Skip to main content

Security Directory

Explore comprehensive security analyses from websites around the world. Filter by industry, location, risk level, and more.

Live Guard activity

Security teams are checking their sites with Guard right now

Run your domain before the queue fills up

0
Websites
0
Industries
0
Countries
0
Avg Score
Page 2893 of 2975|Showing 144601-144650 of 148702
M

Miles & More GmbH

swiss-shop.com

0
E-commerceGermanylargeMEDIUM

The Worldshop is a comprehensive e-commerce platform operated by Miles & More GmbH, serving as the sales channel for Europe's leading loyalty program. It offers a wide range of premium products from over 400 brands, including exclusive SWISS branded items, targeting loyalty program members and general consumers. The platform integrates miles earning and redemption with flexible payment options, including Cash & Miles, and maintains a presence both online and at airport stores. Technically, the website employs a modern JavaScript stack with Apache Wicket as the framework, leveraging various libraries for UI components, lazy loading, and analytics. However, performance is moderate to slow due to large page size and resource count. Mobile optimization and accessibility are well addressed, ensuring a good user experience across devices. From a security perspective, the site lacks a valid SSL certificate and does not implement modern TLS protocols or security headers like HSTS, which poses significant risks. Privacy compliance is strong with clear policies and consent mechanisms. The site integrates multiple trusted payment and shipping partners, enhancing business credibility. Overall, while the business and content aspects are strong and professional, critical security issues related to SSL must be addressed to improve trust and protect user data. Strategic improvements in security posture and performance optimization are recommended.

15
40
25
50
50
80
100
e-commerceloyaltyprogramretailaviationloyalty+1 more
jQueryApache WicketMaterial Design ComponentsLazyLoad+6

Partner Domains:

miles-and-more.com
partner59
2025-06-14T20:30:21.761Z
R

Really Simple Plugins

really-simple-plugins.com

0
TechnologyN/amediumMEDIUM

Really Simple Plugins is a technology company specializing in WordPress plugin development, focusing on security and privacy compliance solutions. Their key offerings include the Really Simple Security plugin, ranked as the 12th most-used WordPress plugin, and the Complianz Privacy Suite, which supports compliance with international privacy legislation and boasts over 1 million users worldwide. The company targets WordPress users and website owners seeking easy-to-use security and privacy tools. Their business model revolves around plugin development and distribution, positioning them as an important player in the WordPress ecosystem since 2016. Technically, the website is built on WordPress using Elementor and Yoast SEO, with additional plugins for cookie consent management (Complianz) and analytics (Matomo). Hosting and DNS are managed via Cloudflare, providing robust DNS infrastructure. Performance is moderate with a page load time of approximately 3.8 seconds. The site is mobile optimized and has good SEO practices, though accessibility features are basic. From a security perspective, the site lacks a valid SSL certificate and does not enable modern TLS protocols, which is a significant risk. No HTTP security headers are detected, and advanced SSL features like OCSP stapling and HSTS are not enabled. DNS records show proper SPF and DMARC configurations, reducing email spoofing risks. Cookie consent is managed properly with opt-in mechanisms, supporting GDPR compliance. However, the absence of a valid SSL certificate and security headers lowers the overall security posture. Overall, the website is functional and professional but requires urgent improvements in SSL/TLS configuration and security headers to enhance trust and protect user data. Privacy compliance is well addressed through the Complianz plugin and clear privacy and cookie policies. Business credibility is moderate due to limited direct contact information and absence of terms of service. Strategic security enhancements and better transparency would improve the site's risk profile and user confidence.

15
58
25
85
100
90
100
wordpresssecurityprivacypluginsgdpr+3 more
WordPressElementorElementor ProYoast SEO+4

Partner Domains:

really-simple-ssl.com
partner59
complianz.io
partner69

+1 more partners

2025-06-14T20:27:01.627Z
D

dbc - digital business creators gmbh

dbc-gmbh.com

0
TechnologyGermanymediumMEDIUM

dbc - digital business creators gmbh is a full-service digital agency based in Germany, specializing in application development, content management, cloud services, and AI applications. The company serves a diverse range of industries including technology, financial services, insurance, pharma, and marketing. Their market position is supported by a portfolio of notable clients and a commitment to delivering tailored digital solutions from concept to long-term maintenance. Technically, the website is built on modern frameworks such as React and Next.js, with a CMS likely based on Strapi. The site employs TLS 1.3 for secure communications and integrates Lottie animations for enhanced user experience. However, performance is currently slow, and some advanced security features like HSTS and OCSP stapling are not enabled. From a security perspective, the site has a valid SSL certificate and no critical vulnerabilities were detected. However, improvements are recommended in email security (DMARC), certificate transparency, and enabling additional security headers. Privacy compliance is well addressed with a comprehensive privacy policy and cookie policy, though no explicit consent mechanism was found. Overall, the website demonstrates a strong business credibility and professional presentation, but could benefit from technical and security enhancements to improve performance and harden defenses. Strategic recommendations include implementing advanced security headers, optimizing site performance, and enhancing privacy controls to maintain trust and compliance.

30
25
25
85
92
75
100
digitalagencyappdevelopmentcontentmanagementcloudservicesaiapplications+1 more
ReactNext.jsLottie animationsTLS 1.3+3
2025-06-14T20:26:48.556Z
S

Streets For All

sfareportcard.com

0
TransportationUnited StatessmallMEDIUM

Streets For All operates as a focused non-profit advocacy organization dedicated to advancing sustainable and equitable transportation policies in California. Their website serves as a comprehensive platform to assess and report on the performance of state legislators regarding transportation legislation, providing transparency and accountability to the public and stakeholders. The organization positions itself as a key influencer in California's transportation policy landscape, emphasizing legislative sponsorship, support, and public engagement. Technically, the website employs modern web technologies including React and Material-UI, hosted on DigitalOcean infrastructure. While the site offers rich content and a professional design, performance issues such as slow load times and lack of some security headers are noted. The site uses Umami for privacy-focused analytics, indicating a moderate approach to user tracking. From a security perspective, the site benefits from a valid SSL certificate but lacks advanced security headers and DNS protections like DNSSEC and DMARC. Privacy compliance is weak due to the absence of privacy and cookie policies and no visible consent mechanisms. Contact information is limited to an email address, with no phone or physical address provided. Overall, the website is a credible and professional resource for transportation policy advocacy but would benefit from enhanced security practices and privacy compliance to strengthen trust and protect users. Performance optimizations and clearer privacy disclosures are recommended to improve user experience and regulatory adherence.

15
40
25
50
52
75
100
transportationcaliforniamobilitylegislationadvocacy+2 more
Material-UI (Mui components)Typekit fontsCloud Umami analyticsReact+1
2025-06-14T20:26:37.347Z
B

Bonterra

cybergrants.com

0
Non-profitUnited StateslargeMEDIUM

Bonterra is a purpose-built software company specializing in corporate social responsibility (CSR) solutions that empower organizations to enhance their philanthropic programs. Founded in 2021, Bonterra has quickly established itself as the second-largest social good software company globally, serving nonprofits, foundations, corporations, and government entities. Their key offerings include grant management, employee engagement, volunteer management, and fundraising software, all designed to maximize social impact and streamline administrative workflows. Technically, the website is built on a WordPress CMS platform with a modern tech stack including React, Bootstrap, and GSAP for animations. The site integrates multiple marketing and analytics tools such as Marketo, Microsoft Clarity, Facebook Pixel, and Google Tag Manager, reflecting a mature digital marketing strategy. However, performance is currently slow, and while mobile optimization and accessibility are good, there is room for improvement in loading speed. From a security perspective, the site lacks a valid SSL certificate and does not enforce HTTPS, which is a critical vulnerability. Other security best practices like HSTS, OCSP stapling, and modern TLS protocols are missing, significantly lowering the security posture. Privacy and cookie policies are present and include consent mechanisms, indicating good privacy compliance. Contact information is limited to a physical address without explicit phone or email contacts publicly visible. Overall, Bonterra's website demonstrates strong business credibility and content quality but requires urgent security improvements to protect user data and enhance trust. Strategic recommendations include obtaining a valid SSL certificate, enabling HTTPS and modern TLS protocols, and implementing additional security headers and mechanisms to improve the security score and user confidence.

80
43
25
85
50
85
100
csrgrantmanagementemployeeengagementnonprofitsoftwaresocialgood+2 more
ReactWordPressBootstrapGSAP+9

Partner Domains:

etosoftware.com
partnerpending
etosoftwareau.com
partnerpending

+3 more partners

2025-06-14T20:25:31.791Z
B

Bonterra LLC

networkforgood.org

0
Non-profitUnited StateslargeMEDIUM

Bonterra LLC operates Network for Good, a leading fundraising software platform tailored for small to medium-sized nonprofits. The company has a strong market position as the second-largest social good software provider globally, offering a comprehensive suite of tools including donor and volunteer management, peer-to-peer fundraising, and coaching services. Bonterra's business model focuses on SaaS solutions for nonprofit organizations, foundations, corporations, and government entities, supported by a robust ecosystem of subsidiaries and partner products. The website content is professionally crafted, targeting nonprofit organizations seeking efficient fundraising and engagement solutions. Technically, the website is built on WordPress hosted on WP Engine with Cloudflare CDN, utilizing modern JavaScript frameworks like React and libraries such as GSAP and Splide.js for UI enhancements. SEO and accessibility are well implemented, with extensive use of structured data and meta tags. However, performance metrics are not explicitly provided, though mobile optimization and user experience appear strong. From a security perspective, while the site employs several security headers and policies, it suffers from a critical issue: the SSL certificate is invalid or missing, and no modern TLS protocols are enabled. This severely impacts the security posture and user trust. Other security best practices like CSP and permissions policies are in place, but the lack of proper SSL/TLS undermines these efforts. Overall, the site is content-rich, professionally designed, and business credible but requires urgent remediation of SSL/TLS issues to ensure secure user interactions and compliance with modern security standards.

80
43
25
60
50
80
100
nonprofitfundraisingsoftwaredonormanagementvolunteermanagement+2 more
ReactWordPressBootstrapGSAP+6

Partner Domains:

bonterratech.com
parentpending
forgood.org
subsidiarypending

+3 more partners

2025-06-14T20:25:31.731Z
rollworks.com favicon

RollWorks

rollworks.com

0
TechnologyUnited StatesenterpriseMEDIUM

RollWorks is a B2B marketing technology company specializing in account-based marketing (ABM) and account-based advertising solutions. Positioned as a leading ABM platform, RollWorks offers AI-driven targeting and engagement tools designed to help marketers grow revenue by focusing on high-value accounts. The company operates as a division of NextRoll, Inc., serving primarily enterprise clients in the technology and business services sectors. Their platform integrates multiple marketing and analytics technologies, including Marketo, Google Tag Manager, and AdRoll, to provide comprehensive marketing automation and measurement capabilities. Technically, the website is built on WordPress with Elementor and Yoast SEO plugins, hosted behind Cloudflare CDN. The site demonstrates good SEO optimization, mobile responsiveness, and professional design quality. However, the SSL/TLS configuration is currently invalid or missing, which is a critical security vulnerability that undermines user trust and data protection. The site uses multiple third-party marketing and tracking tools, indicating extensive user tracking and data collection practices. From a security perspective, while some best practices like SPF and DMARC email policies are in place, the lack of a valid SSL certificate and disabled TLS protocols represent significant risks. The site also lacks advanced security headers and mechanisms such as OCSP stapling and session resumption. Privacy policies and terms of service are hosted on the parent company domain, and while privacy compliance is generally good, no explicit cookie consent mechanism was detected on the homepage. Overall, RollWorks presents a professional and trustworthy business front with strong market positioning and comprehensive marketing solutions. However, the critical SSL/TLS issues must be addressed immediately to ensure secure communications and maintain compliance with industry standards. Strategic improvements in security posture and privacy transparency will enhance trust and reduce risk exposure.

25
25
25
50
100
85
100
account-basedmarketingb2bmarketingabmplatformadvertisingmarketingtechnology
WordPressYoast SEOElementorjQuery+8

Partner Domains:

nextroll.com
parentpending
adroll.com
partner68

+1 more partners

2025-06-14T20:23:26.531Z
dmt-group.com favicon

DMT GROUP

dmt-group.com

0
EnergyGermanylargeMEDIUM

DMT GROUP is a well-established global engineering services and consulting company with a history dating back to 1737. It operates primarily in the energy, infrastructure, mining, and engineering sectors, offering a broad range of services including engineering, consulting, geotechnics, exploration, and critical infrastructure protection. The company is part of the TÜV NORD GROUP, which enhances its market credibility and access to resources. The website reflects a professional and comprehensive digital presence with clear business information, structured data, and rich content targeting industrial clients worldwide. Technically, the website is built on TYPO3 CMS and uses common web technologies such as Apache server, Google Analytics, and LinkedIn Insight Tag for analytics and marketing. However, the site lacks a valid SSL certificate and does not support HTTPS, which is a critical security shortfall. The absence of modern TLS protocols and security headers further weakens its security posture. Performance is rated slow due to missing SSL and possibly other optimizations. Privacy compliance is partial, with a privacy policy present but no visible cookie consent mechanism. Security-wise, the site has configured SPF and DMARC records for email security and shows no signs of common vulnerabilities like Heartbleed or POODLE. However, the lack of HTTPS and security headers significantly reduces the overall security score. There is no explicit incident response or vulnerability disclosure information available on the site. Overall, the website is professional and content-rich but requires urgent improvements in security infrastructure, especially SSL/TLS implementation, to protect user data and enhance trust. Privacy compliance could also be improved by adding cookie consent mechanisms. Strategic recommendations include implementing HTTPS, enhancing security headers, and improving privacy transparency.

15
25
25
75
75
80
100
engineeringconsultingminingenergyinfrastructure+3 more
ApacheTYPO3 CMSGoogle AnalyticsLinkedIn Insight Tag+2

Partner Domains:

tuev-nord.de
parent40
tuv-nord.com
parent62

+2 more partners

2025-06-14T20:23:11.929Z