High-risk security reports
36,503 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,165001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
3,951–4,000 of 36,503
- AArfst Bohn GmbH
bohn-heizung-sanitaer.de
Energy · Germany
44High
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
Arfst Bohn GmbH is a small, family-owned specialist company based on Amrum island, Germany, providing heating, sanitation, ventilation, climate technology, solar energy solutions, and related services. The company emphasizes quality, reliability, and comprehensive customer support from planning to installation and maintenance. Their market position is that of a trusted local expert with a focus on renewable energy and modern heating technologies. Technically, the website uses a modern but straightforward stack including jQuery, Foundation framework, and various UI libraries, hosted likely on a standard web hosting platform. The site is mobile-optimized and provides clear navigation and content relevant to its target audience. Security posture is moderate with HTTPS implied but lacks explicit security headers and detailed security policies. Privacy compliance is good with a cookie consent mechanism and a privacy policy present. Overall, the website is professional and trustworthy, though improvements in security headers and incident response information are recommended.
Hans Andritter GmbHandritter.de
Energy · Germany
49High
NIS2 2 · GDPR 80
NIS2 2 · GDPR 80
Hans Andritter GmbH is a well-established regional company in Germany specializing in heating, sanitary, climate, and roofing services. With a history spanning approximately 160 years, the company offers comprehensive solutions from planning to implementation and maintenance, targeting regional customers seeking modern and reliable energy and sanitary services. The website reflects a professional and consistent brand image, emphasizing customer service and regional presence. Technically, the website is built on WordPress using the Elementor page builder, supported by plugins such as Borlabs Cookie for privacy compliance. The hosting is provided by agenturserver, indicated by the nameservers. The site is moderately performant, mobile-optimized, and SEO-friendly, with basic accessibility features. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism, but lacks explicit security headers and published security policies. No vulnerabilities or exposed sensitive data were detected in the content. Privacy compliance is strong with a comprehensive privacy policy and cookie management. Contact information is clearly provided, enhancing business credibility. Overall, the website presents a low-risk profile with good business credibility and privacy compliance. Strategic improvements in security headers and incident response documentation could further enhance trust and security posture.
- DDachdeckerei Thorsten Eggers
dachdeckerei-eggers.de
Energy · Germany
49High
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
Dachdeckerei Thorsten Eggers is a small, local roofing service provider based in Barkenholm, Germany, with over 21 years of experience. The company offers a range of roofing-related services including flat roofs, solar installations, storm damage repair, chimney restoration, facade design, and more. The website is built on WordPress using the Twenty Twenty-One theme and includes standard plugins such as Contact Form 7 and an accordion slider gallery. The site is well-structured, mobile-optimized, and provides clear contact information, but lacks advanced privacy and security features such as cookie consent and security headers. No social media or analytics tracking is present, indicating a focus on privacy and simplicity. The domain registration data is consistent with the business claims and shows no signs of privacy protection or suspicious activity.
LANCIER Monitoring GmbHgast-germany.de
Manufacturing · Germany
44High
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
LANCIER Monitoring GmbH operates as the official German representative and certified service center for GAST and Jun-Air compressed air components. The company offers a range of industrial products including compressors, air motors, membrane pumps, and rotary vane pumps, targeting sectors such as dental clinics, laboratories, food industry, machinery, vehicle construction, and medical technology. Their market position is strengthened by ISO 9001 certification and longstanding experience in compressed air systems. Technically, the website is built on TYPO3 CMS with Bootstrap and jQuery, providing a modern and responsive user experience. Security posture is moderate with HTTPS usage and secure form handling, but lacks explicit security headers and incident response policies. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Overall, the website reflects a professional small manufacturing business with good trust indicators and clear contact information.
PARROT MEDIA GmbHparrot-it.de
Technology · Germany
49High
NIS2 2 · GDPR 100
NIS2 2 · GDPR 100
PARROT MEDIA GmbH is a small-sized IT system house based in Lübeck, Germany, specializing in premium webhosting, cloud services, IT support, and data protection solutions primarily targeting businesses in Northern Germany. The company offers a broad portfolio of IT services including desktop management, remote support, cloud infrastructure, and Microsoft 365 integration, positioning itself as a reliable regional IT partner with long-term client relationships. Technically, the website is built on TYPO3 CMS with modern web technologies, responsive design, and a moderate performance profile. Security posture is solid with HTTPS enforced, cookie consent mechanisms, and no visible vulnerabilities, though explicit security policies and incident response contacts are absent. Overall, the website demonstrates good privacy compliance and business credibility with clear contact information and partner affiliations. The risk profile is low with no suspicious indicators detected.
- JJTRE a.s.
euroveariverside.sk
Real Estate · Slovakia
48High
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Eurovea Riverside is a residential real estate project by JTRE a.s., located in Bratislava, Slovakia, offering luxury apartments with river views as part of the larger Eurovea City development. The website is professionally designed using Drupal 10, with modern analytics and marketing tools integrated, including Google Analytics, Google Tag Manager, and Google reCAPTCHA v3 for form security. The site demonstrates good privacy compliance with a comprehensive privacy policy and cookie consent mechanism. Security posture is strong with HTTPS, DNSSEC, and anti-bot protections, though explicit security headers and incident response policies are not published. Contact information is clear and accessible, supporting business credibility. Overall, the website is trustworthy, well-maintained, and suitable for its target audience.
SPPMSsppms.cz
Manufacturing · Czech Republic
42High
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
SPPMS is a Czech regional consortium of manufacturing and technology companies specializing in complex investment units, including projection, construction, machine parts manufacturing, and technology modernization. The organization has a strong regional presence with partnerships and sponsorships in cultural and social initiatives. The website is built on WordPress with a moderate technical infrastructure including jQuery, Foundation CSS, and Google Analytics for tracking. SEO is well implemented with Yoast SEO and structured data. Security posture is adequate with HTTPS enforced but lacks security headers and explicit privacy and cookie policies, which are compliance gaps. No incident response or vulnerability disclosure information is present. Overall, the website is professional and trustworthy but could improve privacy compliance and security best practices.
Sökmotoroptimering 24sokmotoroptimering24.se
Technology · Sweden
40High
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Sökmotoroptimering 24 is a Swedish SEO consultancy and informational website founded in 2011, providing SEO education, consulting, and affiliate marketing guidance primarily targeting Swedish businesses and individuals interested in improving their organic search presence. The website is built on WordPress, leveraging popular SEO and contact form plugins, hosted by Loopia AB, a reputable Swedish hosting provider. The site demonstrates good content quality, clear navigation, and mobile optimization, with a consistent brand presence and active social media links. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the website is legitimate, functional, and professionally presented but could improve in privacy and security policy transparency.
NordNewsnordnews.de
Media · Germany
43High
NIS2 17 · GDPR 28
NIS2 17 · GDPR 28
NordNews.de is a regional news media website focused on delivering the latest news and updates from northern Germany. The site provides news articles, police reports, local event coverage, and job listings, targeting the general public interested in regional information. The website uses WordPress CMS with popular plugins such as Yoast SEO and Perfecty Push Notifications, indicating a moderate level of digital maturity. The technical infrastructure supports mobile optimization and SEO best practices, although some accessibility features are basic. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks advanced security headers and explicit privacy or cookie policies. Overall, the site is functional and professional but could improve in privacy compliance and security transparency.
—
49High
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Other
42High
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
The website dudik.net is currently inaccessible, returning a 403 Forbidden error page with minimal HTML content and no visible business or security information. The domain is registered since 2012 with a reputable registrar, indicating a mature domain age, but the lack of accessible content prevents any meaningful analysis of the company's business operations or services. Technically, the site lacks detectable metadata, scripts, or security headers, and no HTTPS or DNSSEC status is provided. Security posture cannot be assessed due to the blocked content. Overall, the site appears inactive or restricted, resulting in a very low AI score and limited insights.
Jugendcafé Camäleoncamaleon.li
Non-profit · Liechtenstein
49High
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Jugendcafé Camäleon is a small non-profit youth center based in Vaduz, Liechtenstein, providing a community space for youth engagement, projects, and events. The website serves as an informational and promotional platform targeting local youth and community members, offering details about their services, events, and gallery. The organization appears well-established since 2018 with a clear local focus and active social media presence. Technically, the website is built on WordPress with standard plugins such as Yoast SEO and Contact Form 7, ensuring basic SEO and contact functionalities. The site is mobile-optimized and uses modern libraries like Swiper.js and FontAwesome for UI enhancements. Security posture is adequate with HTTPS enforced and Google reCAPTCHA protecting forms, though it lacks advanced security headers and explicit incident response policies. Privacy and cookie policies are present but lack an explicit consent mechanism. Overall, the site is trustworthy, professional, and safe for general audiences.
Liechtensteinisches Handelsgewerbeeinkaufland.li
Retail · Liechtenstein
49High
NIS2 17 · GDPR 70
NIS2 17 · GDPR 70
Einkaufland Liechtenstein is a retail association representing local shops in Liechtenstein, aiming to promote a pleasant shopping atmosphere with personal service and a diverse product range. The website serves as a platform for member directories, gift voucher sales, and local business promotion, targeting residents and visitors of Liechtenstein. The business model focuses on supporting regional retail through collective marketing and services. Technically, the website is built on WordPress with WooCommerce and Elementor, leveraging modern plugins like Slider Revolution and Cloudflare Turnstile for security. The site is well-structured, mobile-optimized, and uses HTTPS, reflecting a mature digital presence. Security posture is solid with HTTPS and captcha protections, though some security headers could be improved. No critical vulnerabilities or suspicious activities were detected. Overall, the website is trustworthy, professional, and compliant with GDPR, with clear contact information and social media presence. Strategic recommendations include enhancing security headers and publishing explicit security policies to further strengthen trust and compliance.
- LLiechtensteinisches Rotes Kreuz
roteskreuz.li
Healthcare · Liechtenstein
47High
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
The Liechtensteinisches Rotes Kreuz website represents the national Red Cross society of Liechtenstein, offering emergency medical services, first aid courses, and parental counseling. It serves residents of Liechtenstein and nearby areas, operating as a non-profit humanitarian organization funded by donations and memberships. The website is well-branded, professionally designed, and provides clear contact information and social media presence, reinforcing its trustworthiness and community engagement. Technically, the site is built on WordPress using the Astra theme and several plugins including Modern Events Calendar Lite and MonsterInsights for analytics. The infrastructure supports good mobile optimization, accessibility, and SEO practices. Performance is moderate, with modern technologies and standard web analytics integration. From a security perspective, the site enforces HTTPS, employs security headers, and includes privacy and cookie policies compliant with GDPR. However, it lacks a dedicated security policy or incident response page and does not publish a vulnerability disclosure policy. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website demonstrates a strong security posture and business credibility appropriate for a national humanitarian organization. Strategic improvements could include publishing explicit security policies and incident response contacts to enhance transparency and trust further.
- Landesspital Liechtenstein
landesspital.li
Healthcare · Liechtenstein
49High
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Landesspital Liechtenstein is a central healthcare provider in Liechtenstein, offering a broad range of medical services including emergency care, internal medicine, surgery, orthopedics, and specialized competence areas such as anesthesia and radiology. The hospital has a long-standing history of over 125 years and positions itself as a trusted institution for the local population. The website reflects a professional and comprehensive digital presence, supporting patient and visitor information, career opportunities, and detailed department descriptions. Technically, the site is built on WordPress with modern themes and plugins, optimized for performance and mobile use, and integrates privacy-respecting analytics via Plausible. Security posture is good with HTTPS enforced and no visible vulnerabilities, though some improvements in security headers and incident response transparency are recommended. Overall, the site demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations.
Familienportalfamilienportal.li
Government · Liechtenstein
48High
NIS2 25 · GDPR 53
NIS2 25 · GDPR 53
Familienportal.li is a family support and information portal focused on families in Liechtenstein, especially young families balancing family and work life. The website offers categorized information on pregnancy, birth, childcare, early childhood education, health, and family activities, along with event and course listings. It serves as a community resource with contact options and social media presence. Technically, the site is built on WordPress with modern plugins and uses HTTPS with good security practices, though it lacks explicit privacy and cookie policies. The site is well designed, mobile optimized, and accessible, providing a professional user experience. Security posture is solid but could be improved by adding security headers and published policies. Overall, the site is trustworthy and legitimate, with domain registration consistent with its business purpose.
ELREC AGentsorgi.li
Transportation · Liechtenstein
48High
NIS2 25 · GDPR 65
NIS2 25 · GDPR 65
Entsorgi Wertstoffsammelstelle operates as a public recycling and waste collection service primarily serving private individuals and businesses in Liechtenstein and adjacent Swiss regions. The company offers a variety of recycling collection points for materials such as metals, paper, plastics, electronics, and hazardous waste. It also provides container rental services and has formed strategic partnerships, notably with RecyPac for the national RecyBag recycling system, enhancing its logistics and quality assurance capabilities. The website reflects a regional leader position in waste management services with a focus on sustainability and circular economy principles. Technically, the website is built on WordPress 6.7.4, leveraging modern JavaScript libraries and Google Maps API for interactive location services. The site is mobile-optimized, accessible, and employs GDPR-compliant privacy and cookie policies. Performance is moderate with good SEO and user experience design. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security headers could be improved. The WHOIS data is notably absent, which raises concerns about domain registration legitimacy. Despite this, the website content and business information appear professional and trustworthy. No security incident response or vulnerability disclosure information is provided, indicating potential areas for improvement in transparency and security readiness. Overall, Entsorgi presents a credible and regionally important recycling service with a well-structured digital presence. Addressing domain registration transparency and enhancing security headers would strengthen trust and security posture further.
- Městys Vysoký Chlumec
vysoky-chlumec.cz
Government · Czech Republic
43High
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Městys Vysoký Chlumec operates as a local municipal government entity in the Czech Republic, providing residents and visitors with administrative services, community news, cultural and historical information, and tourism resources. The website serves as an official portal for local governance, public notices, and citizen engagement. The digital infrastructure is built on a modern tech stack including jQuery, Bootstrap, and Swiper.js, with a CMS platform likely tailored for municipal use. The site is mobile-friendly and offers a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS and cookie consent mechanisms, though there is room for improvement in security headers and explicit security policies. GDPR compliance is evident with a dedicated Data Protection Officer contact and privacy policy. Overall, the site is trustworthy, professional, and well-suited for its public sector role.
Toulava o.p.s.toulava.cz
Non-profit · Czech Republic
48High
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Toulava o.p.s. operates a regional tourism website focused on promoting hiking, cycling, family activities, and accommodation in the southern and central Bohemia regions of the Czech Republic. The platform offers comprehensive tourist information, event calendars, and an e-shop for regional products, supported by local government entities. Technically, the website is built on Angular 7 with modern JavaScript libraries and integrates mapping APIs such as Mapy.cz and Leaflet, providing a rich interactive user experience. The site is mobile-optimized and demonstrates good SEO practices. Security posture is solid with HTTPS and no exposed sensitive data, though some security headers are missing. Privacy compliance is mostly addressed with a clear privacy policy and terms of service, but lacks a cookie consent mechanism. WHOIS data is unavailable, which slightly reduces trust but the overall business credibility remains high due to transparent contact information and government support. Recommendations include enhancing security headers, adding cookie consent, and publishing explicit security and incident response policies.
Bezpečné Čáslavsko – Společný informační kanál bezpečnostních složekbezpecnecaslavsko.cz
Government · Czech Republic
40High
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Bezpečné Čáslavsko is a regional public safety information portal focused on the Čáslavsko microregion in the Czech Republic. It serves as a centralized channel providing updates and information about local police, municipal police, fire services, and other safety organizations. The website targets local residents and stakeholders interested in community safety and crime prevention. The business model is informational and community service-oriented, with a small regional footprint and a focus on public service rather than commercial activities. Technically, the site is built on WordPress with several plugins for maps, forms, and UI enhancements. While the site is mobile-optimized and well-structured, it uses outdated WordPress and jQuery versions, which pose security risks. Security posture is moderate with HTTPS enforced and Wordfence plugin active, but lacks modern security headers and up-to-date software. Privacy compliance is limited due to absence of a privacy policy and terms of service, though a cookie consent banner is present. Overall, the site is trustworthy and legitimate, supported by consistent WHOIS data and domain age. Strategic improvements in security updates, privacy documentation, and security headers are recommended to enhance trust and compliance.
PAQ Researchmapavzdelavani.cz
Education · Czech Republic
37High
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Mapa vzdělávání is a Czech Republic-based educational research platform operated by PAQ Research, focusing on data analyses and research-backed solutions addressing educational inequalities in the country. The website offers analytical reports, data visualization tools, and a blog with research articles, targeting policymakers, educational institutions, and researchers. The platform positions itself as a specialized provider in the Czech educational sector with a small organizational size and consistent branding. Technically, the website is built using modern frameworks such as Next.js and React, with Matomo analytics for privacy-conscious user tracking. The site is mobile-optimized and well-structured, providing a good user experience and clear navigation. Security posture is adequate with HTTPS enforced, but lacks some security headers and formal security policies. Privacy compliance is incomplete due to missing privacy and cookie policies. Contact information is clearly presented with named individuals and direct emails, enhancing business credibility. Overall, the website is professional, trustworthy, and safe for general audiences.
- PAQ Research
chytrejsidane.cz
Government · Czech Republic
39High
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Chytřejší daně is a Czech Republic based research and advocacy project focused on proposing comprehensive tax reforms to improve economic growth, fairness, and public finance sustainability. The website is professionally designed using modern web technologies such as Next.js and React, hosted on a Czech hosting provider, and integrates analytics tools like Google Tag Manager and Matomo for user tracking and performance monitoring. The project is supported by reputable research organizations including PAQ Research, Centrum veřejných financí, and IDEA CERGE-EI, lending credibility and trustworthiness to the content. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security policies and incident response information are absent. Privacy and cookie policies are present and GDPR compliant, with a user consent mechanism implemented. Overall, the website demonstrates a high level of professionalism, technical maturity, and business credibility appropriate for a public policy research initiative.
Petr Sychapetrsycha.cz
Technology · Czech Republic
45High
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Petr Sycha operates a professional website focused on WordPress web development and template creation, targeting clients seeking modern, responsive web solutions. The business is positioned as a small, experienced service provider with over two decades of experience, primarily serving the Czech market. The website uses WordPress with the Divi theme and several performance and UI enhancement plugins, hosted by Wedos, a Czech hosting provider. The technical infrastructure is modern and moderately optimized for performance and mobile use. Security posture is good with HTTPS enabled and no visible vulnerabilities, though security headers and explicit policies are lacking. Privacy compliance is partial with a cookie policy and consent mechanism but no privacy or terms of service pages. Contact information is clearly presented in structured data, enhancing business credibility. Overall, the site is professional, trustworthy, and safe for general audiences.
- ÉÉtudes
whiteline015.cz
Real Estate · Czech Republic
45High
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
Études is a small architectural firm based in the Czech Republic, founded in 2018, focusing on innovative and sustainable architectural solutions. The company offers a range of services including renovation, restoration, consulting, project management, and digital engagement through an app and newsletter. The website is built on WordPress and hosted by a Czech hosting provider, reflecting a moderate level of technical maturity with good mobile optimization and accessibility. However, the site lacks critical privacy and security policies, contact information, and security headers, which impacts its overall security posture. No evidence of analytics or advertising tools was found, indicating minimal user tracking. The domain registration data aligns well with the business claims, supporting legitimacy. Strategic improvements in privacy compliance, security best practices, and contact transparency are recommended to enhance trust and compliance.
GEF Ingenieur AGsiskmr.com
Energy · Germany
43High
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
The website sisKMR.com represents GEF Ingenieur AG, a specialized engineering company providing software solutions for static calculations and optimization of district heating pipelines. The company holds a strong market position in Europe with over 30 years of experience and offers software, engineering services, training, and support primarily targeting planners, engineers, and manufacturers in the energy sector. The website is professionally designed, multilingual, and provides clear contact channels including forms, email, phone, and physical address. Technically, the site is built on WordPress with modern plugins and frameworks, delivering moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced and domain transfer protection, but lacks DNSSEC and security headers. Privacy compliance is good with a comprehensive GDPR-aligned privacy policy, though no cookie consent mechanism or terms of service are present. Overall, the site is trustworthy and business credible, with minor improvements recommended in security and privacy transparency.
- BBuhlmann Port
buhlmann-port.com
Other
46High
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website 'Buhlmann Port' presents a minimalistic virtual tour experience primarily in German. The business overview is limited to the virtual showroom concept with no detailed company information or services described. The site appears to target a general audience interested in virtual tours but lacks clear business model or market positioning details. Technically, the site uses basic HTML, CSS, and JavaScript with some preloading optimizations and mobile viewport settings, indicating moderate digital maturity. However, the absence of CMS or advanced frameworks suggests a simple infrastructure. Security posture is weak due to missing HTTPS confirmation, lack of security headers, and no visible privacy or cookie policies. The WHOIS data is notably absent, raising concerns about domain legitimacy and registration status. Overall, the site is functional but lacks critical trust and compliance elements, posing risks for user trust and regulatory adherence.
PARROT MEDIA GmbHparrot-media.de
Media · Germany
49High
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
PARROT MEDIA GmbH is a well-established full-service advertising agency based in Lübeck, Germany, with over 18 years of experience serving diverse industries. The company offers a comprehensive range of services including website and online shop development, corporate design, print media, SEO, social media marketing, hosting, and IT services. Their market position is strong regionally, supported by a professional website, client references, and recognized partnerships such as Google Partner and Shopware. Technically, the website is built on TYPO3 CMS, uses modern web technologies, and integrates Google Tag Manager for analytics. The site is mobile-optimized, accessible, and SEO-friendly. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, although some HTTP security headers could be improved. Privacy compliance is robust with clear GDPR-aligned policies and cookie management. Overall, the business demonstrates credibility and professionalism with clear contact information and active social media presence. The domain registration is privacy protected via DENIC, which is typical for German domains and does not raise suspicion. No blocking or WAF mechanisms hinder access to the site, allowing full content analysis.
TB-Planungsgesellschafttb-planung.de
Energy · Germany
42High
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
TB-Planungsgesellschaft is a recently founded (April 2024) German company specializing in technical planning and consulting services for energy infrastructure, particularly modern heat and cooling networks. The company targets municipal and private projects with a focus on sustainability and efficiency. Their website is professionally designed using WordPress and Elementor, providing clear service descriptions and partner references, notably to HPW-Fernwaerme. The technical infrastructure is modern but lacks advanced security headers and cookie consent mechanisms. No direct contact emails or phone numbers are publicly listed, relying on a contact form for communication. Overall, the security posture is basic with room for improvement in compliance and incident response transparency. The domain registration is consistent with the company's new establishment, though WHOIS data is minimal. The website content is safe and suitable for general audiences.
LANCIER Monitoring GmbHjunair.de
Manufacturing · Germany
44High
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
LANCIER Monitoring GmbH operates as the official German representative and certified service center for Jun-Air compressors, specializing in quiet and clean compressed air solutions for diverse industrial sectors including dental, food, machinery, and medical technology. The company offers a range of oil-free and oil-lubricated compressors with various accessories, emphasizing quality, reliability, and low noise. Their market position is strengthened by ISO 9001 certification and a certified service center status, targeting professional industrial customers primarily within Germany. Technically, the website is built on TYPO3 CMS with Bootstrap 5 and jQuery, providing a modern and responsive user experience. The site demonstrates good SEO and accessibility basics but lacks some advanced security headers and cookie consent mechanisms. Performance is moderate with a clean design and clear navigation. From a security perspective, the site uses HTTPS and secure forms but does not publish incident response contacts or vulnerability disclosure policies. No security headers were detected, and cookie consent is missing, indicating room for improvement in compliance and security posture. Overall, the website is professional, trustworthy, and business-focused with a solid technical foundation. Strategic improvements in security headers, privacy compliance, and incident response transparency would enhance the security and trustworthiness further.
Energy · Germany
48High
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
PowerNet is a well-established sector-crossing conference focused on the energy transition in Northern Germany, organized by the Gesellschaft für Energie und Klimaschutz Schleswig-Holstein (EKSH). The website presents a professional and comprehensive platform for event information, networking, and expert exchange, targeting stakeholders from business, science, municipalities, and government. The site is built on TYPO3 CMS with modern frontend technologies, offering good performance, mobile optimization, and accessibility. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and incident response information are missing. The WHOIS data is incomplete and malformed, which slightly reduces domain trustworthiness, but the strong presence of official partners and government affiliations supports legitimacy. Overall, the website is a credible and professional resource for the energy transition community in Schleswig-Holstein.
Energieküsteready-charged-career.de
Energy · Germany
43High
NIS2 17 · GDPR 33
NIS2 17 · GDPR 33
The website 'Ready. Charged. Career!' serves as a regional career platform focused on renewable energy opportunities at the German North Sea coast, branded as Energieküste. It targets professionals, students, and career changers interested in the energy transition, providing information on training, education, and job openings. The platform is supported by a network of partner companies and educational institutions, enhancing its market position as a key regional hub for energy sector careers. Technically, the site is built on Kirby CMS, employs Matomo for privacy-conscious analytics, and uses modern web technologies including SVG graphics and responsive design. Hosting is managed via Schlund Technologies, with a good SSL configuration and privacy compliance mechanisms in place, including cookie consent and GDPR-aligned privacy policies. Security posture is solid with HTTPS enforced and privacy-respecting analytics, though explicit security policies and incident response contacts are not published. No critical vulnerabilities or exposed sensitive data were detected. The site is fully accessible without WAF or blocking mechanisms, ensuring a smooth user experience. Overall, the site demonstrates a high level of professionalism, content quality, and technical maturity, making it a trustworthy and effective platform for its intended audience. Strategic improvements could focus on enhancing security headers and publishing formal security policies to further strengthen trust and compliance.
- UUmweltbildungszentrum Flensburg
umweltbildungszentrum-flensburg.de
Education · Germany
46High
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
The Umweltbildungszentrum Flensburg is a small, non-profit educational institution affiliated with the Naturwissenschaftliches Museum Flensburg, focusing on environmental education and sustainability programs. Founded in 2014, it serves local schools, kindergartens, and the general public with a variety of educational offerings including excursions, workshops, and exhibitions. The website reflects a professional and consistent brand presence with clear contact information and official city sponsorship. Technically, the website is built on the Contao Open Source CMS platform, utilizing modern JavaScript libraries such as jQuery and Colorbox for UI enhancements. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. However, there is room for improvement in security headers and explicit security policy documentation. From a security perspective, the site uses HTTPS and implements a cookie consent banner, indicating awareness of privacy compliance. No critical vulnerabilities or security issues were detected in the content or scripts. The WHOIS data aligns well with the website's claims, showing a consistent and legitimate registration. No WAF or blocking mechanisms interfere with content accessibility. Overall, the website presents a trustworthy and professional digital presence for an educational institution, with moderate technical sophistication and good privacy practices. Strategic improvements in security headers and formal security policies could further enhance its posture.
Engagiert in Flensburg - Ehrenämter und Freiwilligenbörseengagiert-in-flensburg.de
Non-profit · Germany
48High
NIS2 2 · GDPR 48
NIS2 2 · GDPR 48
The website engagiert-in-flensburg.de serves as a local platform dedicated to promoting volunteering and community engagement opportunities in Flensburg, Germany. It targets volunteers and organizations interested in Ehrenämter and Freiwilligenbörse activities. The platform operates likely as a non-profit or community service entity, focusing on connecting individuals with local volunteer opportunities. Technically, the site is built on WordPress using Elementor and integrates modern plugins such as Rank Math PRO for SEO and Google reCAPTCHA v3 for form security. Hosting is provided by agenturserver, a German hosting provider, which aligns with the website's regional focus. Security posture is moderate, with basic protections like reCAPTCHA but lacking advanced security headers and published policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the site presents a good user experience with clear navigation and mobile optimization but requires improvements in transparency and security documentation to enhance trust and compliance.
DOJ (Dienst für offene Jugendarbeit)kinder-und-jugendfoerderung-wirkt.ch
Government · Switzerland
48High
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
The website 'Kinder und Jugendförderung wirkt' is a Swiss non-profit platform dedicated to promoting the development and well-being of children and youth across various cantons. It serves as an informational and support hub for actors involved in youth promotion, providing resources, consultation, and visibility to regional initiatives. The platform is backed by recognized governmental and non-profit organizations, enhancing its credibility and trustworthiness. Technically, the site is built on WordPress with modern SEO and analytics tools, offering a responsive and user-friendly experience. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies could be improved. Overall, the site is professional, compliant with privacy regulations, and well-positioned within its niche.
Breath:Sun:Bone:Bloodbreathsunboneblood.com
Media · Germany
48High
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Breath:Sun:Bone:Blood is a small independent music label based in Berlin, specializing in niche genres such as dark ambient, experimental, modern composition, black metal, and folk music. The website serves as a platform to showcase their releases, artists, and news, targeting music enthusiasts interested in these genres. The business model revolves around music distribution and artist promotion, with a presence on Bandcamp for direct music sales and streaming. Technically, the website is built on WordPress using the Enfold theme and several common plugins including LayerSlider and MediaElement.js. The site is moderately performant, mobile-optimized, and SEO-friendly with proper meta tags and structured data. Hosting and domain registration are consistent with the business location in Germany, using RegistryGate GmbH as the registrar. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism compliant with GDPR. However, it lacks DNSSEC and explicit security headers, which are recommended to enhance security posture. No critical vulnerabilities or exposed sensitive data were detected. Privacy policies are present and written in German, reflecting compliance with EU regulations. Overall, the website is professional, trustworthy, and safe for general audiences. The main areas for improvement include adding explicit contact information, security policies, and enhancing DNS and HTTP security configurations to strengthen trust and resilience against attacks.
BBZ Schleswigbbzsl.de
Education · Germany
48High
NIS2 17 · GDPR 43
NIS2 17 · GDPR 43
BBZ Schleswig is a regional vocational training and continuing education institution based in Schleswig and Kappeln, Germany. The website serves as an informational portal for educational offerings targeting students and professionals seeking vocational qualifications. The technical infrastructure is built on WordPress using the Divi theme, incorporating common analytics tools such as Google Analytics and Facebook Pixel. While the site demonstrates good design quality and user experience, it lacks explicit privacy and cookie policies, as well as visible contact information, which impacts its privacy compliance and business credibility scores. Security posture is moderate with no detected security headers or vulnerability disclosures, indicating room for improvement in security best practices. Overall, the website is safe for general audiences and functions well as an educational resource.
- M
Government · Romania
45High
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
The website www.eeagrants.ro serves as the official Romanian governmental portal for the EEA and Norwegian Grants 2014-2021, managed by the Ministry of Investments and European Projects. It provides comprehensive information about grant programs, project calls, results, and bilateral relations, targeting Romanian governmental bodies, NGOs, and the general public interested in European funding opportunities. The site is well-branded with consistent use of official logos and government references, establishing high trustworthiness and credibility. Technically, the website employs a modern tech stack including Bootstrap, jQuery, Font Awesome, Google Fonts, Google Analytics, Facebook SDK, and Google Charts. It is mobile responsive with good SEO and accessibility basics, though accessibility could be improved. Performance is moderate, and the site uses HTTPS with a good SSL configuration. However, security headers are missing, and privacy and cookie policies are not explicitly present, indicating areas for compliance improvement. From a security perspective, the site shows good practices such as HTTPS enforcement and use of reCAPTCHA for forms, with no visible vulnerabilities or exposed sensitive data. The lack of security headers and formal incident response or vulnerability disclosure information are notable gaps. WHOIS data is privacy protected as per Romanian ROTLD policy, which is standard and justified for this governmental domain. Overall, the site is a professional, trustworthy government resource with solid technical foundations but could enhance privacy compliance and security posture by adding explicit policies and security headers. The risk level is low, but improvements in transparency and security best practices are recommended.
- A
Technology · Germany
47High
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
Adiwidjaja Teamworks GmbH operates the domain atw.io, which currently hosts a minimal placeholder website with a 'Coming soon' message and an image. The company is registered in Germany since 2013, consistent with the domain registration data. The website lacks any descriptive business content, contact information, or policies, indicating it is not yet operational or publicly launched. The technical infrastructure is basic, with no detected CMS, frameworks, or advanced technologies. Security posture is minimal, with no security headers or DNSSEC enabled, though the domain uses a reputable registrar and is not privacy protected. Overall, the site presents low digital maturity and limited trust signals.
BrotHausbrot-haus.de
Retail · Germany
48High
NIS2 17 · GDPR 33
NIS2 17 · GDPR 33
BrotHaus is a German bakery business offering traditional and innovative baked goods through physical stores and an online shop. The website showcases their products, live events, and a customer loyalty program, positioning them as a regional retail bakery brand with a focus on quality and customer experience. Technically, the website is built on WordPress with WooCommerce and uses modern plugins and themes, providing a good user experience with multimedia content and mobile optimization. Security posture is adequate with HTTPS and some best practices, but lacks explicit security headers and privacy compliance documentation. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and contact transparency.
FunRun 2025funrunsuedwest.de
Other · Germany
47High
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
FunRun 2025 is a German event website dedicated to organizing and promoting the FunRun running events, targeting hobby and frequent runners as well as Nordic walkers. The site provides event information, race results, photo galleries, and news updates, positioning itself as a local/regional event organizer. Technically, the website is built on WordPress 6.0.1 using the Avada theme, with jQuery and Leaflet.js for interactive features, and integrates hCaptcha for form security. The site is served over HTTPS, indicating a good baseline for secure communications. However, it lacks advanced security headers and formal privacy or cookie policies, which are critical for GDPR compliance and user trust. No contact emails or phone numbers are explicitly provided, limiting direct communication channels.
- DDV Intern
dvintern.de
Other
43High
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
The website dvintern.de presents an extremely minimal online presence with only a basic HTML page containing the title 'DV Intern' and no substantive content. There are no visible business descriptions, contact details, or user engagement features. The domain is registered under DENIC with DNSSEC enabled, but no registrant information is publicly available due to DENIC's privacy policies. The lack of HTTPS and security headers, combined with absent privacy and cookie policies, indicates a low level of digital maturity and security posture. Overall, the site appears to be either a placeholder or inactive, offering no meaningful business or security information.
Regensburger Universitätsstiftungenregensburger-universitaetsstiftung.de
Education · Germany
44High
NIS2 17 · GDPR 28
NIS2 17 · GDPR 28
The Regensburger Universitätsstiftungen website represents a non-profit foundation platform dedicated to supporting the University of Regensburg through funding and promotion of research, teaching, and international exchange. The foundation acts as a central hub for private and corporate donors aiming to enhance the university's profile and academic excellence. The website content is well-structured, professionally designed, and primarily targeted at university faculty and potential funders. Technically, the site is built on WordPress with the Foundation CSS framework and modern JavaScript libraries, ensuring good mobile responsiveness and user experience. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though improvements are recommended in security headers and incident response disclosures. Privacy compliance is adequate with a clear privacy policy but lacks a cookie consent mechanism. Overall, the site is trustworthy, professional, and serves its educational and funding facilitation purpose effectively.
- BBrücken-Center Ansbach GmbH
bc-ansbach.de
Retail · Germany
49High
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Brücken-Center Ansbach GmbH operates a regional shopping center located in Ansbach, Germany, offering a wide range of retail shops, gastronomy options, and services including parking and voucher sales. The website is built on the Contao CMS platform and integrates modern frontend technologies such as jQuery, Bootstrap 5, and Slick Carousel. It employs Google Tag Manager for analytics and Cookiefirst for cookie consent management, demonstrating a commitment to privacy compliance. The site is well-structured, mobile-optimized, and provides clear contact information and social media links, enhancing user trust and engagement. Security posture is solid with HTTPS and cookie consent mechanisms, though there is room for improvement in security headers and explicit security policies. Overall, the website reflects a professional and trustworthy digital presence for a medium-sized retail business.

Healthcare · Austria
44High
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
The website intensivmedizin.at represents the Österreichische Gesellschaft für Internistische und Allgemeine Intensivmedizin und Notfallmedizin (ÖGIAIN), a professional Austrian medical society focused on intensive and emergency medicine. The site serves as an information hub for medical professionals, offering details on scientific funding, educational events, webinars, and member services. The content is well-structured, professionally presented, and targets healthcare practitioners and researchers in Austria. The society collaborates with other medical organizations and hosts multiple events annually, reinforcing its position in the Austrian healthcare community. Technically, the website is built on Drupal 7 with jQuery and uses responsive design techniques to ensure usability across devices. While the site performs moderately well and offers good mobile optimization, it lacks modern security headers and explicit privacy and cookie policies, which are important for compliance and user trust. No advanced analytics or tracking scripts were detected, indicating a minimal user tracking approach. From a security perspective, the site uses HTTPS (implied by canonical URLs), but no explicit security headers were found in the provided data. There is no visible incident response or vulnerability disclosure information, which could be improved to enhance security posture. The WHOIS data aligns well with the website's claims, showing consistent registration details and legitimacy. Overall, the site is a credible and professional platform for a specialized medical society but would benefit from enhanced privacy compliance, security best practices, and transparency measures to improve trust and regulatory adherence.
- JJugendberufsagentur Schleswig-Flensburg
jba-sl-fl.de
Government · Germany
49High
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Jugendberufsagentur Schleswig-Flensburg is a regional government-supported agency focused on assisting youth aged 14 to 25 in the Schleswig-Flensburg district of Germany with career orientation and entry into the workforce. The agency collaborates with multiple public entities including the local employment agency, job center, youth welfare services, and vocational training centers. The website is professionally designed using Joomla CMS with Gantry5 and UIkit frameworks, providing clear navigation and relevant content in German. Technical infrastructure is modern and secure with HTTPS and obfuscated emails to reduce spam. However, some security headers are missing and no explicit incident response or vulnerability disclosure mechanisms are present. Overall, the site demonstrates good privacy compliance with a cookie consent banner and a privacy policy page. The business credibility is high due to clear contact information and official partner links. No advertising or tracking beyond cookie consent is detected, and the content is safe for general audiences.
Healthcare · Germany
49High
NIS2 17 · GDPR 28
NIS2 17 · GDPR 28
The Kassenärztliche Vereinigung Schleswig-Holstein (KVSH) operates as a regional healthcare self-administration body representing approximately 6,100 physicians and psychotherapists in Schleswig-Holstein, Germany. The website serves as an authoritative portal providing comprehensive information on medical billing, contracts, regulations, IT infrastructure in practices, and patient services. It targets medical professionals and patients within the region, offering detailed resources and guidance. The site is built on TYPO3 CMS, indicating a mature and stable technical infrastructure with good mobile optimization and accessibility. Security posture is solid with HTTPS enabled and secure form handling, though improvements are recommended in cookie consent and security header implementation. Overall, the website demonstrates high professionalism and trustworthiness appropriate for a public healthcare institution.
Other
41High
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
The website kulturakademi.de is currently inaccessible, presenting a 403 Forbidden error page that blocks access to any substantive content. Due to this restriction, no business information, contact details, or policy documents are available for analysis. The site appears to be either under maintenance, misconfigured, or access-restricted by server settings. The minimal WHOIS data shows only domain status and name servers without registrant details, limiting trust and legitimacy assessment. Technically, the site uses Google Fonts but lacks detectable scripts, analytics, or security headers. Overall, the digital maturity and security posture cannot be positively assessed given the blocked content and lack of information.
KZ-Gedenkstätte Husum-Schwesing | Erinnern und Handelnkz-gedenkstaette-husum-schwesing.de
Non-profit · Germany
38High
NIS2 17 · GDPR 28
NIS2 17 · GDPR 28
The website kz-gedenkstaette-husum-schwesing.de serves as an informational and memorial platform dedicated to the Husum-Schwesing concentration camp history. It targets a general audience interested in historical remembrance and education. The site operates on WordPress using the Divi theme and integrates OpenStreetMap for location services. The technical infrastructure is standard for small non-profit organizations, with moderate performance and basic mobile optimization. Security posture is limited, with no evident security headers or policies, and privacy compliance is minimal due to the absence of privacy and cookie policies. The domain WHOIS data is limited, showing only name servers from a hosting provider, with no detailed registrant information, which slightly reduces trust but is not uncommon for small organizations. Overall, the site is functional and professional but lacks advanced security and compliance features.
Kreismusikschule Nordfrieslandkreismusikschule-nordfriesland.de
Education · Germany
40High
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
The Kreismusikschule Nordfriesland website serves as the online presence for a regional music school in Germany, providing music education and related services. The site is built on WordPress using the Divi theme, indicating a moderate level of digital maturity with caching and font optimizations. The content is primarily in German and targets local residents interested in music education. While the website is functional and professionally designed, it lacks critical privacy and security documentation such as privacy and cookie policies, which are essential for GDPR compliance. No contact information or social media links were found in the provided content, limiting direct communication channels. The site uses HTTPS with a good SSL configuration but lacks security headers, which could be improved to enhance security posture.
Liedkunst im Schloss vor Husumliedkunst-schloss-vor-husum.de
Other · Germany
38High
NIS2 17 · GDPR 28
NIS2 17 · GDPR 28
Liedkunst im Schloss vor Husum is a well-established cultural festival and masterclass event focused on the art of Lied (German art song), held annually at Schloss vor Husum in Germany. The organization offers educational masterclasses for singers and pianists, hosts concerts, and awards prizes, targeting classical music professionals and enthusiasts. The website reflects a small but reputable cultural entity with a 25-year history, emphasizing artistic excellence and community engagement. Technically, the site is built on WordPress with the Divi theme and multilingual support, indicating moderate digital maturity. The infrastructure includes HTTPS and CAPTCHA protections, but lacks advanced security headers and cookie consent mechanisms. No evident vulnerabilities or suspicious elements were found, though security and privacy policies could be enhanced. Overall, the site is professional, trustworthy, and safe for general audiences.