Medium-risk security reports
99,067 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,190001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
40,151–40,200 of 99,067
AdSpirit GmbHadspirit.de
Technology · Germany
55Medium
NIS2 2 · GDPR 65
NIS2 2 · GDPR 65
AdSpirit GmbH operates a sophisticated AdServer SaaS platform designed for publishers, advertisers, and networks, primarily serving the German and international online marketing sectors. The company positions itself as a leading AdTech provider with over 500 customers and extensive monthly ad impressions, emphasizing a holistic and flexible advertising technology solution. Their platform supports multiple ad formats and integrates advanced optimization and real-time bidding features, catering to diverse client needs. Technically, the website is built on WordPress with modern JavaScript libraries and tracking tools such as Google Tag Manager, Hotjar, and LinkedIn Insight. The site demonstrates good digital maturity with GDPR-compliant consent management and reCAPTCHA integration, although some security headers are missing. Performance and mobile optimization are adequate, supporting a positive user experience. From a security perspective, the site enforces HTTPS and employs standard privacy tools but lacks explicit security policies and incident response contacts. The absence of WHOIS data reduces domain transparency, though the professional presentation and comprehensive contact information mitigate trust concerns. Overall, the security posture is solid but could benefit from enhanced header configurations and published security policies. The overall risk is moderate with no critical vulnerabilities detected. Strategic improvements in security transparency and accessibility would strengthen trust and compliance. The business demonstrates a strong market position with a clear value proposition in the AdTech industry.
Other
64Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
The website formalyzer.com is currently inaccessible, returning a 403 Forbidden error page with no visible content or metadata. This prevents any meaningful analysis of the business, services, or security posture. The domain is registered since 2011 with GoDaddy and uses AWS DNS hosting, indicating a potentially legitimate registration history but no active public-facing website content. Due to the blocked content, no privacy, cookie, or terms of service policies are detectable, nor is there any contact or incident response information available. The lack of accessible content and security headers suggests a poor security posture and minimal digital maturity at this time.
Movimento Nonviolentoazionenonviolenta.it
Non-profit · Italy
73Medium
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Movimento Nonviolento operates a well-established Italian non-profit website focused on promoting peace and nonviolence. The site offers news, campaigns, and resources related to nonviolent activism, targeting individuals and groups interested in social justice and peace movements. The organization maintains a consistent brand presence with active social media channels and a dedicated e-shop domain for related merchandise. Technically, the website is built on WordPress with common plugins and themes, showing moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and cookie consent implemented, though lacking advanced security headers and explicit incident response policies. Overall, the site is trustworthy and professionally maintained, suitable for its non-profit advocacy role.
Blueskyblueskyweb.xyz
Technology
69Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Bluesky is an innovative social media platform focused on creating an open and decentralized social internet. It offers users the ability to find communities, customize their social feeds, and engage with a growing developer ecosystem through public APIs. The platform positions itself as a public benefit corporation emphasizing openness, user control, and interoperability. Technically, the website leverages modern frameworks such as Next.js and React, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security headers and policies are not evident. Privacy compliance is limited on the about page, lacking visible privacy or cookie policies. Overall, Bluesky presents a professional and trustworthy online presence with room for improvement in privacy transparency and security policy disclosures.
- Steinmann
video-stream-hosting.de
Technology · Germany
68Medium
NIS2 10 · GDPR 95
NIS2 10 · GDPR 95
Steinmann operates a professional video streaming and hosting service primarily targeting event agencies, corporations, banks, educational institutions, and public sector clients in Germany. The company emphasizes high-quality livestream and video hosting with strong data protection and personalized professional support. Their market position is supported by over 20 years of experience and thousands of successful projects, with a clear focus on GDPR compliance and secure hosting on German servers. Technically, the website is built on WordPress with modern plugins for SEO, cookie consent, and performance optimization. The site is well-optimized for mobile and accessibility, featuring a fast loading streaming player and comprehensive documentation. Security practices include HTTPS enforcement and cookie consent mechanisms, though some security headers and explicit incident response policies are not published. The security posture is solid but could be improved by adding security headers and publishing a security policy or vulnerability disclosure channel. The absence of WHOIS domain registration data is a notable concern, suggesting the need for verification of domain legitimacy. Overall, the site presents a professional and trustworthy front with minor gaps in security transparency. Recommendations include enhancing security header implementation, publishing a security policy and incident response contacts, and clarifying domain registration details to improve trust and compliance.
Talentrackr Technologies Private Limitedtalentrackr.com
Technology · India
70Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Talentrackr Technologies Private Limited is a recruitment technology company specializing in automating and optimizing recruitment and onboarding processes. Their platform offers a comprehensive suite of services including applicant tracking, resume parsing, digital onboarding, and reporting tools, targeting recruiters, hiring managers, and placement consultants. The company has a presence in India and the US with a history dating back to 2009. Technically, the website employs modern frontend technologies such as Bootstrap and jQuery, providing a responsive and user-friendly experience. However, the absence of WHOIS registration data raises concerns about domain legitimacy. Security posture is moderate with HTTPS assumed and captcha implemented, but lacks explicit security headers and privacy compliance documentation. Overall, the website is professional and trustworthy in content but would benefit from enhanced security and compliance measures.
Stratgik - Your Strategic Partnerstratgik.com
Technology · India
52Medium
NIS2 67 · GDPR 50
NIS2 67 · GDPR 50
Stratgik is a newly established IT services company founded in 2024, specializing in IT strategy consulting, managed IT services, cloud integration, cybersecurity, and e-commerce management. The company positions itself as a strategic partner for businesses seeking to leverage technology for growth and innovation. Their website reflects a professional and modern digital presence with clear service offerings and client engagement channels. Technically, the site uses a modern tech stack including Laravel-based CMS, Bootstrap, jQuery, and various UI libraries, ensuring a responsive and user-friendly experience. Security posture is adequate with HTTPS and CSRF protections, but lacks advanced security headers and published policies. Privacy compliance is partial, with a cookie consent banner but no visible privacy or terms of service pages. Overall, the domain registration data aligns well with the business claims, indicating legitimacy despite the domain's recent creation.
Other
62Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
The website www.unito.it is currently inaccessible due to a Cloudflare security block page. This prevents any meaningful extraction of business, technical, or security information. The page only displays a standard Cloudflare block message indicating that the visitor has been blocked due to triggering security rules. No metadata, forms, or contact information are available for analysis. The lack of accessible content severely limits the ability to assess the company's business model, market position, or technical infrastructure. From a technical perspective, the site is protected by Cloudflare, indicating some level of security infrastructure, but no further details can be gleaned. The security posture cannot be evaluated beyond the presence of Cloudflare's WAF. No privacy, cookie, or terms of service policies are detectable, and no contact or incident response information is available. Overall, the site is currently non-functional for external visitors due to the WAF block, resulting in a very low AI score and inability to perform a comprehensive analysis. For accurate and complete insights, access to the actual website content is required. Strategic recommendations include resolving the WAF blocking issues to allow legitimate users access and ensuring that privacy and security policies are clearly published and accessible.
Fondazione LOGOSarcoiris.tv
Media · Italy
63Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Arcoiris TV is a non-profit web TV platform operated by Fondazione LOGOS, based in Italy. It offers free, ad-free streaming of social, political, religious, and cultural content primarily in Italian and Spanish. The platform has been active since 2003, demonstrating a stable market presence in niche independent media. Technically, the site uses a custom PHP CMS with modern frontend technologies like Bootstrap and jQuery, providing a responsive and user-friendly experience. Security posture is adequate with HTTPS enforced and clientTransferProhibited domain status, but lacks advanced security headers and DNSSEC. Privacy compliance is strong with clear policies and consent mechanisms. Overall, the site is trustworthy, well-maintained, and serves a dedicated audience interested in independent media content.
- RRadio Popolare
radiopopolare.it
Media · Italy
63Medium
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
Radio Popolare is a well-established independent radio broadcaster based in Milan, Italy, operating since 1976. The website serves as a comprehensive platform offering live radio streaming, podcasts, news, and cultural programming primarily targeting Italian-speaking audiences interested in independent media. The business model appears community-supported with donation and subscription options. The site demonstrates consistent branding and good content quality, supported by active social media channels and structured data for SEO. Technically, the website is built on WordPress with modern JavaScript libraries such as jQuery, Modernizr, Wavesurfer.js, and jPlayer for audio playback. SEO is enhanced by the Yoast plugin, and performance is moderate with good mobile optimization. Accessibility is basic but present. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers are not explicitly detected, and no incident response or security policy pages are published. Overall, the site is trustworthy and professional, with clear contact information and privacy policies hosted via Iubenda. However, improvements could be made in cookie consent mechanisms, security headers, and publishing explicit security and incident response policies to enhance compliance and trust. The risk profile is low, with no signs of malicious content or suspicious domain registration patterns. Strategic recommendations include enhancing security headers, adding incident response information, and improving privacy compliance mechanisms.
- ExchangeSumo
exchangesumo.com
Finance · Russia
75Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
ExchangeSumo is an established online platform specializing in monitoring and rating electronic money and cryptocurrency exchangers, primarily serving Russian and Ukrainian speaking users. The website offers real-time exchange rate updates, cashback offers, and a comprehensive search for exchange directions, positioning itself as a trusted resource in the finance sector since 2012. The domain, registered in 2018, aligns well with the business's operational history and market presence. Technically, the site employs modern web technologies including jQuery, Bootstrap, and multiple analytics tools, ensuring a responsive and user-friendly experience across devices. Security-wise, the site enforces HTTPS and uses Cloudflare DNS but lacks DNSSEC and explicit security policies, indicating room for improvement in security posture. Privacy compliance is partial, with no visible cookie consent mechanism or GDPR-specific disclosures. Overall, ExchangeSumo presents a professional and functional service with moderate risk, suitable for users seeking currency exchange information in its target regions.
Nuvolonuvolo.com
Technology
75Medium
NIS2 17 · GDPR 85
NIS2 17 · GDPR 85
Nuvolo is an enterprise-focused technology company specializing in Connected Workplace platforms that integrate asset, facility, and workplace management across multiple industries including healthcare, life sciences, public sector, retail, and education. The company positions itself as a market leader with industry-specific solutions and recognized accolades such as the Verdantix Green Quadrant Leader badge. Their business model is primarily B2B SaaS, targeting large organizations seeking digital transformation in workplace management. Technically, the website is built on WordPress CMS with a modern tech stack including jQuery, Google Tag Manager, Marketo, and other marketing and analytics tools. The site demonstrates good performance, mobile optimization, and SEO best practices. Security posture is solid with HTTPS enforced and use of reCAPTCHA, though explicit security headers and incident response policies are not visible. Overall, the website presents a professional and trustworthy front with comprehensive content and clear navigation. However, the lack of publicly available WHOIS data and absence of direct contact emails or phone numbers slightly reduce trust signals. Privacy and cookie policies are present and GDPR compliant, supporting regulatory adherence. Strategic recommendations include enhancing visible security policies, publishing vulnerability disclosure information, and improving direct contact information availability to strengthen trust and compliance.
Technology
69Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
The website forescout.com is currently inaccessible, returning a 403 Forbidden error page with minimal HTML content. This prevents any direct analysis of website content, metadata, or security features. The domain registration data shows that forescout.com is a well-established domain registered since 2000 with MarkMonitor Inc., a reputable registrar often used by enterprise organizations. The domain status flags indicate strong protections against unauthorized changes, supporting legitimacy. However, the lack of accessible content means no privacy policies, contact information, or business descriptions could be extracted. The security posture cannot be evaluated from the website itself due to the access restriction. Overall, the domain appears legitimate and consistent with an established technology company, but the website content is currently blocked, limiting further analysis.
Arubaaruba.com
Hospitality
57Medium
NIS2 2 · GDPR 65
NIS2 2 · GDPR 65
The website www.aruba.com serves as a multilingual tourism and vacation information portal promoting Aruba as a top island destination. It targets tourists and travelers seeking vacation planning resources and provides content in multiple languages. The site is hosted on Amazon CloudFront and uses modern JavaScript libraries such as jQuery, Lazysizes, and Google Tag Manager for analytics and marketing. The technical infrastructure is moderately optimized for performance and mobile responsiveness, with good SEO practices evident. Security posture is moderate with HTTPS implied but lacks explicit security headers and detailed security policies. Privacy compliance is addressed through a visible cookie consent mechanism and a comprehensive privacy policy, indicating GDPR awareness. However, no WHOIS data was retrievable for the domain, which limits trust verification and domain legitimacy assessment. Overall, the site is professional and safe for general audiences but would benefit from enhanced security transparency and contact information.
Media · Germany
66Medium
NIS2 47 · GDPR 100
NIS2 47 · GDPR 100
The website sifa-sibe.de is a professional online portal dedicated to occupational safety and health, targeting safety officers and engineers in Germany. Operated by Dr. Curt Haefner-Verlag GmbH under the konradin mediengruppe, it offers reliable information, subscription-based content, training seminars, and downloadable resources. The site holds a solid market position within its niche, supported by a consistent brand presence and comprehensive content offerings. Technically, the site is built on WordPress with modern SEO and analytics tools, including Google Tag Manager and Matomo, and integrates a paywall system via Plenigo. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Overall, the site is trustworthy, compliant with GDPR, and provides a good user experience with clear navigation and mobile optimization.
- Industrie.de
batterie-produktion.de
Energy · Germany
66Medium
NIS2 2 · GDPR 100
NIS2 2 · GDPR 100
batterie-produktion.de is a specialized industry news and information platform focused on battery production, development, recycling, and e-mobility sectors. It serves industry professionals and companies by providing up-to-date articles, webinars, company directories, and event information. The site is part of the Konradin Medien GmbH group, a reputable media company in Germany. Technically, the website is built on WordPress with modern SEO and consent management tools, ensuring compliance with GDPR and good user experience across devices. Security posture is solid with HTTPS, consent management, and no visible vulnerabilities, though some security headers could be improved. Overall, the site is professional, trustworthy, and well-positioned in its niche market.
Information Sharing and Analysis Centerisacfoundation.org
Technology · India
58Medium
NIS2 65 · GDPR 58
NIS2 65 · GDPR 58
Information Sharing and Analysis Center (ISAC) is a leading Indian non-profit organization specializing in advancing professional ethics and national cybersecurity awareness. The organization offers a broad portfolio of cybersecurity certifications, training programs, internships, and awareness initiatives targeting cybersecurity professionals, students, and organizations. ISAC holds a strong market position as a trusted provider of the National Security Database (NSD) certifications and related programs, supported by partnerships and accreditations. The website reflects a professional and consistent brand image with good content quality and clear navigation.
Other
68Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
The website at swmh-datenschutz.de is currently inaccessible due to an Access Denied error, likely caused by a Web Application Firewall or other security mechanism. This prevents any meaningful extraction of business, technical, or security content from the site. The domain is active with multiple name servers, indicating it is maintained, but no registrant or business information is available to verify legitimacy or business operations. Due to the lack of accessible content, no privacy, cookie, or security policies can be evaluated, and no contact information or forms are present. The absence of metadata, scripts, or external links further limits the assessment. Overall, the site’s digital maturity and security posture cannot be properly assessed under these conditions.
Standard Notesstandardnotes.com
Technology
75Medium
NIS2 28 · GDPR 53
NIS2 28 · GDPR 53
Standard Notes is a privacy-focused, end-to-end encrypted note-taking application offering secure, cross-platform syncing and offline access. The company positions itself as an ethical, independent provider with open source code and independent security audits, targeting privacy-conscious users and professionals. Their business model relies on revenue from paying users without venture capital funding, emphasizing sustainability and trust. Technically, the website is built on modern frameworks like Gatsby and React, hosted with reputable providers, and optimized for performance and mobile use. Security posture is strong with HTTPS, zero-knowledge encryption, and audited code, though DNSSEC is not enabled and no cookie consent mechanism is present. Overall, the site is professional, trustworthy, and well-structured, with minimal tracking and good privacy compliance.
- GGoTo
gotowebinar.com
Technology · United States
68Medium
NIS2 17 · GDPR 95
NIS2 17 · GDPR 95
GoTo operates a leading webinar and virtual conference platform known as GoTo Webinar, targeting businesses and professionals seeking reliable and scalable online event solutions. The platform offers a comprehensive suite of features including interactive polls, pre-recorded webinars, analytics, and integrations with popular CRM and business tools. The company positions itself as a market leader with millions of events hosted annually and strong customer endorsements. Technically, the website employs a modern technology stack with integrations such as Google Tag Manager, Microsoft Application Insights, and TrustArc for consent management, ensuring robust analytics and privacy compliance. The site is well-optimized for performance, mobile responsiveness, and accessibility, reflecting a mature digital infrastructure. From a security perspective, GoTo demonstrates strong practices including HTTPS enforcement, security headers, and enterprise-grade security claims. However, explicit incident response contacts and vulnerability disclosure mechanisms are not prominently published, representing areas for improvement. The absence of WHOIS data limits domain registration transparency but does not detract from the overall legitimacy of the business. Overall, GoTo's website and platform present a professional, secure, and user-friendly experience with comprehensive privacy and compliance measures. The company is well-positioned in the technology sector with a strong brand and trusted services.
- BBarnekreftforeningen
barnekreftforeningen.no
Non-profit · Norway
65Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Barnekreftforeningen is a Norwegian non-profit organization dedicated to supporting families affected by childhood cancer and funding research to improve survival and quality of life. The organization operates a comprehensive website built on Drupal 9, featuring rich content, event information, fundraising campaigns, and a dedicated online store. The site is well-structured, mobile-optimized, and includes GDPR-compliant privacy and cookie policies. Social media integration and clear contact details enhance transparency and engagement. Technically, the site uses modern libraries and tools such as Google Tag Manager and Chatbase chatbot, ensuring a good user experience and moderate performance. Security posture is generally good with HTTPS enforced and cookie consent implemented, but lacks visible security headers and published security policies. WHOIS data is unavailable, which raises some concerns about domain transparency, though the website content and external trust signals strongly support legitimacy.
Instabankinstabank.de
Finance · Norway
72Medium
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
Instabank is a Norwegian-based fully digital challenger bank founded in 2016, targeting private and business customers primarily in Germany and Nordic countries. The bank offers a range of financial products including credit cards, rental deposit accounts, loans, and insurance, emphasizing simplicity, accessibility, and innovation. The website reflects a modern digital infrastructure built on WordPress and Elementor, integrating multiple marketing and analytics tools with GDPR-compliant cookie consent mechanisms. Security posture is solid with HTTPS enforcement and secure cookie handling, though explicit security policies and incident response contacts are not publicly disclosed. Overall, the site presents a professional and trustworthy digital banking platform with clear contact information and strong branding consistency.
Instabank ASAinstabank.fi
Finance · Norway
65Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Instabank ASA operates as a digital bank primarily serving the Finnish market with a focus on unsecured loans, loan consolidation, credit cards, savings accounts, and loan protection insurance. The company positions itself as a customer-friendly, easy-to-use digital banking solution, leveraging modern technology to provide fast and accessible financial services. The website reflects a medium-sized financial institution with a clear brand identity and consistent messaging aligned with its Norwegian headquarters. Technically, the site is built on WordPress with Elementor, supported by modern analytics and marketing tools such as Google Tag Manager, Facebook Pixel, and Hotjar, hosted on Microsoft Azure cloud infrastructure. Security posture is strong with HTTPS, DNSSEC, and cookie consent mechanisms, though some security headers could be improved. The domain registration is transparent and consistent with the business claims, enhancing trustworthiness. Overall, the website and business demonstrate a mature digital presence suitable for a financial services provider.
Instabank ASAinsta.bank
Finance · Norway
69Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Instabank ASA is a Nordic challenger bank founded in 2016 and headquartered in Oslo, Norway. The company operates as a fully digital bank offering a range of financial products including loans, savings, credit cards, and insurance to private and corporate customers. Positioned as a leading Nordic challenger, Instabank is publicly listed on Euronext Growth and emphasizes sustainability through its Miljøfyrtårn certification. The website serves as an investor relations hub, providing news, reports, and live share data to stakeholders. Technically, the site is built on WordPress with Elementor, delivering a professional and responsive user experience. Security posture is solid with HTTPS and domain transfer protections, though improvements such as DNSSEC and security headers are recommended. Privacy compliance is currently lacking, with no visible privacy or cookie policies. Overall, the site reflects a credible and professional fintech entity with room for enhanced security and compliance documentation.
Asmeformasmeform.it
Education · Italy
54Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Asmeform is an Italian educational organization specializing in training and certification services primarily for public administration professionals. Their offerings include courses in technical and contractual subjects, digital privacy, English language certifications, and accredited professional certifications. The platform is built on Moodle, indicating a structured learning management system approach. The website is well-branded and targets public sector employees and individuals seeking professional development in Italy. Technically, the site uses a modern Moodle LMS stack with YUI, jQuery, and RequireJS, delivering moderate performance and good mobile optimization. However, the site lacks some advanced security headers and explicit privacy and cookie policies, which are important for compliance and user trust. The SSL configuration is excellent, ensuring secure communications. From a security perspective, the site enforces HTTPS and session timeouts but does not provide incident response or vulnerability disclosure information. No WAF or blocking mechanisms are detected, and no vulnerabilities are apparent from the content. Contact information is clearly provided, enhancing business credibility. Overall, the site is professional, safe, and trustworthy but would benefit from improved privacy compliance and enhanced security headers to strengthen its security posture and regulatory adherence.
Finance · Belgium
72Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
VGD Accountants en Belastingconsulenten is a professional financial and business consultancy firm based in Belgium, offering a broad range of services including accountancy, audit, tax, legal, HR advisory, CFO services, corporate finance, estate planning, and sustainability consulting. The company positions itself as a trusted partner for entrepreneurs and business owners, emphasizing expert support across all facets of entrepreneurship. Their market presence is solidified by membership in recognized professional bodies such as IBR and ITAA and affiliation with the Nexia network. Technically, the website is built on Craft CMS and employs modern web technologies including JavaScript, CSS, and HTML5, with performance optimizations such as CDN usage (Cloudfront) and Google Tag Manager for analytics and marketing. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS, uses CSRF tokens in forms, and integrates Google reCAPTCHA v3 to protect form submissions. Cookie consent mechanisms and comprehensive privacy policies demonstrate good privacy compliance. However, explicit security headers like X-Content-Type-Options and X-Frame-Options are not clearly present, and no public security or incident response policies were found. Overall, the website is professional, trustworthy, and secure with minor areas for improvement in explicit security policy publication and header implementation. The risk profile is low, with no suspicious or malicious content detected, making it a reliable digital presence for the company.
HZ CONTAINERS.comhz-containers.com
Transportation · Czech Republic
63Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
HZ CONTAINERS.com is an established online business specializing in the sale and rental of new and used shipping containers worldwide. The company offers a broad range of container types, sizes, and accessories, targeting businesses and individuals requiring container logistics solutions. The website supports multiple languages, enhancing its global reach and customer accessibility. The business model focuses on e-commerce combined with logistics services, positioning itself as a reliable provider in the transportation sector. Technically, the website is built on WordPress with Yoast SEO and Google Tag Manager integration, hosted with Cloudflare DNS services. The site demonstrates good digital maturity with responsive design, SEO optimization, and cookie consent mechanisms compliant with GDPR. Performance is moderate, with room for improvement in accessibility and security headers. From a security perspective, the site uses HTTPS with a valid SSL configuration and domain transfer/update protections. However, DNSSEC is not enabled, and security headers are not explicitly detected. There is no published security policy or incident response contact information, which could be improved to enhance trust and compliance. No vulnerabilities or suspicious activities were detected in the content or technical setup. Overall, the website presents a professional and trustworthy front for its business, with good content quality and user experience. Strategic recommendations include enabling DNSSEC, adding security headers, publishing a security policy, and providing incident response contacts to strengthen security posture and compliance. These improvements will support the company’s credibility and protect customer data more effectively.
IS4IT GmbHis4it.de
Technology · Germany
69Medium
NIS2 10 · GDPR 80
NIS2 10 · GDPR 80
IS4IT GmbH is a German managed service provider and consulting company specializing in enabling digital sovereignty for small and medium-sized enterprises. Their services focus on providing secure, resilient, and compliant IT solutions that allow clients to operate independently from global IT corporations and external dependencies. The company positions itself as a trusted partner for German SMEs seeking future-proof IT strategies and standardized secure systems. Technically, the website is built on WordPress using modern plugins such as LayerSlider, WPBakery, and Elementor, with a GDPR-compliant cookie consent mechanism in place. The site is well-structured, mobile-optimized, and professionally designed, reflecting a mature digital presence. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security policies and incident response contacts are not published. Overall, the website presents a trustworthy and professional image with good privacy compliance and minimal tracking.
Dottore... ma è vero che?dottoremaeveroche.it
Healthcare · Italy
75Medium
NIS2 17 · GDPR 95
NIS2 17 · GDPR 95
Dottore... ma è vero che? is a health information portal operated under the auspices of FNOMCeO, the Italian National Federation of Orders of Surgeons and Dentists. The website aims to provide accessible, expert-written health information to the general public, strengthening the relationship between patients and healthcare professionals. The portal is positioned as an authoritative source of medical knowledge in Italy, leveraging the credibility of FNOMCeO. Technically, the site is built on WordPress with a modern plugin ecosystem including Yoast SEO, Formidable Forms, and GDPR compliance tools. The infrastructure supports HTTPS and DNSSEC, indicating a good security baseline. However, explicit privacy policies and terms of service are not found, which is a compliance gap. Security posture is solid with no obvious vulnerabilities or exposed sensitive data, but incident response and vulnerability disclosure mechanisms are absent. Overall, the website is professional, trustworthy, and well-optimized for SEO and mobile use, serving a broad audience seeking reliable health information.
- AO Kaspersky Lab
kaspersky.gr
Technology · Greece
74Medium
NIS2 47 · GDPR 33
NIS2 47 · GDPR 33
Kaspersky is a globally recognized cybersecurity company offering advanced antivirus and security solutions for both home users and businesses. The website www.kaspersky.gr serves the Greek market with localized content and product offerings, emphasizing comprehensive protection, privacy, and performance. The company holds a strong market position supported by numerous industry awards and certifications. Technically, the site is built on modern frameworks like React and Next.js, with robust analytics and consent management tools integrated. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. Overall, the site reflects a mature digital presence aligned with the company's reputation.
- AO Kaspersky Lab
kaspersky.ro
Technology · Romania
70Medium
NIS2 47 · GDPR 33
NIS2 47 · GDPR 33
Kaspersky is a globally recognized cybersecurity company founded in 1997, providing advanced security solutions for both individual consumers and businesses. The website www.kaspersky.ro serves the Romanian market with localized content, showcasing a broad portfolio of products including antivirus software, VPN services, password management, and parental controls. The company holds a strong market position supported by numerous industry awards and certifications, reflecting its commitment to quality and innovation. Technically, the website employs modern frameworks such as React and Next.js, ensuring a fast, responsive, and accessible user experience. Security measures are robust, with HTTPS enforcement, comprehensive security headers, and cookie consent mechanisms in place. However, WHOIS data is privacy protected under ROTLD policies, limiting transparency on domain registration details. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with privacy regulations.
- AO Kaspersky Lab
kaspersky.cz
Technology · Czech Republic
74Medium
NIS2 47 · GDPR 33
NIS2 47 · GDPR 33
AO Kaspersky Lab is a globally recognized leader in cybersecurity solutions, offering premium protection products for both households and businesses. Founded in 1997 by Eugene Kaspersky, the company has grown into one of the largest private cybersecurity firms worldwide. Their Czech website targets local consumers and enterprises with a comprehensive portfolio including antivirus software, VPN services, password management, and parental controls. The brand is well-positioned in the market, supported by numerous independent awards and certifications, reflecting strong trust and credibility. Technically, the website leverages modern frameworks such as React and Next.js, ensuring fast performance, mobile responsiveness, and good accessibility. The use of advanced analytics and consent management tools demonstrates digital maturity and compliance with privacy regulations. Security best practices are evident through HTTPS enforcement and robust security headers, although the absence of publicly available WHOIS data slightly detracts from transparency. The security posture is strong, with no visible vulnerabilities or exposed sensitive data. However, the lack of a public incident response policy or dedicated security contact channels suggests room for improvement in transparency and readiness. Overall, the site presents a professional, trustworthy front with comprehensive content and user-friendly navigation. Strategically, AO Kaspersky Lab should focus on enhancing WHOIS transparency, publishing detailed security policies, and maintaining rigorous third-party script audits to uphold its market leadership and trustworthiness.
- AO Kaspersky Lab
kaspersky.fi
Technology · Finland
74Medium
NIS2 59 · GDPR 33
NIS2 59 · GDPR 33
AO Kaspersky Lab is a globally recognized leader in cybersecurity solutions, offering a wide range of products and services for both home users and enterprises. Founded in 1997, the company has established a strong market position with award-winning antivirus, VPN, password management, and parental control solutions. The Finnish localized website reflects a mature business model targeting both B2C and B2B segments with comprehensive product offerings and strong brand consistency. Technically, the website employs modern frameworks such as React and Next.js, ensuring fast performance, mobile optimization, and good accessibility. Security posture is robust with HTTPS enforcement, security headers, and no visible vulnerabilities. Privacy compliance is well addressed with clear policies and GDPR adherence. Overall, the site demonstrates high professionalism and trustworthiness, supported by multiple certifications and positive customer testimonials.
- AO Kaspersky Lab
kaspersky.se
Technology · Sweden
72Medium
NIS2 59 · GDPR 33
NIS2 59 · GDPR 33
Kaspersky is a globally recognized cybersecurity company founded in 1997, offering a wide range of security solutions for both home users and enterprises. The Swedish localized website provides comprehensive information about their products, including antivirus, VPN, password management, and parental controls, targeting both consumers and business customers. The company holds a strong market position as a leading private cybersecurity firm with numerous awards and certifications validating their product quality and security effectiveness. Technically, the website leverages modern frameworks such as React and Next.js, ensuring a fast, accessible, and mobile-optimized user experience. Security best practices are well implemented, including HTTPS enforcement and robust security headers, with no visible vulnerabilities or exposed sensitive data. Privacy compliance is evident through detailed privacy and cookie policies with consent mechanisms, aligning with GDPR requirements. Overall, the site reflects a mature digital presence with strong business credibility and trust indicators.
- AO Kaspersky Lab
kaspersky.pt
Technology · Portugal
74Medium
NIS2 47 · GDPR 33
NIS2 47 · GDPR 33
AO Kaspersky Lab is a leading global cybersecurity company founded in 1997, offering a wide range of security products including antivirus, internet security, VPN, password management, and parental controls. The company targets both individual consumers and businesses, maintaining a strong market position supported by numerous industry awards and a comprehensive product portfolio. The website reflects a mature digital presence with professional design, clear navigation, and multilingual support, emphasizing user privacy and security. Technically, the site leverages modern frameworks such as React and Next.js, integrates advanced analytics and A/B testing tools, and enforces strong security headers and HTTPS encryption. While the site excels in privacy compliance and user experience, it lacks explicit public documentation on security policies and incident response procedures. Overall, the website and domain registration details indicate a trustworthy and legitimate business with a high level of professionalism and security maturity.
- Kaspersky
kaspersky.nl
Technology · Netherlands
74Medium
NIS2 59 · GDPR 33
NIS2 59 · GDPR 33
Kaspersky is a globally recognized cybersecurity company founded in 1997, offering a wide range of security solutions for both private consumers and businesses. The website targets Dutch-speaking users with localized content and provides comprehensive information about their products, services, and corporate transparency. The company holds a strong market position with numerous industry certifications and awards, emphasizing their commitment to security and privacy. Technically, the website is built on modern frameworks like Next.js and React, optimized for performance and mobile devices, and integrates advanced analytics and consent management tools. Security posture is robust with HTTPS, security headers, and no visible vulnerabilities. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site reflects a mature, professional, and trustworthy cybersecurity brand.
- Kaspersky
kaspersky.it
Technology · Italy
72Medium
NIS2 59 · GDPR 33
NIS2 59 · GDPR 33
Kaspersky is a globally recognized leader in cybersecurity solutions, offering a wide range of products and services for both private users and businesses. Established in 1997, the company has built a strong market position through its advanced threat detection technologies, comprehensive protection suites, and commitment to transparency and customer trust. The website reflects this maturity with professional design, clear navigation, and detailed product information tailored to diverse audiences. Technically, the site leverages modern frameworks like React and Next.js, ensuring fast performance and mobile optimization. Security posture is robust, with HTTPS enforcement, security headers, and no visible vulnerabilities. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, Kaspersky's digital presence aligns well with its enterprise stature and industry leadership.
- Kaspersky
kaspersky.fr
Technology · France
72Medium
NIS2 59 · GDPR 33
NIS2 59 · GDPR 33
Kaspersky is a globally recognized cybersecurity company founded in 1997, offering premium security solutions for both individual consumers and businesses. The website reflects a mature digital presence with comprehensive product information, customer testimonials, and transparency about security and privacy practices. The company holds a strong market position as a leader in cybersecurity, supported by numerous awards and certifications. Technically, the site uses modern frameworks such as React and Next.js, ensuring good performance and mobile optimization. Security posture is strong with HTTPS enforcement, security headers, and privacy compliance, although explicit vulnerability disclosure channels are not prominently published. Overall, the site demonstrates high professionalism and trustworthiness, though the lack of WHOIS data transparency slightly reduces domain registration trust.
- AO Kaspersky Lab
kaspersky.dk
Technology · Denmark
74Medium
NIS2 59 · GDPR 48
NIS2 59 · GDPR 48
Kaspersky is a globally recognized private cybersecurity company founded in 1997, offering a wide range of cybersecurity products and services for home users and enterprises. The website presents a professional and comprehensive portfolio of antivirus, VPN, password management, and parental control solutions, supported by numerous industry awards and certifications. The company targets both individual consumers and business customers, emphasizing protection, performance, and ease of use. Technically, the website employs modern frameworks such as React and Next.js, with strong mobile optimization and accessibility features. Security posture is robust, with HTTPS enforcement, security headers, and privacy compliance including GDPR. However, the lack of accessible WHOIS data limits domain registration trust analysis. Overall, the site reflects a mature, trustworthy cybersecurity brand with a strong market position.
- Kaspersky
kaspersky.de
Technology · Germany
74Medium
NIS2 64 · GDPR 45
NIS2 64 · GDPR 45
Kaspersky is a globally recognized cybersecurity company founded in 1997, offering a wide range of security solutions for both private users and enterprises. The website presents a professional and comprehensive overview of their products, including antivirus, VPN, password management, and enterprise security solutions. The company holds a strong market position supported by numerous industry awards and certifications. Technically, the website uses modern frameworks such as React and Next.js, ensuring fast performance, mobile optimization, and good accessibility. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website reflects a mature digital presence aligned with the company's reputation and business scale.
- AO Kaspersky Lab
kaspersky.com
Technology
70Medium
NIS2 59 · GDPR 85
NIS2 59 · GDPR 85
Kaspersky is a globally recognized cybersecurity company founded in 1997, providing advanced cybersecurity solutions for both home users and businesses. The company offers a range of products including antivirus software, internet security, VPN services, password management, and parental controls. It holds a strong market position supported by numerous independent awards and certifications, reflecting its commitment to quality and security. The website targets a broad audience from individual consumers to enterprises, emphasizing ease of use and comprehensive protection.
КурсЕкспертkurs.expert
Finance · Russia
67Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
КурсЕксперт is a Russian-language online platform specializing in monitoring and analyzing electronic currency exchangers. It offers users interactive tools to find the best exchange rates, cashback rewards, and user reviews, positioning itself as a leader in the niche of currency exchange analysis within the Russian-speaking market. The website is well-structured, content-rich, and provides real-time data tailored to user preferences. Technically, the site employs modern JavaScript libraries, Google Analytics for tracking, and Crisp Chat for customer support, indicating a mature digital infrastructure. Security-wise, the site enforces HTTPS and uses secure forms but lacks some advanced security headers and explicit incident response policies. The absence of WHOIS data due to TLD limitations poses a moderate trust challenge, but the site's professionalism and active social presence mitigate this risk. Overall, КурсЕксперт presents a credible and functional service with room for improvement in privacy compliance and security transparency.
- Asha Hospital
asha-hospital.com
Healthcare · India
63Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Asha Hospital is a small healthcare provider based in Kamalanga, Odisha, India, operating as a unit of the Humane Organisation for People and Environment. The hospital focuses on primary care, first aid, pharmacy, and general medicine services aimed at improving healthcare accessibility and outcomes for the local community. The website is built on the Wix platform, indicating a moderate level of digital maturity with standard web technologies and moderate performance. The site is mobile optimized and provides clear navigation and relevant content for its target audience. Security posture is moderate with HTTPS usage but lacks advanced security headers and policies. The absence of WHOIS registration data raises concerns about domain legitimacy, although the website content appears professional and trustworthy. Privacy and cookie policies are missing, indicating compliance gaps. Overall, the site serves its business purpose but requires improvements in security and compliance to enhance trust and protection.
GMR Airports Limiteddelhidutyfree.co.in
Retail · India
68Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Delhi Duty Free, operated by GMR Airports Limited, is a prominent duty-free retailer serving travelers at Indira Gandhi International Airport, New Delhi. The website offers a broad range of premium duty-free products including liquor, perfumes, beauty products, and confectionery. The business model focuses on e-commerce with a click & collect service tailored for airport customers, targeting adult travelers aged 25 and above. The company is well-established with a domain age consistent with its corporate history and strong branding aligned with its parent company, GMR Airports Limited. Technically, the website is built on Magento 2, leveraging modern JavaScript frameworks and libraries such as RequireJS and jQuery. It integrates multiple analytics platforms including Google Analytics and Matomo for comprehensive user tracking and marketing insights. The site demonstrates good mobile optimization and SEO practices, although accessibility could be enhanced further. From a security perspective, the site enforces HTTPS, uses CAPTCHA on critical forms, and implements age verification to comply with legal requirements for alcohol sales. However, some security headers are not explicitly detected and could be improved to harden the security posture. Privacy and cookie policies are present with consent mechanisms, indicating a good level of GDPR compliance. Overall, the website presents a professional, trustworthy, and compliant online presence for a large retail operation within the transportation sector. Strategic improvements in security headers and accessibility, along with enhanced incident response transparency, would further strengthen its security and compliance posture.
GMR Airports Limited – Hyderabad Duty Freethehyderabaddutyfree.com
Retail · India
70Medium
NIS2 2 · GDPR 58
NIS2 2 · GDPR 58
The Hyderabad Duty Free website is an e-commerce platform operated by GMR Airports Limited, offering a wide range of duty free products including perfumes, liquor, confectionery, and lifestyle items targeted primarily at travelers at Rajiv Gandhi International Airport in Hyderabad, India. The business model focuses on retail sales with additional services such as personal shopper and travel retail exclusives. The website demonstrates a consistent brand presence and targets adult consumers, especially given the age-restricted nature of many products.
- MManohar International Airport (GOX) Goa
miagoaairport.com
Transportation · India
72Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Manohar International Airport (GOX) Goa operates as a modern international airport serving the Goa region, providing domestic and international flight services along with passenger amenities such as transport, retail, and parking. The website reflects a professional digital presence with multimedia content, structured data, and comprehensive service information. Technically, the site uses modern JavaScript libraries and tracking tools, ensuring good performance and mobile optimization. Security posture is strong with HTTPS, security headers, and reCAPTCHA on forms, though privacy compliance could be improved by adding cookie consent mechanisms. WHOIS data is unavailable, which slightly reduces transparency but the website's branding and contact information strongly indicate legitimacy. Overall, the site is well-positioned to serve its target audience of travelers and tourists with a trustworthy and user-friendly platform.
Rugby Premier League | Official Websiterugbypremierleague.in
Other · India
72Medium
NIS2 10 · GDPR 35
NIS2 10 · GDPR 35
The Rugby Premier League official website serves as a digital platform providing comprehensive information about the Rugby Premier League, including news, match fixtures, scores, and team updates. The site targets rugby fans and sports enthusiasts primarily in India, offering ticket purchase links and detailed match data. Technically, the website is built using Vue.js (version 2.6.10) and incorporates modern frontend libraries such as Swiper.js for interactive elements. Google Tag Manager is used for analytics and tracking purposes. The site is mobile-optimized and presents a professional design with good navigation and content relevance. Security-wise, the website uses HTTPS with a good SSL configuration but lacks important security headers and explicit security policies. Privacy compliance is weak due to the absence of privacy and cookie policies, and no contact information is provided for users or security incidents. Overall, the website is functional and trustworthy but would benefit from enhanced privacy and security practices to improve user trust and compliance.
- PPrivacyShield
privacyshield.ai
Technology · United States
60Medium
NIS2 59 · GDPR 95
NIS2 59 · GDPR 95
PrivacyShield is a recently founded (2023) technology company specializing in AI-powered privacy management solutions. Their platform automates critical privacy operations such as data discovery, DSAR management, consent management, and compliance reporting, targeting privacy teams and enterprises globally. Positioned as a leading solution for compliance with regulations including India's DPDPA, GDPR, and CCPA/CPRA, PrivacyShield leverages modern web technologies and AI to deliver an intuitive and comprehensive privacy management experience. Technically, the website is well-constructed with responsive design, modern CSS frameworks, and structured data for SEO. Security posture is good with HTTPS and domain protections, though some security headers and explicit policies could be improved. Overall, the company demonstrates strong business credibility with transparent leadership and a clear market focus, though direct contact details are limited to a contact form. The domain registration is privacy protected but consistent with the company's profile and history.
- UUpsellit
upsellit.com
Technology
70Medium
NIS2 17 · GDPR 85
NIS2 17 · GDPR 85
Upsellit is a technology-driven conversion rate optimization (CRO) agency specializing in personalized solutions to help e-commerce businesses recapture lost sales, increase average order value, and enhance customer lifetime value. The website demonstrates a professional digital presence built on WordPress, integrating advanced marketing and analytics tools such as HubSpot, Google Analytics, and Facebook Pixel. The technical infrastructure is modern and well-implemented, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in security headers and explicit incident response policies. Overall, the website reflects a credible and trustworthy business with a focus on digital marketing services.
Technology · India
58Medium
NIS2 65 · GDPR 58
NIS2 65 · GDPR 58
Information Sharing and Analysis Center (ISAC) is a prominent Indian non-profit organization dedicated to advancing professional ethics, national cybersecurity, and awareness. The organization offers a wide range of cybersecurity certifications, training programs, internships, and awareness initiatives targeting cybersecurity professionals, students, and government/private sector entities in India. ISAC holds a strong market position as a leading cybersecurity education provider with recognized certifications under the National Security Database (NSD) program. The website reflects a professional and well-structured digital presence, leveraging WordPress with Elementor and SEO tools to deliver content effectively. The technical infrastructure is modern and adequately optimized for performance and mobile devices, hosted by GoDaddy.com, LLC. Security posture is good with HTTPS enabled and domain locking, though DNSSEC is not enabled, which is a recommended improvement. Privacy and cookie policies are present and comprehensive, supporting GDPR compliance. No WAF or blocking mechanisms were detected, and the website content is fully accessible and safe for general audiences. Overall, ISAC demonstrates a credible and trustworthy online presence aligned with its mission and business model.