Low-risk security reports
14,261 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,165001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
4,301–4,350 of 14,261
—
81Low
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
- People in Need
peopleinneed.net
Non-profit · Czech Republic
83Low
NIS2 37 · GDPR 100
NIS2 37 · GDPR 100
People in Need is a Czech-based non-governmental, non-profit organization with over 20 years of experience providing humanitarian aid and emergency assistance worldwide. The website serves as a platform to engage donors, volunteers, and the general public with information about their mission and activities. The organization maintains a consistent brand presence and targets a global audience interested in humanitarian causes. Technically, the website employs modern web technologies including jQuery, Google Tag Manager, reCAPTCHA v3, and Microsoft Clarity for analytics, reflecting a moderate level of digital maturity. Security measures such as HTTPS, CAPTCHA for forms, and cookie consent mechanisms are implemented, although some security headers and explicit policies are missing. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, which should be further investigated. Overall, the website is professional, secure, and privacy-conscious but could improve transparency by publishing privacy and security policies and providing direct contact information.
- AAdobe Fonts
typekit.com
Technology
79Low
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
Adobe Fonts is a leading font licensing and distribution service operated under Adobe Inc., targeting designers and creative professionals worldwide. The service offers extensive font libraries integrated with Adobe Creative Cloud, enabling seamless font usage across web and desktop applications. The website demonstrates a high level of professionalism, with excellent design, clear navigation, and comprehensive content tailored to its audience. Technically, the site employs modern JavaScript modules, performance monitoring via New Relic, and robust privacy and cookie consent mechanisms, reflecting a mature digital infrastructure. Security posture is strong, with HTTPS enforced and security best practices observed, although explicit security policy and incident response contacts are not publicly disclosed. Overall, the domain and website present a trustworthy and enterprise-grade service with minor gaps in public security disclosures.
- DDIGITALEUROPE
digitaleurope.org
Technology
76Low
NIS2 60 · GDPR 73
NIS2 60 · GDPR 73
DIGITALEUROPE is a leading trade association representing digitally transforming industries across Europe. The organization advocates for policies and initiatives that support the competitiveness and security of the European digital technology sector. Their website reflects a mature digital presence with comprehensive content, including news, projects, events, and membership information, targeting industry stakeholders and policymakers. The site is built on WordPress with modern plugins and technologies, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and no visible vulnerabilities, though some security headers and explicit incident response policies are absent. Overall, the domain and website present a trustworthy and professional image consistent with a large, established organization.
Rozcestníkmojenn.cz
—
76Low
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
greehill | Smart Tree Inventoriesgreehill.com
Other
76Low
NIS2 25 · GDPR 73
NIS2 25 · GDPR 73
The website www.greehill.com appears to be a Wix-hosted site with minimal content and no visible business or contact information. The domain WHOIS query returned no registration data, indicating the domain may be unregistered, newly registered, or privacy protected with no public data. The site lacks privacy, cookie, and terms of service policies, and no forms or data collection mechanisms were found. Technically, the site uses Wix platform scripts and Sentry for error monitoring but lacks security headers and SSL configuration details. Overall, the site presents a low maturity digital footprint with poor content quality and minimal business credibility. Security posture is weak due to missing best practices and lack of transparency. The domain's legitimacy is questionable due to missing WHOIS data, which is a critical trust concern.
Sony Pictures Entertainmentsonypictures.com
Media · United States
79Low
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
Sony Pictures Entertainment operates a comprehensive digital presence showcasing its extensive portfolio in movies, television, and games. The website is professionally designed with clear navigation, multimedia content, and strong branding consistent with a major media enterprise. The company targets a broad audience including consumers and industry professionals, providing updates, press releases, and corporate information. Technically, the site leverages Drupal 10 CMS, integrates Google Tag Manager for analytics, and employs OneTrust for cookie consent, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforcement, security headers, and privacy compliance mechanisms in place, although explicit security policies and incident response contacts are not publicly detailed. The absence of WHOIS data is notable but likely due to privacy protection or query limitations, not detracting from the evident legitimacy of the site. Overall, the site demonstrates high professionalism, good security hygiene, and compliance with privacy regulations, positioning Sony Pictures as a trusted and authoritative media brand online.
Sendersender.net
Technology
77Low
NIS2 17 · GDPR 65
NIS2 17 · GDPR 65
Sender is a technology company founded in 2012 that provides an affordable and easy-to-use email and SMS marketing platform. Positioned as a SaaS provider, it offers a free plan with generous monthly email limits and 24/7 support, targeting businesses and marketers seeking efficient marketing automation solutions. The website demonstrates strong branding consistency and professional content quality, supported by structured data and social media presence. Technically, the site uses modern JavaScript frameworks and integrates with popular platforms like Shopify, WooCommerce, and Zapier, indicating a mature digital infrastructure. Security posture is solid with HTTPS and bot detection scripts, though lacks visible security headers and published security policies. Privacy compliance is limited due to absence of explicit privacy and cookie policies. Overall, the site is trustworthy and professionally maintained but could improve transparency on privacy and security practices.
EmailOctopusemailoctopus.com
Technology · United Kingdom
85Low
NIS2 2 · GDPR 95
NIS2 2 · GDPR 95
EmailOctopus is a UK-based technology company specializing in providing affordable and easy-to-use email marketing solutions. Their platform offers a comprehensive suite of services including drag and drop email builders, segmentation, automation workflows, subscription forms, and landing pages. With over 100,000 organizations using their service, EmailOctopus holds a solid market position as a cost-effective alternative in the email marketing SaaS space. The company is legally registered as Three Hearts Digital Ltd and maintains a consistent brand presence across multiple social media channels and customer testimonials.
Člověk v tísniclovekvtisni.cz
Non-profit · Czech Republic
86Low
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
Člověk v tísni is a well-established Czech non-profit organization providing immediate humanitarian aid and support to help people become self-sufficient both domestically and internationally. The website reflects a professional and consistent brand presence with clear messaging about their mission and services. Technically, the site employs modern web technologies including jQuery, Google Tag Manager, reCAPTCHA v3, and Cookiebot for consent management, indicating a mature digital infrastructure. Security measures such as HTTPS and bot protection are in place, though some security headers and explicit policies are not visible in the provided data. Privacy compliance is supported by a detailed cookie consent mechanism, but a dedicated privacy policy page was not found in the analyzed content. Overall, the site demonstrates a strong security posture and business credibility consistent with a reputable humanitarian organization.
HubSpoths-sites.com
Technology
89Low
NIS2 2 · GDPR 100
NIS2 2 · GDPR 100
HubSpot is a leading enterprise SaaS provider specializing in integrated marketing, sales, customer service, and CRM software designed to help businesses grow. The website reflects a mature digital presence with a professional design, clear branding, and a comprehensive offering targeted at business users seeking scalable software solutions. The technical infrastructure leverages HubSpot's own CMS and marketing platform technologies, ensuring fast performance, mobile optimization, and good accessibility. Security posture is strong with HTTPS enforced and modern web practices, though explicit security headers and public security policies are not evident. The absence of WHOIS data is unusual but likely due to privacy or registry restrictions, not detracting from the site's legitimacy given the brand's prominence. Overall, the site demonstrates high professionalism and trustworthiness, with extensive analytics usage balanced by basic privacy compliance indicators.
Surviosurvio.com
Technology
76Low
NIS2 25 · GDPR 80
NIS2 25 · GDPR 80
Survio is a well-established SaaS company specializing in online survey creation, distribution, and analytics. It serves a broad audience including individuals, businesses, and organizations across multiple sectors such as marketing, HR, education, and public administration. The company positions itself as a top-tier online research service with millions of users worldwide and strong trust signals from certifications and user reviews. Technically, Survio employs modern web technologies including jQuery, Google Tag Manager, HubSpot forms, and Cookiebot for consent management, ensuring a fast, mobile-optimized, and accessible user experience. Security posture is strong with HTTPS, ISO 27001:2022 certification, GDPR compliance, and use of Google reCAPTCHA Enterprise, although some security headers could be more explicitly documented. The absence of WHOIS registration data is a notable gap, reducing domain transparency but not detracting significantly from the overall legitimacy given the business presence and certifications. Overall, Survio presents a professional, secure, and user-friendly platform with comprehensive privacy and security policies.
- Sony Corporation
sony.net
Technology · Japan
77Low
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
Sony Corporation is a globally recognized multinational conglomerate specializing in technology, entertainment, and media products and services. The official website serves as a comprehensive portal for showcasing Sony Group's diverse business segments including consumer electronics, entertainment content, and technology services. The site targets a broad audience including consumers, business partners, investors, and job seekers. Sony holds a strong market position as a leader in innovation and entertainment worldwide. Technically, the website employs a modern technology stack including jQuery, Swiper.js for UI components, Google Tag Manager for analytics, and OneTrust for privacy consent management. The site demonstrates good mobile optimization, accessibility, and SEO practices, reflecting a mature digital infrastructure. The use of HTTPS and security headers indicates a strong security posture. From a security perspective, Sony's website shows adherence to best practices with enforced HTTPS, content security policies, and no visible vulnerabilities or exposed sensitive data. Privacy compliance is robust with clear privacy and cookie policies and GDPR adherence. The presence of ISO 27001 certification further underscores Sony's commitment to information security. Overall, the website is trustworthy, professionally maintained, and aligns well with Sony's corporate identity. The lack of WHOIS data is typical for Japanese domains and does not detract from the site's legitimacy. Strategic recommendations include ongoing security audits, monitoring third-party scripts, and ensuring all forms have adequate protections to maintain security and compliance.
Sony Interactive Entertainmentsonyinteractive.com
Technology
78Low
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
Sony Interactive Entertainment is a globally recognized leader in video game entertainment, best known as the company behind the PlayStation brand. The website reflects a mature, enterprise-level digital presence with a focus on corporate communications, news, innovation, and impact initiatives. The business model centers on technology and media services targeting gamers and entertainment consumers worldwide. The site is well-branded and professionally designed, supporting a large, global audience.
Modern Campus USA Inc.omniupdate.com
Education · United States
79Low
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Modern Campus USA Inc. is a medium-sized company founded in 2017 that specializes in providing comprehensive higher education management software solutions. Their offerings include web content management, curriculum and catalog management, student engagement platforms, and professional services tailored to colleges and universities. The company is well-positioned in the education technology market, trusted by over 1,700 institutions, and recognized for its award-winning customer service. The website reflects a professional and modern digital presence with a focus on user engagement and educational transformation. Technically, the website employs a modern tech stack including Bootstrap, jQuery, HubSpot marketing and analytics tools, and proprietary CMS technology. Hosting and domain registration are stable and consistent with the company's profile. The site is mobile-optimized, accessible, and SEO-friendly, with extensive use of third-party analytics and marketing scripts to support business growth and user insights. From a security perspective, the site uses HTTPS with strong domain registration protections but lacks DNSSEC and explicit security headers like Content-Security-Policy. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with a clear privacy policy and cookie consent mechanism, though no explicit security or incident response policies are published. Overall, the security posture is good but could be enhanced with additional DNS and policy disclosures. The overall risk assessment is low, with no signs of malicious or suspicious activity. Strategic recommendations include enabling DNSSEC, publishing a vulnerability disclosure or security.txt file, and enhancing security headers to further strengthen trust and compliance. The company demonstrates a mature digital presence aligned with its business goals and market expectations.
- GGenerali
generali.hu
Finance · Hungary
81Low
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Generali Hungary operates a comprehensive insurance and financial services website targeting both individual and corporate customers. The site offers a wide range of insurance products including vehicle, home, life, health, and corporate insurance, alongside investment services. The company maintains a strong market position in Hungary as part of the global Generali Group, with a subsidiary brand Genertel also referenced. The website is professionally designed with good navigation and mobile optimization, supporting a positive user experience.
- HungaroControl
hungarocontrol.hu
Transportation · Hungary
78Low
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
HungaroControl is the national air navigation service provider for Hungary, offering air traffic services, training for air traffic personnel, and aviation research and development. The website reflects a professional governmental entity with a clear focus on transportation and aviation sectors. The digital infrastructure includes modern analytics and marketing tools such as Google Analytics, Hotjar, and Cookiebot, ensuring compliance with privacy regulations through a comprehensive cookie consent mechanism. Security posture is solid with HTTPS enforcement and no visible vulnerabilities, though some security headers could be improved. Overall, the website is well-structured, accessible, and trustworthy, serving its target audience effectively.
Rossmann Magyarország Kft.rossmann.hu
Retail · Hungary
80Low
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Rossmann Magyarország Kft. operates a comprehensive online drugstore platform offering a wide range of products including cosmetics, personal care, and household items. The company holds a strong market position in Hungary as a leading retailer with a well-established brand and parent company support from Dirk Rossmann GmbH. The website demonstrates a mature technical infrastructure leveraging modern frameworks such as Next.js and React, integrated with advanced analytics and marketing tools like Google Tag Manager and Cookiebot for GDPR compliance. Security posture is robust with HTTPS enforcement, security headers, and bot protection via reCAPTCHA, although there is room for improvement in publishing explicit security policies and incident response contacts. Overall, the platform is professional, trustworthy, and compliant with relevant privacy regulations.
AgentFly Technologies s.r.o.agentfly.com
Transportation · Czech Republic
78Low
NIS2 17 · GDPR 95
NIS2 17 · GDPR 95
AgentFly Technologies s.r.o. is a specialized technology company focused on innovative solutions for air traffic management, unmanned aerial systems integration, tactical military and security operations, and aerial work automation. The company targets aviation professionals, UAS operators, regulators, and defense sectors, positioning itself as a niche B2B provider with notable partnerships including AFRL, FAA, NATO, ONR, CERDEC, and NASA. The website presents a professional image with clear service descriptions and a modern design. Technically, the website employs modern web technologies including Google Analytics with IP anonymization and Cookiebot for cookie consent management, ensuring a moderate level of digital maturity. The site is mobile optimized and provides a good user experience, though some accessibility and SEO enhancements could be made. The absence of a CMS or hosting provider details limits deeper infrastructure insights. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms, but lacks visible security headers and published security policies or incident response contacts. The missing WHOIS data for the domain raises concerns about domain registration legitimacy, though the professional web presence and contact information mitigate some risk. Overall, the website is functional, professional, and compliant with basic privacy requirements, but improvements in transparency, security headers, and domain registration verification are recommended to enhance trust and security posture.
Kentico Software s.r.o.kentico.com
Technology · Czech Republic
79Low
NIS2 20 · GDPR 83
NIS2 20 · GDPR 83
Kentico Software s.r.o. operates a comprehensive digital experience platform (DXP) that integrates content management, digital marketing, and commerce capabilities. Positioned as a medium-sized technology company based in the Czech Republic, Kentico targets marketers and developers seeking scalable and AI-powered digital solutions. The website reflects a mature digital infrastructure with modern technologies such as Google Tag Manager and advanced JavaScript frameworks, ensuring fast performance and excellent mobile optimization. Security posture is strong with HTTPS enforcement and security headers, though explicit incident response and vulnerability disclosure policies are not publicly detailed. Overall, the website and business presence indicate a reputable and professional organization with room for improvement in transparency and security communication.
- JJDC
jdc.org
Non-profit
78Low
NIS2 22 · GDPR 73
NIS2 22 · GDPR 73
JDC is a globally recognized Jewish humanitarian non-profit organization established in 1914, dedicated to saving lives and strengthening Jewish communities worldwide. The website reflects a mature digital presence with clear messaging, donation capabilities, and active engagement through social media and crisis response initiatives. Technically, the site leverages WordPress and Frontity frameworks, integrates multiple analytics and marketing tools, and employs HTTPS for secure communications. Security posture is solid with secure forms and no visible vulnerabilities, though explicit privacy and cookie policies are not evident in the provided content. The absence of WHOIS data limits domain trust verification but does not detract from the overall legitimacy indicated by the website's professional design and external linkages.
Unibuddyunibuddy.com
Education
77Low
NIS2 22 · GDPR 73
NIS2 22 · GDPR 73
Unibuddy is a well-established SaaS platform founded in 2013 that specializes in student-to-student recruitment and engagement for higher education institutions. The platform facilitates peer-to-peer connections, real-time insights, and community engagement to help universities increase admissions and improve marketing efforts. The website reflects a mature business with a strong market position, serving over 500 universities and engaging more than 3 million prospective students worldwide. Technically, the site is built on a modern Next.js framework, hosted likely on WP Engine, and integrates marketing and analytics tools such as Google Tag Manager and HubSpot. The site is fast, mobile-optimized, and accessible, with professional design and clear navigation. Security posture is good with HTTPS and domain protections, though improvements like DNSSEC and security headers are recommended. Privacy compliance is partial, with a cookie consent mechanism but no visible privacy policy or terms of service pages in the provided content. Overall, the website is professional, trustworthy, and safe for general audiences.
—
91Low
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
ABRA Softwareabra.cz
Technology · Czech Republic
81Low
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
ABRA Software is a well-established Czech technology company specializing in enterprise resource planning (ERP) systems and business information software. The company offers a comprehensive suite of ERP solutions, web and mobile applications, and business support services targeting a broad range of businesses seeking digital transformation and operational efficiency. Their market position is strong within the Czech Republic and surrounding European markets, supported by a professional and content-rich website that clearly communicates their offerings and expertise. The website demonstrates a mature digital presence with modern technology and SEO best practices implemented. Security posture is robust with HTTPS, security headers, and cookie consent mechanisms in place, although public security policies and incident response information are not prominently available. Overall, the site reflects a trustworthy and professional business entity with a strong focus on compliance and user experience.
Majestic-12 Ltdmajestic.com
Technology · United Kingdom
81Low
NIS2 2 · GDPR 65
NIS2 2 · GDPR 65
Majestic-12 Ltd operates Majestic.com, a well-established SEO backlink analysis platform founded in 2004. The company provides a comprehensive suite of backlink intelligence tools and services targeted at SEO professionals, digital marketers, and agencies worldwide. Their market position is strong, supported by a large backlink database, multiple industry awards, and a consistent brand presence. The website is professionally designed with excellent content quality, clear navigation, and mobile optimization, reflecting a mature digital presence. Technically, the site uses modern JavaScript libraries such as jQuery, integrates Google Analytics, Google Tag Manager, and Piwik for analytics, and employs JSON-LD structured data for SEO. Hosting details are not explicit but DNS and registrar data indicate a stable infrastructure. Performance and accessibility are rated good to excellent. Security posture is solid with HTTPS enforced and domain registration protections in place, though DNSSEC is not enabled and some advanced security headers are not detected. Privacy compliance is adequate with clear privacy and cookie policies, but lacks a cookie consent mechanism. Overall, the security posture is strong with no visible vulnerabilities or exposed sensitive data. However, the absence of explicit security policies, incident response information, and vulnerability disclosure mechanisms suggests room for improvement in transparency and compliance. The domain WHOIS data aligns well with the business claims, showing a long-established domain with appropriate registration status and no privacy masking, enhancing trustworthiness. The website is safe for general audiences, with no adult or questionable content detected. Social media presence is active across major platforms, supporting marketing and community engagement. Strategic recommendations include enabling DNSSEC, adding cookie consent mechanisms, publishing security and incident response policies, and enhancing security headers to further strengthen the security posture and compliance.
HelpCrunch Corporationhelpcrunch.com
Technology · United States
78Low
NIS2 2 · GDPR 80
NIS2 2 · GDPR 80
HelpCrunch Corporation operates a mature SaaS platform specializing in customer communication tools including live chat, chatbots, knowledge bases, email marketing, and popups. The company targets businesses seeking to enhance customer support and engagement, positioning itself as a competitive alternative to established players like Intercom and Zendesk. The platform emphasizes AI-powered features to improve efficiency and customer experience. Technically, the website is well-constructed with modern analytics and marketing integrations, fast performance, and excellent mobile optimization. Security posture is solid with HTTPS, domain locks, and basic security headers, though there is room for improvement in DNSSEC and additional security headers. Privacy compliance is strong with clear policies and consent mechanisms. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.
NETOPIA Paymentsnetopia-payments.com
Finance · Romania
82Low
NIS2 17 · GDPR 95
NIS2 17 · GDPR 95
NETOPIA Payments is a Romanian-based online payment processor with over 20 years of experience, serving more than 25,000 businesses. The company provides secure and reliable online payment solutions, supporting multiple payment methods. Their website reflects a professional and consistent brand presence, targeting business customers primarily in Romania. Technically, the site is built on WordPress and leverages modern frontend libraries such as jQuery, FontAwesome, and Google Tag Manager, with hosting DNS managed by Google Cloud services. The site is mobile-optimized and SEO-friendly, with good performance and accessibility standards. Security-wise, the website enforces HTTPS and uses Cookiebot for GDPR-compliant cookie consent management, but lacks explicit security headers and published security policies. WHOIS data indicates a legitimate domain registration with no privacy protection, consistent with the business claims. Overall, the site demonstrates a solid digital presence with room for improvement in security policy transparency and contact information availability.
Glue Upglueup.com
Technology
86Low
NIS2 17 · GDPR 95
NIS2 17 · GDPR 95
Glue Up is a well-established SaaS company founded in 2014, specializing in all-in-one association management software that serves associations, chambers of commerce, non-profits, and professional communities globally. The platform integrates CRM, membership management, event management, email marketing, and community engagement tools, positioning Glue Up as a leader in its market segment with over 1,500 customers managing more than 1 million members. The company has strategic partnerships with industry leaders such as NVIDIA, Cvent, and ASAE, enhancing its technological capabilities and market reach. Technically, the website is built on Drupal 11 with modern web technologies and integrates multiple analytics and marketing tools, reflecting a mature digital infrastructure. Security posture is good with HTTPS enforced and domain protections in place, though improvements like DNSSEC and enhanced security headers are recommended. Privacy compliance is strong with clear policies and consent mechanisms. Overall, Glue Up presents a professional, trustworthy, and technically sound online presence with a high level of business credibility.
Didomididomi.io
Technology
77Low
NIS2 17 · GDPR 85
NIS2 17 · GDPR 85
Didomi is a technology company specializing in privacy solutions and consent management platforms designed to help businesses optimize privacy compliance and improve data performance. Their offerings include tools to increase consent rates and enhance return on ad spend, positioning them as a leader in the privacy technology market. The website demonstrates a professional and modern digital presence with comprehensive privacy and cookie policies, reflecting strong adherence to GDPR and related regulations. Technically, the site leverages modern JavaScript frameworks, Webflow CMS, and integrates analytics and tag management tools such as Google Tag Manager and Plausible Analytics, indicating a mature and well-maintained infrastructure. Security-wise, the website enforces HTTPS, employs security headers, and integrates consent management SDKs, showing a robust security posture with no evident vulnerabilities or exposed sensitive data. Overall, Didomi presents a trustworthy and credible business with a strong focus on privacy compliance and user consent management.
innogy Česká republika a.s.bezpecnykotel.cz
Energy · Czech Republic
76Low
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
Innogy Česká republika a.s. is a large energy company operating in the Czech Republic, providing gas and electricity supply alongside value-added services such as gas boiler servicing. The website offers a subscription-based boiler maintenance service aimed at domestic customers, emphasizing safety, efficiency, and cost savings. The company maintains a strong market position with diversified energy-related offerings and a customer portal named innosvět for service management. Technically, the website employs modern JavaScript frameworks and integrates third-party services like Google Tag Manager and Cookiebot for analytics and privacy compliance. The site is well-optimized for mobile devices, accessible, and SEO-friendly, with structured data enhancing search engine understanding. Performance is moderate, with asynchronous loading of scripts and preloading of fonts. Security posture is strong with HTTPS enforced, multiple security headers present, and no visible vulnerabilities or exposed sensitive data. Privacy compliance is robust, featuring a comprehensive cookie consent mechanism and a clear privacy policy. However, the absence of a dedicated security policy or incident response contact reduces transparency in security governance. Overall, the website is professional, trustworthy, and secure, with minor gaps in explicit security disclosures. The lack of WHOIS data limits domain registration transparency but does not detract from the site's legitimacy based on content and business information.
So Loved Manufacturesoloved.de
Retail · Germany
83Low
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
So Loved Manufacture is a small German e-commerce retailer specializing in handcrafted and personalized jewelry such as rings, earrings, and necklaces made from materials like 925 silver, Fimo, and stainless steel. The company leverages an online platform to offer laser engraving personalization, targeting consumers seeking modern and lovingly designed accessories. The website is built on the Shopify platform, utilizing modern web technologies and third-party integrations for marketing, analytics, and customer support. The technical infrastructure is robust, with fast performance, mobile optimization, and good SEO practices. Security posture is strong, with HTTPS enforced, appropriate security headers, and GDPR-compliant cookie consent mechanisms. However, explicit security policies and incident response contacts are not publicly available. Overall, the site presents a professional and trustworthy online presence with room for improvement in transparency and accessibility.
Wolf Tuckerwolftucker.co.uk
E-commerce · United Kingdom
82Low
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
Wolf Tucker is a UK-based e-commerce business specializing in raw dog food, including complete meals, complementary meals, dried treats, supplements, and meal toppers. Founded in 2011, the company operates a professionally designed Shopify store with subscription options and bundle deals, targeting dog owners seeking high-quality raw pet food. The website demonstrates a solid market position within its niche, supported by trust signals such as Trustpilot integration and social media presence. Technically, the site leverages modern Shopify infrastructure, third-party marketing tools like Klaviyo, and shipping/pickup apps to enhance customer experience. The site is well-optimized for performance, mobile responsiveness, and accessibility. Security posture is strong with HTTPS enforced, cookie consent mechanisms, and no visible vulnerabilities, although explicit security policies and incident response contacts are absent. Overall, the domain age and WHOIS data support the legitimacy of the business. Strategic recommendations include publishing detailed security and incident response policies and enhancing contact information visibility to further improve trust and compliance.
- Itron
itron.com
Energy · United States
85Low
NIS2 25 · GDPR 100
NIS2 25 · GDPR 100
Itron is a recognized enterprise specializing in smart energy and water management solutions for utilities and cities. Their website reflects a mature digital presence with a focus on sustainability and efficiency through intelligent networks and software services. The company targets utility providers and municipal clients, offering technology-driven solutions to optimize resource management. Technically, the website leverages modern frameworks such as React and Liferay, combined with analytics tools like Google Analytics and Matomo, indicating a well-maintained infrastructure. Security posture is strong with HTTPS enforcement and consent management, though explicit security policies and incident response contacts are not publicly detailed. Overall, the site demonstrates professionalism and trustworthiness suitable for an enterprise in the energy sector.
BASFbasf.com
Energy · Finland
86Low
NIS2 2 · GDPR 73
NIS2 2 · GDPR 73
BASF is a globally recognized chemical company with a strong presence in Finland, providing chemical products and industrial solutions primarily targeting business customers in the energy and chemical sectors. The website reflects a professional corporate image with consistent branding and good content quality, aimed at industry professionals and partners. The technical infrastructure is modern, leveraging Angular framework and JavaScript technologies, with moderate performance and good mobile optimization. Security posture is moderate with HTTPS likely enabled but lacks visible security headers and explicit security policies, indicating room for improvement in security best practices. Privacy compliance is weak due to absence of visible privacy and cookie policies. Overall, the website is trustworthy and professional but would benefit from enhanced transparency and security measures.
Private investorserste-am.cz
—
83Low
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
Ekotermekoterm.pl
Energy · Poland
83Low
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
Ekoterm.pl is a Polish company specializing in heating fuels and heating oils, operating since 2000. The website presents a professional and well-structured platform targeting residential and commercial customers seeking heating solutions. The company offers product sales, heating solutions, and distributor opportunities, positioning itself as a trusted player in the energy sector in Poland. Technically, the website is built on WordPress with common plugins and modern frontend technologies such as jQuery, Bootstrap, and Google Tag Manager. Cookie consent is managed via Cookiebot, ensuring compliance with cookie regulations. Security posture is moderate with some best practices like CSRF protection cookies and cookie consent, but lacks DNSSEC and explicit security headers. No privacy policy or terms of service pages were found in the provided content, which is a compliance gap. Contact information including phone numbers and a company email are clearly displayed, enhancing business credibility. Overall, the website is professional, trustworthy, and serves its business purpose effectively.
Railsformers s.r.o.railsformers.cz
Technology · Czech Republic
78Low
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
Railsformers s.r.o. is a Czech IT company established in 2009, offering a broad range of technology services including custom web and mobile application development, ERP systems, online reservation platforms, graphic design, marketing, SEO, e-commerce solutions, and cybersecurity. The company has a solid market presence with over 300 clients, 700 projects completed, and four international awards, positioning itself as a reputable mid-sized technology service provider in the Czech Republic. The website reflects a professional and consistent brand image with clear service offerings targeted at businesses seeking comprehensive IT solutions. Technically, the website uses modern web technologies and frameworks, with good mobile optimization and SEO practices. Hosting appears to be consistent with the company's regional presence. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks published privacy policies, terms of service, and security headers, which are areas for improvement. No WAF or blocking mechanisms were detected, allowing full content access. WHOIS data confirms domain legitimacy and consistency with business claims. Overall, the website is trustworthy and professionally maintained but would benefit from enhanced privacy and security disclosures to improve compliance and user trust.
ha-vel internet s.r.o.ha-vel.cz
Telecommunications · Czech Republic
76Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
ha-vel internet s.r.o. is a Czech telecommunications company offering a broad range of services including data, voice, IT, and high-capacity internet connectivity. The company targets corporations, public administration, wholesale providers, and households, positioning itself as a reliable and quality-focused network operator with presence in over 50 cities in the Czech Republic. Their website reflects a professional business with clear service offerings and client references from notable companies such as GE Money Bank and Vodafone Czech Republic. Technically, the website is built on Drupal CMS using legacy jQuery libraries and includes cookie consent mechanisms compliant with GDPR. While HTTPS is used, security headers are not explicitly detected, and some modernization of the tech stack is advisable. The security posture is moderate with no visible vulnerabilities or exposed sensitive data. WHOIS data is not publicly available due to EURid privacy policies, but the domain and website content are consistent with a legitimate business. Overall, the site is safe, professional, and trustworthy, though improvements in security headers, mobile optimization, and explicit security policies would enhance the posture.
MINDOKmindok.cz
Retail · Czech Republic
80Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
MINDOK is a Czech-based retailer specializing in modern social and family board games, operating an e-commerce platform built on WordPress and WooCommerce with the Divi theme. The website targets board game enthusiasts and families in the Czech Republic, offering a professional and well-structured online shopping experience. The technical infrastructure includes modern web technologies, CDN hosting via Amazon Cloudfront, and integration with Google Tag Manager and Facebook Pixel for marketing and analytics purposes. Security posture is solid with HTTPS enforced and standard security headers present, although the absence of explicit privacy and cookie policies indicates compliance gaps. Overall, the website is legitimate and professionally maintained but would benefit from enhanced privacy compliance and clearer contact information for security and incident response.
GetResponsegetresponse.com
Technology · Poland
81Low
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
GetResponse is a well-established marketing automation platform founded in 1998, headquartered in Poland. It offers a comprehensive suite of tools including email marketing, landing pages, webinars, SMS marketing, and AI-driven product recommendations. The company targets entrepreneurs, ecommerce stores, and global brands, boasting over 350,000 customers worldwide. The website reflects a mature digital presence with modern technologies such as Next.js, React, and integration with analytics and consent management tools. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though explicit security policies and incident response information are not publicly available. The missing WHOIS domain registration data slightly reduces trust but is mitigated by strong branding and external trust signals. Overall, GetResponse presents a professional, secure, and privacy-conscious platform with room for improvement in transparency around security policies.
Kunsthalle Prahakunsthallepraha.org
Non-profit · Czech Republic
76Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Kunsthalle Praha is a prominent cultural institution in Prague dedicated to modern and contemporary art exhibitions, events, and educational programs. It serves a diverse audience including art enthusiasts, tourists, schools, and companies. The website reflects a well-established organization with a strong market position in the non-profit cultural sector. Technically, the site uses a modern CMS (solidpixels.) and integrates multiple analytics and marketing tools such as Google Analytics, TikTok Pixel, and Microsoft Clarity, indicating a mature digital infrastructure. Security posture is good with HTTPS enforced and secure forms, though some security headers could be improved. Privacy and cookie policies are present with consent mechanisms, supporting GDPR compliance. Overall, the website is professional, content-rich, and trustworthy, with no signs of malicious activity or suspicious WHOIS data. Strategic recommendations include enhancing security headers and publishing a vulnerability disclosure policy.
Úvodní stránka | GrandOpticalgrandoptical.cz
Retail · Czech Republic
78Low
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
GrandOptical.cz is a Czech Republic-based retail business specializing in optical products including prescription glasses, sunglasses, and contact lenses. The website offers a broad product catalog from global and exclusive brands, supported by professional optometrist services and physical store locations across the country. The business model combines e-commerce with brick-and-mortar retail, targeting general consumers seeking quality eyewear and eye care services. The site is well-branded and professionally designed, providing a good user experience with clear navigation and mobile optimization. Technically, the website employs modern technologies such as Google Tag Manager for analytics and Algolia for search functionality, indicating a mature digital infrastructure. The site uses HTTPS with security features like CSRF tokens and reCAPTCHA, enhancing security posture. However, the absence of visible security headers and formal privacy or cookie policies suggests room for improvement in compliance and security best practices. Security-wise, the site shows a moderate security posture with encrypted connections and anti-CSRF measures but lacks explicit privacy and cookie policies, security.txt, or vulnerability disclosure information. No WHOIS data is publicly available, likely due to privacy protection, which slightly reduces transparency but is common for retail businesses. No suspicious or malicious indicators were found in the website content or external links. Overall, GrandOptical.cz presents a legitimate, professional retail website with good content and technical implementation but would benefit from enhanced privacy compliance and security transparency to improve trust and regulatory adherence.
- MMicrosoft Corporation
msn.com
Media · United States
79Low
NIS2 2 · GDPR 65
NIS2 2 · GDPR 65
MSN Finland (https://www.msn.com/fi-fi) is a localized version of the global MSN portal operated by Microsoft Corporation. The site offers a comprehensive aggregation of news, weather, sports, finance, entertainment, and video content tailored for Finnish users. It leverages Microsoft's extensive content partnerships and advertising infrastructure to deliver personalized and up-to-date information. The website is well-branded, professionally designed, and optimized for desktop and mobile platforms, reflecting a mature digital presence within the media sector. Technically, the site employs modern web technologies including JavaScript frameworks, service workers, and CDN delivery via Akamai. It integrates Microsoft’s ad SDK and OneTrust for cookie consent management, indicating compliance with privacy regulations. The site demonstrates good performance, accessibility, and SEO practices, with a clear focus on user experience and content relevance. From a security perspective, MSN Finland enforces HTTPS with strong SSL configurations and uses security best practices such as nonce-based script loading and cookie consent mechanisms. However, explicit security policies, incident response contacts, and privacy policy links are not directly visible in the provided HTML snapshot, suggesting areas for improvement in transparency and compliance communication. Overall, MSN Finland presents a high level of trustworthiness and professionalism consistent with its parent company Microsoft. The absence of WHOIS data is likely due to registry privacy policies and does not detract from the domain’s legitimacy. Strategic recommendations include enhancing visible privacy and security policy disclosures and providing clear contact channels for security incidents to further strengthen user trust and compliance posture.
- SSelzee
aichat.sk
E-commerce
76Low
NIS2 25 · GDPR 70
NIS2 25 · GDPR 70
Selzee is an AI-powered virtual sales representative platform designed specifically for Shopify ecommerce stores. It offers automated customer support, smart product recommendations, and adaptive store intelligence to help online sellers increase average order value and conversion rates. The website presents a professional and modern interface with clear messaging targeting ecommerce businesses seeking AI-driven sales and support solutions. Technically, the site leverages modern JavaScript libraries, Tailwind CSS, and PostHog analytics, hosted on Cloudflare infrastructure, indicating a mature digital presence. However, the security posture is moderate with room for improvement, notably the absence of DNSSEC, security headers, and explicit privacy and cookie policies. The WHOIS data raises concerns due to an inconsistent future domain creation date, which impacts trustworthiness. Overall, the site is functional and safe for general audiences but would benefit from enhanced transparency and security practices.
ORLENorlen.cz
Energy · Czech Republic
83Low
NIS2 2 · GDPR 100
NIS2 2 · GDPR 100
ORLEN Česká republika operates the largest network of fuel stations in the Czech Republic, providing quality fuels and convenience services such as Stop Cafe. The company holds a strong market position as a leading energy retailer in the region, supported by its parent company PKN ORLEN S.A. The website reflects a mature digital presence with localized content, professional design, and compliance with privacy regulations including GDPR. Technically, the site uses Kentico CMS, integrates Google Tag Manager and Cookiebot for analytics and consent management, and enforces HTTPS with appropriate security headers. Security posture is solid with no evident vulnerabilities or exposed sensitive data, though the absence of a public security policy and incident response page suggests room for improvement. Overall, the domain's privacy-protected WHOIS data is typical for corporate entities and does not raise suspicion. The site is safe for general audiences and well-optimized for SEO and mobile use.
- PPPP-T S.A.
pppt.pl
Energy · Poland
83Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
PPP-T S.A. operates as a modern business and innovation development space primarily serving the Płock subregion in Poland. The company offers approximately 60 hectares of connected investment areas equipped with technical infrastructure, office spaces, conference rooms, and acceleration programs to support entrepreneurship. The website reflects a professional and regionally focused business entity linked to the ORLEN group, a major energy sector player. Technically, the website is built on Adobe Experience Manager, employs HTTPS, and integrates a comprehensive cookie consent mechanism via Cookiebot, indicating a mature digital infrastructure. Security posture is generally good with HTTPS and consent management, but lacks some advanced security headers and explicit incident response or security policy disclosures. WHOIS data for the domain pppt.orlen.pl is unavailable from the Polish registry, which slightly reduces trustworthiness, but the website content and branding strongly indicate legitimacy. Overall, the site is well-structured, accessible, and compliant with GDPR requirements, targeting business clients and entrepreneurs in the region.
- SSolino
solino.pl
Energy · Poland
83Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Solino is a large Polish company specializing in the production of salt brine and related natural resource products, operating under the ORLEN group umbrella. The website reflects a professional corporate presence with a focus on business customers and partners in the energy and industrial sectors. The site uses Adobe Experience Manager CMS and integrates modern technologies such as Google Tag Manager and Cookiebot for analytics and privacy compliance. Security posture is strong with HTTPS and cookie consent mechanisms, though some security headers and explicit security policies are absent. Overall, the site is well-structured, mobile-optimized, and compliant with GDPR requirements, but lacks visible direct contact information and terms of service. The WHOIS data is unavailable, which slightly impacts trust but is mitigated by the site's affiliation with ORLEN.
- CCentrum Edukacji
centrumedukacji.pl
Education · Poland
83Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Centrum Edukacji is a well-established educational service provider in Poland, operating since 1999 and affiliated with the ORLEN Group. The company offers a broad range of services including technical and developmental training, postgraduate studies, language courses, event organization, and conference services. The website reflects a mature digital presence built on Adobe Experience Manager, with integrated analytics and cookie consent management, indicating a good level of digital maturity. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is strong, with a comprehensive privacy policy and GDPR-aligned cookie consent. Overall, the website projects a professional and trustworthy image suitable for its target audience of individuals and corporate clients seeking educational services.
- AANWIL
anwil.pl
Energy · Poland
83Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
ANWIL is a leading Polish chemical company specializing in the production of nitrogen fertilizers and plastics, operating as a large enterprise under the parent company ORLEN. The website reflects a mature digital presence with professional design, clear navigation, and compliance with privacy regulations including GDPR. The technical infrastructure leverages Adobe Experience Manager CMS, Google Tag Manager, and Cookiebot for consent management, indicating a modern and compliant setup. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though additional security headers and explicit security policies could enhance protection. Overall, the website is trustworthy and well-maintained, supporting ANWIL's market position as a leader in its sector.
- FFundacja ORLEN
orlendarserca.pl
Energy · Poland
83Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Fundacja ORLEN is a Polish non-profit foundation affiliated with the ORLEN Group, operating since 2001. It focuses on social impact through grant and scholarship programs, safety initiatives, and employee volunteering. The website is professionally designed, primarily targeting Polish-speaking audiences interested in corporate social responsibility and community support. Technically, the site is built on Adobe Experience Manager CMS and integrates modern tools such as Google Tag Manager and Cookiebot for analytics and privacy compliance. Security posture is strong with HTTPS enforced and a comprehensive cookie consent mechanism, although some security headers could be improved. WHOIS data is not publicly available, which is typical for .pl domains, but the website content and corporate affiliation support its legitimacy. Overall, the site demonstrates good digital maturity and compliance with GDPR requirements.