Medium-risk security reports
99,066 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,190001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
40,801–40,850 of 99,066
Pancreatic Cancer UKpancreaticcancer.org.uk
Healthcare · United Kingdom
66Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Pancreatic Cancer UK is a dedicated UK-based non-profit charity focused on providing specialist support to people affected by pancreatic cancer, funding vital research, raising awareness, and campaigning for change. The organization operates a support line, funds research projects, and offers extensive information resources for patients, families, and health professionals. Their market position is strong within the UK healthcare charity sector, with a clear mission to improve outcomes for pancreatic cancer patients. Technically, the website is built on WordPress with a modern tech stack including jQuery, Google Tag Manager, Hotjar, and Visual Website Optimizer. The site demonstrates good mobile optimization, accessibility, and SEO practices, supported by a comprehensive consent management platform (OneTrust) for privacy compliance. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS, includes multiple security headers, and avoids exposing sensitive data. However, it lacks publicly available security policies, incident response contacts, and vulnerability disclosure mechanisms, which are recommended for enhanced trust and compliance. Overall, the website presents a low-risk profile with strong business credibility and professional digital presence. Strategic recommendations include publishing security and incident response policies, adding vulnerability disclosure information, and continuous monitoring of third-party scripts to maintain security posture.
- Pharmaceutical Supply Chain Initiative (PSCI)
pscinitiative.org
Healthcare · United Kingdom
69Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
The Pharmaceutical Supply Chain Initiative (PSCI) is a collaborative group of pharmaceutical and healthcare companies focused on driving responsible value chains within the pharmaceutical industry. Representing over 70% of the industry by revenue with 81 member companies, PSCI provides shared audit programs, training, and resources to improve safety, environmental, and social outcomes in supply chains globally. The website reflects a professional and consistent brand with clear navigation and relevant content targeted at industry stakeholders, suppliers, and auditors. Technically, the website uses a modern but straightforward tech stack including jQuery, FontAwesome, Google Analytics, and Vimeo for video content. It is hosted on a DigitalOcean IP and uses HTTPS with a clientTransferProhibited domain status, indicating good domain security practices. However, DNSSEC is not enabled and no explicit security headers were detected, suggesting room for improvement in security hardening. From a security posture perspective, the site enforces HTTPS and uses domain transfer protection but lacks visible security policies, incident response contacts, and cookie consent mechanisms, which are important for GDPR compliance and user trust. Analytics usage is moderate with Google Analytics and Tag Manager, but privacy compliance is basic due to missing cookie consent and limited privacy policy details. Overall, the website is trustworthy, professionally maintained, and serves its business purpose well. Strategic recommendations include enabling DNSSEC, adding security headers, publishing clear security and incident response policies, and implementing cookie consent to improve privacy compliance and security posture.
- SScience Based Targets Initiative
sciencebasedtargets.org
Energy
75Medium
NIS2 47 · GDPR 88
NIS2 47 · GDPR 88
The Science Based Targets Initiative website serves as a platform to promote ambitious corporate climate action by encouraging companies to set science-based emissions reduction targets. The initiative positions itself as a leader in sustainability and corporate responsibility within the energy sector. The website content is professionally presented, targeting corporations and businesses committed to reducing their carbon footprint and driving sustainable growth. The technical infrastructure includes modern JavaScript frameworks and third-party analytics and marketing tools such as Google Tag Manager, Hotjar, and Visual Website Optimizer, indicating a mature digital presence. However, the website lacks explicit privacy and cookie policies, which are critical for GDPR compliance and user trust. Security posture is moderate with HTTPS enabled and domain registration protected by privacy services, but DNSSEC is not enabled and security headers are not evident. Overall, the site is trustworthy and professionally maintained but would benefit from enhanced privacy compliance and security transparency.
FarmaciaVirtuale.itfarmaciavirtuale.it
Healthcare · Italy
65Medium
NIS2 17 · GDPR 33
NIS2 17 · GDPR 33
FarmaciaVirtuale.it is a specialized online journal dedicated to providing news, professional updates, and resources for pharmacists and the pharmacy sector in Italy. Established in 2007, it serves a niche audience of pharmacy professionals with regularly updated content including news articles, interviews, event information, and newsletters. The website uses WordPress CMS with modern performance optimizations and integrates analytics tools such as Google Analytics and Fathom Analytics. While the site employs HTTPS and some security best practices, it lacks explicit privacy and terms of service pages and could improve security headers and contact transparency. Overall, it presents a professional and trustworthy digital presence within its sector.
—
58Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
- The Wom
thewom.it
Media · Italy
65Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
The Wom is a digital media brand owned by Gruppo Mondadori, targeting young women with content focused on beauty, fashion, wellness, lifestyle, culture, and travel. The website is professionally designed, SEO optimized, and integrates well with social media platforms, reflecting a mature digital presence. Technically, it is built on WordPress with modern libraries such as Swiper.js and uses Google Analytics and Tag Manager for analytics and tracking. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms in place, although explicit security policies and incident response details are not published. Overall, the website is trustworthy, compliant with GDPR, and well-positioned in the Italian digital media market.
- Viatris Inc.
viatris.co.uk
Healthcare · United Kingdom
64Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Viatris Inc. is a global healthcare and pharmaceutical company focused on empowering people worldwide to live healthier lives at every stage. The UK site reflects a large, well-established entity with a broad portfolio of medicines and a strong market position as the second largest pharmaceutical company in the UK by volume. The company emphasizes access, leadership, and partnerships as core pillars of its business model. Technically, the website is built on a modern stack including jQuery, Backbone.js, and Sitecore CMS, with good mobile optimization and accessibility features. Security posture is strong with HTTPS enforced and privacy compliance evident through comprehensive policies and cookie consent mechanisms. However, explicit security policies and incident response contacts are not published, representing an area for improvement. Overall, the site is professional, trustworthy, and well-maintained, supporting Viatris' corporate image and business objectives.
Chad W. Beckermanchadwbeckerman.com
Other · U.s.a
61Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Chad W. Beckerman's website serves as a professional portfolio showcasing his role as a Creative Director at ABRAMS, specializing in art direction and design for children's books and graphic novels. The site highlights his contributions to well-known series and his industry recognition, positioning him as a niche creative professional within the publishing sector. Technically, the website is built on the Squarespace platform, leveraging modern web technologies such as Typekit fonts and JavaScript, delivering a good user experience with mobile optimization and SEO best practices. Security-wise, the site uses HTTPS but lacks advanced security headers and formal privacy or cookie policies, indicating room for improvement in compliance and security posture. The absence of WHOIS registration data raises questions about domain legitimacy, though the professional content and social media presence mitigate some concerns. Overall, the site is trustworthy and professional but would benefit from enhanced security and compliance measures.
- MINH LÊ BOOKS
minhlebooks.com
Other · United States
58Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
MINH LÊ BOOKS is a small, niche author website focused on children's picture books by Minh Le. The site serves primarily as a promotional and informational platform targeting parents and children interested in children's literature. It leverages the Squarespace platform for hosting and content management, integrating third-party services such as Disqus for comments and Twitter for social media engagement. The website demonstrates good design quality and user experience with clear navigation and mobile optimization. However, it lacks comprehensive privacy and cookie policies, contact information, and advanced security measures such as security headers and DNSSEC. The domain registration is consistent with the business age and purpose, indicating legitimacy. Overall, the site is safe for general audiences and maintains a moderate trust level but would benefit from enhanced security and compliance features.
- PPrivate Site
bookshelvesofdoom.org
Other
67Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website www.bookshelvesofdoom.org is currently private and inaccessible to the public, displaying a 'Private Site' message with no additional content or business information. The site is hosted on the Squarespace platform, utilizing standard Squarespace scripts and styles, but lacks any metadata, structured data, or contact details. Due to the absence of accessible content and WHOIS data, it is not possible to ascertain the business purpose, market position, or services offered. The technical infrastructure is basic, with no visible security headers or SSL configuration details. The security posture is weak due to lack of information and absence of security best practices. Overall, the site presents a high risk due to its lack of transparency and minimal digital footprint.
TARGET4Dbooks4yourkids.com
Other · Indonesia
62Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
TARGET4D operates an online platform focused on providing links and features related to slot gaming, specifically targeting the Indonesian market. The business is newly established in 2024 and positions itself as a niche service for slot game enthusiasts. The website uses modern web technologies including React and Next.js, hosted behind Cloudflare DNS and leveraging Lazada's CDN and marketing infrastructure. However, the site lacks critical compliance and security documentation such as privacy policies, cookie consent mechanisms, and incident response contacts. Security headers and advanced protections are not evident, which may expose the site to certain risks. The domain registration is consistent with the business claims but is very recent, which may affect trust perception. Overall, the site is functional but requires significant improvements in privacy, security, and transparency to enhance credibility and compliance.
- Booklist Publications
booklistreader.com
Media · United States
66Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Booklist Online is a reputable publication operated under the American Library Association, specializing in book reviews, educational resources, and media content for libraries and educators. The website serves a medium-sized audience with subscription-based services and advertising opportunities, positioning itself as a leader in the book discovery sector. Technically, the site employs modern JavaScript frameworks, integrates Google Tag Manager and reCAPTCHA for analytics and security, and uses advertising networks like Broadstreet Ads. The site is mobile-optimized with good design and navigation, though some accessibility and SEO improvements are possible. Security posture is moderate with HTTPS and bot protection but lacks explicit security headers and published policies. WHOIS data is missing or unavailable, which raises some legitimacy concerns but is mitigated by the strong affiliation with the American Library Association. Overall, the site is safe, professional, and trustworthy for its target audience.
Better Book Titlesbetterbooktitles.com
Media
62Medium
NIS2 2 · GDPR 58
NIS2 2 · GDPR 58
Better Book Titles is a niche humor website focused on creating funny alternate titles for popular novels. Established in 2010, it has built a loyal audience interested in literary parody and humor. The site also operates an e-commerce shop selling book-themed merchandise such as t-shirts, mugs, and stationery. Technically, the website is built on WordPress with WooCommerce, leveraging common web technologies like jQuery and Slider Revolution. It uses Google Fonts, Google Adsense for advertising, and Facebook Pixel for tracking. The site is hosted likely via GoDaddy, with domain registration consistent with the business age and content. Security posture is moderate with HTTPS enabled and bot protection via reCAPTCHA, but lacks DNSSEC and security headers. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is functional, professionally branded, and serves a general audience with safe content.
- WWordPress › Error
awfullibrarybooks.net
Other
60Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website awfullibrarybooks.net is currently inaccessible due to a WordPress.com site_id mismatch error, which occurs when a self-hosted blog using the Jetpack plugin is incorrectly pointed to WordPress.com via DNS. The domain is registered with DreamHost, LLC since 2010 and uses WordPress.com name servers, indicating the site is intended to be hosted on WordPress.com infrastructure. However, the misconfiguration prevents normal access to the site content. No business information, contact details, or policies are available on the site. The technical infrastructure is based on WordPress.com but lacks proper DNS and plugin configuration. Security posture is weak due to missing security headers, lack of DNSSEC, and absence of privacy or cookie policies. Overall, the site is not currently functional or trustworthy for visitors or customers.
- A Kids Book A Day
kidsbookaday.com
Education
63Medium
NIS2 17 · GDPR 58
NIS2 17 · GDPR 58
The website 'A Kids Book A Day' is a specialized blog dedicated to children's literature, offering detailed reviews, curated book lists, and reading recommendations primarily for parents, educators, and librarians. It operates on the WordPress.com platform, leveraging modern web technologies and plugins such as Jetpack and Gutenberg to deliver a visually appealing and content-rich experience. The blog is well-maintained with consistent branding and high-quality content, positioning itself as a trusted resource in the children's education and literature niche. Technically, the site benefits from HTTPS, security headers, and a reputable hosting provider, though it lacks DNSSEC and explicit privacy and cookie policies, which are areas for improvement. Security posture is strong with no detected vulnerabilities or exposed sensitive data. The absence of explicit contact emails or phone numbers limits direct communication channels, relying instead on subscription forms and Patreon for engagement. Overall, the site is safe, professional, and trustworthy, but could enhance compliance and user trust by adding privacy-related documentation and clearer contact information.
A Book And A Hugabookandahug.com
Education
64Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
A Book And A Hug is a niche educational website focused on helping readers and educators discover books and teaching resources. The site offers book search, reader personality assessments, and curated teaching materials. It operates on a WordPress platform with the Divi theme and uses Yoast SEO for optimization. The technical infrastructure is modern and includes Google Analytics for user tracking. Security posture is moderate with HTTPS enabled but lacks security headers and explicit security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and security measures.
- The Scop
thescop.com
Other · United States
63Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
The Scop is a personal website dedicated to Jonathan Auxier, an author specializing in children's literature. The site serves as a platform to promote his books, share blog content, announce events, and engage with fans through social media and a podcast. The business model is focused on author branding and direct engagement with readers, primarily targeting a niche audience interested in children's and young adult literature. The website is hosted on Squarespace, leveraging its CMS and hosting services, and uses modern web technologies including Typekit fonts and JavaScript for enhanced user experience. The site is mobile-optimized and presents a professional design with clear navigation and relevant content. Security posture is adequate with HTTPS enabled and good SSL configuration; however, the absence of security headers and privacy-related policies indicates room for improvement. The lack of WHOIS registration data raises concerns about domain legitimacy, although the website content itself is consistent and trustworthy. Overall, the site is functional and professional but would benefit from enhanced privacy compliance and security best practices.
Media
58Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
James Preller's Blog is a personal website dedicated to sharing news, notes, and insights from the children's book author James Preller. The site serves as a platform for book promotion, family stories, and engagement with readers, primarily targeting fans, educators, and parents interested in children's literature. The blog is built on WordPress and hosted by Web Instinct, utilizing common plugins such as Jetpack and AddThis for analytics and social sharing. The technical infrastructure is modern and functional, with good mobile optimization and moderate performance. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and formal privacy or cookie policies, which impacts compliance and trust. The absence of WHOIS data reduces domain legitimacy confidence, though the website content appears genuine and consistent with a personal author blog. Overall, the site is professional and trustworthy for its niche but would benefit from enhanced privacy compliance and security practices.
Erin Steaderinstead.com
Retail · United States
63Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Erin Stead's website serves as a professional portfolio and e-commerce platform showcasing the artist's works, primarily children's books and related artwork. The site is hosted on Squarespace, leveraging its platform for content management and online sales. The design is clean, visually appealing, and optimized for mobile devices, providing a good user experience for visitors interested in the artist's offerings. However, the site lacks critical business and privacy information such as contact details, privacy policies, and terms of service, which are important for trust and compliance. Technically, the website uses modern web technologies and benefits from Squarespace's secure hosting environment, including HTTPS with HSTS enabled, ensuring encrypted communication and protection against certain attacks. The absence of additional security headers and explicit privacy compliance measures indicates room for improvement in security posture and regulatory adherence. From a security perspective, the site shows no signs of vulnerabilities or malicious content, but the missing WHOIS registration data raises concerns about domain legitimacy and transparency. This discrepancy suggests either privacy protection or an unregistered domain, which could impact trustworthiness. The lack of contact information and security policies further limits the site's credibility from a security and compliance standpoint. Overall, while the website effectively presents the artist's work and facilitates e-commerce, it should address privacy, contact, and security transparency to enhance trust and compliance. Strategic improvements in these areas will strengthen the site's security posture and business credibility, benefiting both the owner and visitors.
Charleston Wine + Foodcharlestonwineandfood.com
Non-profit · United States
73Medium
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
Charleston Wine + Food is a US-based 501(c)(3) nonprofit organization dedicated to celebrating and promoting the diverse food and beverage community in the greater Charleston area. The organization operates primarily through events and purpose-driven programs aimed at building a sustainable culinary and hospitality community. The website reflects a well-established regional presence with national recognition in the food and beverage sector. The business model centers on community engagement, event management, and support for culinary professionals.
Other · United States
68Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
The website at nycwff.org appears to be minimal and currently only displays a message disallowing VPN or proxy usage. There is no substantive content, metadata, or business information available for analysis. The domain is registered since 2010 with privacy protection via Domains By Proxy, indicating a mature but privacy-conscious registration. Hosting appears to be via Cloudflare DNS, but no further technical details or security headers are available. The lack of privacy policies, contact information, and security details suggests the website is either under development, restricted, or intentionally minimal. This limits the ability to assess the business model or market position effectively. Security posture is weak due to missing information and lack of visible HTTPS confirmation.
- WWilliams-Sonoma, Inc.
williams-sonoma.com
Retail
70Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
Williams-Sonoma, Inc. operates a portfolio of well-known retail brands specializing in home furnishings and kitchenware. The website content indicates a strong retail and e-commerce focus with multiple subsidiary brands. However, the current page content is restricted for visitors from the European Union due to regulatory challenges, limiting accessibility and user engagement in that region. The company provides contact phone numbers for customer support across its brands but lacks visible privacy or cookie policies on this page. Technically, the website uses Bootstrap 4.1.1 for styling and basic JavaScript for functionality. The page is minimal and lacks advanced SEO, accessibility, or performance optimizations. No CMS or hosting provider information is discernible. Security headers and SSL configuration details are not available from the provided data, and no forms or data collection mechanisms are present on this page. From a security perspective, the absence of WHOIS registration data raises concerns about domain transparency, although the branding and contact information suggest legitimacy. The website does not display privacy compliance elements such as GDPR notices or cookie consent banners, which is critical given the region-based access restrictions. Overall, the security posture is limited by the lack of visible security best practices and policies. The overall risk assessment indicates moderate trustworthiness but highlights critical issues related to content blocking, missing WHOIS data, and lack of privacy compliance. Strategic recommendations include improving transparency, implementing comprehensive privacy and cookie policies, enhancing security headers, and ensuring full HTTPS coverage to strengthen user trust and regulatory compliance.
- Theatre & Performing Arts Ticketing Platform | On The Stage
onthestage.tickets
—
66Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Glenmark Pharmaceuticals Inc., USAglenmarkpharma-us.com
Healthcare · United States
68Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Glenmark Pharmaceuticals U.S. operates as a significant player in the healthcare sector, specializing in the development and commercialization of generic and over-the-counter pharmaceutical products. The company targets US residents, healthcare providers, and patients, emphasizing affordable access to quality medicines. The website reflects a mature digital presence with a professional design, clear navigation, and mobile optimization, supporting its large enterprise status and global parentage. Technically, the site is built on WordPress using modern frameworks and libraries, with moderate performance and good SEO practices. Security posture is adequate with HTTPS enforced and domain protections in place, though improvements such as DNSSEC and enhanced security headers are recommended. Privacy compliance is addressed with clear policies and cookie consent mechanisms, though GDPR compliance is partial due to lack of explicit indicators. Overall, the domain registration and WHOIS data align well with the business claims, supporting legitimacy and trustworthiness.
Glenmark Pharmaglenmarkpharma.com
Healthcare
70Medium
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Glenmark Pharma is an established pharmaceutical company focused on discovering advanced therapies in dermatology, oncology, and other healthcare sectors. The website presents a professional image with a clear business focus on pharmaceutical research and development. The company appears to target healthcare professionals, investors, and partners, positioning itself as a significant player in the healthcare industry with an enterprise-level presence. Technically, the website is built on WordPress using popular plugins such as Yoast SEO, Elementor, and MonsterInsights for analytics. The infrastructure includes CDN usage and DNS Made Easy for DNS management, indicating a mature digital setup. The site is mobile optimized and SEO friendly, though accessibility features are basic. From a security perspective, the site uses HTTPS with a valid SSL certificate and has domain transfer protection enabled. However, DNSSEC is not enabled, and no security headers were detected, which are areas for improvement. The presence of a cookie consent banner via OneTrust shows awareness of privacy regulations, but the absence of a visible privacy policy or terms of service reduces compliance maturity. No incident response or vulnerability disclosure information is provided. Overall, the website is credible and professionally maintained but would benefit from enhanced security practices and clearer privacy and compliance documentation to improve trust and regulatory adherence.
- Terme Krka
terme-krka.com
Hospitality · Slovenia
74Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Terme Krka is a well-established Slovenian hospitality and wellness company operating multiple thermal spa and health resort destinations. The company offers a wide range of services including accommodation, wellness treatments, health services, and gift vouchers, targeting tourists and wellness seekers primarily in Slovenia and neighboring regions. The website is professionally designed, multilingual, and provides a seamless user experience with clear navigation and mobile optimization. Technically, the site is built on Silverstripe CMS with modern JavaScript libraries and integrates multiple analytics and marketing tools managed through a robust cookie consent mechanism. Security posture is strong with HTTPS enforced and domain registration secured with domain locks, although some HTTP security headers could be improved. Privacy compliance is well addressed with comprehensive policies and user consent controls. Overall, the website reflects a mature digital presence aligned with the company's market position and business goals.
Healthcare · Slovenia
75Medium
NIS2 2 · GDPR 65
NIS2 2 · GDPR 65
eZdravje is a Slovenian health information portal offering a wide range of articles and advice on health topics such as cardiovascular health, digestion, mental health, colds and flu, pain management, memory, wellness, and nutrition. The website targets the general public interested in health and wellness, providing accessible and categorized content to educate and inform users. The business model centers on content publishing and health information dissemination, supported by advertising and newsletter subscriptions. Technically, the site is built using modern JavaScript frameworks like Nuxt.js, with integration of Google Tag Manager and advertising services, indicating a moderate level of digital maturity. The website is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is moderate; while HTTPS is presumably enabled, no explicit security headers were detected, and no direct contact information for security or incident response is provided. Privacy compliance is good, with a comprehensive privacy policy and cookie consent mechanism offering granular user control. However, the WHOIS data for the domain is missing or unavailable, which raises concerns about domain legitimacy and reduces business credibility. Overall, the site is professional and trustworthy in content but would benefit from improved transparency and security practices.
Manufacturing · Belgium
70Medium
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
The European Chemical Employers Group (ECEG) is a Brussels-based social affairs organization representing employers federations in the European chemical, pharmaceutical, rubber, and plastics industries. The website serves as an informational platform for industry stakeholders and national federations from 18 countries. The business model is that of an industry association focused on advocacy and representation within the manufacturing sector. The website is built on the Wix platform, leveraging Wix Thunderbolt and standard JavaScript polyfills, indicating a moderate level of digital maturity. The site is mobile-optimized and presents content professionally but lacks advanced SEO and accessibility features. Security posture is moderate; HTTPS is used but no explicit security headers or privacy policies are detected, which could be improved to enhance compliance and trust. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces trust but is common for such organizations. Overall, the site is functional and professional but would benefit from enhanced security and privacy compliance measures.
- European Chemical Industry Council (Cefic)
antwerp-declaration.eu
Manufacturing · Belgium
68Medium
NIS2 25 · GDPR 88
NIS2 25 · GDPR 88
The Antwerp Declaration website represents a significant European industrial advocacy initiative coordinated by the European Chemical Industry Council (Cefic). It aims to promote a European Industrial Deal to complement the EU Green Deal, focusing on boosting green transition and securing quality jobs across multiple sectors. The site is well-positioned as a platform for industry stakeholders, policymakers, and organizations to engage with the declaration and its supporting framework. Technically, the website is built on modern web technologies including Next.js and React, with privacy-conscious analytics via Matomo and cookie management through Cookiebot. Hosting is EU-based, supporting GDPR compliance. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are absent. Overall, the site is professional, trustworthy, and well-aligned with its business objectives.
SME konferenciesmekonferencie.sk
Media · Slovakia
63Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
SME konferencie is a Slovak event platform specializing in organizing conferences, academies, forums, and webinars focused on societal and economic topics. It operates as part of the reputable SME media group under Petit Press, a.s., providing a professional and trusted environment for knowledge sharing and networking. The website is well-structured, with clear navigation and a modern design that supports both desktop and mobile users. It leverages WordPress CMS with various modern technologies including jQuery, Flickity carousel, and integrates marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and LinkedIn Insight Tag. Security is robust with HTTPS, DNSSEC, and cookie consent mechanisms in place, although there is room for improvement in security headers and incident response transparency. Overall, the site demonstrates a mature digital presence with good compliance to GDPR and privacy standards.
Media Network s.r.o.zdravotnickydennik.sk
Media · Slovakia
60Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Zdravotnickydennik.sk is a professional Slovak healthcare news portal operated by Media Network s.r.o., a reputable media company based in Prague. The website provides comprehensive daily news coverage on healthcare policies, key actors in both private and public healthcare sectors, and related educational content. It targets healthcare professionals, policymakers, and the general public interested in healthcare developments in Slovakia and Europe. The business model is primarily online media publishing supported by advertising and sponsored content, with a strong regional market position and sister sites in the Czech Republic.
Medmark s.r.o.medseminar.sk
Education · Slovakia
55Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
MedSeminar is an online platform specializing in continuous medical education primarily targeting medical professionals in Slovakia. The service offers e-learning courses and webinars to support ongoing professional development. The business operates under Medmark s.r.o., established in 2011, indicating a stable presence in the regional medical education market. The website content is primarily in Slovak and focuses on providing access to educational resources through a login-based system. Technically, the website employs modern frontend technologies such as Bootstrap 5, jQuery, Video.js, and HLS.js for video streaming. The site is mobile responsive and moderately optimized for performance. However, SEO is limited due to the use of a 'noindex' robots meta tag, which restricts search engine indexing. There is no detected CMS, suggesting a custom or static site architecture. From a security perspective, the site uses HTTPS but lacks important security headers like Content Security Policy and HSTS. The login form uses POST but does not show anti-CSRF tokens, which could expose it to certain attacks. No privacy or cookie policies are present, indicating compliance gaps with GDPR and related regulations. No analytics or tracking scripts are detected, which limits user tracking but also reduces marketing insights. Overall, the website is functional and serves its niche audience but requires improvements in security hardening, privacy compliance, and SEO to enhance trust and visibility. Strategic recommendations include implementing security headers, adding privacy and cookie policies, improving form security, and enabling SEO indexing where appropriate.
Healthcare · Slovakia
56Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Pilulka.sk operates as a leading online pharmacy and health product retailer in Slovakia, offering a wide range of products including medicines, supplements, cosmetics, and home care items. The company positions itself as a modern pharmacy with extensive physical pickup points, targeting general consumers seeking health and wellness products. The website demonstrates a mature digital infrastructure using modern frameworks like Nuxt.js and Vue.js, with PWA capabilities and multimedia content to enhance user engagement. Security posture is solid with HTTPS and no visible sensitive data exposure, though it lacks some advanced security headers and explicit privacy and cookie policies, indicating room for compliance improvements. Overall, the site is professional, trustworthy, and well-optimized for performance and user experience.
- Viatris
viatris.ro
Healthcare · Romania
57Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
Viatris.ro is the Romanian localized website of Viatris, a global healthcare and pharmaceutical company. The site provides comprehensive information about the company's mission, leadership, products, corporate responsibility, and investor relations. It targets healthcare professionals, patients, investors, and job seekers with a professional and well-structured digital presence. The website leverages modern web technologies and a Sitecore CMS platform to deliver a responsive and accessible user experience. Privacy and cookie policies are clearly presented with consent mechanisms, reflecting compliance with GDPR and related regulations. Security posture is strong with HTTPS enforced and no visible vulnerabilities, although security policy and incident response information are not explicitly published. The domain WHOIS data is privacy protected as per ROTLD policy, which is typical for Romanian domains and justified for a global healthcare entity. Overall, the website demonstrates a high level of professionalism, trustworthiness, and digital maturity.
- Viatris Inc.
viatris.ph
Healthcare · Philippines
67Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Viatris Inc. is a global healthcare company dedicated to empowering people worldwide to live healthier lives at every stage. The company operates a broad pharmaceutical portfolio, supplying medicines to approximately 1 billion patients globally and focusing on access, leadership, and partnership. Their website reflects a mature digital presence with comprehensive corporate information, investor relations, and compliance policies. Technically, the site leverages modern JavaScript libraries, Google Tag Manager for analytics, and a Sitecore CMS platform, delivering a responsive and accessible user experience. Security posture is strong with HTTPS enforced and cookie consent implemented, though explicit security headers and a public security policy could enhance trust further. Overall, the website is professional, trustworthy, and well-aligned with the company's global healthcare mission.
- Viatris
viatris.nl
Healthcare · Netherlands
64Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Viatris is a global pharmaceutical company dedicated to enabling healthier lives worldwide through a broad portfolio of high-quality medicines and healthcare solutions. The company has a strong market presence in the Netherlands and globally, supported by a comprehensive website that serves multiple audiences including healthcare professionals, patients, investors, and job seekers. The website is well-structured, professionally designed, and offers multilingual support, reflecting the company's global footprint. Technically, the site leverages modern JavaScript libraries, Google Tag Manager for analytics, and is built on the Sitecore CMS platform, ensuring a robust digital infrastructure with good mobile optimization and accessibility. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement by adding explicit security headers and publishing security policies. The domain registration data aligns well with the company's claims, indicating legitimacy and trustworthiness. Overall, the website scores highly on content quality, technical implementation, privacy compliance, and business credibility, making it a reliable and professional digital presence for Viatris.
- Viatris Inc.
viatris.mx
Healthcare · Mexico
64Medium
NIS2 17 · GDPR 65
NIS2 17 · GDPR 65
Viatris is a global healthcare company with a strong presence in Mexico, focusing on providing high-quality pharmaceutical products and healthcare services. The website is professionally designed, targeting patients, healthcare professionals, investors, and job seekers with clear navigation and relevant content in Spanish. The company emphasizes access, leadership, and collaboration as core pillars of its mission. Technically, the site uses modern JavaScript libraries, cookie consent tools, and is built on the Sitecore CMS platform, ensuring a good user experience and mobile optimization. Security posture is solid with HTTPS and cookie consent, though explicit security headers and vulnerability disclosure mechanisms are absent. Overall, the site reflects a trustworthy and compliant healthcare business with room for improvement in security transparency and contact information completeness.
- Viatris
viatris.lt
Healthcare · Lithuania
55Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Viatris.lt is the Lithuanian localized website of Viatris, a global healthcare company specializing in the provision of high-quality pharmaceutical products and healthcare solutions. The website targets healthcare professionals and patients in Lithuania, offering information about the company's values, products, social responsibility initiatives, and contact points. The site is part of a broader global network with multiple country-specific domains, reflecting Viatris' extensive international presence. Technically, the website is built on the Sitecore CMS platform and employs a modern technology stack including jQuery, Backbone.js, and Google Tag Manager for analytics and marketing. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Privacy and cookie policies are prominently available, with consent mechanisms in place, indicating compliance with GDPR and related regulations. From a security perspective, the site uses HTTPS and includes cookie consent but lacks visible security headers and published security policies or incident response information. The WHOIS data for the domain is unavailable due to an invalid domain name error, which slightly impacts trustworthiness but does not detract significantly from the overall legitimacy given the professional branding and global corporate presence. Overall, Viatris.lt presents a professional and trustworthy digital presence for the Lithuanian market, with room for improvement in security transparency and WHOIS data availability.
- Viatris Latvija
viatris.lv
Healthcare · Latvia
55Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Viatris Latvija operates as a local branch of the global pharmaceutical company Viatris Inc., providing high-quality medicines and healthcare solutions tailored to the Latvian market. The website serves multiple audiences including healthcare professionals, patients, investors, and job seekers, offering comprehensive information about products, corporate culture, and investor relations. The site is well-branded and consistent with the global Viatris identity, reflecting a mature enterprise-level business model focused on healthcare delivery and innovation. Technically, the website leverages a modern technology stack including jQuery, Backbone.js, and Sitecore CMS, ensuring a responsive and accessible user experience. The presence of Google Tag Manager indicates active analytics and marketing tracking, balanced with GDPR-compliant privacy and cookie policies. The site demonstrates good SEO and accessibility practices, with clear navigation and localized content in Latvian. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data, but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or suspicious domains were detected. The WHOIS data aligns well with the business claims, supporting legitimacy and trustworthiness. Overall, Viatris.lv presents a professional, secure, and compliant digital presence appropriate for a global healthcare company’s local branch. Strategic improvements in security policy transparency and header implementation could further enhance trust and resilience.
- Viatris Inc
viatris.in
Healthcare · India
68Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Viatris Inc is a global healthcare company formed in 2020 through the combination of Mylan N.V. and Pfizer's Upjohn business. The company focuses on manufacturing and distributing a broad portfolio of branded and generic medicines, with significant operations and R&D centers in India. The website reflects a mature enterprise with a strong global footprint, targeting healthcare professionals, patients, investors, and partners. The digital presence is professional, well-branded, and content-rich, supporting the company's mission to improve global health access. Technically, the site uses modern web technologies including Sitecore CMS, jQuery, and Google Tag Manager, with good mobile optimization and accessibility features. Security posture is solid with HTTPS and no visible vulnerabilities, though some security headers and policies could be enhanced. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR considerations. Overall, the site demonstrates high business credibility and trustworthiness.
- Viatris Inc.
viatris.gr
Healthcare · Greece
60Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
Viatris.gr is the Greek localized website of Viatris Inc., a global healthcare and pharmaceutical company. The site presents a professional corporate image with comprehensive information about the company’s mission, leadership, products, and corporate social responsibility. It targets healthcare professionals, patients, investors, and job seekers in Greece, positioning itself as the 3rd largest pharmaceutical company in the Greek market. The website leverages a modern technical stack including Sitecore CMS, various JavaScript libraries, and Google Tag Manager for analytics and marketing. Privacy and cookie policies are present and GDPR compliant, with a consent mechanism implemented. However, explicit security policies and incident response contacts are not published on the site. The site is fully accessible without WAF or blocking mechanisms, and it maintains good SEO, accessibility, and mobile optimization standards.
- Viatris
viatris.ee
Healthcare · Estonia
64Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Viatris Estonia is a regional website for Viatris, a global healthcare company formed in 2020 by the merger of Mylan and Pfizer's Upjohn unit. The company focuses on manufacturing and marketing a broad portfolio of pharmaceutical products across multiple therapeutic areas. The website targets healthcare professionals, patients, and partners in Estonia, providing localized content, contact information, and links to corporate resources. The business model centers on pharmaceutical production and distribution with a strong emphasis on corporate social responsibility and global healthcare access. Technically, the website is built on the Sitecore CMS platform and employs a modern JavaScript technology stack including jQuery and Google Tag Manager for analytics and marketing. The site is mobile optimized, accessible, and SEO friendly, with clear navigation and professional design. Cookie consent and privacy policies are implemented in compliance with GDPR requirements. From a security perspective, the site uses HTTPS and cookie consent mechanisms but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or suspicious content were detected. WHOIS data confirms domain legitimacy and consistency with the business claims. Overall, the site demonstrates a mature digital presence with room for improvement in security transparency. The overall risk is low with no critical issues detected. Strategic recommendations include enhancing security headers, publishing a security policy and incident response information, and implementing a vulnerability disclosure program to further strengthen trust and compliance.
- Viatris
viatris.cz
Healthcare · Czech Republic
60Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
Viatris.cz represents the Czech Republic localized website of Viatris, a global healthcare and pharmaceutical company. The company focuses on providing high-quality medicines and healthcare solutions worldwide, targeting healthcare professionals, patients, investors, and job seekers. The website is professionally designed, mobile-optimized, and rich in relevant content including corporate information, product details, career opportunities, and investor relations. The presence of comprehensive privacy and cookie policies with consent mechanisms indicates good privacy compliance. Technically, the site uses modern JavaScript libraries and frameworks such as jQuery, Bootstrap grid, and Google Tag Manager for analytics and marketing. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers could be improved and a formal security policy or incident response page is absent. WHOIS data is unavailable, which slightly reduces trust but the overall site and external references support legitimacy. The site is free from adult or questionable content and is accessible without WAF or blocking mechanisms.
- Viatris Inc.
viatris.bg
Healthcare · Bulgaria
64Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Viatris Inc. operates as a global healthcare company focused on providing pharmaceutical products and healthcare services worldwide. The Bulgarian localized website reflects a mature enterprise with a strong market position, offering extensive product portfolios and patient resources. The site targets healthcare professionals, patients, and investors, emphasizing corporate responsibility and global impact. Technically, the website is built on the Sitecore CMS platform, leveraging modern JavaScript libraries and media players, with good mobile optimization and accessibility features. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and incident response information are absent. Overall, the site demonstrates high professionalism and trustworthiness, supporting Viatris's global healthcare brand.
- Viatris Inc.
viatris.be
Healthcare · Belgium
60Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
Viatris Inc. is a global healthcare company focused on providing high-quality pharmaceutical products and healthcare solutions worldwide. The website targets patients, healthcare professionals, investors, and partners, emphasizing access, leadership, and partnership as core pillars. The company operates in over 165 countries with a large workforce and extensive product portfolio. Technically, the site uses a modern technology stack including jQuery, Backbone.js, and Google Tag Manager, built on the Sitecore CMS platform. The website is well-optimized for mobile and accessibility, with strong SEO and professional design. Security posture is moderate with HTTPS and cookie consent implemented, but lacks explicit security policies and vulnerability disclosure mechanisms. WHOIS data is restricted, common for .be domains, but the website content and external references support legitimacy. Overall, the site is professional, secure, and compliant with privacy regulations, suitable for its enterprise healthcare audience.
Zentiva Group, a.s.zentiva.es
Healthcare · Spain
71Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
Zentiva Group, a.s. operates a professional and comprehensive pharmaceutical website focused on providing affordable healthcare and pharmaceutical products across multiple countries, primarily in Europe. The company emphasizes innovation, manufacturing, and sustainability in its business model, targeting a broad audience including healthcare professionals and the general public. The website is well-structured, multilingual, and links to numerous country-specific subsidiaries, reflecting a large multinational presence. Technically, the site uses a modern technology stack including jQuery, Google Tag Manager, Cookiebot for consent management, and other JavaScript libraries to enhance user experience and analytics. The site is mobile-optimized, accessible, and SEO-friendly, though some security headers are not explicitly detected. HTTPS is enforced, and cookie consent mechanisms are implemented, indicating good privacy compliance. Security posture is solid with no critical vulnerabilities detected in the content. However, the absence of explicit security policies, incident response contacts, and vulnerability disclosure mechanisms suggests room for improvement in transparency and security maturity. The WHOIS data is unavailable due to query restrictions, but the domain and website content are consistent with a legitimate, established pharmaceutical company. Overall, the website presents a trustworthy, professional front with good compliance and technical standards, suitable for its industry and audience.
Zentiva Polskazentiva.pl
Healthcare · Poland
72Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Zentiva Polska is a well-established pharmaceutical company specializing in high-quality generic medicines, serving patients, healthcare professionals, and suppliers primarily in Poland and across Europe. The website reflects a professional brand presence consistent with a large healthcare entity and is part of the broader Zentiva Group with multiple country-specific domains. The digital infrastructure incorporates modern analytics and cookie consent technologies, demonstrating a commitment to privacy and regulatory compliance. Security posture is strong with HTTPS and cookie consent mechanisms, although explicit security headers and incident response contacts are not evident. Overall, the website is trustworthy, well-structured, and compliant with GDPR requirements, supporting the company's market position in the pharmaceutical sector.
Zentiva France SASzentiva.fr
Healthcare · France
72Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
Zentiva France SAS operates as a pharmaceutical laboratory specializing in generic medicines, offering high-quality and affordable healthcare products. The company maintains a strong market presence in France and across Europe, supported by multiple international subsidiaries. The website reflects a professional and comprehensive digital presence, including detailed information about products, corporate commitments, and sustainability initiatives. Technically, the site employs modern JavaScript libraries, Google Tag Manager for analytics, and Cookiebot for consent management, ensuring compliance with privacy regulations such as GDPR. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and explicit security policies could be enhanced. The absence of WHOIS data limits domain registration transparency, but the overall site professionalism and content quality support legitimacy. Strategic recommendations include improving security headers, publishing a security policy, and adding vulnerability disclosure mechanisms to strengthen trust and compliance.
- Akabo Media
roaduserchargingconference.com
Transportation
69Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
The Road User Charging Conferences website represents a well-established event series organized by Akabo Media, focusing on road user charging and tolling schemes globally. The business operates multiple regional editions in Europe, the USA, Middle East & Africa, and Asia Pacific, targeting professionals from governments, consultancies, and technology providers. The website content is professionally presented with clear branding and event information, supporting the business's position as a niche leader in transportation conferences. Technically, the site employs modern JavaScript libraries such as jQuery, Alpine.js, and FontAwesome, hosted on the ASP.events platform. The site is mobile-optimized with moderate performance and basic SEO and accessibility features. However, no CMS or hosting provider details are explicitly identified. The absence of visible analytics or tracking scripts suggests minimal user tracking. From a security perspective, the site uses HTTPS but lacks visible security headers and explicit privacy or security policies hosted on the main domain. The WHOIS data is unavailable, raising concerns about domain registration legitimacy. No contact emails or phone numbers are provided, limiting direct communication channels. Privacy and cookie policies link externally without a consent mechanism, indicating partial GDPR compliance. Overall, the site is functional and professional but requires improvements in transparency, security headers, privacy compliance, and domain legitimacy verification to enhance trust and security posture.
- Akabo Media
lscandaexpo.co.uk
Transportation · United Kingdom
65Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website www.lscandaexpo.co.uk serves as a splash page for the Logistics, Supply Chain and Automation Expo 2026, a flagship event organized by Akabo Media. The event targets professionals and companies in logistics, supply chain, manufacturing, robotics, and sustainability sectors, boasting over 11,000 attendees and 350+ exhibitors. The site links to multiple regional event websites, indicating a global event series presence. Technically, the site uses a modern JavaScript stack including jQuery, Alpine.js, and FontAwesome, hosted on the ASP.events platform. The design is professional and mobile-optimized, though accessibility and SEO could be improved. Security posture is moderate with HTTPS implied but lacking explicit security headers and policies. Notably, the WHOIS lookup failed due to domain naming rules violation, indicating the domain may not be properly registered or is a subdomain, which raises legitimacy concerns despite professional content. No contact or privacy policies are present, limiting compliance and trust signals.