Low-risk security reports
14,261 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,165001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
4,501–4,550 of 14,261
- Autodesk
autodesk.co.nz
Technology · United States
78Low
NIS2 25 · GDPR 68
NIS2 25 · GDPR 68
Autodesk is a global leader in design and make technology, providing software solutions across architecture, engineering, construction, manufacturing, and entertainment sectors. The company operates an enterprise-grade website that showcases its products and services with a professional and modern design. The website targets professionals and enterprises seeking advanced 3D design, engineering, and entertainment software solutions. Autodesk's market position is strong, supported by a comprehensive portfolio and a large global customer base. Technically, the website leverages modern web technologies including JavaScript, CSS3, and HTML5, integrated with Adobe Experience Manager CMS and advanced analytics and tag management tools such as Dynatrace and Tealium. The site is well optimized for performance, mobile responsiveness, accessibility, and SEO, reflecting a mature digital infrastructure. From a security perspective, Autodesk employs HTTPS with strong SSL configurations, security headers, and content security policies. The site uses secure cookie attributes and third-party monitoring tools to maintain security posture. No critical vulnerabilities or exposed sensitive data were detected. Privacy and cookie policies are comprehensive and GDPR compliant, with consent mechanisms in place. Overall, Autodesk's website demonstrates a high level of professionalism, security, and compliance, consistent with its enterprise stature. The domain is longstanding and privacy protected, which is justified given the company's size and brand. Strategic recommendations include enhancing public security disclosures and maintaining vigilant updates to third-party components.
- Autodesk
autodesk.com.au
Technology · United States
78Low
NIS2 25 · GDPR 68
NIS2 25 · GDPR 68
Autodesk is a globally recognized leader in 3D design, engineering, and entertainment software, serving professionals and enterprises across architecture, engineering, construction, manufacturing, and media industries. The company operates a sophisticated digital presence with a modern technology stack, including advanced analytics and tag management tools, and a robust content management system (Adobe Experience Manager). The website reflects a mature digital infrastructure with excellent performance, mobile optimization, and accessibility. Security posture is strong, with HTTPS enforcement, comprehensive security headers, and publicly available security policies and incident response contacts. Privacy compliance is well addressed with clear privacy and cookie policies, GDPR adherence, and a designated Data Protection Officer. Overall, Autodesk's website and digital footprint demonstrate a high level of professionalism, trustworthiness, and business credibility.
- Autodesk
autodesk.co.uk
Technology · United States
78Low
NIS2 25 · GDPR 68
NIS2 25 · GDPR 68
Autodesk is a globally recognized leader in 3D design, engineering, and entertainment software, serving professionals across architecture, engineering, construction, manufacturing, and media industries. The company operates a sophisticated digital presence with a modern technology stack including Adobe Experience Manager CMS, advanced analytics, and performance monitoring tools. The website demonstrates excellent design quality, mobile optimization, and SEO practices, reflecting Autodesk's enterprise-grade digital maturity. Security posture is strong with HTTPS enforcement, comprehensive security headers, and no visible vulnerabilities, although explicit security policies and incident response contacts are not prominently published. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, Autodesk's website reflects a high level of professionalism, trustworthiness, and business credibility consistent with its market position.
Appinium | Salesforce Video Solutionsappinium.com
Technology
78Low
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Appinium is a specialized technology company offering a native Salesforce enterprise content enablement platform focused on video and multimedia tracking across marketing, sales, service, and learning domains. The company positions itself as a niche leader integrating deeply with Salesforce to provide actionable insights and engagement tracking. The website reflects a professional B2B SaaS business model targeting enterprises leveraging Salesforce for content distribution and enablement. Technically, the site is built on WordPress with modern JavaScript libraries and integrates analytics and user engagement tools such as Google Analytics, Hotjar, and Qualified chat. Security posture is solid with HTTPS enforced and reCAPTCHA protecting forms, though formal security policies and headers could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR considerations. Overall, the domain registration and website content are consistent and trustworthy, supporting a high legitimacy score.
Twiliotwilio.com
Technology · United States
81Low
NIS2 17 · GDPR 65
NIS2 17 · GDPR 65
Twilio is a leading cloud communications platform that provides APIs for messaging, voice, video, email, and customer engagement. Positioned as a leader in the CPaaS market, Twilio serves a broad audience including developers, enterprises, and startups. The website reflects a mature, enterprise-grade platform with comprehensive product offerings and strong branding consistency. Technically, the site leverages modern analytics, consent management, and performance monitoring tools, built on Adobe Experience Manager CMS, ensuring fast, accessible, and SEO-optimized user experience. Security posture is robust with HTTPS enforcement, multiple security headers, and compliance with major standards such as ISO 27001 and PCI DSS. Privacy policies and cookie consent mechanisms are comprehensive and GDPR compliant. Although WHOIS data is unavailable, the website's trust signals and business credibility remain high, indicating a legitimate and well-established entity.
- LLG
lgsupport.com
Technology
78Low
NIS2 25 · GDPR 58
NIS2 25 · GDPR 58
The website at b2b.lgsupport.com is a business-to-business support portal likely operated by LG Corporation or its affiliates. It serves as a platform for LG's business customers and partners to access support services, product information, and service management tools. The site leverages a modern technology stack centered around Salesforce Lightning Web Components, integrating multiple payment providers such as Stripe, PayPal, and Adyen, indicating a mature digital infrastructure. Despite the advanced technical implementation and strong security practices like a strict Content-Security-Policy and use of reCAPTCHA, the absence of WHOIS registration data for the domain raises questions about domain registration transparency. No privacy, cookie, or terms of service policies were detected in the provided content, which may impact compliance and user trust. Overall, the site appears legitimate and enterprise-grade but would benefit from improved transparency and privacy compliance documentation.
- PPF a.s.
ppf.eu
Finance · Czech Republic
76Low
NIS2 47 · GDPR 25
NIS2 47 · GDPR 25
PPF Group is a well-established international investment group founded in 1991 in the Czech Republic, operating in 25 countries across Europe, North America, and Asia. The company manages a diversified portfolio spanning telecommunications, media, financial services, e-commerce, real estate, biotechnology, and mobility sectors. Their website reflects a mature digital presence with comprehensive corporate information, news, and insights targeted at investors, partners, and the general public. Technically, the website is built on modern frameworks such as Next.js and React, leveraging DatoCMS for content management and integrating Google services like reCAPTCHA Enterprise and Tag Manager for security and analytics. The site demonstrates excellent performance, mobile optimization, and SEO practices, ensuring a smooth user experience. From a security perspective, the site enforces HTTPS, employs security headers, and uses CAPTCHA to protect forms, indicating a strong security posture. However, there is no publicly available security policy or incident response contact, which could be improved. Privacy and cookie policies are present and comprehensive, showing good compliance with GDPR requirements. Overall, the website is professional, trustworthy, and secure, with no signs of malicious activity or content blocking. The domain WHOIS data is privacy protected, which is common for European domains, and does not raise immediate concerns. Strategic recommendations include publishing a security policy, adding vulnerability disclosure information, and enhancing incident response transparency.
- Bestsport, a.s.
o2arena.cz
Hospitality · Czech Republic
78Low
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
O2 arena, operated by Bestsport, a.s., is a premier multifunctional venue and convention center located in Prague, Czech Republic. It offers a diverse program of cultural and sporting events and provides rental spaces for various types of events. The venue is well-positioned in the hospitality and entertainment sectors, supported by a strong brand presence and partnerships with reputable companies including its parent company PPF Group. The website reflects a mature digital infrastructure built on WordPress, leveraging modern JavaScript libraries and analytics tools to deliver a fast, accessible, and user-friendly experience. Privacy compliance is robust with a detailed cookie consent mechanism and a comprehensive privacy policy. Security posture is strong with HTTPS enforced and no obvious vulnerabilities detected, though some security headers could be improved. Overall, the domain appears legitimate despite the absence of WHOIS data, likely due to privacy protection, and the site maintains high trust and professionalism.
Flying Bisonsflyingbisons.com
Technology · Poland
78Low
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
Flying Bisons is a well-established digital consulting and delivery firm founded in 2015, specializing in helping businesses drive digital transformation and accelerate growth through a broad range of services including UX research, digital strategy, product design, branding, development, and data analytics. The company targets ambitious brands and startups seeking to create world-class digital products and experiences. Their market position is strong, supported by a high Clutch rating and a portfolio of notable clients such as KFC, IKEA, and Burger King. Technically, the website is built with modern web technologies, uses Cloudflare DNS, and integrates advanced tracking and analytics tools like Google Tag Manager and Sentry for error monitoring. The site is mobile-optimized, fast, and accessible with good SEO practices. Security posture is solid with HTTPS enforced and some security best practices in place, though DNSSEC is not enabled and some security headers are not explicitly found. Privacy compliance is partial, with a cookie consent mechanism but no visible privacy policy or terms of service. Overall, the domain registration data is consistent and supports the legitimacy of the business. Strategic recommendations include publishing comprehensive privacy and security policies, enabling DNSSEC, and adding vulnerability disclosure information to enhance trust and compliance.
FUNKE Works GmbHabsolventa.de
Media · Germany
79Low
NIS2 17 · GDPR 85
NIS2 17 · GDPR 85
Absolventa.de is a leading German job board focused on graduates, young professionals, and experienced academics. Operated by FUNKE Works GmbH, a subsidiary of the FUNKE Mediengruppe, the platform offers thousands of job listings, career advice, and employer profiles. The website is well-positioned in the German job market, targeting a specialized audience with comprehensive services including trainee and internship opportunities. Technically, the site employs modern frameworks such as Ruby on Rails with Hotwire Turbo, Tailwind CSS, and uses reputable third-party services for analytics and consent management. The site is fast, mobile-optimized, and SEO-friendly. Security posture is strong with HTTPS, CSRF protection, and GDPR-compliant cookie consent mechanisms, though explicit security policies and incident response contacts are not published. Overall, the site demonstrates a mature digital presence with high trustworthiness and professional design.
Giftprogiftpro.co.uk
Hospitality · United Kingdom
76Low
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Giftpro is a UK-based eCommerce platform specializing in gift vouchers, event tickets, and product sales tailored for hospitality businesses. Established in 2014, it serves a medium-sized market segment with a strong presence evidenced by numerous hospitality brand partnerships. The website demonstrates a mature digital infrastructure leveraging WordPress with Elementor, integrated marketing and analytics tools such as Google Tag Manager, HubSpot, Marketo, and Microsoft Clarity. The platform offers a centralized admin area and payment processing via GiftproPay powered by ClearAccept. Security posture is solid with HTTPS and standard security practices, though lacks published security policies and incident response contacts. Privacy compliance is limited by the absence of a visible privacy policy and terms of service. Overall, the site is professional, trustworthy, and well-optimized for its target audience.
Propeller Digitalpropeller.co.uk
Hospitality · United Kingdom
82Low
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
Propeller Digital is a leading London-based digital agency specializing in driving digital growth for clients in hospitality, travel, food & drink, and entertainment sectors. The company offers a comprehensive suite of services including digital strategy, SEO, web development, conversion rate optimization, UX/UI design, social media management, analytics, and paid media campaigns. Their market position is strong, supported by decades of experience and a portfolio of notable clients and successful case studies. Technically, the website is built on modern frameworks such as Next.js and integrates various third-party services like Vimeo for video hosting, Google Tag Manager for analytics, and Tawk.to for live chat support. The site demonstrates excellent performance, mobile optimization, and SEO practices, reflecting a mature digital infrastructure. From a security perspective, the website enforces HTTPS, employs security headers, and uses reCAPTCHA on forms to mitigate spam and abuse. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of explicit security policies and incident response information suggests room for improvement in transparency and preparedness. Overall, the website presents a professional, trustworthy, and well-maintained digital presence. The WHOIS lookup for the 'www.propeller.co.uk' subdomain failed due to an invalid query, but the main domain is presumably properly registered. The business exhibits strong credibility and compliance with privacy regulations, including GDPR. Strategic recommendations include publishing detailed security and incident response policies and enhancing vulnerability disclosure mechanisms.
- HamburgerHerzen - Partnersuche in Hamburg
hamburgerherzen.de
Other · Germany
76Low
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
HamburgerHerzen.de is an online dating platform targeting singles in Hamburg and its surrounding areas. The website offers services focused on partner search and flirting, aiming to connect local singles. The business model is typical for regional dating services, focusing on user registration and matchmaking. The website content is in German and designed for a mature audience interested in dating. Technically, the site uses AWS hosting infrastructure and custom fonts, with a professional and mobile-optimized design. However, there is a lack of visible privacy, cookie, and terms of service policies, which impacts compliance and trust. Security posture is weak due to missing security headers and unclear SSL configuration. No contact or business verification information is provided, limiting business credibility assessment. Overall, the site is functional and professionally designed but requires improvements in privacy, security, and transparency to enhance trust and compliance.
- CCreative Market
creativemarket.com
E-commerce
82Low
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
Creative Market is a well-established online marketplace founded in 1998, specializing in high-quality digital creative assets such as stock photos, graphics, fonts, and design templates. The platform targets creative professionals, designers, marketers, and small businesses seeking unique digital content. It operates a mature e-commerce business model with a strong market position supported by a large catalog of over 3 million assets from independent creators worldwide. The website demonstrates excellent content quality, professional design, and clear navigation, providing a seamless user experience across devices.
Voiceflowvoiceflow.com
Technology · Canada
76Low
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
Voiceflow is a leading SaaS platform specializing in no-code AI conversational agents for chat and voice. It targets product teams and enterprises aiming to build scalable AI agents across multiple customer channels. The platform offers deep customization, integrations with major CRM and analytics tools, and a strong partner ecosystem. Technically, the website is built on Webflow with modern JavaScript libraries and analytics integrations, delivering fast performance and excellent mobile optimization. Security posture is strong with HTTPS, security headers, and no exposed sensitive data, though explicit security policies and incident response contacts are not publicly available. Overall, the domain is privacy protected, which is common for tech companies, and the website content and branding strongly support legitimacy and trustworthiness.
- FFUNKE Mediengruppe
funkemedien.de
Media · Germany
78Low
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
FUNKE Mediengruppe is a prominent German media company operating in regional newspapers, magazines, and digital media. The website reflects a mature media group with a strong emphasis on quality journalism, sustainability, and diversity. Their digital presence is supported by modern technologies including Contao CMS and Vue.js, with integrated analytics via Matomo and Google Tag Manager. The site is well-structured, mobile-optimized, and professionally designed, targeting a broad audience interested in media and journalism. Security posture is solid with HTTPS enforced, though some security headers and incident response details could be improved. Privacy policies are comprehensive and GDPR compliant, but cookie consent mechanisms could be enhanced. Overall, the website projects high business credibility and trustworthiness.
- CChecking your browser before accessing. Just a moment...
revistaidentidad.ec
Other · Ecuador
78Low
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website revistaidentidad.ec is currently inaccessible due to a Cloudflare Web Application Firewall (WAF) challenge page that blocks direct content access. This prevents extraction of any meaningful business, contact, or policy information. The site appears to be protected by a JavaScript challenge typical of Cloudflare, indicating a security posture that prioritizes bot mitigation but limits external analysis. Without access to actual site content, no metadata, forms, or external links can be analyzed. The lack of visible security headers or SSL configuration data further limits security assessment. Overall, the site’s digital maturity and compliance posture cannot be evaluated accurately under these conditions.
Chatwootchatwoot.com
Technology
77Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Chatwoot is a modern, open-source customer engagement platform that offers both self-hosted and cloud-based solutions. Positioned as an alternative to established players like Intercom and Zendesk, Chatwoot targets businesses seeking to manage all customer conversation channels from a unified platform. The website reflects a professional and consistent brand image with a clear focus on technology and customer support services. The technical infrastructure is built on modern web technologies including Nuxt.js and Tailwind CSS, ensuring good performance, mobile optimization, and accessibility. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security policies and incident response details are not publicly available. Overall, the website is trustworthy and well-structured, but could benefit from enhanced transparency around privacy, security, and contact information.
- FFUNKE Mediengruppe
funkemediennrw.de
Media · Germany
81Low
NIS2 2 · GDPR 45
NIS2 2 · GDPR 45
FUNKE Mediengruppe is a large German media company active in regional newspapers, magazines, and digital media. The website reflects a professional media group with a clear focus on quality journalism and corporate responsibility, including sustainability and diversity. The technical infrastructure is modern, leveraging Contao CMS and popular JavaScript frameworks, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and GDPR-compliant cookie consent mechanisms, though explicit security policies and incident response information are not published. Overall, the site is trustworthy and well-maintained, supporting a broad audience interested in media and journalism.
Shop Houzzshophouzz.com
E-commerce · United States
81Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Shop Houzz operates as an e-commerce platform specializing in home furniture, lighting, and decor products. The website is built on the Shopify platform, leveraging a modern tech stack including various marketing and analytics tools such as Google Tag Manager, Facebook Pixel, Klaviyo, and Yotpo for product reviews. The site targets consumers looking for home essentials and offers a broad product catalog with clear navigation and a professional design. The business model is retail-focused, serving the US market primarily. Technically, the site is well-structured with good mobile optimization and moderate performance, hosted on Shopify's CDN infrastructure. Security posture is adequate with HTTPS enforced and use of fraud prevention services, though explicit security headers and dedicated security policies are not visible. Privacy compliance is weak due to the absence of visible privacy and cookie policies or consent mechanisms. Overall, the site appears legitimate and trustworthy but would benefit from enhanced transparency and security best practices.
- Autodesk, Inc.
spacemaker.ai
Technology · United States
78Low
NIS2 29 · GDPR 73
NIS2 29 · GDPR 73
Autodesk, Inc. is a leading global provider of design and engineering software solutions, with a strong market position in the Architecture, Engineering, and Construction (AEC) sector. The Forma Site Design product is a cloud-based software offering AI-powered tools for concept and schematic design, targeting professionals in the AEC industry. The website is hosted on the official Autodesk domain, featuring a professional design and comprehensive product information, supporting a SaaS subscription business model. The company is well-established, founded in 1982, and operates at an enterprise scale. Technically, the website leverages modern web technologies including JavaScript frameworks, Adobe Experience Manager CMS, and advanced monitoring and analytics tools such as Dynatrace and Adobe Target. The site demonstrates excellent performance, mobile optimization, and accessibility, with strong SEO practices. Security is robust with HTTPS enforced, comprehensive security headers, and monitoring in place, reflecting a mature security posture. Privacy compliance is well addressed with clear privacy and cookie policies, consent mechanisms, and GDPR adherence. However, explicit contact information such as emails or phone numbers was not found on this page, which is typical for large enterprise sites that centralize contact through support portals. WHOIS data is unavailable, likely due to privacy protection or registrar restrictions, but the domain's legitimacy is supported by the official Autodesk branding and infrastructure. Overall, the website presents a low-risk profile with strong business credibility, technical maturity, and security posture. Strategic recommendations include maintaining up-to-date security audits, monitoring third-party scripts, and enhancing direct contact availability for improved user support.
- Autodesk
autodesk.eu
Technology
78Low
NIS2 25 · GDPR 68
NIS2 25 · GDPR 68
Autodesk is a globally recognized leader in design and make technology, providing software solutions across architecture, engineering, construction, manufacturing, and entertainment sectors. The website reflects a mature enterprise-grade digital presence with strong branding and internationalization support. The technical infrastructure leverages modern web technologies, Adobe Experience Manager CMS, and advanced monitoring via Dynatrace, indicating a high level of digital maturity. Security posture is solid with HTTPS enforced and monitoring in place, though explicit security policies and vulnerability disclosures are not publicly visible. Privacy compliance appears limited in the provided content, lacking clear privacy and cookie policies or consent mechanisms. Overall, the website is professional and trustworthy but could improve transparency on privacy and security policies.
- Autodesk, Inc.
plangrid.com
Technology · United States
77Low
NIS2 2 · GDPR 80
NIS2 2 · GDPR 80
Autodesk Construction Cloud's PlanGrid product is a leading construction productivity software that provides real-time access to project plans, issues, photos, and forms for general contractors, subcontractors, and owners. It is integrated into the broader Autodesk Construction Cloud ecosystem, offering a comprehensive SaaS solution for construction management. The website demonstrates a high level of professionalism, with clear navigation, mobile optimization, and extensive content relevant to its target audience. Technically, the site leverages modern frameworks such as React and Next.js, and integrates multiple marketing and analytics tools including Marketo, Tealium, and 6sense. Security posture is strong with HTTPS enforced and use of secure cookies, though explicit security headers could be more visible. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site reflects a mature digital presence consistent with an enterprise-level technology provider.
- ČČeská pošta, s.p.
mojedatovaschranka.cz
Government · Czech Republic
77Low
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
The website info.mojedatovaschranka.cz serves as an official government portal providing comprehensive information and services related to 'Datové schránky' (Data Mailboxes), a digital communication system between citizens, businesses, and government institutions in the Czech Republic. Operated by Česká pošta, s.p., the portal offers detailed guidance, multiple secure login methods, technical requirements, and up-to-date news, positioning itself as a trusted and authoritative source for electronic communication with the state. From a technical perspective, the site employs modern web technologies including jQuery, Slick Carousel, and a government design system ensuring good mobile optimization, accessibility, and user experience. The integration of a chatbot enhances user support. While performance is moderate, the site is well-structured and SEO optimized, reflecting a mature digital infrastructure. Security-wise, the portal enforces HTTPS and offers multiple secure authentication methods such as mobile keys and citizen identity logins. However, explicit security headers are not detected, and no vulnerability disclosure or incident response contacts are published, indicating areas for improvement. Privacy compliance is strong with a clear privacy policy and GDPR adherence, though cookie consent mechanisms are absent. Overall, the website demonstrates a high level of professionalism, trustworthiness, and business credibility as a government service portal. The lack of WHOIS data for the subdomain is noted but does not detract from legitimacy given the official branding and content. Strategic recommendations include enhancing security headers, implementing cookie consent, and publishing vulnerability disclosure information to further strengthen security posture and user trust.
Font Squirrelfontsquirrel.com
Technology
78Low
NIS2 2 · GDPR 85
NIS2 2 · GDPR 85
Font Squirrel is a well-established online platform specializing in providing free, high-quality fonts licensed for commercial use. The website targets graphic designers, web developers, and businesses seeking legally free fonts, offering a curated selection alongside useful tools such as a webfont generator and font identifier. The business model relies primarily on advertising revenue and affiliate partnerships with paid font vendors like Fontspring and Creative Market. The site maintains a professional appearance with clear licensing and privacy policies, supporting a trustworthy user experience. Technically, the website employs modern web technologies including JavaScript, CSS, and HTML5, with integrations for Google Analytics and multiple advertising networks. The presence of a cookie consent mechanism and HTTPS enforcement indicates a mature approach to privacy and security compliance. Performance is moderate with good mobile optimization, though accessibility features are basic. No CMS or hosting provider details were explicitly detected. From a security perspective, the site benefits from HTTPS and cookie consent but lacks explicit security headers and documented incident response or vulnerability disclosure policies. No critical vulnerabilities or exposed sensitive data were found. The absence of WHOIS data reduces domain trust slightly, but the professional site content and policies support legitimacy. Advertising practices are transparent with multiple ad networks and tracking services disclosed. Overall, Font Squirrel presents a low-risk profile with strong business credibility and privacy compliance. Strategic improvements include enhancing security headers, publishing security policies, and improving accessibility. These steps would further solidify trust and compliance in an evolving regulatory landscape.
- Contentstack Inc.
contentstack.com
Technology
81Low
NIS2 25 · GDPR 73
NIS2 25 · GDPR 73
Contentstack Inc. operates a leading adaptive digital experience platform that integrates AI-driven content management with real-time customer data to deliver personalized experiences across multiple digital channels. Positioned as an enterprise-grade SaaS provider, Contentstack targets developers, business users, and digital leaders seeking flexible and scalable headless CMS solutions. The platform's key services include headless content management, real-time data analytics, omnichannel personalization, intelligent agents, and front-end hosting, supported by a strong brand presence and major global customers. Technically, the website leverages modern web technologies such as React and Next.js, integrates Google Tag Manager for analytics, and employs CookiePro for consent management, reflecting a mature digital infrastructure. The site is well-optimized for performance, mobile responsiveness, and SEO, with comprehensive metadata and structured content. From a security perspective, the site enforces HTTPS, implements multiple security headers, and uses consent mechanisms for privacy compliance. However, explicit security policies and incident response contacts are not prominently published, indicating areas for improvement. No vulnerabilities or exposed sensitive data were detected during analysis. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy standards, although the absence of WHOIS data introduces some uncertainty about domain registration details. Strategic recommendations include publishing detailed security and incident response policies and enhancing transparency around data protection roles.
- PPanattoni Development Company
panattoni.com
Real Estate · United States
76Low
NIS2 22 · GDPR 58
NIS2 22 · GDPR 58
Panattoni Development Company is a large, privately held commercial real estate developer specializing in industrial, office, and build-to-suit projects with a strong international presence across the United States, Canada, Europe, and Asia. The company has developed over 630 million square feet and serves a broad client base of approximately 2500 clients. Their business model leverages local community partnerships combined with international market reach to deliver tailored real estate solutions. The website reflects a mature digital presence built on WordPress with modern technologies such as Bootstrap, jQuery, and Font Awesome, and includes SEO optimizations and structured data for enhanced search visibility. Security posture is adequate with HTTPS and reCAPTCHA integration, but lacks visible security policies and headers. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the website is professional, content-rich, and trustworthy but could improve transparency and compliance documentation.
GA Connectorgaconnector.com
Technology
79Low
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
GA Connector is a technology company specializing in integrating CRM systems with Google Analytics to provide businesses with detailed insights into their marketing ROI and lead sources. Founded in 2016 and operated by MarTech Solutions LLC, the company serves a broad range of clients including Fortune 500 companies, offering a SaaS platform that imports visitor and sales data into CRM software to optimize marketing spend. The website is professionally designed, mobile-optimized, and rich in content, showcasing strong branding consistency and trust signals such as customer testimonials and GDPR compliance. Technically, the site uses modern frameworks like Bootstrap and integrates multiple marketing and analytics tools including Google Analytics, Google Tag Manager, Drip, and HelpScout Beacon. Hosting is managed via Cloudflare, ensuring good performance and security. Security posture is solid with HTTPS enforced and domain transfer protections, though some security headers and policies could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. Overall, the website and business present a credible, professional, and secure digital presence.
Media · Germany
76Low
NIS2 2 · GDPR 70
NIS2 2 · GDPR 70
Gruner + Jahr Deutschland GmbH is a prominent media publishing company based in Hamburg, Germany, specializing in magazines and digital content for well-known brands such as Schöner Wohnen, Häuser, Couch, and GEOlino. Since 2022, it has been fully integrated into RTL Deutschland GmbH, part of the larger RTL Group, a leading European entertainment conglomerate. The company targets a broad general audience with its publishing and digital media offerings, leveraging the strong market position and resources of RTL Deutschland. Technically, the website employs modern web technologies including Google Tag Manager for analytics and a privacy management solution from privacy-mgmt.com to handle GDPR compliance. The site is built on a CMS platform likely proprietary to RTL (NetRTL CMS), with responsive design and good SEO practices. Performance is moderate with good mobile optimization and basic accessibility features. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism, but lacks explicit security headers and published security policies or incident response information. No vulnerabilities or exposed sensitive data were detected. The WHOIS data for the subdomain is unavailable, which is typical for subdomains of large corporate domains, but the main rtl.com domain is well-established and reputable. Overall, the website presents a professional and trustworthy front for Gruner + Jahr Deutschland GmbH and RTL Group, with solid business credibility and compliance efforts. Strategic improvements in security headers, transparency on security policies, and enhanced privacy documentation would further strengthen the security posture and user trust.
- RapidSSL
rapidssl.com
Technology · United States
78Low
NIS2 2 · GDPR 65
NIS2 2 · GDPR 65
RapidSSL is a well-established SSL certificate provider offering quick and easy domain validated (DV) and wildcard certificates through a global reseller network. The company is positioned as a preferred brand for businesses seeking affordable and trusted SSL solutions, with strong ties to DigiCert and GeoTrust, enhancing its market credibility. The website reflects a professional and consistent brand image, emphasizing security, warranties, and support services. Technically, the site leverages Adobe Experience Manager CMS, integrates multiple analytics and marketing tools, and provides a good user experience with mobile optimization and accessibility features. Security posture is strong with HTTPS and WebTrust audits mentioned, though explicit security headers are not detected in the HTML content. Privacy compliance is partially addressed with a comprehensive privacy policy linked to DigiCert, but lacks a visible cookie consent mechanism. WHOIS data is unavailable, which slightly reduces transparency but is common for security-focused domains. Overall, RapidSSL demonstrates a mature digital presence with solid business credibility and technical infrastructure.
Thawtethawte.com
Technology · United States
80Low
NIS2 2 · GDPR 85
NIS2 2 · GDPR 85
Thawte is a globally recognized Certificate Authority specializing in TLS/SSL certificates and digital trust solutions. Powered by DigiCert, Thawte offers a broad portfolio of certificate products including single domain, multi-domain, wildcard, code signing, and email certificates. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content targeting businesses seeking secure online communications. Technically, the site leverages Adobe Experience Manager and integrates advanced analytics and accessibility tools, demonstrating a modern and scalable infrastructure. Security posture is strong with HTTPS enforcement and trusted DigiCert certificates, though explicit security headers and published security policies are absent. WHOIS data is unavailable, likely due to privacy or registry policies, but the DigiCert affiliation and professional presentation mitigate concerns. Overall, the site is trustworthy and well-positioned in the digital trust market, serving enterprise clients worldwide.
Sectigosectigo.com
Technology · United States
85Low
NIS2 43 · GDPR 95
NIS2 43 · GDPR 95
Sectigo is a leading global provider of SSL certificates and automated certificate management solutions, trusted by enterprises and global brands for over 20 years. The company offers a broad portfolio of security products including SSL/TLS certificates, code signing, IoT security, and private PKI solutions, targeting IT professionals and businesses requiring robust digital security. The website reflects a mature digital presence with comprehensive content, clear navigation, and strong branding consistency. Technically, the site employs modern JavaScript frameworks, analytics, and marketing tools, ensuring good performance and mobile optimization. Security posture is strong with HTTPS enforcement, security headers, and compliance with recognized standards such as ISO 27001 and SOC 2. Privacy and cookie policies are comprehensive and GDPR compliant, supported by consent mechanisms. WHOIS data is unavailable likely due to privacy protection, which is justified for a security company. Overall, Sectigo's website demonstrates a professional, trustworthy, and secure online presence.
Technology · United States
82Low
NIS2 2 · GDPR 85
NIS2 2 · GDPR 85
The GeoTrust website presents itself as a provider of SSL digital certificates, emphasizing encryption and authentication services. The site content is professional and focused on SSL certificates by DigiCert, targeting organizations seeking strong encryption solutions. The website uses Adobe Experience Manager as its CMS and integrates Adobe DTM for analytics and UserWay for accessibility, indicating a moderate level of digital maturity. However, the absence of WHOIS registration data raises concerns about domain legitimacy and ownership transparency. Security posture is weak due to lack of visible security headers and absence of privacy or cookie policies, which impacts trust and compliance. Overall, the site is accessible and functional but requires improvements in security and compliance disclosures to enhance trustworthiness and regulatory adherence.
- Bitly, Inc.
lghvac.co
Technology · United States
79Low
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
Bitly, Inc. is a well-established enterprise technology company specializing in branded link management, URL shortening, QR code generation, and analytics services. Founded in 2003, Bitly serves a broad business and marketing audience, providing SaaS solutions that enable companies to create, share, and track branded links to enhance customer engagement and marketing effectiveness. The website reflects a mature market position with strong brand recognition and trust signals, including compliance with GDPR, CCPA, and SOC 2 Type 2 standards. Technically, the website is built on WordPress with a modern tech stack incorporating advanced analytics (Snowplow, Google Tag Manager), marketing optimization tools (Optimizely), and privacy management (OneTrust). Hosting and DNS services leverage AWS and Google Cloud infrastructure, ensuring robust performance and scalability. The site is well-optimized for mobile and accessibility, with excellent SEO practices and multi-language support. Security posture is strong, with HTTPS enforced, domain registration protections, and visible compliance certifications. However, DNSSEC is not enabled, and explicit incident response contacts or security.txt files are absent, representing areas for improvement. No vulnerabilities or exposed sensitive data were detected in the content or scripts. Overall, Bitly's website demonstrates high professionalism, trustworthiness, and compliance, supporting its enterprise-grade service offerings. Strategic recommendations include enabling DNSSEC, publishing incident response details, and enhancing security headers to further strengthen security and trust.
- BBenQ
benq.eu
Technology
86Low
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
BenQ Europe operates a comprehensive website offering a wide range of technology products including monitors, projectors, lighting solutions, interactive displays, and signage. The site targets both consumers and business customers in Europe, providing detailed product information and e-commerce capabilities. The brand is well-established globally, and the European site reflects a professional and consistent brand image with strong content quality and user experience. Technically, the website leverages modern JavaScript frameworks such as Vue.js, along with libraries like jQuery, Axios, and GSAP, hosted on an Adobe Experience Manager platform. The site is mobile-optimized and SEO-friendly, with structured data implemented for enhanced search engine visibility. Performance is moderate, with room for improvement in accessibility features. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms aligned with GDPR requirements. However, explicit security headers are not evident in the provided data, suggesting an opportunity to strengthen security posture. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is privacy protected, which is typical for large brands, and no suspicious patterns were found. Overall, BenQ Europe's website presents a low-risk profile with strong business credibility and compliance. Strategic recommendations include enhancing security headers, improving accessibility, and maintaining regular audits of third-party libraries to ensure ongoing security and compliance.
- Hitachi Energy
hitachienergy.com
Energy · Switzerland
85Low
NIS2 55 · GDPR 88
NIS2 55 · GDPR 88
Hitachi Energy is a global enterprise specializing in sustainable energy solutions, focusing on powering the world's energy systems to be more sustainable, secure, resilient, and affordable. The company operates primarily in the energy sector, providing advanced power grid technologies, grid automation, and electrification products. Their market position is that of a leading energy technology provider with a strong emphasis on innovation and sustainability. The website reflects a mature digital presence with professional design, comprehensive content, and clear navigation aimed at energy sector professionals, governments, and industrial customers. Technically, the website is built on Adobe Experience Manager, leveraging modern web technologies including Google Tag Manager, Adobe Dynamic Tag Management, and Cloudfront CDN for performance and scalability. The site is mobile-optimized, accessible, and SEO-friendly, with robust analytics and marketing tools integrated. Security best practices are observed with HTTPS enforcement, security headers, and consent management for privacy compliance. The security posture is strong, with no evident vulnerabilities or exposed sensitive data. The company maintains ISO 27001 certification and provides clear incident response contacts. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. However, the WHOIS data for the domain is missing or unavailable, which raises some concerns about domain registration transparency, though the website content and branding strongly support legitimacy. Overall, Hitachi Energy's website demonstrates a high level of professionalism, security, and compliance, suitable for an enterprise in the energy sector. Recommendations include verifying domain registration details for transparency and continuing regular security assessments to maintain the strong security posture.
Kobalt Music Group, Limitedkosignmusic.com
Media
78Low
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
KOSIGN is a music publishing platform powered by Kobalt Music Group, Limited, designed to empower artists, producers, and songwriters to manage and collect their global publishing royalties efficiently. The platform leverages trusted technology used by renowned songwriters, offering a streamlined process for membership application, song submission, and royalty collection. The website presents a professional and modern digital presence with clear branding and comprehensive content focused on its core services. Technically, the site is built on modern frameworks such as React and Next.js, hosted on Vercel, and integrates multiple analytics and tracking tools while maintaining good privacy compliance with a cookie consent mechanism. Security posture is strong with HTTPS and security headers in place, though explicit incident response and vulnerability disclosure information are absent. The WHOIS data is missing, which raises some concerns about domain registration legitimacy, but the overall trust is supported by the association with Kobalt and professional content. Strategic recommendations include adding explicit security and incident response policies and verifying domain registration details to enhance trust.
- Équipement De Vie
equipementdevie.com
E-commerce · United Kingdom
76Low
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
Équipement De Vie is a small UK-based e-commerce business specializing in high-performance sailing shoes designed for both sea and land use. The company operates a professionally designed Shopify storefront with a clear brand identity and product focus. Their market position is niche, targeting sailing enthusiasts and customers seeking premium deck shoes. The website features essential e-commerce functionalities including product listings, customization options, and ambassador programs. Technically, the site leverages modern web technologies and Shopify's Broadcast theme, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforced and domain transfer protections in place, though DNSSEC is not enabled and some security headers could be improved. Privacy compliance is addressed with visible privacy and cookie policies and consent mechanisms. However, explicit contact information and security policies are not prominently available. Overall, the website is trustworthy and professionally maintained, suitable for its business model and audience.
Chucs Restaurantschucsrestaurants.com
Hospitality · United Kingdom
83Low
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Chucs Restaurants is a London-based hospitality group operating a collection of Italian-inspired restaurants and cafes across key London locations such as Mayfair, Belgravia, and Kensington. The business offers a range of dining experiences including brunch, lunch, dinner, takeaway cafes, and private group dining. The website is professionally designed with strong branding consistency and rich content that highlights their offerings and events, positioning them as a reputable player in the London hospitality market. Technically, the website leverages modern web technologies including WordPress CMS, JavaScript libraries like Flickity for carousels, and integrates Google Tag Manager and Facebook Pixel for analytics and marketing. The site is mobile-optimized, SEO-friendly, and includes a cookie consent mechanism compliant with GDPR standards. Performance is moderate with good accessibility features. From a security perspective, the site uses HTTPS and implements cookie consent but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS registration data is a notable anomaly that slightly reduces trust but does not outweigh the professional presentation and contact transparency. Overall, the website presents a low-risk profile with strong business credibility and privacy compliance. Strategic improvements in security headers and transparency around security policies would enhance trust and resilience.
- Ville de Genève
ville-geneve.ch
Government · Switzerland
77Low
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
The website www.geneve.ch is the official digital portal for the City of Geneva, Switzerland, providing comprehensive information and services to residents, businesses, tourists, and other stakeholders. It offers a wide range of municipal services including administrative procedures, news updates, cultural events, and contact information for city authorities. The site is well-branded, professionally designed, and multilingual, reflecting a mature digital presence for a large government entity. Technically, the site is built on Drupal 10, leveraging modern web technologies and third-party integrations such as Google Tag Manager and Weglot for analytics and translation services. The site demonstrates good mobile optimization, accessibility, and SEO practices, although some security headers are not explicitly detected. HTTPS is enforced, and cookie consent mechanisms are implemented in compliance with GDPR. From a security perspective, the site shows a solid posture with no visible vulnerabilities or exposed sensitive data. However, it lacks publicly available security policies or incident response contacts, which could be improved to enhance transparency and trust. The WHOIS data aligns perfectly with the official nature of the site, confirming legitimacy and consistency. Overall, the website scores highly on content quality, technical implementation, security, privacy compliance, and business credibility, making it a trustworthy and professional government portal.
Smartlingsmartling.com
Technology · United States
78Low
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
Smartling is an established enterprise SaaS company founded in 2009, specializing in AI-powered translation and localization services. The company offers a comprehensive translation management system integrating AI and human expertise to deliver high-quality translations at scale. Their platform supports automation, workflow integration, and real-time analytics, targeting enterprises seeking to globalize their content efficiently. The website reflects a mature digital presence with professional design, extensive content, and strong branding consistency. Technically, Smartling leverages HubSpot CMS and integrates numerous marketing and analytics tools including Google Analytics, Facebook Pixel, LinkedIn Insight Tag, and others. The site is mobile-optimized and employs modern web technologies, although some accessibility features could be enhanced. Security posture is strong with HTTPS, security headers, and compliance with multiple industry standards such as SOC 2, HITRUST, HIPAA, PCI DSS, and ISO certifications. The WHOIS data is unavailable publicly, likely due to privacy protection, which is common for enterprise SaaS providers. Despite this, the website's trust signals, certifications, and customer case studies support its legitimacy. Privacy and cookie policies are comprehensive and GDPR compliant, with active consent mechanisms. Overall, Smartling presents a secure, professional, and trustworthy online presence suitable for enterprise clients. The main risk is the lack of publicly available WHOIS data, which is mitigated by other trust indicators.
Skaikenshoo.com
Technology · United States
83Low
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Skai is an enterprise-level omnichannel marketing platform providing data-driven marketing intelligence and connected media technology to brands and agencies. The company positions itself as a leader in marketing technology with a focus on measurement and analytics at scale. The website is built on WordPress using modern plugins and technologies, hosted on AWS infrastructure, and integrates multiple marketing and analytics tools such as Google Analytics, Hotjar, and Pardot. The site demonstrates good SEO and mobile optimization but lacks explicit privacy and terms of service documentation in the accessible HTML content. Security posture is adequate with HTTPS and domain locks but could be improved by enabling DNSSEC and adding security headers. No WAF or blocking mechanisms were detected, allowing full content access. WHOIS data shows privacy protection consistent with legitimate enterprise use and domain age aligns with the company's market presence.
Houzzhouzz.com
Real Estate · United States
87Low
NIS2 17 · GDPR 85
NIS2 17 · GDPR 85
Houzz is a leading platform serving both construction and design professionals as well as homeowners seeking inspiration and services for home improvement projects. The company offers a comprehensive suite of software tools for professionals including 3D floor plans, project management, estimates, invoicing, and client dashboards. The website is well-branded, professionally designed, and targets a large audience in the real estate and home remodeling sectors. Technically, the site uses modern web technologies and provides a good user experience with mobile optimization and accessibility features. Security posture is solid with HTTPS enforced and secure forms, though some security headers and explicit incident response information are not publicly visible. Privacy policies are comprehensive and GDPR compliant, but cookie consent mechanisms could be improved. The absence of WHOIS data in the raw output is unusual but does not detract significantly from the site's legitimacy given its market presence and content quality. Overall, Houzz presents a trustworthy and professional online presence with room for minor security and privacy enhancements.
Skynet Technologies USA LLCskynettechnologies.us
Technology · United States
82Low
NIS2 17 · GDPR 95
NIS2 17 · GDPR 95
Skynet Technologies USA LLC is a well-established IT services company specializing in web development, digital accessibility, ecommerce solutions, and digital marketing. With nearly 23 years of business excellence and multiple certifications including ISO 27001 and SOC 2 Type 2, the company serves a diverse clientele including start-ups, SMEs, corporates, and government agencies. Their global presence includes offices in the US, India, and Australia, and partnerships with major technology providers such as IBM, Microsoft, Amazon, and Google. The website reflects a mature digital infrastructure built on Drupal 10, with strong accessibility and SEO features. Technically, the website employs modern web technologies and frameworks, ensuring good performance and mobile optimization. The presence of comprehensive privacy and cookie policies, along with cookie consent mechanisms, demonstrates a commitment to privacy compliance. Security posture is strong with HTTPS, multiple security headers, and adherence to industry standards. However, the absence of public incident response and vulnerability disclosure information suggests room for improvement in transparency and security readiness. Overall, the website and business present a professional and trustworthy image with strong compliance and service offerings. The main concern is the lack of WHOIS registration data, which slightly reduces trustworthiness but does not outweigh the positive indicators. Strategic recommendations include publishing incident response policies, adding vulnerability disclosure mechanisms, and maintaining ongoing security audits to enhance trust and compliance.
- Autodesk, Inc.
autodesk.com
Technology · United States
81Low
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
Autodesk, Inc. is a leading global technology company specializing in 3D design, engineering, and construction software solutions. With a strong market position and a comprehensive portfolio of products such as AutoCAD, Revit, and Fusion 360, Autodesk serves professionals and enterprises across architecture, engineering, manufacturing, and media industries. The company operates primarily on a SaaS and licensing business model, targeting a broad audience of design and engineering professionals worldwide. The website demonstrates a mature technical infrastructure leveraging modern web technologies including React, Adobe Experience Manager CMS, and advanced monitoring and analytics tools like Dynatrace and Tealium. The site is optimized for performance, mobile responsiveness, accessibility, and SEO, reflecting a high level of digital maturity. From a security perspective, Autodesk exhibits strong practices including HTTPS enforcement, comprehensive security headers, and publicly available security and privacy policies. Certifications such as ISO 27001 and SOC 2 further reinforce their commitment to security and compliance. No significant vulnerabilities or suspicious activities were detected, indicating a robust security posture. Overall, Autodesk presents a low-risk profile with a professional and trustworthy online presence. Strategic recommendations include maintaining up-to-date third-party libraries, implementing a security.txt file for vulnerability disclosures, and continuing to enhance incident response capabilities to sustain their leadership in security and compliance.
Mediaboard.commediaboard.com
Media
78Low
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
Mediaboard.com is a mature SaaS platform specializing in media intelligence, PR, and marketing tools. The website positions itself as an all-in-one PR platform offering media monitoring and press release publishing services. The target audience primarily includes PR professionals and marketing teams seeking comprehensive media monitoring solutions. The business appears to be well-established, with a domain age dating back to 1998, indicating longevity in the market. Technically, the website is built on WordPress CMS using Elementor for page building and Yoast SEO for search engine optimization. It integrates multiple third-party analytics and marketing tools such as Microsoft Clarity, Dreamdata, Intercom, LinkedIn Insight, and Google Tag Manager, reflecting a modern digital marketing infrastructure. Hosting and DNS services leverage Cloudflare, providing performance and security benefits, although DNSSEC is not enabled. From a security perspective, the site uses HTTPS and has domain registration locks to prevent unauthorized changes. However, there is a lack of visible security headers and no published security policy or incident response contacts. Cookie consent is managed effectively via Cookiebot, indicating some level of privacy compliance, though no explicit privacy policy or terms of service were found in the provided content. No vulnerabilities or suspicious activities were detected. Overall, the website demonstrates a good balance of business credibility and technical implementation but could improve privacy compliance and security posture by publishing clear policies, enabling DNSSEC, and implementing security headers. These enhancements would strengthen trust and reduce potential risks.
- CCodePen
codepen.io
Technology · United States
76Low
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
CodePen is a well-established online platform founded in 2012 that serves as a social development environment for front-end developers and designers. It offers an online code editor, project building, testing, and a vibrant community for sharing and discovering front-end code snippets and projects. The platform operates on a freemium business model with PRO accounts and team subscriptions, positioning itself as a leader in the front-end development community. The website is professionally designed, mobile-optimized, and provides clear navigation and rich content that caters to its target audience of front-end developers and designers. Technically, CodePen employs modern web technologies including React, SCSS, and JavaScript, hosted and protected by Cloudflare services. The site demonstrates good performance, accessibility, and SEO optimization. Security measures include HTTPS enforcement and CSRF protection in forms, although DNSSEC is not enabled and some security headers are not explicitly detected. Privacy policies and terms of service are comprehensive and publicly accessible, though a cookie consent mechanism and explicit security policies are absent. From a security perspective, CodePen maintains a strong posture with encrypted communications and domain registration consistency. However, improvements can be made by enabling DNSSEC, publishing a security policy, and implementing cookie consent to enhance GDPR compliance. No critical vulnerabilities or blocking mechanisms were detected, and the site is safe for general audiences. Overall, CodePen is a credible, professional, and secure platform with minor areas for enhancement in privacy compliance and DNS security. Strategic recommendations include enabling DNSSEC, adding cookie consent, publishing security and incident response policies, and enhancing security headers to further strengthen trust and compliance.
- Mighty Networks
mn.co
Technology
83Low
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
Mighty Networks operates a leading community platform that enables creators, entrepreneurs, and businesses to build and monetize online communities, courses, and memberships. The company is recognized as a market leader with high ratings on G2 and offers a comprehensive suite of features including AI tools, events, chat, gamification, and branded apps. Technically, the website is built on modern frameworks such as Gatsby and React, integrating marketing and analytics tools like HubSpot and Google Tag Manager. The site demonstrates good performance, mobile optimization, and SEO practices. Security posture is moderate with HTTPS usage and no exposed sensitive data, but lacks visible security headers and public security policies. WHOIS data is missing, which slightly impacts trustworthiness but the overall business credibility remains high due to professional presentation and market presence. Strategic recommendations include publishing privacy and security policies, enhancing security headers, and improving WHOIS transparency.
- Mighty Networks
mightynetworks.com
Technology
83Low
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
Mighty Networks operates a leading community platform that empowers creators, entrepreneurs, and businesses to build and monetize online communities, courses, memberships, and branded apps. The company holds a strong market position, evidenced by its #1 ranking on G2 and a large user base with over 80,000 ratings averaging 4.8 stars. Technically, the website leverages modern frameworks such as Gatsby and integrates with HubSpot, Calendly, and other marketing and analytics tools, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced and standard best practices observed, though explicit security policies and incident response details are absent. The lack of WHOIS data is a notable gap, potentially impacting trust, but the overall professional presentation and external references support legitimacy. Strategic recommendations include enhancing transparency around security and domain registration details to further build trust.
FINEwearefine.com
Technology
76Low
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
FINE is a digital branding agency specializing in planning, creating, and evolving brand expressions for companies. Positioned as a top agency with offices in San Francisco and Portland, it targets businesses seeking modern digital branding solutions. The website is built using modern JavaScript frameworks such as Vue.js and Nuxt.js, indicating a contemporary technical infrastructure. The site includes multiple third-party marketing and analytics tools, including Google Tag Manager, Microsoft Clarity, Facebook Pixel, LinkedIn Insight Tag, and Reddit Pixel, reflecting a moderate level of digital maturity. Security posture is generally good with HTTPS enabled and no exposed sensitive data detected; however, the absence of security headers and privacy policies indicates room for improvement. The WHOIS data is unavailable, which raises some legitimacy concerns about domain registration, though the professional website content suggests a legitimate business. Overall, the website scores well in content quality and technical implementation but needs enhancements in privacy compliance and security best practices.