Privacy compliance is strong with clear privacy and cookie policies and GDPR adherence. Overall, the website is professional, trustworthy, and well-optimized for mobile and SEO. No critical security or content safety issues were detected.
Angelini Pharma Hellas Μονοπρόσωπη Α.Β.Ε.Ε.angelinipharma.gr
Healthcare · Greece
80Low
NIS2 10 · GDPR 68
NIS2 10 · GDPR 68
Angelini Pharma Hellas is a specialized pharmaceutical company focused on healthcare sectors including the Central Nervous System, mental health, pain management, rare diseases, and consumer health products. The company holds a strong market position as a leader in healthcare within Greece and is part of the larger Angelini S.p.a. group. Their website provides comprehensive corporate information, product details, and news updates, targeting healthcare professionals and consumers interested in pharmaceutical products. Technically, the website uses modern JavaScript libraries and analytics tools such as Piwik PRO, ensuring moderate performance and good mobile optimization. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR regulations.
Angelini Pharma Franceangelinipharma.fr
Healthcare · France
78Low
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Angelini Pharma France is a medium-sized pharmaceutical company specializing in central nervous system disorders, including epilepsy and rare diseases. The company is part of the larger Angelini S.p.a. group and operates primarily in France and Italy. The website presents a professional image with clear business information, a focus on healthcare expertise, and partnerships. The digital infrastructure uses modern JavaScript libraries and analytics tools, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and no visible vulnerabilities, though some security headers and incident response information are missing. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. The absence of WHOIS data is a concern but does not outweigh the overall legitimacy of the site. Strategic recommendations include enhancing security headers, publishing incident response contacts, and improving accessibility.
Angelini Pharma Česká republika s.r.o.angelinipharma.cz
Healthcare · Czech Republic
82Low
NIS2 2 · GDPR 73
NIS2 2 · GDPR 73
Angelini Pharma Česká republika s.r.o. is a medium-sized pharmaceutical company focused on the central nervous system (CNS), pain management, rare diseases, and consumer health products within the Czech Republic. It operates as a subsidiary of Angelini S.p.a., a larger parent company. The website presents a professional and consistent brand image, with comprehensive content targeting healthcare professionals and consumers. The company emphasizes research, development, manufacturing, and distribution of pharmaceutical products, positioning itself as a leading player in its sectors locally. Technically, the website employs modern JavaScript libraries such as jQuery, Slick Carousel, and Piwik PRO analytics, indicating a mature digital infrastructure. The site is mobile-optimized with good SEO practices and a cookie consent mechanism, reflecting compliance with privacy regulations. However, some security best practices like security headers and explicit incident response policies are not evident. From a security perspective, the site uses HTTPS and a consent management platform, but lacks visible security headers and explicit vulnerability disclosure mechanisms. The absence of WHOIS data reduces domain trustworthiness slightly, though the website content and certifications support legitimacy. No critical vulnerabilities or adult content were detected, and the site is fully accessible without WAF blocking. Overall, the website demonstrates a solid business and technical foundation with room for improvement in security transparency and WHOIS data availability. Strategic recommendations include enhancing security headers, publishing incident response information, and verifying domain registration details to strengthen trust and compliance.
Altova GmbHaltova.com
Technology · Austria
76Low
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Altova GmbH is a technology company specializing in software development tools focused on XML, JSON, SQL, UML, and mobile app development. Their product portfolio includes desktop tools, server software, regulatory solutions, and cloud-based SaaS applications, positioning them as a comprehensive provider in data integration and enterprise app development markets. The company targets developers, IT professionals, and business users requiring robust data processing and regulatory compliance solutions. Their market position is supported by award-winning products and a consistent brand presence. Technically, the website demonstrates a mature digital infrastructure using modern web technologies such as Bootstrap, jQuery, Google Tag Manager, and Google Analytics. The site is well-optimized for performance, mobile responsiveness, and SEO, providing an excellent user experience. Structured data enhances search engine visibility and business information clarity. From a security perspective, the site uses HTTPS and secure form submissions but lacks some advanced security headers and explicit incident response or vulnerability disclosure information. Privacy and cookie policies are present but could be improved with explicit consent mechanisms. The absence of WHOIS data raises some concerns about domain registration transparency, although the website content and business legitimacy appear strong. Overall, Altova's website reflects a professional and trustworthy business with solid technical implementation and good security hygiene. Strategic improvements in security policy transparency, cookie consent, and domain registration clarity would further enhance trust and compliance.
- Quest Software
quest.com
Technology · United States
93Low
NIS2 67 · GDPR 88
NIS2 67 · GDPR 88
Quest Software is a well-established enterprise technology company specializing in AI data platforms, cybersecurity, and platform modernization solutions. Their website reflects a mature digital presence with comprehensive content targeting enterprise IT professionals. The company offers a range of IT management and cybersecurity services designed to help organizations securely manage and innovate with their data. Technically, the site is built on Drupal 11, employs modern web technologies, and integrates industry-standard analytics and consent management tools, indicating a high level of digital maturity. Security posture is strong with HTTPS, security headers, and incident response contacts clearly provided, although a dedicated security policy page and vulnerability disclosure policy could enhance transparency. Overall, the website is professional, trustworthy, and compliant with privacy regulations, though WHOIS data is unavailable, which slightly impacts transparency but not overall legitimacy.
- NNameshield
perf1.com
Technology
82Low
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
The website perf1.com is a parked domain page managed via Nameshield, a company specializing in brand protection, cybersecurity, and domain name management. The site itself contains minimal content, primarily linking to Nameshield's main services and offering a domain availability search form. There is no active business content or product offering on this domain. The WHOIS data query returned no match, indicating the domain may be unregistered, privacy protected, or in a transitional state, which limits the ability to verify registrant details or domain age. Technically, the site uses basic HTML, CSS, and JavaScript with no detected CMS or advanced frameworks. The page is simple and moderately optimized for mobile but lacks modern SEO and accessibility features. No HTTPS or security headers were detected, which is a significant security shortfall. No analytics or tracking scripts are present, indicating minimal data collection or user tracking. From a security perspective, the absence of HTTPS and security policies, combined with no contact or incident response information, suggests a low security posture. The domain's parked status and lack of WHOIS data reduce trust and legitimacy. No vulnerabilities or malicious indicators were found, but the site does not follow best practices for security or privacy compliance. Overall, the domain appears to be a placeholder with no active business operations. Strategic recommendations include securing the domain with HTTPS, adding privacy and cookie policies, providing contact and security incident response information, and improving technical SEO and accessibility to enhance trust and compliance.
- NNameshield
perf1.fr
Technology
84Low
NIS2 47 · GDPR 40
NIS2 47 · GDPR 40
The website cdn.perf1.com is a parked domain page managed by Nameshield, a company specializing in brand protection, cybersecurity, and domain name management services. The site itself contains minimal content, primarily serving as a placeholder indicating the domain is registered but not actively used. The page links to Nameshield's main website and related services but lacks any direct business or product offerings on this domain. From a technical perspective, the site uses basic HTML, CSS, and JavaScript without any advanced frameworks or CMS detected. The content is minimal and the site shows basic mobile optimization and accessibility. There is no evidence of HTTPS or security headers from the provided data, which limits the security posture. No analytics or tracking technologies are present, indicating minimal data collection or user tracking. Security-wise, the absence of HTTPS and security headers is a concern, as is the lack of privacy and cookie policies. The WHOIS data is unavailable, which restricts the ability to verify domain ownership and legitimacy fully. However, the association with Nameshield, a known domain management company, provides some trust. There are no signs of vulnerabilities or malicious content, and the site is safe for general audiences. Overall, the domain appears to be parked and not actively used for business operations. The security posture is weak due to missing HTTPS and policies, and the lack of WHOIS data reduces trust. Strategic recommendations include enabling HTTPS, adding privacy and cookie policies, and providing contact information to improve credibility and compliance.
Zentiva Group, a.s.zentiva.cz
Healthcare · Czech Republic
85Low
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
Zentiva Group, a.s. is a well-established pharmaceutical company specializing in the production and distribution of generic medicines primarily serving the Czech Republic and surrounding regions. The website presents a professional image with clear branding and a focus on quality generics. The company targets healthcare professionals and consumers seeking affordable pharmaceutical products. The digital presence includes integration with Google Tag Manager and Cookiebot for analytics and privacy compliance, reflecting a mature digital infrastructure. Technically, the website employs modern JavaScript libraries and frameworks such as Modernizr and Select2, uses Google Fonts for typography, and implements a cookie consent mechanism compliant with GDPR. The site is mobile-optimized and demonstrates good SEO practices, although some accessibility features could be enhanced. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and uses cookie consent banners to manage user privacy preferences effectively. However, the absence of certain security headers and lack of published security or incident response policies indicate areas for improvement. No critical vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, the website is trustworthy and professionally maintained, with a strong compliance posture regarding privacy and user consent. The lack of WHOIS data due to privacy protection is typical for corporate domains and does not detract from the site's legitimacy. Strategic recommendations include enhancing security headers, publishing security policies, and adding vulnerability disclosure mechanisms to further strengthen trust and security posture.
Royal College of General Practitionersrcgp.org.uk
Healthcare · United Kingdom
76Low
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
The Royal College of General Practitioners (RCGP) is a professional membership organization serving over 53,000 general practitioners (GPs) in the United Kingdom. It acts as the guardian of standards for GPs, providing education, certification, career support, and advocacy services. The website reflects a mature and well-established institution with a clear focus on healthcare professionals, particularly GPs. The organization holds a leading market position within the UK healthcare sector, offering a broad range of services including MRCGP exams, learning resources, and membership benefits. Technically, the website is built on the Kentico CMS platform and utilizes modern frameworks such as Bootstrap. It integrates multiple analytics and marketing tools including Google Analytics, Microsoft Clarity, and Plausible Analytics, all managed with appropriate cookie consent mechanisms. The site demonstrates good mobile optimization, accessibility, and SEO practices, contributing to a positive user experience. From a security perspective, the website enforces HTTPS and employs standard security headers, indicating a strong security posture. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not publicly documented, representing areas for improvement. No critical vulnerabilities or suspicious external domains were detected. Overall, the website is professional, trustworthy, and compliant with privacy regulations such as GDPR. The WHOIS lookup failed due to querying the 'www' subdomain instead of the base domain, but the domain is known and legitimate. Strategic recommendations include publishing detailed security and incident response policies and establishing a vulnerability disclosure program to enhance transparency and trust.
Healthcare · Czech Republic
82Low
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Fakultní nemocnice Hradec Králové is a major healthcare institution in the Czech Republic, serving as one of the largest medical facilities in Eastern Bohemia. The website provides comprehensive information about clinical services, patient care, employee resources, and commercial healthcare offerings. It targets patients, employees, partners, and the general public, positioning itself as a key regional healthcare provider with a strong emphasis on quality and safety. The site is professionally designed, mobile-optimized, and offers clear navigation and rich content in Czech with an English language option. Technically, the website employs modern JavaScript libraries such as Swiper.js for UI components, integrates Google Analytics and Facebook Pixel for tracking, and uses Typekit fonts for typography. The site is served over HTTPS with good SSL configuration, though explicit security headers are not detected in the provided data. Privacy and security policies are prominently published, indicating a mature approach to compliance and data protection. Security posture is solid with no visible vulnerabilities or exposed sensitive data. However, the absence of WHOIS data for the domain reduces transparency and slightly impacts trustworthiness. No incident response or vulnerability disclosure information is found, which could be improved. Overall, the site demonstrates a good balance of usability, compliance, and security suitable for a large public healthcare institution. Strategic recommendations include enhancing security headers, publishing incident response contacts, and establishing a formal vulnerability disclosure policy to further strengthen security and trust.