Medium-risk security reports
99,066 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,193001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
46,301–46,350 of 99,066
Svibysviby.com
Hospitality · Estonia
51Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Sviby is an Estonian-based event ticketing platform that focuses on providing tickets and gift cards for cultural and entertainment events such as music, theater, festivals, and family activities. The platform targets event attendees and organizers, offering a streamlined online experience for purchasing and managing event tickets. The website demonstrates a consistent brand presence and clear communication channels, including phone and email support, as well as active social media engagement. Technically, the site leverages modern JavaScript frameworks like Vue.js and jQuery, ensuring a responsive and user-friendly interface. Advertising and analytics integrations are standard, with Google Analytics and Facebook Pixel employed for user tracking and marketing purposes. Security posture is adequate with HTTPS enforced and domain transfer protection enabled, though DNSSEC is not implemented and security headers are missing, representing areas for improvement. Privacy compliance is basic but present, with accessible privacy and cookie policies. Overall, the site is professional, trustworthy, and well-positioned within its niche market.
- Spacecraft
wikipage.io
Other
63Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
The website www.wikipage.io is currently offline, displaying a placeholder message indicating that the site is unpublished or offline. Due to the lack of accessible content, no business description, services, or contact information can be identified. The domain WHOIS data is unavailable due to a malformed request response, preventing verification of domain ownership, registration dates, or legitimacy. Technically, the site uses JavaScript modules and a Content-Security-Policy header but lacks other security or privacy features. The absence of HTTPS confirmation and security headers limits the security posture assessment. Overall, the site appears inactive or misconfigured, resulting in a low trust and credibility score.
Other · United States
63Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
The website w3apps.co is currently inaccessible, presenting a 403 Forbidden error page that denies access to any content. Due to this, no business information, metadata, or user-facing content is available for analysis. The domain is registered through GoDaddy.com, LLC with privacy protection via Domains By Proxy, LLC, which obscures registrant details. The domain was created in 2015 and is set to expire in early 2026, indicating a moderate domain age but no visible business presence. Technically, the site lacks DNSSEC and security headers, and no HTTPS status was provided, suggesting basic security posture. No privacy, cookie, or terms of service policies are published, and no contact or social media information is available. Overall, the site appears inactive or restricted, limiting any meaningful security, compliance, or business analysis.
- Welcome | Hydrogen Technology World Expo 2025
hydrogen-worldexpo.com
Energy · Germany
71Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Hydrogen Technology World Expo 2025 is a major industry event focused on hydrogen and fuel cell technologies, scheduled to take place in Hamburg, Germany. The website serves as a comprehensive platform for event information, including conference tracks, speakers, exhibitors, and registration details. The event targets companies and professionals involved in the hydrogen energy sector, aiming to facilitate networking, knowledge sharing, and showcasing of innovative technologies. Technically, the website is built on the SHOWOFF CMS platform by ASP.events, utilizing modern JavaScript libraries and tracking tools such as Google Analytics and Facebook Pixel. The site is mobile-optimized and uses HTTPS, ensuring secure access. However, the absence of WHOIS registration data raises concerns about domain legitimacy. Additionally, the lack of explicit privacy policy and contact information pages limits transparency. Overall, the site is professionally designed and content-rich but would benefit from enhanced compliance and trust signals.
BD SENSORS s.r.o.bdsensors.cz
Manufacturing · Czech Republic
63Medium
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
BD SENSORS s.r.o. is a medium-sized manufacturing company specializing in electronic pressure and level measurement solutions with a strong international presence. The company offers a broad portfolio including sensors, switches, display units, calibration services, and IoT solutions, targeting industrial and manufacturing sectors. Their market position is solid with accredited certifications and a focus on quality and innovation. Technically, the website is built on TYPO3 CMS with modern JavaScript libraries, providing a good user experience and mobile optimization. Security posture is adequate with HTTPS and cookie consent mechanisms, though lacking explicit security headers and incident response information. The absence of WHOIS data reduces domain trust but the website content and business information appear professional and credible. Overall, the site demonstrates a mature digital presence with room for security enhancements and transparency improvements.
Freiraum Fichtelgebirgefreiraumfuermacher.de
Government · Germany
51Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Freiraum Fichtelgebirge is a regional development and community engagement platform focused on promoting the Fichtelgebirge region in Germany. The website serves residents, businesses, innovators, and visitors by providing rich content about local culture, innovation, sustainability, and economic development. It leverages partnerships with regional organizations to strengthen its market position and community impact. Technically, the site is built on WordPress with modern plugins for SEO, multilingual support, and cookie management, hosted on a professional provider (netcup). The site demonstrates good performance, mobile optimization, and accessibility features. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be enhanced. Privacy policies are comprehensive and GDPR compliant. No critical vulnerabilities or suspicious WHOIS patterns were detected, indicating a trustworthy domain and hosting setup. Overall, the website is professional, secure, and well-aligned with its business goals.
—
66Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
Academia Unitedacademiaunited.com
Education · Turkey
66Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Academia United is a Turkey-based company established in 2013, specializing in innovative technology-driven solutions for the language travel and ed-tech sectors. The company operates multiple subsidiary platforms offering accommodation scoring, language travel booking, user experience consultancy, and medical student counseling services. Their market position is supported by a strong brand presence, strategic partnerships, and a scalable business model targeting both B2B and B2C customers. Technically, the website uses modern frontend technologies such as Bootstrap, jQuery, and Owl Carousel, hosted behind Cloudflare DNS services, with good mobile responsiveness and moderate performance. Security posture is adequate with HTTPS and domain transfer protections, but lacks DNSSEC and explicit security headers. Privacy compliance is limited with no visible cookie or privacy consent mechanisms. Overall, the website is professional, trustworthy, and content-rich, but could improve in privacy and security policy transparency.
N-Economian-economia.com
Technology · Spain
74Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
N-Economia is a Spanish-language online platform providing economic information focused on new technologies. It offers news, infographics, reports, and educational content targeting professionals, businesses, and policy makers interested in the intersection of economy and technology. The website is built on WordPress and uses common web technologies including Google Analytics, Facebook SDK, and Twitter widgets. It is hosted on Dinahosting with domain registration dating back to 2000, indicating an established presence. Security posture is moderate with HTTPS enforced and use of reCAPTCHA, but lacks advanced security headers and DNSSEC. Privacy compliance is limited as no explicit privacy or cookie policies were found. Overall, the site is functional and professional but could improve in security and privacy transparency.
- PProxiserve
easy-entretien.com
Energy · France
71Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
Easy-entretien.com is a French website offering online subscription services for maintenance contracts of heating equipment such as gas and oil boilers. The business operates under the Proxiserve group, a recognized entity in the energy sector. The website targets homeowners and businesses seeking certified technician services to ensure safety, energy efficiency, and compliance with maintenance obligations. The site presents a professional and consistent brand image with clear service offerings and customer trust indicators such as verified reviews and a dedicated service phone number. Technically, the site is built on the Magento e-commerce platform, utilizing modern JavaScript libraries and analytics tools like Google Analytics and Hotjar, indicating a mature digital infrastructure. Security posture is good with HTTPS enforced and standard security headers present, though explicit security and privacy policies are not clearly found on the site. The absence of WHOIS registration data is a notable anomaly, potentially due to privacy protection or technical issues, but the website content and branding strongly suggest legitimacy. Overall, the site is well-positioned in its market niche with room for improvement in privacy transparency and compliance documentation.
Cla-Valcla-val.com
Manufacturing · United States
71Medium
NIS2 17 · GDPR 58
NIS2 17 · GDPR 58
Cla-Val is a globally recognized manufacturer specializing in automatic control valves serving diverse industries including waterworks, fire protection, fueling, marine, mining, and electronics. The company maintains a strong market position with a broad product portfolio and regional partner sites across multiple continents. The website reflects a mature digital presence built on WordPress with the Divi theme, integrating modern marketing and analytics tools such as Google Analytics, Marketo, and Lucky Orange. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though explicit security policies and incident response details are not publicly disclosed. The absence of WHOIS registration data raises some concerns about domain legitimacy, warranting further verification. Overall, the site demonstrates professionalism, good content quality, and effective user experience.
BEULCO GmbH & Co. KGbeulco.de
Manufacturing · Germany
50Medium
NIS2 17 · GDPR 33
NIS2 17 · GDPR 33
BEULCO GmbH & Co. KG is a medium-sized German manufacturing company specializing in brass components and systems for water supply, drinking water protection, and house connections. With a history dating back to 1950, BEULCO operates four main business divisions focusing on industry, water, digital solutions, and cleaning/disinfection. The company positions itself as a trusted partner offering high-quality products, innovative digital monitoring solutions, and comprehensive services. The website reflects a mature digital presence built on TYPO3 CMS, with good mobile optimization, clear navigation, and professional content. Security posture is strong with HTTPS, CAPTCHA integration, and consent management, though some security headers could be explicitly confirmed. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site demonstrates high business credibility and trustworthiness.
Accueil - Birdzbirdz.com
—
70Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Franken Plastikfrankenplastik.com
Energy · Germany
51Medium
NIS2 2 · GDPR 58
NIS2 2 · GDPR 58
Franken Plastik GmbH is a German company specializing in signage and identification marking systems for municipalities, public utilities, power supply companies, and industrial enterprises. With over 50 years of experience and a domain registered since 2000, the company holds recognized certifications such as ISO 9001 and EcoVadis, positioning itself as a trusted provider in the energy and transport sectors. Their product offerings include plastic and metal signage, measuring posts, and digital maintenance solutions integrating RFID and QR codes. The website is built on TYPO3 CMS, featuring a modern and professional design with good mobile optimization and clear navigation. Social media presence on LinkedIn, Instagram, and YouTube supports their brand visibility. However, the site lacks explicit cookie consent mechanisms and visible security headers, which impacts privacy compliance and security posture scores. No incident response or security policy pages were found, indicating room for improvement in transparency and security readiness. Overall, the website is credible and functional but could enhance its security and privacy compliance to meet higher standards.
BD|SENSORS GmbHbdsensors.de
Manufacturing · Germany
62Medium
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
BD|SENSORS GmbH is a well-established German company specializing in electronic pressure and level measurement technology for industrial applications. With nearly 30 years of experience, the company offers a broad product portfolio including analog and digital pressure transmitters, level probes, calibration services, and customized solutions. The website reflects a professional and comprehensive digital presence, supporting multiple languages and providing detailed product and company information. The company maintains a strong market position as an innovative and reliable solutions provider in the manufacturing sector.
Katronic Technologies Ltd.katronic.com
Energy · United Kingdom
58Medium
NIS2 2 · GDPR 80
NIS2 2 · GDPR 80
Katronic Technologies Ltd. is a specialized company focused on the design, manufacture, and sale of clamp-on ultrasonic flow meters and non-invasive process measurement instrumentation. Established since 1996, the company serves a broad range of industrial sectors including energy, manufacturing, chemical, pharmaceutical, and water treatment. Their product portfolio includes portable and fixed ultrasonic flow meters for liquids and gases, thermal energy measurement devices, and related services such as flowmeter hire, training, and commissioning. The company maintains a professional online presence with detailed product information and customer testimonials, supporting its market position as a reliable and innovative provider in the flow measurement industry. Technically, the website is built on the TYPO3 CMS platform, utilizing modern JavaScript libraries such as jQuery and Slick Carousel for enhanced user experience. The site is mobile-optimized and includes SEO best practices with proper meta tags and structured navigation. Google Analytics and Google Maps are integrated for analytics and location services. The website employs HTTPS with a strong SSL configuration, though explicit security headers are not detected in the provided data. Cookie consent mechanisms are implemented, indicating attention to privacy compliance. From a security perspective, the site shows good practices such as HTTPS enforcement and cookie consent banners, but lacks publicly visible security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the analysis. The WHOIS data is unavailable or not found, which slightly reduces trustworthiness; however, the professional presentation and active social media presence support the legitimacy of the business. Overall, Katronic's website demonstrates a solid digital maturity with good content quality, technical implementation, and privacy compliance. Security posture is adequate but could be improved by adding security headers and explicit policies. The business credibility is high given the detailed product offerings and customer engagement. Strategic recommendations include enhancing security headers, publishing security policies, and maintaining regular audits of third-party scripts to further strengthen the security and trustworthiness of the site.
Pam Buildingpambuilding.com
Manufacturing
73Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Pam Building is a specialized manufacturer of cast iron drainage systems for buildings, offering a comprehensive range of products and services including pipes, fittings, couplings, and siphonic systems. The company positions itself as a leader in the cast iron pipe and fittings market, supported by its parent company Saint-Gobain. The website is professionally designed, mobile-optimized, and rich in relevant content targeting specifiers, installers, distributors, and customers in the construction sector. Technically, the site is built on Drupal CMS with modern frameworks like Bootstrap and uses Google Tag Manager for analytics. Security posture is good with HTTPS enabled and secure forms, but lacks some security headers and visible privacy or cookie policies. The WHOIS data is missing, which raises some concerns about domain registration transparency, but the overall trustworthiness is bolstered by the professional branding and certifications such as the Ecovadis Silver Medal. The site does not contain any adult or questionable content and is fully accessible without WAF or blocking mechanisms.
Other
67Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website www.pamline.com is currently inaccessible beyond a Cloudflare Turnstile human verification challenge page, preventing access to any substantive content. The domain WHOIS data is unavailable, indicating the domain may be unregistered, expired, or protected by privacy services. Due to these factors, no business information, contact details, or policies are discoverable. The technical infrastructure relies on Cloudflare's security services, but no further technology stack or CMS details are evident. The security posture is limited to the presence of Cloudflare's WAF challenge, with no additional security headers or configurations visible. Overall, the site lacks transparency and content, resulting in a low trust and credibility rating.
Unternehmen Hailohailo.de
—
59Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
DGA | DiscGolf.comdiscgolf.com
Retail · United States
73Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
DGA | DiscGolf.com is a well-established company specializing in the manufacture and sale of disc golf baskets and course equipment. Founded in 1995, it holds a leading position in the disc golf retail market, offering both products and educational resources to disc golf enthusiasts and course designers. The website reflects a professional e-commerce platform with clear contact channels and social media integration. Technically, the site is built on WordPress with Elementor and optimized for performance using NitroPack, delivering a fast and mobile-friendly user experience. Security posture is solid with HTTPS and domain registration protections, though there is room for improvement in DNS security and explicit security policy disclosures. Privacy compliance is weak due to the absence of privacy and cookie policies, which should be addressed to meet regulatory standards. Overall, the site is trustworthy and credible, serving its target audience effectively.
- UDisc
udisc.com
Other
69Medium
NIS2 2 · GDPR 58
NIS2 2 · GDPR 58
UDisc is a well-established digital platform and mobile application dedicated to the disc golf community, offering comprehensive course maps, reviews, scorekeeping, and progress tracking. With over 2 million users and more than 16,000 courses worldwide, UDisc holds a leading market position in the disc golf sports niche. The business model is freemium, providing free basic features and a paid subscription for advanced tools. The website is professionally designed, mobile-optimized, and rich in relevant content, supporting a high-quality user experience. Technically, the site leverages modern web technologies including React, Font Awesome, and Cloudflare for hosting and DNS services. It integrates third-party services such as Survicate for surveys, Intercom for user engagement, and Fathom Analytics for privacy-focused analytics. The site demonstrates good performance and SEO practices, with structured data enhancing search visibility. From a security perspective, the website enforces HTTPS and uses Cloudflare DNS, but lacks explicit security headers and publicly available security or incident response policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with no visible privacy or cookie policies or consent mechanisms, which is a notable gap given GDPR requirements. Overall, UDisc presents a trustworthy and professional online presence with strong business credibility and technical maturity. However, improvements in privacy compliance and explicit security disclosures are recommended to enhance user trust and regulatory adherence.
Innova Disc Golfinnovadiscs.com
Retail
59Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Innova Disc Golf operates a professional and content-rich website focused on disc golf products and community engagement. The company positions itself as a market leader in the disc golf retail sector, offering a wide range of discs, bags, targets, and custom branding services. The website is built on WordPress with a modern tech stack including Yoast SEO, Google Analytics, and advertising integrations, reflecting a mature digital presence. Security posture is generally good with HTTPS and no exposed sensitive data, but lacks some security headers and formal policies. The absence of WHOIS data for the domain is a notable concern, potentially indicating privacy protection or registration issues, which impacts trustworthiness. Overall, the site is functional, well-branded, and targets disc golf enthusiasts and retailers, but would benefit from enhanced transparency and compliance documentation.
- Discraft Inc
discraft.com
Retail · United States
58Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Discraft Inc is a recognized leader in the disc sports industry, specializing in manufacturing and retailing high-quality disc golf, ultimate, and freestyle discs along with related accessories. The company targets disc sports enthusiasts and players, offering a broad product range including discs, baskets, bags, and custom printing services. Their market position is strong as a world leader in disc sports manufacturing, supported by partnerships with major disc sports organizations. Technically, the website is built on the Sana Commerce platform with integrations of modern marketing and analytics tools such as Facebook Pixel and Google Tag Manager. The site demonstrates good design quality, mobile optimization, and clear navigation, providing a positive user experience. Security posture is adequate with HTTPS enforced and secure forms, but lacks some security headers and explicit cookie consent mechanisms. WHOIS data is missing, which raises some trust concerns, but the overall business credibility and external references support legitimacy. Strategic recommendations include enhancing security headers, implementing cookie consent, and publishing security policies to improve compliance and trust.
VC Ultimatevcultimate.com
Retail · Canada
70Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
VC Ultimate is a specialized e-commerce retailer focused on custom athletic uniforms and apparel for performance athletes and teams across multiple sports disciplines. The company leverages Shopify as its platform and integrates various marketing and analytics tools to support its online presence. The website is professionally designed with good content quality and clear navigation, targeting a niche market of sports teams and athletes. Technically, the site is well-implemented with modern technologies and fast performance, hosted on Liquid Web. Security posture is solid with HTTPS and domain transfer lock, though DNSSEC is not enabled and privacy compliance documentation is lacking. Overall, the domain registration is consistent and supports the legitimacy of the business.
- IInsys Video Technologies
insysgo.com
Technology · Poland
73Medium
NIS2 2 · GDPR 33
NIS2 2 · GDPR 33
Insys Video Technologies operates the InsysGO platform, a streaming service offering live TV channels and video on demand primarily targeting general consumers interested in internet TV. The demo site showcases features such as catchup TV, timeshift, and personalized user profiles, positioning the company as a niche technology and media provider in Poland. The platform supports multiple devices and integrates modern web technologies including React.js and push notifications. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Privacy compliance is well addressed with clear policies and GDPR adherence. Overall, the website is professional, trustworthy, and technically mature, suitable for its demo purpose.
The Pope Videothepopevideo.org
Non-profit · United States
71Medium
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
The Pope Video website represents a global non-profit initiative developed by the Pope's Worldwide Prayer Network, focusing on disseminating monthly prayer intentions through videos and engaging a worldwide audience. The site is professionally designed with consistent branding and clear navigation, targeting a general audience interested in religious and spiritual content. Technically, the website is built on a modern WordPress platform using popular plugins and frameworks, hosted behind Cloudflare for performance and security. The site implements GDPR-compliant privacy and cookie policies with a consent mechanism, and integrates reputable third-party services such as Donorbox for donations and Google Analytics for tracking. Security posture is good with HTTPS enforced and standard best practices, though DNSSEC is not enabled and some security headers could be improved. Overall, the domain registration and WHOIS data indicate a legitimate and established organization with justified privacy protection. The website is safe, free from adult or questionable content, and maintains a high level of trustworthiness.
- eRosary
clicktoprayerosary.org
—
71Medium
NIS2 47 · GDPR 80
NIS2 47 · GDPR 80
Tonersyptonersyp.cz
Retail · Czech Republic
71Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
Tonersyp is a Czech Republic-based e-commerce retailer specializing in printer supplies such as toners, cartridges, and related consumables. The website targets both consumers and businesses seeking affordable and reliable printer products, offering benefits like next-day delivery and lifetime warranty. The company positions itself as a trusted supplier with a focus on customer service and product availability. Technically, the website employs modern web technologies including Google Tag Manager, Google Analytics, and third-party widgets for enhanced user experience and marketing. The site is mobile-optimized and features a professional design with clear navigation. Security-wise, HTTPS is enforced, but explicit security headers are not detected, and no public security policies or incident response contacts are available. The absence of WHOIS data reduces domain trustworthiness, but the website content and contact information appear legitimate and professional. Overall, the site demonstrates a moderate to good security posture and compliance with privacy regulations such as GDPR.
- AAutoMax
automax-group.com
Transportation
73Medium
NIS2 17 · GDPR 65
NIS2 17 · GDPR 65
AutoMax is an exclusive distributor specializing in automotive and industrial brands such as Shell oils, lubricants, Coyote, WD 40, and MA-FRA. The company targets automotive and industrial businesses seeking quality lubricants and car chemistry products. The website presents a professional and consistent brand image with good content quality and clear business focus. Technically, the site employs modern tracking and marketing technologies including Google Tag Manager, Facebook Pixel, and Cookiebot for cookie consent, indicating a moderate level of digital maturity. However, the absence of WHOIS registration data raises concerns about domain legitimacy and trustworthiness. Security posture is moderate with HTTPS enabled and cookie consent implemented, but lacks explicit security headers and visible contact or legal information. Overall, the site is functional and professional but would benefit from enhanced transparency and security practices.
Star Madridstarmadrid.es
Transportation · Spain
72Medium
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
Star Madrid is a prominent authorized Mercedes-Benz dealership located in Madrid, Spain, offering new vehicle sales, rental services, mobile maintenance, and specialized AMG performance services. The website reflects a professional and consistent brand presence targeting consumers interested in premium automotive products and services in the Madrid region. Technically, the site employs modern web technologies including Bootstrap and jQuery, with responsive design and good SEO practices, though some accessibility features are basic. Security posture is moderate with no visible advanced security headers or policies, and privacy compliance is limited due to absence of explicit privacy and cookie policies. WHOIS data is not accessible due to Red.es restrictions, which is typical for .es domains but slightly impacts trust. Overall, the site is functional and trustworthy but could improve in security and compliance transparency.
- AAyuntamiento de Madrid
madrid.es
Government · Spain
71Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
The Ayuntamiento de Madrid website serves as the official digital portal for the Madrid City Council, providing a comprehensive range of municipal services, news, and citizen engagement tools. It targets residents, businesses, and visitors, offering e-government services and up-to-date information on local governance and community activities. The site maintains a strong market position as the authoritative source for Madrid municipal information. Technically, the website employs a modern tech stack including Bootstrap for responsive design, JavaScript libraries such as jQuery, and integrates third-party services like ReadSpeaker for accessibility and Siteimprove Analytics for performance monitoring. Hosting appears to leverage Akamai's infrastructure, ensuring reliable delivery and performance. The site demonstrates good mobile optimization, accessibility, and SEO practices. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, reflecting compliance with GDPR and privacy regulations. While explicit security headers are not evident in the HTML content, the site uses monitoring tools and avoids exposing sensitive data. No vulnerabilities or suspicious patterns were detected. The WHOIS data is restricted due to Red.es policies for .es domains, which is standard and does not detract from the domain's legitimacy. Overall, the website presents a low-risk profile with strong business credibility, excellent content quality, and a solid technical foundation. Strategic recommendations include enhancing security headers, publishing a formal security policy, and adding a vulnerability disclosure program to further strengthen trust and security posture.
Curing Coma - Neurocritical Care Societycuringcoma.org
—
70Medium
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
Neurocritical Care Foundationneurocriticalcarefoundation.org
Healthcare · United States
71Medium
NIS2 17 · GDPR 65
NIS2 17 · GDPR 65
The Neurocritical Care Foundation is a specialized 501(c)3 non-profit organization dedicated to fostering collaboration and funding in neurocritical care research. It operates in association with the Neurocritical Care Society and targets researchers, donors, and healthcare professionals globally. The foundation provides research and education grants and aims to build long-term partnerships to advance treatments for life-threatening neurological disorders. The website reflects a professional and consistent brand presence with clear contact information and social media engagement. Technically, the website is built on the DNN CMS platform using ASP.NET WebForms, enhanced with modern JavaScript libraries such as jQuery, Slick Carousel, and FancyBox. It employs Google Analytics for user tracking and Constant Contact for email signups. The site is mobile-optimized and has good SEO practices, though accessibility features are basic. Performance is moderate, with room for improvement in security headers and accessibility compliance. From a security perspective, the site enforces HTTPS and uses secure form tokens and Google reCAPTCHA, indicating a good baseline security posture. However, it lacks explicit security policies, vulnerability disclosure mechanisms, and some recommended HTTP security headers. The absence of WHOIS data limits domain trust verification, but the website's professional content and trust signals mitigate concerns. Overall, the Neurocritical Care Foundation website is a credible and professionally maintained platform supporting a niche healthcare non-profit. Strategic improvements in security policies, accessibility, and technical modernization would enhance its digital maturity and trustworthiness.
- PPeknaStranka.sk
peknastranka.sk
Media · Slovakia
57Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
PeknaStranka.sk is a Slovak language online magazine focusing on lifestyle, housing, business, finance, health, leisure, and practical guides. The website serves a general audience interested in these topics and operates as a small media content publisher. The site uses WordPress CMS with common plugins such as Yoast SEO and MashSharer for social sharing. The technical infrastructure is modern and includes responsive design and SEO optimizations, though some performance and accessibility improvements are possible. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks security headers and formal privacy or cookie policies, which are important for compliance and user trust. The site does not expose sensitive data and does not show signs of adult or explicit content, making it safe for general audiences. Contact information is limited to a contact page without direct emails or phone numbers. Advertising is present via an external banner. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security best practices.
- Staking Summit Buenos Aires
stakingsummit.com
Technology
57Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website 'Staking Summit Buenos Aires' serves as a promotional platform for a premier in-person staking event targeting blockchain protocols, validators, and investors. The site is professionally designed using modern web technologies such as Framer and integrates analytics tools like Google Analytics and Twitter's Universal Website Tag. However, the absence of WHOIS registration data raises concerns about the domain's legitimacy and age, which could impact trust. The site lacks critical privacy and cookie policies, as well as contact information, which are essential for compliance and user trust. Security posture is moderate with no evident security headers or advanced protections detected. Overall, the site functions well as an event marketing tool but requires improvements in transparency, security, and compliance to enhance credibility and user confidence.
PeakDigitalasklayer.io
Technology · Japan
61Medium
NIS2 2 · GDPR 65
NIS2 2 · GDPR 65
Asklayer.io is a Japanese SaaS platform specializing in web-based surveys, NPS calculations, market research, and lead generation solutions. The company, PeakDigital, founded in 2023, targets marketers and enterprises seeking easy-to-use, mobile-first survey tools with advanced features like auto segmentation and customer profiling. The website is professionally designed using WordPress and Elementor, with a focus on Japanese business users and a presence of notable client logos indicating market acceptance. Technically, the site employs modern web technologies, integrates Google Tag Manager for analytics, and uses Cloudflare for domain registration and likely hosting. Security posture is good with HTTPS enforced and domain transfer protection, though DNSSEC is not enabled and security headers are not evident. Privacy compliance is weak due to the absence of explicit privacy and cookie policies. Overall, the site is trustworthy and professional but would benefit from enhanced privacy disclosures and security hardening.
Pekárna Racek, s.r.opekarnaracek.cz
Retail · Czech Republic
52Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Pekárna Racek, s.r.o is a well-established bakery company based in Přerov, Czech Republic, with a history dating back to 1965. The company operates a network of retail stores offering a variety of bakery products including bread, pastries, and delicacies, complemented by an e-commerce platform accessible via a linked e-shop domain. The website presents a professional and consistent brand image with clear navigation and relevant content targeted at general consumers interested in fresh bakery goods. Technically, the site uses common web technologies such as jQuery, Bootstrap, and Font Awesome, providing a moderate performance and good mobile optimization. However, there is room for improvement in SEO and accessibility features. Security-wise, the site uses HTTPS and has a cookie consent banner but lacks visible security headers and published privacy or security policies, indicating moderate security maturity. The domain registration data is consistent with the business claims, supporting legitimacy and trustworthiness. Overall, the website is functional and credible but would benefit from enhanced privacy compliance and security practices.
Bulkhead Inspector, s.r.o.sluzbyprozvirata.cz
Other · Czech Republic
63Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
The website www.sluzbyprozvirata.cz represents a small Czech company, Bulkhead Inspector, s.r.o., specializing in holistic physiotherapy and rehabilitation services for animals including horses, dogs, and cats. The business also offers educational workshops and courses targeting animal owners and professionals in veterinary physiotherapy. The site is well-structured with clear service descriptions and contact information, supported by social media channels on Facebook and YouTube, enhancing its market presence in a niche sector. Technically, the website is built on Ruby on Rails with custom CMS features and uses Google Fonts for typography. It is mobile-optimized and provides a good user experience with clear navigation. However, performance is moderate and accessibility features are basic. Security measures include CSRF token implementation, but lack visible HTTP security headers and explicit SSL/TLS configuration details. From a security and compliance perspective, the site lacks visible privacy and cookie policies, which is a significant compliance gap under GDPR. WHOIS data for the domain is unavailable, raising concerns about domain registration legitimacy and trustworthiness. No signs of tracking or analytics scripts were found, indicating minimal user data collection. Overall, the security posture is moderate but could be improved with better header implementation and policy disclosures. Strategically, the business should prioritize establishing clear privacy and cookie policies, enhance security headers, and clarify domain registration details to improve trust. The website content and business model are solid, but technical and compliance improvements will strengthen its digital maturity and customer confidence.
- PRESCO GROUP, a.s.
presco.cz
Retail · Czech Republic
52Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
PRESCO GROUP, a.s. is a Czech-based company specializing in the design, manufacture, and distribution of calendars, diaries, school supplies, children's books, board games, and gifts. The company operates a professional e-commerce website targeting general consumers and businesses primarily in the Czech Republic and Slovakia. Their market position is that of an established Czech brand with a broad distribution network including major retail chains. The website demonstrates a good level of digital maturity with modern marketing and analytics integrations, including Google Analytics, Facebook Pixel, and retargeting services, alongside a consent management mechanism for GDPR compliance. Security posture is solid with HTTPS enforced and no visible sensitive data exposure, though some security headers and formal security policies are absent. Overall, the site is well designed, mobile optimized, and trustworthy, though the lack of WHOIS data limits full domain trust verification. Strategic recommendations include enhancing security headers, publishing incident response policies, and improving transparency around domain registration.
- Akvamex.cz
akvamex.cz
Retail · Czech Republic
53Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
Akvamex.cz is an e-commerce retailer specializing in aquarium, terrarium, and pet supplies, with a physical store located in Chrudim, Czech Republic. The website offers a wide range of products including aquaristics equipment, terraristics accessories, cages, and pet food. It targets hobbyists and pet owners seeking specialized products and expert advice. The business model combines online sales with in-person retail and consultancy services. Technically, the website employs modern JavaScript libraries, Google Tag Manager, and reCAPTCHA to enhance user experience and security. The site is mobile-optimized and features a clear navigation structure, although it lacks a publicly accessible privacy policy and detailed security policies. Security posture is solid with HTTPS and form protections, but could be improved with additional security headers and transparency about incident response. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces trust but does not contradict the business's legitimacy. Overall, the site is professional and functional with moderate risk and room for compliance improvements.
- HobyNaradi.cz
hobynaradi.cz
Retail · Czech Republic
62Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
HobyNaradi.cz is a Czech Republic-based e-commerce retailer specializing in tools, machines, and consumable materials for workshops and gardens. The website targets both DIY enthusiasts and professional users, offering a wide range of products and services including tool rental. The site is built on the Shoptet e-commerce platform and integrates multiple modern technologies such as Google Analytics, Facebook SDK, and Google Pay API, indicating a mature digital infrastructure. Security posture is generally good with HTTPS enforced and cookie consent mechanisms in place, though the use of an outdated jQuery version presents a potential vulnerability. The absence of WHOIS data reduces domain trustworthiness but the professional presentation and comprehensive policies suggest a legitimate business. Overall, the site is well-structured, user-friendly, and compliant with GDPR requirements.
Goldcastgoldcast.io
Technology
73Medium
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
Goldcast is a technology company specializing in an AI-first video content platform tailored for B2B marketers. Their platform enables marketing teams to create, repurpose, and distribute video content such as webinars, virtual events, and podcasts to enhance engagement, brand authority, and revenue generation. The company positions itself as a leader in AI-powered video marketing solutions within the B2B sector. Technically, the website leverages modern frameworks like SvelteKit and integrates multiple analytics and marketing tools including Google Analytics, Microsoft Clarity, Crazy Egg, HubSpot, and Drift. Hosting appears to be managed via Vercel, ensuring fast performance and excellent mobile optimization. The site is well-structured with comprehensive metadata, Open Graph tags, and JSON-LD structured data supporting SEO and social sharing. From a security perspective, the site enforces HTTPS and uses reputable third-party services but lacks explicit security headers and a published security policy or incident response plan. No vulnerabilities or exposed sensitive data were detected. Privacy and cookie policies are present and indicate GDPR compliance, supporting responsible data handling. Overall, Goldcast presents a professional and trustworthy online presence with strong business credibility and technical maturity. The absence of WHOIS data is mitigated by privacy protection common in tech companies. Strategic recommendations include enhancing security headers, publishing a security policy, and establishing a vulnerability disclosure program to further strengthen trust and compliance.
Zone Media OÜwebmail.ee
Technology · Estonia
60Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
Zone Webmail is a secure and reliable email service operated by Zone Media OÜ, an established Estonian technology company specializing in web hosting and email services. The website targets Zone.ee customers and general users seeking fast and secure webmail access. The platform uses modern web technologies including Vue.js and Vuetify, providing a responsive and user-friendly interface. The technical infrastructure appears solid with HTTPS enforced and no visible security vulnerabilities in the provided content. However, the site lacks visible cookie consent mechanisms and explicit security or incident response policies on the login page. Overall, the website demonstrates a good balance of professionalism, security, and usability, suitable for its target audience.
Zone Media LLCzonecloud.ee
Technology · Estonia
55Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
ZoneCloud is a cloud storage and file synchronization service operated by Zone Media LLC, an Estonian technology company founded in 2013. The platform offers web-based access alongside desktop and mobile clients for file syncing, targeting general users and businesses requiring cloud storage solutions. The website is functional and uses a variety of modern JavaScript libraries and frameworks, indicating a moderate level of technical maturity. However, the site lacks visible privacy and cookie policies, contact information, and security headers, which are important for compliance and trust. The domain registration data aligns well with the business identity, supporting legitimacy. Overall, the security posture is moderate but could be improved by enabling DNSSEC, adding security headers, and publishing privacy-related policies.
- Great Point Capital Events
greatpointcapitalevents.com
Finance
62Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
Great Point Capital Events is a newly established business focused on organizing and managing events within the capital and finance sectors. The website presents basic information about the company, its management, services, resources, and events, targeting business professionals in finance and event management. The technical infrastructure is modern, leveraging JavaScript frameworks such as Nuxt.js and Vue.js, with external resources from Google Fonts and LeadConnectorHQ. The site is mobile optimized and moderately performant but lacks advanced SEO and accessibility features. Security posture is adequate with HTTPS enabled and domain transfer protections, but lacks important security headers and published security policies. Privacy compliance is minimal with no visible privacy or cookie policies. Overall, the website is functional but requires enhancements in privacy, security, and contact transparency to improve trust and compliance.
PROS, Inc.everymundo.com
Technology · United States
74Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
PROS, Inc. is a well-established enterprise software company specializing in AI-powered pricing, configure-price-quote (CPQ), and revenue management solutions, with a strong focus on the airlines and travel industry. Their Offer Marketing product enables businesses to create dynamic, customizable offers across digital channels to increase customer engagement and conversion. The company has a global presence with over 200 implementations and serves more than 120 airlines worldwide. The website reflects a mature digital infrastructure using WordPress and Elementor, with modern web technologies and good SEO practices. Security posture is strong with HTTPS, domain locks, and nonce usage, though DNSSEC is not enabled. Privacy and security policies are comprehensive and accessible, indicating good compliance practices. Social media presence and customer testimonials enhance trust and credibility.
Government · Mexico
54Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
AICO (Asociación Iberoamericana de Cámaras de Comercio) is a well-established non-profit association founded in 1999, serving as a collaborative platform for Iberoamerican Chambers of Commerce. The organization facilitates cooperation, events, and services to support regional commerce and business development. The website reflects a professional and consistent brand presence, targeting chambers and business stakeholders within the Iberoamerican region. Technically, the site is built on WordPress with a modern plugin ecosystem supporting event management and contact functionalities. While the site is accessible and uses HTTPS, it lacks advanced security headers and DNSSEC, which are recommended for enhanced security. Privacy policies are present but lack explicit consent mechanisms, indicating room for improvement in GDPR compliance. Overall, the domain registration data aligns well with the business claims, supporting the site's legitimacy.
- Avalmadrid
avalmadrid.es
Finance · Spain
58Medium
NIS2 17 · GDPR 85
NIS2 17 · GDPR 85
Avalmadrid is a financial guarantee society based in Madrid, Spain, dedicated to supporting entrepreneurs, SMEs, startups, and industrial companies by facilitating access to financing through financial and technical guarantees and subsidized credit lines. The website is professionally designed using WordPress and Elementor, with modern SEO and analytics tools integrated, including Google Analytics and Facebook Pixel. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. The domain registration data aligns well with the business claims, indicating high legitimacy. No critical vulnerabilities or compliance gaps were detected in the accessible content.
Education · Latvia
50Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
The website eduroam.lv serves as a national informational portal for the Eduroam service in Latvia, operated by the Higher Education and Science Information Technology Shared Service Centre. It provides basic information about the Eduroam roaming service, targeting researchers, teachers, students, and staff at participating institutions. The site positions itself as the national roaming operator for Eduroam in Latvia, linking to official eduroam global resources and the Latvian IT service center. The business model focuses on enabling secure internet access for educational users across institutions. Technically, the website is simple and lacks modern frameworks or CMS, with minimal mobile optimization and basic accessibility. No advanced technologies or analytics tools are detected. Security posture is limited due to absence of HTTPS confirmation, security headers, and privacy policies. No WHOIS data was retrievable due to query limits, limiting domain trust analysis. Overall, the site is functional but basic, with room for technical and security improvements.
Otto Groupottogroup.com
Retail · Germany
73Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Otto Group is a large, internationally operating retail and services group headquartered in Germany, employing approximately 41,000 people. The corporate website presents a professional and well-structured digital presence, targeting general public, business partners, and job seekers. The site emphasizes responsible commerce and sustainability, reflecting the company's values and market positioning as a major player in retail and e-commerce sectors. Technically, the website is built on Weblication CMS and uses Matomo analytics with cookie disabling for privacy. The site is mobile-optimized and features good SEO practices, although accessibility features could be improved. Security posture is moderate with HTTPS enforced and some privacy-conscious tracking settings, but lacks visible security headers and cookie consent mechanisms. WHOIS data is unavailable or inconsistent, which slightly impacts trust but the website content and social media presence strongly indicate legitimacy. Overall, the site is professional and trustworthy but could enhance privacy compliance and security best practices.