Skip to main content

Security Directory

Explore comprehensive security analyses from websites around the world. Filter by industry, location, risk level, and more.

Live Guard activity

Security teams are checking their sites with Guard right now

Run your domain before the queue fills up

0
Websites
0
Industries
0
Countries
0
Avg Score
Page 72 of 579|Showing 3551-3600 of 28928
collaboraoffice.com favicon

Collabora Online and Collabora Office

collaboraoffice.com

0
TechnologyN/amediumMEDIUM

Collabora Online and Collabora Office provide a comprehensive open-source online document editing suite designed for secure, collaborative editing controlled by the user. The company targets businesses and organizations requiring enterprise-grade document collaboration solutions, offering products such as Collabora Online, Collabora Office desktop applications, mobile apps, and large deployment controllers. Their market position is that of an established technology provider in the open-source productivity software space, supported by a strong partner and integration ecosystem. Technically, the website is built on WordPress with modern plugins like Elementor and Yoast SEO, and integrates analytics and marketing tools such as Matomo and Mautic. The site is well-optimized for SEO, mobile-friendly, and accessible, reflecting a mature digital infrastructure. However, some security best practices like explicit security headers and published security policies are not evident. From a security perspective, the site uses HTTPS and avoids exposing sensitive data, but lacks visible privacy and cookie policies and incident response information. The absence of WHOIS registration data reduces trust slightly, though the professional presentation and partner ecosystem support legitimacy. No critical vulnerabilities or adult content were detected. Overall, the website demonstrates a solid business and technical foundation with room for improvement in privacy compliance and security transparency. Strategic recommendations include publishing comprehensive privacy and security policies, enhancing security headers, and improving contact information visibility to strengthen trust and compliance.

80
65
17
60
95
80
100
collaborativeeditingopensourceofficesuiteonlinedocumenteditingtechnology+4 more
WordPress CMSYoast SEO pluginElementor page builderPodlove Podcasting plugin+7

Partner Domains:

strato.com
partner
opencloud.com
partner

+3 more partners

2025-10-21T05:35:51.410Z
M

Mailjet

mj.am

0
TechnologyN/amediumCRITICAL

Mailjet operates a cloud-based email delivery platform serving thousands of customers with transactional and marketing email services. The subdomain mj.am is specifically used for link redirection and static content hosting, supporting Mailjet's core email services. The website content is minimal but professional, emphasizing strict anti-spam policies and abuse reporting mechanisms, reflecting a strong commitment to responsible email practices. The domain is well-established since 2014, consistent with the company's operational history. Technically, the site uses basic HTML and CSS with no detected CMS or advanced frameworks. There are no forms or tracking scripts, indicating a low footprint in terms of data collection and user interaction. The site lacks cookie consent mechanisms and security headers, suggesting areas for technical improvement. Performance and mobile optimization are basic but adequate for the site's limited scope. From a security perspective, the site enforces strict anti-spam policies and provides clear abuse contact information, which are positive indicators. However, the absence of security headers and vulnerability disclosure mechanisms limits the overall security posture. No WAF or blocking mechanisms were detected, and the site is accessible without restrictions. Overall, the website is legitimate and trustworthy within its scope but could benefit from enhanced technical and security implementations to improve compliance and user trust.

-
-
-
-
-
-
-
emaillinkredirectionanti-spamcloudemailingmailjet
HTML5CSS reset stylesheet
2025-10-21T04:49:14.635Z
advancementform.com favicon

Ruby Tree Software, Inc.

advancementform.com

0
Non-profitN/asmallMEDIUM

Advancement Form, operated by Ruby Tree Software, Inc., is a specialized SaaS provider offering an online giving and event registration platform tailored for non-profit organizations. The website positions itself as a solution to maximize participation and fundraising success for non-profits, featuring a professional design, clear messaging, and client testimonials that reinforce its market niche. The platform emphasizes ease of use and customization to empower advancement professionals in their fundraising efforts. Technically, the website employs modern frontend technologies including Tailwind CSS, DaisyUI, and integrates multiple marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and LinkedIn Insight Tag. The site is mobile-optimized and demonstrates good SEO and accessibility practices. Security-wise, the site uses HTTPS and maintains privacy and security policy pages, but lacks some security headers and a cookie consent mechanism, which are recommended for enhanced compliance and protection. The absence of WHOIS data is a notable anomaly that impacts trust, though the website content and business presentation remain professional and credible. Overall, the site scores well on content quality, technical implementation, and business credibility, with moderate privacy compliance and security posture scores.

70
53
2
40
77
85
100
non-profitfundraisingeventregistrationonlinegivingsaas+1 more
Tailwind CSSDaisyUIGoogle Fonts (Inter)Google Tag Manager+5
2025-10-21T03:45:29.810Z
onearmy.earth favicon

One Army

onearmy.earth

0
Non-profitN/asmallMEDIUM

One Army is a global non-profit movement focused on tackling environmental and social challenges through community-driven projects such as Precious Plastic, Project Kamp, Fixing Fashion, and Phonebloks. The organization engages a broad audience interested in sustainability and social impact, leveraging platforms like Patreon, YouTube, and Discord to build and maintain an active supporter community. The website serves as a hub for project updates, news, and multimedia content, emphasizing inclusivity and open participation. Technically, the website is built on the Webflow CMS platform, utilizing modern web technologies including jQuery and Google Analytics for tracking. The site is hosted on a reliable CDN infrastructure (Amazon CloudFront) and is optimized for mobile devices with good SEO practices. However, some accessibility features are basic, and performance is moderate. From a security perspective, the site uses HTTPS with strong SSL configuration and anonymizes IP addresses in analytics. Nonetheless, it lacks important security headers and formal privacy or cookie policies, which are critical for compliance and user trust. No vulnerability disclosure or incident response information is provided, limiting transparency in security matters. Overall, the website is trustworthy and professional, with strong community engagement and relevant content. The absence of WHOIS data due to privacy protection is typical for non-profit organizations but limits domain trust analysis. Strategic improvements in privacy compliance and security headers would enhance the site's security posture and user confidence.

60
35
2
70
62
75
100
non-profitenvironmentcommunitysustainabilityrecycling+1 more
jQuery 3.5.1Google AnalyticsGoogle Tag ManagerWebflow CMS+1
2025-10-21T03:44:49.721Z
qnap.com favicon

QNAP Systems, Inc.

qnap.com

0
TechnologyN/aenterpriseLOW

QNAP Systems, Inc. is a recognized enterprise in the technology sector specializing in network-attached storage (NAS), direct-attached storage (DAS), networking hardware, and intelligent video surveillance solutions. Their offerings also include cloud storage services such as myQNAPcloud Storage and Cloud NAS, targeting both individual consumers and business customers. The company positions itself as an expert in storage, performance, security, and scalability solutions. The website reflects a professional and consistent brand image with a focus on technology products and services. From a technical perspective, the website employs modern web technologies including Google Tag Manager, Google Analytics, Bootstrap Icons, Font Awesome, SweetAlert, and Swiper.js for UI components. The site is mobile-optimized with good SEO practices such as canonical and hreflang tags. Performance is moderate with room for improvement in accessibility features. The SSL configuration is excellent, ensuring secure HTTPS connections. Security posture is generally strong with HTTPS enforced and no visible exposed sensitive data or vulnerable libraries. However, the absence of explicit security headers and lack of published privacy, cookie, and terms of service policies indicate areas for compliance and security enhancement. No incident response or vulnerability disclosure information is provided, which could be improved to increase trust and readiness. Overall, the website is trustworthy and professional but suffers from missing WHOIS data, which reduces domain registration transparency. The lack of privacy and cookie policies and explicit contact information also impacts privacy compliance scores. Strategic improvements in these areas would enhance the security posture and business credibility of the site.

80
73
55
82
82
85
100
nasnetworkingsmartsurveillancecloudstoragetechnology+1 more
Google Tag ManagerGoogle AnalyticsBootstrap IconsFont Awesome 4.7.0+3
2025-10-21T03:43:29.548Z
u7alliance.org favicon

U7+ Alliance of world universities

u7alliance.org

0
EducationN/amediumMEDIUM

The U7+ Alliance of world universities is a global coalition of university presidents committed to addressing pressing global challenges in coordination with G7 governments and beyond. The organization operates as a non-profit alliance focused on policy advocacy, collaborative summits, working groups, and student initiatives to foster global education and research collaboration. The website reflects a professional and consistent brand image targeting university leaders, academics, policymakers, and students worldwide. Technically, the website is built on Drupal CMS with modern libraries such as jQuery and Superfish for navigation, and uses Matomo Cloud for privacy-focused analytics. The site is mobile-optimized, accessible, and well-structured with clear navigation and SEO best practices. Cookie consent is managed via Tarteaucitron.js, ensuring GDPR compliance. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms but lacks explicit security policy pages or incident response contacts. No vulnerabilities or exposed sensitive data were detected. WHOIS data is privacy-protected, which is justified for this type of non-profit organization. Overall, the site demonstrates a strong security posture with room for improvement in transparency and security documentation. The overall risk assessment is low, with the site presenting a trustworthy and professional front for the U7+ Alliance. Strategic recommendations include publishing a dedicated security policy, incident response contacts, and vulnerability disclosure information to enhance trust and compliance.

70
68
17
55
80
75
100
educationuniversityallianceglobalg7+3 more
Drupal CMSjQuerySuperfish menuTarteaucitron.js (cookie consent)+1
2025-10-21T03:40:24.182Z
leru.org favicon

League of European Research Universities

leru.org

0
EducationN/amediumMEDIUM

The League of European Research Universities (LERU) operates as a prominent non-profit network of 24 leading European research universities focused on advancing innovative research and influencing science policy. The website clearly communicates its mission, activities, and publications targeted at policymakers, researchers, and academic stakeholders. The organization maintains a professional online presence with active social media channels and regularly updated content, reinforcing its market position as a key advocate for research-intensive universities in Europe. Technically, the website employs a modern technology stack including Google Analytics, Google Tag Manager, jQuery, and asynchronous script loading to optimize performance. The site is mobile responsive with good SEO and accessibility basics, although there is room for improvement in accessibility and security headers. The website is hosted securely over HTTPS with no visible vulnerabilities or exposed sensitive data. From a security perspective, the site demonstrates a solid baseline with HTTPS and no evident security flaws. However, it lacks explicit security headers, a cookie consent mechanism, and published security policies or incident response contacts, which are important for compliance and trust. The WHOIS data is unavailable due to privacy protection or query failure, but this is typical for organizations of this nature and does not raise immediate concerns. Overall, the website is trustworthy, professionally maintained, and serves its audience well. Strategic improvements in privacy compliance, security policy transparency, and contact information availability would enhance its security posture and user trust.

65
53
2
70
95
80
100
educationresearchuniversitiespolicyadvocacy+1 more
Google AnalyticsGoogle Tag ManagerjQuery 1.11.3Modernizr+2
2025-10-21T03:40:19.172Z
E

The Extensible Web Manifesto

extensiblewebmanifesto.org

0
TechnologyN/asmallMEDIUM

The Extensible Web Manifesto website serves as a platform to promote a new philosophy for web standards development, emphasizing low-level capabilities and iterative JavaScript-based feature development. It targets web developers, standards committees, and browser vendors, positioning itself as a thought leadership and advocacy initiative within the technology sector. The site content is well-structured and professional, featuring notable industry signatories, but lacks commercial or transactional elements. Technically, the website uses standard web technologies including HTML5, CSS, JavaScript, Google Fonts, and integrates Google Analytics and AddThis for tracking and social sharing. The site is moderately optimized for performance and mobile use but lacks advanced accessibility and SEO features. No CMS or hosting provider details are evident. From a security perspective, the domain is stable and legitimate with a long registration period and appropriate domain status flags. However, the site lacks DNSSEC, security headers, and visible HTTPS enforcement details. Privacy and cookie policies are absent, which impacts compliance and user trust. Tracking technologies are present without clear consent mechanisms. Overall, the website is a credible and professional advocacy platform with moderate technical maturity and security posture. Strategic improvements in privacy compliance, security headers, and contact transparency would enhance trust and compliance.

80
35
47
85
65
85
100
webstandardsmanifestowebdevelopmentjavascriptwebplatform+2 more
HTML5CSSJavaScriptGoogle Fonts (Chivo)+2
2025-10-21T03:38:33.824Z
toot.cafe favicon

Toot Café

toot.cafe

0
TechnologyN/asmallMEDIUM

Toot Café is an independent Mastodon instance primarily serving a community interested in web design and development. It operates as a social networking platform within the fediverse, leveraging the open-source Mastodon software (version 4.4.7). The site provides features such as trending posts, hashtags, and a profiles directory, targeting users who seek decentralized social networking without ads or algorithms. The platform is administered by an individual named Nolan Lawson, indicating a small-scale community-driven operation. Technically, the website employs modern web technologies including React, JavaScript ES modules, and WebSockets for real-time streaming. The presence of a manifest file suggests support for progressive web app features. While the site appears to be mobile-optimized and has a good design quality, accessibility and SEO optimizations are basic. Performance is moderate, with no major issues detected in the HTML structure or resource loading. From a security perspective, HTTPS is implied and WebSocket connections use secure protocols. However, no explicit security headers were detected in the provided data, and there is no visible cookie consent mechanism or published terms of service. WHOIS data is unavailable due to unsupported TLD WHOIS queries, which slightly reduces trustworthiness. No contact information or incident response channels are published, limiting transparency. No advertising or tracking technologies were found, indicating a privacy-conscious approach. Overall, Toot Café presents as a legitimate, community-focused Mastodon instance with good technical foundations but some gaps in security best practices and compliance documentation. Strategic improvements in security headers, privacy compliance, and transparency would enhance trust and resilience.

75
58
17
60
72
85
40
mastodonsocialnetworkfediversewebdesignwebdevelopment+1 more
Mastodon 4.4.7ReactJavaScript ES ModulesCSS+2
2025-10-21T03:38:28.813Z
finance-monthly.com favicon

Finance Monthly

finance-monthly.com

0
FinanceN/asmallMEDIUM

Finance Monthly is a specialized online media platform delivering news, analysis, and insights focused on personal finance, money management, and investing. The site targets everyday consumers seeking to improve their financial literacy and investment strategies. It operates primarily as a content publisher with revenue streams from advertising and affiliate marketing, positioning itself as a niche player in the finance media sector. The website is professionally designed with clear navigation and a consistent brand identity, supported by active social media channels and contact information. Technically, the site is built on WordPress using the Oxygen Builder framework, leveraging modern web technologies such as Google Fonts, Google Tag Manager, and Moosend for email marketing. Performance and mobile optimization are good, though accessibility features are basic. The site uses HTTPS with a strong SSL configuration but lacks some advanced security headers and cookie consent mechanisms, which could be improved for better privacy compliance. From a security perspective, the site shows good practices like HTTPS enforcement and no visible sensitive data exposure. However, the absence of security headers and a vulnerability disclosure policy indicates room for enhancement. The WHOIS data is missing or unavailable, which raises some concerns about domain legitimacy, although the active and professional nature of the website mitigates this risk somewhat. Overall, Finance Monthly presents a credible and useful resource for personal finance information, but it should address privacy compliance and security best practices to strengthen trust and regulatory adherence.

30
35
47
60
72
80
40
financepersonalfinanceinvestingmoneymanagementnews+1 more
WordPressOxygen BuilderGoogle FontsGoogle Tag Manager+3

Partner Domains:

universalmedia365.com
partner
marketing.lawyer-monthly.com
partner

+1 more partners

2025-10-21T01:23:54.390Z