Security Directory

D

D&M Planning Limited

dm-planning.co.uk

49

D&M Planning Limited is a small, established UK-based consultancy specializing in chartered town planning services primarily in Surrey and surrounding counties. The company offers a broad range of planning-related services including application preparation, appeals, site feasibility, and development advice. The website reflects a professional and trustworthy business with clear branding, client testimonials, and recognized certifications such as RTPI membership. Technically, the site is built on Drupal CMS with legacy jQuery and integrates Google Analytics and Tag Manager for user tracking. The site is mobile optimized and SEO friendly but lacks some modern security headers. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though WHOIS data is unavailable due to domain registration issues, which introduces some legitimacy concerns. Overall, the website is well-maintained and suitable for its target audience of property developers and individuals seeking planning consultancy.

P

Prestige Venues and Events

sodexo.com

68

Prestige Venues and Events, a division of Sodexo, operates a professional website offering corporate hospitality, conference, and event venue services across the UK. The site targets corporate clients and event planners, showcasing a portfolio of iconic venues and comprehensive event management solutions. The website is built on Drupal CMS and integrates modern technologies such as Google Tag Manager and reCAPTCHA to enhance user experience and security. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanisms. Security posture is generally good with HTTPS and CAPTCHA protections, though the absence of explicit security headers and presence of a suspicious tracking domain suggest areas for improvement. Overall, the website reflects a mature digital presence consistent with a large enterprise hospitality business.

Lineage is a global leader in temperature-controlled logistics, specializing in cold storage warehousing and integrated supply chain solutions. Their website reflects a mature enterprise-level business with a comprehensive portfolio of services including global warehousing, transportation, and supply chain engineering. The company targets businesses requiring resilient and scalable cold chain logistics solutions. Technically, the website is built on Drupal CMS and integrates modern analytics and marketing tools such as Google Tag Manager, Microsoft Clarity, and Demandbase, indicating a digitally mature infrastructure. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in explicit security headers and published security policies. The absence of WHOIS data reduces domain transparency and slightly impacts trustworthiness. Overall, the website is professional, well-structured, and compliant with privacy regulations, supporting a high level of business credibility.

E

Express Scripts

express-scripts.com

72

Express Scripts is a leading pharmacy benefit management company providing prescription benefit services to members and caregivers. The website offers comprehensive tools for managing prescriptions, understanding benefits, and accessing home delivery services. The company is positioned as a large enterprise within the healthcare sector, supported by multiple accreditations and certifications that enhance trust and credibility. Technically, the website is built on Drupal CMS with modern integrations such as Adobe Launch, Branch.io, and Verint WebSDK, ensuring a robust digital presence with good performance and mobile optimization. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response details are not publicly available. Privacy compliance is well addressed with clear privacy and cookie policies, including GDPR considerations. Overall, the website demonstrates high professionalism and trustworthiness, though the absence of WHOIS data introduces some uncertainty about domain registration details.

L

Los Angeles City Employees' Retirement System

lacers.org

63

The Los Angeles City Employees' Retirement System (LACERS) website serves as the official portal for the City of Los Angeles' government pension system. It provides comprehensive resources and services for city employees, retirees, survivors, and board members, including retirement benefits information, health benefits, pension payment schedules, and educational seminars. The site is well-branded with official city seals and maintains a professional and consistent presentation aligned with its government entity status. Technically, the website is built on Drupal CMS and incorporates modern web technologies such as Google Analytics, Google Tag Manager, hCaptcha for bot protection, and New Relic for performance monitoring. The site is mobile-optimized, accessible, and SEO-friendly, offering a good user experience with clear navigation and relevant content. Security-wise, the website enforces HTTPS, employs security headers, and uses secure login portals, reflecting a strong security posture. However, it lacks visible cookie consent mechanisms and published incident response or vulnerability disclosure policies, which are areas for improvement. The WHOIS data is unavailable, likely due to privacy protection, but the website's official nature and consistent trust indicators support its legitimacy. Overall, LACERS demonstrates a mature digital presence suitable for a large government organization, with recommendations to enhance privacy compliance and transparency in security practices.

Larimer County's official government website serves as a comprehensive portal for residents and businesses in Larimer County, Colorado. It provides access to a wide range of public services including property search, vehicle licensing, tax payments, parks and recreation information, and emergency management resources. The site targets local citizens and stakeholders, positioning itself as a trusted and authoritative source for county-related information and services. Technically, the website is built on the Drupal CMS platform, leveraging modern web technologies such as Bootstrap for responsive design, jQuery for interactivity, and FontAwesome for iconography. The site integrates third-party services like Cludo for search functionality and Google Tag Manager for analytics, indicating a mature digital infrastructure. Mobile optimization and accessibility features are well implemented, enhancing user experience across devices. From a security perspective, the website enforces HTTPS, employs multiple security headers, and uses CAPTCHA mechanisms on forms to prevent abuse. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of explicit incident response contacts and vulnerability disclosure policies suggests areas for improvement in security transparency and readiness. Overall, the website demonstrates a strong balance of usability, security, and compliance suitable for a government entity. The incomplete WHOIS data is a minor concern but likely due to domain privacy or registry restrictions common with .gov domains. Strategic recommendations include enhancing security policy disclosures, publishing vulnerability handling procedures, and maintaining up-to-date third-party components to sustain a robust security posture.

P

Premier

premier-stores.co.uk

64

Premier-stores.co.uk represents a large UK-based retail convenience store chain with over 5000 stores, focusing on serving local communities. The website provides information about their stores, special offers, and product categories such as food to go and own label products. The site is built on Drupal CMS and integrates modern technologies including Google Maps API and Cookiebot for cookie consent management. The presence of Google Analytics indicates moderate user tracking for analytics purposes. Security posture is generally good with HTTPS enforced and cookie consent mechanisms in place, though the absence of explicit security headers and WHOIS data gaps reduce overall trust slightly. The site is professional, well-branded, and optimized for mobile users, targeting general retail customers in the UK.

A

Agile Collective Ltd

agile.coop

72

Agile Collective Ltd is a UK-based worker-owned digital agency specializing in designing, building, and supporting websites for purpose-driven organizations that prioritize environmental sustainability, social responsibility, equality, and human rights. Founded in 2012, the company operates as a worker co-operative, emphasizing ethical business practices and community engagement. Their core technical expertise lies in Drupal CMS, supported by a team of digital strategists, designers, developers, and project managers located across the UK, Italy, and Sweden. The agency maintains a strong market position within the ethical and non-profit sectors, leveraging open source technologies and active participation in cooperative networks such as Co-Tech and Workers.coop.

Save the Children UK is a well-established children's charity operating across the UK and internationally in over 100 countries. The organization focuses on ensuring children are fed, educated, and treated fairly, providing humanitarian aid and advocacy. The website reflects a strong market position as a leading non-profit with comprehensive services including child education, health, hunger relief, and emergency response. The digital infrastructure is built on Drupal CMS with modern analytics and consent management tools, demonstrating a mature technical setup. Security posture is robust with HTTPS, security headers, and anti-bot measures like reCAPTCHA, though there is room for improvement in publishing vulnerability disclosure and incident response information. Overall, the site is professional, trustworthy, and compliant with privacy regulations, supporting a high level of user trust and engagement.

K

Korupcijas novēršanas un apkarošanas birojs

knab.gov.lv

59

Korupcijas novēršanas un apkarošanas birojs (KNAB) is the official Latvian government agency responsible for preventing and combating corruption, overseeing political party financing, and monitoring pre-election agitation. The website serves as a comprehensive resource for the public, political entities, and government officials, providing information on legal frameworks, reporting mechanisms, educational materials, and current news. The site is well-structured, professionally designed, and compliant with privacy and cookie regulations, reflecting a mature digital presence. Technically, the website is built on Drupal CMS, employs modern web technologies, and integrates Google Analytics for user insights. It demonstrates good mobile optimization and accessibility features, ensuring usability across devices and for users with disabilities. Security measures such as HTTPS enforcement and security headers are in place, contributing to a strong security posture. The security posture is robust with no detected vulnerabilities or exposed sensitive data. However, the site could benefit from publishing a dedicated security policy and vulnerability disclosure program to enhance transparency and incident response readiness. Overall, the domain registration and WHOIS data confirm the site's legitimacy as a government entity. The website poses no content safety concerns and is suitable for a general audience. It maintains active engagement through social media channels and provides clear contact information, reinforcing trust and credibility.

V

Vertex Pharmaceuticals

vrtx.com

68

Vertex Pharmaceuticals is a leading global biotechnology company focused on scientific innovation to develop transformative medicines for serious and life-threatening diseases. The company has a strong market position supported by FDA approvals and a robust R&D pipeline. Their website reflects a mature digital presence with comprehensive content targeting patients, healthcare professionals, investors, and partners. The technical infrastructure is built on Drupal CMS with modern tracking and consent management tools, ensuring good performance, mobile optimization, and accessibility. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response contacts are not publicly detailed. Overall, the website and business demonstrate high professionalism and trustworthiness, with minor gaps in public security disclosures.

P

Prenax

prenax.co.uk

58

Prenax is a specialist B2B company focused on outsourced procurement and subscription management services for companies and institutions globally, with a strong presence in the United Kingdom. Their website presents a professional image with clear navigation, detailed service descriptions, and a customer success team localized to client regions. The business model centers on simplifying subscription management and optimizing procurement processes, targeting corporate and academic/public sectors. The company holds sustainability accreditation (Ecovadis), enhancing its market credibility. Technically, the website is built on Drupal CMS with Bootstrap framework, incorporating modern libraries such as FontAwesome and Matomo Analytics for tracking. The site is mobile-optimized, accessible, and SEO-friendly, with a comprehensive cookie consent mechanism that respects user privacy. However, some security best practices like security headers are not evident, and SSL configuration details are not provided. From a security perspective, the site uses HTTPS and respects DoNotTrack signals in Matomo, but lacks visible security headers and published security policies or incident response contacts. The absence of WHOIS registration data raises some concerns about domain legitimacy, although the professional website content and contact information mitigate these concerns somewhat. Overall, Prenax's website is a well-structured, professional platform suitable for its B2B audience, but improvements in security transparency and domain registration verification are recommended to enhance trust and compliance.

I

Incyte

incyte.com

69

Incyte is a well-established global biopharmaceutical company specializing in the discovery, development, and commercialization of novel medicines addressing serious unmet medical needs. The company maintains a strong market position with a comprehensive portfolio focused on hematology, oncology, inflammation, and autoimmunity. Their website reflects a mature digital presence with clear targeting of healthcare professionals, patients, investors, and partners. Technically, the site is built on Drupal CMS with modern libraries and frameworks, offering good mobile optimization and accessibility. Security posture is solid with HTTPS enforcement and domain management best practices, though there is room for improvement in publishing explicit security policies and headers. Privacy compliance is robust, featuring GDPR-aligned cookie consent mechanisms and a comprehensive privacy policy. Overall, the site demonstrates high professionalism and trustworthiness, supporting Incyte's corporate reputation.

K

KBR Inc.

kbr.com

75

KBR Inc. is a global provider of science, technology, and engineering solutions primarily serving governments and companies worldwide. The company positions itself as a trusted partner delivering innovative and sustainable technology-led solutions, with key service areas including Mission Technology Solutions, Sustainable Technology Solutions, and Digital Accelerators. The website reflects a mature enterprise-level business with consistent branding and professional content tailored to a B2B audience. Technically, the website is built on Drupal CMS and leverages modern web technologies such as Video.js for multimedia, Google Tag Manager and Analytics for tracking, and CookieYes for consent management. Accessibility is enhanced through the UserWay widget, and the site is mobile-optimized with good SEO practices. Performance is moderate, with some room for optimization. From a security perspective, the site enforces HTTPS and uses bot protection mechanisms like Google reCAPTCHA and Cloudflare Bot Management cookies. However, explicit security headers are not detected, and there is no publicly visible security policy or incident response information. The WHOIS data for the domain is unavailable, which slightly reduces transparency but does not detract from the site's legitimacy given the professional presentation and external references. Overall, the website demonstrates a strong security posture and privacy compliance with comprehensive cookie consent mechanisms and GDPR-aligned privacy policies. The business credibility is high, supported by clear corporate governance and investor relations information. Strategic recommendations include enhancing security headers, publishing a security policy, and providing explicit incident response contacts to further strengthen trust and compliance.

I

Institute of the Motor Industry

theimi.org.uk

53

The Institute of the Motor Industry (IMI) is a well-established professional body dedicated to the automotive sector, providing a broad range of services including membership, training courses, qualifications, apprenticeships, and industry standards. The organization targets automotive professionals, learners, employers, and training providers primarily in the United Kingdom. IMI maintains a strong market position with a large membership base and a network of accredited training centers. The website reflects a professional and consistent brand image with comprehensive content and clear navigation.

S

Shelby Energy Cooperative

shelbyenergy.com

66

Shelby Energy Cooperative is a regional electric utility cooperative serving Shelbyville, Kentucky, and surrounding areas. The organization focuses on providing safe, reliable, and cost-effective energy solutions to its members, including residential and business customers. Key services include energy provision, account management via SmartHub, energy audits, renewable energy programs, and electric vehicle resources. The cooperative positions itself as a trusted community energy provider with a strong local presence and customer service focus. Technically, the website is built on the Drupal CMS platform, utilizing modern web technologies such as FontAwesome, Google Tag Manager, and GTranslate for multilingual support. The site demonstrates good mobile optimization, accessibility features, and SEO practices, although performance is moderate. The infrastructure appears stable and professionally maintained. From a security perspective, the website enforces HTTPS and avoids exposing sensitive data. However, it lacks several security headers and does not provide explicit security policies or incident response information. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism detected. The absence of WHOIS data reduces domain trustworthiness, though the website content and external partnerships suggest legitimacy. Overall, Shelby Energy Cooperative's digital presence is professional and functional, supporting its business objectives effectively. Strategic improvements in security headers, privacy compliance, and domain registration transparency would enhance trust and security posture.

C

Carbon Trust

carbontrust.com

69

Carbon Trust is a globally recognized expert partner specializing in helping businesses, governments, and financial institutions accelerate their journey to Net Zero and decarbonization. The organization offers consulting and advisory services focused on transition strategy, carbon footprint labeling, market transformation, and sustainability planning. Their market position is strong, supported by a large team of experts and notable client testimonials from major corporations such as Amazon, Kellogg, and GSK. The website reflects a professional and consistent brand image with comprehensive content tailored to a global audience.

S

Stewardship

stewardship.org.uk

67

Stewardship is a UK-based Christian non-profit organization focused on helping individuals, churches, and charities manage and maximize their philanthropic giving. The website offers a comprehensive suite of services including giving accounts, donor advised funds, fundraising support, and consultancy. The organization positions itself as a trusted partner in Christian generosity with a strong market presence in the UK non-profit sector. Technically, the website is built on Drupal CMS, leveraging modern analytics and marketing tools such as Google Analytics, Cookiebot, Pardot, and Cloudflare for security and performance. The site is well-structured, mobile-optimized, and provides a rich user experience with clear navigation and professional design. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response information are not published. WHOIS data for the www subdomain was unavailable due to an invalid query, but the main domain stewardship.org.uk is known and legitimate. Overall, the website demonstrates good digital maturity and compliance with privacy regulations, making it a reliable platform for its target audience.

St. James’s Place is a well-established UK financial services company specializing in wealth management and financial advice through a network of local advisers. Their website is professionally designed, mobile-optimized, and rich in relevant content targeting individuals seeking financial planning and investment services. The technical infrastructure is modern, leveraging Drupal CMS and popular JavaScript libraries, with strong SEO and accessibility features. Security posture is robust with HTTPS, security headers, and secure forms, though explicit security policy and incident response information are not publicly available. Privacy and cookie policies are comprehensive and GDPR compliant. Overall, the website reflects a mature digital presence with high trustworthiness and business credibility.

S

Sanctuary

sanctuary-housing.co.uk

73

Sanctuary is a leading UK social housing and care provider with over 105,000 affordable homes across England and Scotland. The organization targets residents seeking affordable housing and care services, positioning itself as a major player in the social housing sector. The website reflects a mature digital presence built on Drupal CMS, integrating advanced analytics and marketing tools such as Google Analytics, Visual Website Optimizer, and Cookiebot for privacy compliance. The site is well-structured, mobile-optimized, and provides clear navigation and content relevant to its audience. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. The WHOIS data for the subdomain queried is unavailable due to domain naming rules, but the main domain is presumed legitimate based on website content and branding. Overall, the website demonstrates a professional and trustworthy digital footprint suitable for its sector.

B

Barnardo's

barnardos.org.uk

65

Barnardo's is a well-established UK children's charity dedicated to supporting children and young people to be safer, happier, and healthier. The organization operates a comprehensive website offering resources, support services, and multiple engagement channels including donations, volunteering, and campaigning. The site is professionally designed with clear navigation and strong branding consistency, targeting a broad audience including young people, parents, carers, and donors. Technically, the website leverages Drupal CMS, integrates Google Maps API for location services, and uses performance monitoring tools such as SpeedCurve LUX and Cloudflare Insights, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced, multiple security headers present, and no visible vulnerabilities or exposed sensitive data. Privacy compliance is robust, featuring clear privacy and cookie policies with consent mechanisms aligned with GDPR requirements. Although WHOIS data for the 'www.barnardos.org.uk' subdomain is unavailable due to domain naming rules, the overall legitimacy and trustworthiness of the site are high based on content quality and trust indicators. Strategic recommendations include publishing a dedicated security policy, incident response contacts, and a vulnerability disclosure program to further enhance transparency and security readiness.

C

CFA Institute

cfainstitute.org

70

CFA Institute is a globally recognized nonprofit organization specializing in investment management education, ethics, and professional standards. It administers the prestigious CFA® and CIPM® programs, serving a large international membership base. The website reflects a mature digital presence with comprehensive content tailored to finance professionals and students seeking certification. Technically, the site is built on Drupal CMS, integrates Adobe Launch for tag management, and uses Osano for consent management, indicating a modern and privacy-conscious infrastructure. Security posture is strong with HTTPS enforcement, security headers, and no visible vulnerabilities. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site demonstrates high professionalism and trustworthiness, supporting the organization's authoritative market position.

L

Līvānu novada pašvaldība

livani.lv

56

Līvānu novada pašvaldība is the official municipal government entity for Līvāni Municipality in Latvia, providing a comprehensive digital platform for residents and businesses. The website offers detailed information about local government structure, public services, news, events, and community engagement opportunities. It serves as a key communication channel between the municipality and its citizens, supporting transparency and accessibility. The site also links to various official government and partner services, enhancing its utility and reach. Technically, the website is built on the Drupal CMS platform, employing modern web technologies such as Bootstrap and FontAwesome for responsive design and user experience. It includes accessibility features and a cookie consent mechanism compliant with GDPR requirements. The site demonstrates good SEO practices and moderate performance, suitable for its public service role. From a security perspective, the website enforces HTTPS, implements standard security headers, and avoids exposing sensitive data. While no explicit security or incident response policies are published, the site maintains a solid security posture appropriate for a government entity. No vulnerabilities or suspicious activities were detected. Overall, the website is trustworthy, professional, and well-maintained. Strategically, the municipality should consider publishing explicit security policies and a vulnerability disclosure program to enhance transparency and trust. Regular audits of third-party scripts and dependencies are recommended to maintain security hygiene. Additionally, providing contact information for a data protection officer could further strengthen GDPR compliance and user confidence.

C

Circle K

circlek.lv

63

Circle K Latvia operates as a prominent fuel and convenience retail provider, offering quality fuel products, food, and beverages to private individuals and businesses. The website demonstrates a mature digital presence with integration of modern marketing and analytics tools such as Google Analytics, Adobe Launch, and Salesforce Pardot. The technical infrastructure is based on Drupal CMS with additional third-party services enhancing user experience and marketing capabilities. Security posture is strong with HTTPS enforcement, cookie consent mechanisms, and bot detection, although some security headers could be explicitly confirmed and enhanced. Privacy compliance is well addressed with detailed cookie policies and GDPR-aligned consent management. Overall, the website reflects a professional and trustworthy business with a clear focus on customer convenience and digital engagement.

N

Novartis CZ

novartis.cz

68

Novartis CZ is the Czech Republic branch of Novartis AG, a global pharmaceutical leader operating in over 140 countries with approximately 110,000 employees. The company focuses on innovative medical therapies in cardiology, neurology, ophthalmology, respirology, and oncology. The website reflects a mature digital presence with professional design, localized content, and comprehensive privacy and cookie policies. Technically, the site is built on Drupal CMS and integrates modern analytics and marketing tools such as Google Tag Manager, Crazy Egg, and TikTok Pixel, with appropriate consent mechanisms in place. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security headers should be verified. WHOIS data is incomplete, which slightly reduces transparency but does not detract from the site's legitimacy given the strong brand presence and consistent content. Overall, the site is well-positioned to serve its target audiences including patients, healthcare professionals, and researchers.

G

GEN energija d.o.o.

esvet.si

53

eSvet.si is an educational website operated under the GEN energija d.o.o. group, focusing on energy topics relevant to Slovenia. It provides comprehensive information on various energy sources including nuclear, hydro, fossil, and renewable energies. The platform targets a broad audience including students, professionals, and the general public interested in energy and sustainability. The site is well-branded, consistent, and supported by recognized energy sector partners, enhancing its credibility and trustworthiness. Technically, the site is built on Drupal CMS with modern JavaScript libraries and analytics tools, ensuring a good user experience and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response information are not published. Overall, the site demonstrates a mature digital presence with good compliance to privacy regulations and a strong educational mission.

AfriSIG is a well-established African School on Internet Governance, operating since 2013 and convened by the Association for Progressive Communications (APC) along with key African and UN partners. The organization focuses on educating and developing internet governance leaders across Africa through annual events and a multidisciplinary curriculum. The website reflects a professional and consistent brand with good content quality and clear navigation, targeting policy makers, activists, and ICT professionals in Africa. Technically, the site is built on Drupal CMS with modern front-end libraries and demonstrates moderate performance and good mobile optimization. However, security posture is moderate with no DNSSEC enabled and no visible security headers, and privacy compliance is low due to the absence of privacy and cookie policies. Contact information is limited to a single official email address. Overall, the domain registration data is consistent and supports the legitimacy of the organization.

benevol-jobs.ch is a well-established Swiss non-profit volunteering platform owned by benevol Switzerland. It serves as the largest Swiss platform connecting volunteers with nonprofit organizations, offering a wide range of volunteer opportunities across various sectors and regions in Switzerland. The platform is self-financed through service sales and partnerships, maintaining a strong market position in the non-profit volunteering domain. Technically, the website is built on Drupal CMS with integrations such as Google Tag Manager, Google Maps API, and LiveChat, reflecting a modern and functional digital infrastructure. The site is mobile-optimized, accessible, and SEO-friendly, providing a good user experience. Security-wise, the site uses HTTPS and secure forms but lacks some advanced security headers and explicit incident response policies, indicating room for improvement. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. Overall, the website demonstrates high professionalism, trustworthiness, and a solid business credibility profile.

M

MOBOTIX AG

mobotix.com

68

MOBOTIX AG is a German company specializing in high-resolution IP security camera systems and IoT video technology. Established in 1999, the company offers innovative decentralized edge video solutions and software to improve operational efficiency and safety for businesses and organizations across multiple sectors including industry, government, healthcare, and retail. The website is professionally designed, multilingual, and provides comprehensive information about products, services, and partner programs. Technically, the site uses Drupal CMS with modern analytics tools like Google Analytics and Tag Manager, implementing privacy-conscious features such as IP anonymization and cookie consent mechanisms. Security posture is solid with HTTPS enforced, but lacks explicit security headers and published incident response policies. WHOIS data for the domain is missing or unavailable, which is unusual for a .com domain and slightly impacts trustworthiness. Overall, the website is credible, well-maintained, and business-focused, with recommendations to improve security transparency and domain registration visibility.

A

achatpublic.com

achatpublic.com

63

achatpublic.com is a leading French platform specializing in services for public procurement. It serves over 22,000 public buyers and 125,000 suppliers, providing a comprehensive suite of tools covering sourcing, document drafting, buyer profiling, procedural management, act tracking, archiving, and electronic auctions. The platform also offers professional training tailored to public buyers and companies, positioning itself as a key player in the French public procurement ecosystem. Technically, the website is built on Drupal CMS and integrates modern analytics and consent management tools such as HubSpot, Google Tag Manager, Didomi, and Piano Analytics, reflecting a mature digital infrastructure. The site is well-structured, mobile-optimized, and demonstrates good SEO and accessibility practices. Security-wise, the site enforces HTTPS and implements a detailed cookie consent mechanism, but lacks explicit security headers and published security policies. The absence of WHOIS data is a notable concern for domain transparency, though the professional presentation and GDPR compliance indicators suggest legitimate operations. Overall, the site presents a moderate to high level of trustworthiness with room for improvement in security transparency and contact information clarity.

UNESCO Latvijas Nacionālā komisija is the official national commission representing UNESCO in Latvia, focusing on education, science, culture, and information sectors. The organization facilitates UNESCO program implementation, promotes sustainable development goals, and engages various stakeholders including educational institutions, scientists, and the general public. The website reflects a strong institutional presence with comprehensive content, clear navigation, and consistent branding aligned with UNESCO standards. Technically, the site is built on Drupal CMS with modern web technologies, ensuring good performance, accessibility, and mobile optimization. Security posture is solid with HTTPS enforcement, cookie consent mechanisms, and no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with GDPR-aligned cookie policies and clear privacy statements. Overall, the website demonstrates high professionalism and trustworthiness suitable for a governmental/non-profit entity.

O

O FELIZ Metalomecânica

ofeliz.com

48

O FELIZ Metalomecânica is a Portuguese manufacturing company specializing in metal construction, sheet profiling, laser cutting, and fabrication of lighting columns and communication towers. The company has a solid market presence since 2008, offering end-to-end solutions from design to final assembly. Their website reflects a medium-sized enterprise with a professional digital presence built on Drupal CMS, featuring multilingual support and integrated marketing tools like Google Analytics and reCAPTCHA for security. While the site is well-structured and content-rich, it lacks some privacy compliance features such as a cookie consent banner. Security practices include HTTPS and CAPTCHA protections, but could be improved with DNSSEC and security headers. Overall, the domain registration data aligns well with the business claims, indicating a trustworthy and legitimate operation.

S

Sustainable Stock Exchanges Initiative

sseinitiative.org

59

The Sustainable Stock Exchanges Initiative is a globally recognized, United Nations-supported platform that promotes sustainable investment and ESG transparency among stock exchanges, investors, regulators, and companies. It offers extensive resources including databases, training programs, publications, and events aligned with the UN Sustainable Development Goals. The website is professionally designed, well-structured, and targets sustainability professionals and capital market stakeholders worldwide. Technically, the site is built on Drupal CMS with modern libraries such as Highcharts and Google Tag Manager, hosted behind Cloudflare for DNS and CDN services. Security posture is solid with HTTPS and domain transfer protections, though DNSSEC is not enabled. Privacy compliance is lacking as no explicit privacy or cookie policies are found, representing a compliance gap. Overall, the site is trustworthy, authoritative, and serves as a key resource in sustainable finance.

C

Centre of Tourist Information in Torun

visittorun.com

52

Visit Toruń is the official tourism portal for the city of Toruń, Poland, providing comprehensive information on sightseeing, entertainment, accommodations, gastronomy, activities, and transportation. The website targets tourists and visitors, offering multilingual content primarily in Polish and English. It serves as a key promotional platform for local attractions and events, supported by the local government and tourism organizations. Technically, the site is built on Drupal CMS with a range of JavaScript libraries including jQuery, Colorbox, and Slick Slider, delivering a good user experience with mobile optimization and accessibility features. Security-wise, the site uses HTTPS and has domain transfer protections but lacks DNSSEC and modern security headers, and it uses outdated JavaScript libraries which may pose risks. Privacy compliance is addressed with a cookie consent banner and a privacy policy page, though no terms of service or explicit security policies are published. Overall, the website is professional, trustworthy, and well-positioned as a city tourism information source, but it would benefit from technical and security updates to enhance its posture.

S

S-Bahn Berlin GmbH

sbahn-ebe.de

68

S-Bahn Berlin GmbH operates a dedicated online portal for managing the increased fare enforcement payments (Erhöhtes Beförderungsentgelt - EBE). The portal facilitates secure and quick payment of fines, submission of personalized tickets for review, and customer support for related inquiries. The website is professionally designed, mobile-optimized, and provides comprehensive FAQs and contact options, reflecting a mature digital presence for a public transportation entity. Technically, the site uses Drupal CMS, integrates UserCentrics for consent management, and employs Matomo for analytics, indicating a focus on privacy and compliance. Security measures include HTTPS, Content Security Policy with nonce, and CAPTCHA protections, contributing to a strong security posture. The domain WHOIS data is privacy protected but consistent with legitimate business use. Overall, the site demonstrates a high level of professionalism, trustworthiness, and compliance with GDPR and other regulations.

L

Lesoochranárske zoskupenie VLK

wolf.sk

40

Lesoochranárske zoskupenie VLK is a Slovak non-profit organization dedicated to the protection of natural forests, carnivores, and natural processes through the creation of no-intervention reserves. The organization has a strong grassroots presence with over 25 years of activity, focusing on environmental advocacy, legal interventions, and public education. Their website serves as an information hub for campaigns, petitions, and educational content primarily in Slovak, targeting environmental activists and the general public interested in nature conservation. Technically, the website is built on Drupal CMS with common libraries like jQuery and uses Google Analytics for visitor tracking. While the site is functional and content-rich, it lacks advanced security headers and cookie consent mechanisms, which are important for GDPR compliance. Contact information is primarily available via a contact page rather than directly on the homepage. Overall, the website reflects a moderate level of digital maturity with room for improvements in security and privacy compliance.

CNP Assurances Protection Sociale is a major French insurance provider specializing in complementary health and provident insurance products. The website targets individuals, professionals, and enterprises in France, offering tailored insurance solutions with an emphasis on ease of obtaining quotes online. The company is positioned as a trusted and established player in the social protection sector, supported by consistent branding and verified corporate information. Technically, the site is built on Drupal CMS and integrates modern analytics and marketing tools such as Google Tag Manager and New Relic, with a strong focus on user experience and mobile optimization. Security posture is good with HTTPS enforced and monitoring tools in place, though explicit security headers and incident response information could be improved. Overall, the site presents a professional and trustworthy digital presence with minor gaps in domain registration transparency.

T

Tatra-Leasing, s.r.o.

tatraleasing.sk

49

Tatra-Leasing, s.r.o. is a Slovak financial services company specializing in leasing and financing solutions for businesses and consumers. As part of the Tatra banka group, it holds a strong market position in Slovakia offering financial leasing, operational leasing, consumer loans, insurance, and digital leasing services. The website is professionally designed, mobile-optimized, and provides comprehensive information and interactive tools such as a leasing assistant and client zone. Technically, the site is built on Drupal CMS with modern integrations including Google Tag Manager, Analytics, and reCAPTCHA, ensuring a secure and user-friendly experience. Security posture is strong with HTTPS, CSP headers, and consent management, though explicit security policies and incident response details are not publicly available. Overall, the site demonstrates high business credibility and compliance with privacy regulations, making it a trustworthy platform for its target audience.

C

CSL Plasma

cslplasma.hu

62

CSL Plasma is a healthcare-focused organization operating in Hungary that facilitates blood plasma donation to support patients with conditions treatable only by plasma-based therapies. The website serves as an informational and engagement platform for potential donors and the community, featuring patient stories, donation processes, and news updates. The organization positions itself as a trusted intermediary connecting donors and patients, emphasizing the life-saving impact of plasma donation. Technically, the website is built on Drupal CMS with modern front-end frameworks such as Bootstrap 5 and FontAwesome for icons. It integrates Google Tag Manager for analytics and OneTrust for GDPR-compliant cookie consent management. The site demonstrates good mobile optimization, accessibility, and SEO practices, although some performance optimizations could be considered. From a security perspective, the site uses HTTPS with a presumably strong SSL configuration. However, it lacks visible security headers and does not provide explicit security policies or incident response information. No vulnerabilities or exposed sensitive data were detected in the provided content. Privacy compliance is partially addressed through cookie consent but lacks a formal privacy policy and terms of service. Overall, the website is professional, trustworthy, and well-structured, serving its purpose effectively. Strategic improvements in privacy documentation, security headers, and contact transparency would enhance its compliance and security posture.

G

GreyCortex s.r.o.

greycortex.com

71

GreyCortex s.r.o. is a Czech Republic-based cybersecurity company specializing in network detection and response solutions for IT and OT networks. Their flagship product, GREYCORTEX Mendel, leverages AI and machine learning to provide deep network visibility, advanced threat detection, and automated incident response. The company serves a diverse range of sectors including government, energy, banking, healthcare, manufacturing, and education, positioning itself as a trusted provider in the cybersecurity market. The website reflects a professional and mature business with clear branding, comprehensive content, and strong trust indicators such as ISO 27001 certification and customer testimonials. Technically, the website is built on Drupal CMS with modern web technologies including jQuery and Google Tag Manager for analytics and marketing. The site is well-optimized for performance, mobile responsiveness, and accessibility. Hosting and DNS services are provided by reputable providers including WEDOS Internet and Cloudflare. Security best practices are observed with HTTPS enforced and cookie consent mechanisms implemented, although some security headers could be improved and DNSSEC is not enabled. From a security posture perspective, the website shows no signs of vulnerabilities or exposed sensitive data. Privacy compliance is strong with a comprehensive privacy policy and cookie consent banner aligned with GDPR requirements. However, the absence of a terms of service page and explicit incident response contact or vulnerability disclosure policy are minor gaps. Overall, the domain registration data is consistent with the business claims, supporting the legitimacy and trustworthiness of the company. The overall risk assessment is low with no critical issues detected. Strategic recommendations include enabling DNSSEC, adding security headers, publishing terms of service and incident response information to enhance transparency and trust. The website and company demonstrate a solid security culture and digital maturity appropriate for their market position.

J

JPA International

jpainternational.com

59

JPA International is a well-established global network of independent accountancy firms, auditors, and consultants providing audit, accounting, tax, and consultancy services worldwide. The network emphasizes high-quality service under a common code of ethics and has a presence in over 85 countries with more than 210 offices. The website reflects a professional and consistent brand image with comprehensive content targeting business professionals and international clients. Technically, the site is built on Drupal CMS with modern web technologies, optimized for mobile and accessibility, and includes social media integration and cookie consent mechanisms. Security posture is generally good with HTTPS enforced and no exposed sensitive data, though explicit security headers and incident response information are lacking. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, warranting further verification. Overall, the site demonstrates strong business credibility and digital maturity with room for security and transparency improvements.

H

HUSS Unternehmensgruppe

hussmedien.de

53

HUSS Unternehmensgruppe is a well-established German B2B media group comprising multiple subsidiaries including HUSS-VERLAG GmbH, HUSS-MEDIEN GmbH, EUROEXPO Messe- und Kongress-GmbH, and HUSS-SHOP. The group specializes in publishing professional magazines, organizing industry events such as LogiMAT, and providing digital content and e-commerce services targeting logistics, automotive, transport, construction, and technical sectors. Their market position is strong within their niche, supported by a diversified portfolio and recognized brands. Technically, the website is built on Drupal CMS with a moderate tech stack including jQuery and Matomo analytics, and it is mobile optimized with good SEO practices. Security posture is adequate with HTTPS and cookie consent implemented, but lacks advanced security headers and uses an outdated jQuery version, which could pose risks. Privacy compliance is partial, with cookie consent but no explicit privacy policy page found. Overall, the website is professional, trustworthy, and content-rich, supporting a medium-sized enterprise with a clear business model and audience.

H

HUSS Unternehmensgruppe

huss.de

53

HUSS Unternehmensgruppe is a well-established German B2B media group comprising multiple subsidiaries specializing in publishing, event organization, and digital content for sectors including logistics, automotive, transport, and technical industries. The group offers a broad portfolio of Fachzeitschriften, Sonderpublikationen, digital formats, and organizes industry events and trade fairs. Their market position is strong within their niche, supported by recognized brands and a diversified business model. Technically, the website runs on Drupal CMS with legacy jQuery but integrates modern consent management and analytics tools such as Consentmanager.net and Matomo. The site is mobile-optimized with good navigation and content quality, though some technical debt is noted with outdated libraries. Security posture is solid with HTTPS and cookie consent, but lacks visible security headers and explicit security policies. No WAF or blocking mechanisms were detected, and the site is fully accessible. Contact information is comprehensive and clearly presented. Privacy policy presence is weak, with no explicit page found, though cookie consent is implemented. No adult or questionable content is present, making the site safe for general audiences. Overall, the website reflects a professional and credible business with room for improvement in privacy transparency and security hardening.

H

Handelsregisterauszug Online - www.handelsregisterauszug-deutschland.de

handelsregisterauszug-deutschland.de

44

The website www.handelsregisterauszug-deutschland.de provides an online service for ordering official German commercial register extracts (Handelsregisterauszug) including notarized versions, certified English translations, and apostille certifications. It targets businesses, legal professionals, and individuals requiring official company data from German register courts. The service emphasizes fast delivery, no registration requirement, and a guarantee of no cost if no data is found. The business operates in a niche market segment focused on official document retrieval and certification within Germany. Technically, the website is built on the Drupal CMS platform, utilizing jQuery and client-side validation libraries. It employs Cloudflare for DNS and likely CDN services, enhancing availability and security. The site includes form validation, CAPTCHA to prevent spam, and IBAN validation with automatic BIC detection, indicating attention to data accuracy and user input security. However, no advanced security headers or explicit SSL configuration details were found in the provided data. From a security perspective, the site demonstrates moderate maturity with client-side protections and spam prevention but lacks published security policies, incident response contacts, and cookie consent mechanisms required for full GDPR compliance. The absence of security headers and limited visible server-side security measures suggest room for improvement. No vulnerabilities or malware indicators were detected in the analysis. Overall, the website is functional, professionally presented, and serves a clear business purpose with moderate technical and security posture. Strategic improvements in security headers, privacy compliance, and transparency would enhance trust and compliance with regulatory standards.

Saint-Gobain Weber España operates as a leading provider of industrial mortars and construction solutions in Spain, specializing in products such as ceramic tile adhesives, thermal insulation systems (SATE), continuous flooring, and technical mortars. The company is part of the global Saint-Gobain group, which enhances its market position and trustworthiness. The website is professionally designed, content-rich, and targets construction professionals, architects, and contractors with comprehensive product information, tools, and services. Technically, the site is built on Drupal CMS, employs modern analytics and consent management tools, and is optimized for mobile and accessibility. Security posture is strong with HTTPS enforced and no evident vulnerabilities, though additional security headers could improve defenses. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. WHOIS data is privacy protected but domain registration details and website content align with a legitimate, active business. Overall, the site demonstrates a mature digital presence suitable for a large enterprise in the manufacturing and construction sector.

Weber Vietnam is a subsidiary of the global Saint-Gobain group, specializing in manufacturing and distributing tile adhesives, grouts, waterproofing products, and silicone sealants. The company holds a leading market position in Vietnam and globally, serving construction professionals and consumers with a comprehensive product range and technical support. The website is professionally designed, content-rich, and well-branded, reflecting the company's strong market presence and parent company association. Technically, the website is built on Drupal CMS with modern frameworks like Bootstrap and integrates multiple analytics and marketing tools including Google Tag Manager, Facebook Pixel, TikTok Pixel, and Microsoft Clarity. The site is mobile-optimized and accessible, with good SEO practices. However, some security headers are missing, and there is no explicit cookie consent mechanism despite cookie policy presence. Security posture is good with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. The WHOIS data is unavailable, likely due to privacy protection, but the website's legitimacy is supported by consistent branding and structured data linking to Saint-Gobain. No signs of phishing or malware were detected. Overall, the website presents a low risk profile with strong business credibility and technical maturity. Strategic improvements could focus on enhancing security headers, implementing explicit cookie consent, and publishing a dedicated security policy or incident response page.

E

Erhvervsstyrelsen

boligejer.dk

10

Boligejer.dk is an official Danish government website operated by Erhvervsstyrelsen, providing comprehensive guides, tools, and data services for individuals involved in buying or selling property in Denmark. The platform offers property search capabilities, access to property data reports, and expert consultation services, positioning itself as a trusted and authoritative resource in the real estate sector. The website is well-branded with consistent government identity and targets a general audience interested in property transactions.

E

Erhvervsstyrelsen

regelforum.dk

48

Regelforum.dk is the official website of a Danish government advisory forum established in 2019 under the Danish Business Authority (Erhvervsstyrelsen). The forum consists of 21 members representing a broad cross-section of Denmark and focuses on recommending simpler regulatory frameworks for businesses, both at national and EU levels. The website provides comprehensive information about the forum's activities, recommendations, and news updates, targeting Danish businesses and government stakeholders. The site is professionally designed, mobile-optimized, and uses Drupal CMS with clear navigation and consistent branding. From a technical perspective, the website employs modern web technologies including Drupal, JavaScript, and CSS, with SVG logos and responsive design. It includes a cookie consent mechanism and uses Piwik Pro for analytics, indicating a moderate level of digital maturity. However, some security best practices such as DNSSEC and security headers are not enabled or visible, suggesting room for improvement in security hardening. Security posture is adequate with no visible vulnerabilities or exposed sensitive data, but lacks explicit security policies or incident response contacts. Privacy compliance is strong with clear privacy and cookie policies and GDPR adherence. Overall, the website is trustworthy and professional, reflecting its government affiliation and purpose. Strategically, the site should enhance security by enabling DNSSEC, implementing security headers, and publishing a vulnerability disclosure or security policy. These steps will improve trust and resilience against cyber threats while maintaining compliance and user confidence.

E

Erhvervsstyrelsen

nemhandel.dk

66

Nemhandel.dk is a Danish government-operated platform managed by Erhvervsstyrelsen (Danish Business Authority) that facilitates electronic invoicing and e-commerce document exchange primarily for public sector entities and businesses in Denmark. The platform enjoys a strong market position with over 67,000 registered recipients and processes over 31 million e-commerce documents annually, reflecting high adoption and trust within its target audience. The website is well-branded, consistent, and professionally designed, supporting a good user experience and accessibility. Technically, the site is built on Drupal CMS with modern web technologies, offering good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms implemented, although some security headers and DNSSEC are missing. Privacy compliance is strong, with clear privacy and cookie policies aligned with GDPR requirements. No critical vulnerabilities or blocking mechanisms were detected, and the domain registration is consistent with the official government entity, enhancing legitimacy and trust.