Security Directory

S

South West Growers Show Ltd

swgs.co.uk

59

The South West Growers Show website represents a well-established horticultural trade event organizer based in the South West of the United Kingdom. The business focuses on connecting growers, suppliers, and industry professionals through an annual trade show, celebrating 50 years of operation. The website provides detailed event information, exhibitor resources, and news updates, targeting growers, plant buyers, and related industry stakeholders. The business model centers on event management and trade facilitation within the horticultural sector, positioning itself as a leading regional event. Technically, the website is built on WordPress using the Divi theme, leveraging modern web fonts and media libraries. The site is accessible, mobile-optimized, and demonstrates good SEO practices. However, there is room for improvement in accessibility and performance optimization. Security posture is moderate with HTTPS enabled but lacks comprehensive security headers and incident response disclosures. Privacy compliance is weak due to the absence of privacy and cookie policies and consent mechanisms. The WHOIS data for the domain is unavailable due to a Nominet UK naming rules error, which is unusual and reduces domain registration trustworthiness. Despite this, the website content and business information appear legitimate and professional. No WAF or blocking mechanisms were detected, and the content is safe for general audiences. Overall, the website is functional and professional but would benefit from enhanced privacy compliance, security best practices, and clearer contact information to improve trust and regulatory adherence.

Harry Winston is a prestigious American luxury jeweler and watchmaker with a rich heritage dating back to 1932. The company is recognized globally for its exquisite diamond jewelry and high-end watches, targeting affluent consumers seeking premium luxury products. The website reflects a strong market position with comprehensive collections and a focus on brand experience. Technically, the site employs modern web technologies including Bootstrap, jQuery UI, and advanced analytics tools such as Google Tag Manager and BrightEdge AutoPilot, hosted likely on Akamai's infrastructure, ensuring good performance and mobile optimization. Security posture is robust with HTTPS enforcement and security headers, though public security policies and incident response contacts are not readily available. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site is professional, trustworthy, and safe for general audiences.

C

Coolfruit Logistix

coolfruitlog.com

42

Coolfruit Logistix is a South African-based international freight forwarding company specializing in high precision cold-chain management. The company offers a comprehensive suite of logistics services including air, sea, and road freight, customs brokerage, warehousing, and distribution. With 17 years of experience, they emphasize personalized and flexible logistics solutions tailored to client needs. The website presents a professional image with clear service descriptions and contact information, targeting businesses requiring specialized freight and cold-chain logistics. Technically, the website is built on WordPress using Elementor and several plugins, including a Google Analytics plugin that is currently not configured. The site is mobile-optimized and loads with moderate performance. However, it lacks some security best practices such as security headers and privacy/cookie policies, which are important for compliance and user trust. From a security perspective, the site uses HTTPS, which is positive, but the absence of WHOIS domain registration data raises concerns about domain legitimacy. No security incident response or vulnerability disclosure information is present. Overall, the security posture is moderate but could be improved with better headers and compliance documentation. The overall risk is moderate due to the missing WHOIS data and lack of privacy policies, but the business content and presentation are professional. Strategic improvements in compliance and security practices are recommended to enhance trust and reduce risk.

E

Express Assemblies Ltd

expressassembliesltd.co.uk

50

Express Assemblies Ltd is a UK-based manufacturer specializing in wire and cable assemblies with over two decades of experience. The company offers a wide range of customized wire and cable solutions, serving various sectors including security, safety, energy, marine, retail, and lighting. Their market position is strong within the UK, supported by ISO9001:2015 certification and a professional digital presence. Technically, the website is built on WordPress using modern themes and plugins, with good mobile optimization and moderate performance. Security posture is adequate with HTTPS enforced but lacks advanced security headers and incident response information. Privacy compliance is weak due to missing privacy and cookie policies. The WHOIS data is unavailable due to domain registration errors, which raises concerns about domain legitimacy despite the professional business presentation. Overall, the website is functional and professional but would benefit from improved compliance and security transparency.

A

Alsecure Group Ltd

alsecure.com

52

Alsecure Group Ltd is a family-owned UK-based security company established in 1968, specializing in electronic security systems and security guarding services primarily in the North-West of England. The company offers a comprehensive range of services including installation, monitoring, and maintenance of intruder alarms, fire systems, CCTV, and access control, alongside manned guarding, mobile patrols, keyholding, and alarm response. Their market position is supported by accreditations such as SafeContractor, SSAIB registration, and employing SIA licensed officers, which enhances their credibility in the security sector. Technically, the website is built on WordPress using the Enfold theme and integrates modern web technologies including jQuery and Yoast SEO for optimization. The site is mobile responsive and well-structured, providing a good user experience. However, some technical improvements such as implementing security headers and a cookie consent mechanism could enhance security and privacy compliance. From a security perspective, the website uses HTTPS and does not expose sensitive data or vulnerable libraries. Certifications and accreditations are clearly displayed, reinforcing trust. The absence of incident response and vulnerability disclosure policies, along with missing WHOIS domain registration data, are notable gaps that could impact trustworthiness. Overall, the website presents a professional and trustworthy image for a small UK security services provider, but the lack of domain WHOIS data and privacy compliance mechanisms suggest areas for improvement. Strategic recommendations include enhancing security headers, adding cookie consent, publishing security policies, and verifying domain registration details to strengthen legitimacy and compliance.

U

University of Mary Washington

umw.edu

56

The University of Mary Washington website represents a well-established educational institution focused on providing undergraduate and graduate education with a strong emphasis on liberal arts and professional studies. The site targets prospective and current students, faculty, and community members, offering comprehensive academic, admissions, campus life, and athletics information. The branding and content quality are excellent, reflecting a professional and trustworthy online presence. Technically, the website is built on WordPress with modern frameworks such as React and includes a robust set of analytics and marketing tools including Google Analytics, TikTok Pixel, Microsoft Clarity, and others. The site demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate, likely due to the extensive use of third-party scripts. From a security perspective, the site enforces HTTPS, employs multiple security headers, and avoids exposing sensitive data. However, it lacks visible privacy and cookie policies and does not provide explicit security or incident response information, which are areas for improvement. The WHOIS data is unavailable, which is unusual but may be due to .edu domain registry policies. Overall, the site is legitimate and secure but could enhance transparency and compliance. The overall risk is low, but strategic recommendations include publishing clear privacy and cookie policies with consent mechanisms, adding security and incident response information, and maintaining vigilance on third-party scripts to ensure ongoing security and privacy compliance.

W

Whistle PR

whistlepr.co.uk

57

Whistle PR is an independent reputation consultancy based in the United Kingdom, specializing in public relations, communications strategies, digital marketing, ESG communications, crisis management, and content creation. The company positions itself as a results-driven partner for businesses seeking to enhance and protect their brand reputation. Their website reflects a professional and modern digital presence, leveraging WordPress and Divi theme technologies, integrated with Google Analytics and Tag Manager for performance and marketing insights. The company demonstrates a strong commitment to privacy compliance with clear cookie and privacy policies and provides multiple contact channels including email, phone, and social media. However, the WHOIS data for the domain is unavailable due to a lookup error, which limits full verification of domain registration details.

S

Schuller & Lier Transporte Gmbh & Co. KG

schuller-transporte.de

39

Schuller & Lier Transporte Gmbh & Co. KG is a German transportation company established in 1951, specializing in the transport of various goods, container rental, and delivery of construction materials. The company operates a sizable fleet and emphasizes traditional, familial, and efficient service. Their website is professionally designed using WordPress and Elementor, providing clear information about their services and contact details. The site is fully accessible with no blocking mechanisms detected, indicating good digital maturity. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and published security policies. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Overall, the business presents a credible and professional front, though WHOIS data is missing, which slightly reduces trustworthiness.

S

Sven Kadenbach Installationen

meisterbetrieb-kadenbach.de

44

Meisterbetrieb Kadenbach is a small German company specializing in modern sanitary and heating installations, including solar, gas, and heat pump systems. The company emphasizes quality workmanship and customer service, targeting local homeowners and businesses. The website is professionally designed using WordPress with popular plugins such as Elementor and LayerSlider, providing a good user experience and mobile optimization. Security posture is adequate with HTTPS enabled and no exposed sensitive data, though security headers and incident response information are lacking. Privacy and cookie policies are present and GDPR compliant, enhancing trust. Overall, the website reflects a legitimate and credible small business with a solid digital presence.

F

Fusion Group

fusionam.com

60

Fusion Group is a UK-based financial services group specializing in investment management, wealth management, financial planning, and corporate risk advisory services. Established in 2004 and headquartered in London, the company serves institutional, corporate, and private clients with a range of advisory and investment platform services. The website presents a professional and clear depiction of their offerings and market positioning. Technically, the site is built on WordPress using Elementor, with modern technologies and good mobile optimization. Security posture is solid with HTTPS and no exposed sensitive data, though security headers and incident response policies are absent. The lack of WHOIS domain registration data is a notable concern that impacts trust and legitimacy assessment. Overall, the website is functional and professional but would benefit from enhanced transparency and security documentation.

T

Tyler Crown & Bridge Ltd

tylercrownandbridge.com

56

Tyler Crown & Bridge Ltd is a medium-sized independent dental laboratory based in Gloucester, UK, established in 1986. The company provides a range of dental prosthetic services including implants, crowns, bridges, and prosthetics, serving both local and national dental practices. Their website reflects a professional and well-structured digital presence built on WordPress with the Divi theme, incorporating modern web technologies and analytics via Matomo. Security posture is good with HTTPS and standard security headers in place, though there is room for improvement in privacy compliance and incident response transparency. The absence of WHOIS data for the domain is a notable concern that should be investigated to confirm domain registration legitimacy. Overall, the website and business appear credible and trustworthy with clear contact information and consistent branding.

LEVEL is a small graphic design company specializing in the heritage and arts sectors, providing tailored design services to organizations within these fields. The website serves as a portfolio showcasing their work with notable clients such as National Trust and Historic Houses Association, positioning LEVEL as a niche service provider with a focused market presence. The business appears established, with a domain registered since 2007, indicating longevity and stability in their sector. Technically, the website is built on WordPress, utilizing common technologies such as jQuery and Google Fonts. The site is moderately performant with good mobile optimization and basic accessibility features. Hosting is provided by 123-Reg Limited, a reputable UK registrar and hosting provider. SEO and accessibility are basic but functional, with room for improvement. From a security perspective, the site uses HTTPS and implements a cookie consent banner, demonstrating some compliance with privacy regulations. However, it lacks security headers and a published privacy policy, which are important for GDPR compliance and overall security posture. No incident response or vulnerability disclosure information is available, which could be improved to enhance trust and preparedness. Overall, the website is professional and trustworthy, with a good design and clear business focus. The main risks relate to privacy compliance and security best practices, which if addressed, would strengthen the company's digital maturity and reduce potential vulnerabilities.

G

Gua Africa

gua-africa.org

50

Gua Africa is a UK-registered non-profit organization dedicated to providing educational and wellbeing programs for refugees and conflict-affected youth in East Africa, primarily Kenya. The organization focuses on empowering survivors of war and genocide through education, vocational training, and creative wellbeing initiatives. Their market position is that of a niche charity with a strong community and donor engagement, supported by testimonials and annual reports. Technically, the website is built on WordPress using Elementor, with a moderate performance profile and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and DNSSEC. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism. Business credibility is high due to clear charity registration and professional content. Overall, the website is trustworthy and serves its mission effectively, though improvements in security and privacy compliance are recommended.

C

CEE Norm UK Ltd

ceenorm.co.uk

59

CEE Norm UK Ltd is a UK-based distributor specializing in industrial electrical products including plugs, sockets, connectors, transformers, and custom-built distribution units. They serve the UK electrical trade and industry professionals, holding exclusive distribution rights for Bals products and operating subsidiaries such as Cablecaddy. The website is professionally designed, mobile-optimized, and provides comprehensive product information and resources. Technically, the site uses a modern tech stack with Bootstrap and jQuery, though some libraries are older versions. Security posture is good with HTTPS and cookie consent, but lacks some security headers and an incident response contact. WHOIS data was not retrievable due to querying a subdomain, but business registration details confirm legitimacy. Overall, the site is trustworthy and well-positioned in its niche.

E

EPD Worldwide

europlusdirect.com

56

EPD Worldwide is a specialized IT services company focusing on simplifying and enhancing the renewal of IT services with OEMs globally. Leveraging over 10 years of expertise, advanced technology, and data analytics, they provide multi-country and multi-OEM IT service procurement solutions. Their services aim to reduce complexity and cost while increasing renewal rates and revenue for their clients. The company operates primarily in the technology sector with a medium-sized business footprint based in the United Kingdom and is part of the Annuity Management Group. Technically, the website is built on WordPress using the Uncode theme and several plugins including GravityView and WP Rocket for performance optimization. The site employs modern web technologies such as jQuery and Google Tag Manager for analytics and marketing. Performance and mobile optimization are good, though accessibility is basic. Security is enforced via HTTPS, but lacks some advanced security headers and explicit security policies. The security posture is solid with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR consent mechanisms. However, the absence of WHOIS registration data raises concerns about domain legitimacy and registration transparency, which impacts overall trustworthiness. Overall, EPD Worldwide presents a professional and trustworthy digital presence with strong business and technical foundations but should address domain registration transparency and enhance security headers and incident response disclosures to improve trust and compliance.

Hiltis UK Ltd is a small, family-oriented construction company based in the United Kingdom, specializing in general building work, new builds, extensions, and refurbishment projects primarily in Surrey. The company emphasizes quality craftsmanship, competitive pricing, and customer support, backed by a 6-year insurance guarantee under the JCT building contract. Their website reflects a professional and consistent brand image with clear service descriptions and customer testimonials, targeting residential and commercial property owners seeking reliable construction services. Technically, the website is built on WordPress using the Enfold theme and Avia Framework, incorporating standard web technologies such as jQuery and Google Web Fonts. The site is hosted by Ionos SE and uses HTTPS with a good SSL configuration. Mobile optimization and navigation clarity are good, though some SEO and accessibility features could be improved. The site includes a cookie consent mechanism compliant with GDPR, indicating awareness of privacy regulations. From a security perspective, the website enforces HTTPS and uses cookie consent banners but lacks explicit security headers and up-to-date WordPress core versions, which could expose it to vulnerabilities. No incident response or security policy information is publicly available. No suspicious or malicious content was detected, and the domain registration is consistent with the business history, enhancing trustworthiness. Overall, the website presents a trustworthy and professional image with room for technical and security improvements. Strategic recommendations include implementing security headers, updating WordPress and plugins, publishing security policies, and enhancing SEO and accessibility to strengthen digital maturity and security posture.

A

A Goodman & Son

agoodmanandson.co.uk

50

A Goodman & Son is a family-run scrap metal recycling business based in Milton Keynes, UK, with over 50 years of experience. The company offers a range of services including scrap metal purchasing, scrap car acceptance, waste skip hire, and public weighbridge operations. Their website reflects a professional and well-structured digital presence built on WordPress with the Divi theme, optimized for desktop and mobile users. The technical infrastructure includes modern web technologies and SEO tools, though performance is moderate and accessibility is basic. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and formal security policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the website is trustworthy and credible, supporting the company's established market position in the scrap metal recycling sector.

M

MarketSource

marketsource.com

67

MarketSource is a sales acceleration company specializing in managed sales and customer experience solutions for B2B and retail brands. As an Allegis Group company, it leverages deep industry knowledge and a match-to-fit approach to serve iconic brands across multiple sectors including automotive, healthcare, retail, and technology. The website demonstrates a mature digital presence with professional design, comprehensive content, and integration of modern marketing and analytics tools. Technically, the site is built on WordPress with the Divi theme and uses various plugins for forms, analytics, and social sharing. Security posture is solid with HTTPS and cookie consent mechanisms, though it lacks some advanced security headers and published incident response information. The absence of WHOIS registration data is a transparency concern but does not detract significantly from the overall legitimacy given the strong branding and parent company association. Strategic recommendations include enhancing security headers, publishing a security policy, and improving WHOIS transparency.

David Hendy & Sons Funeral Directors is a small, independent family-run funeral service provider based in the United Kingdom. The company offers a range of funeral-related services including funeral arrangements, vehicle hire, funeral plans, online memorials, tributes, and grief support. Their website is professionally designed using WordPress and the Divi theme, providing clear navigation and service information targeted at individuals and families seeking funeral services. The domain is well-established since 2014, consistent with the business profile. Technically, the website employs a modern CMS platform with common web technologies such as jQuery and MediaElement.js. The site is mobile optimized and loads with moderate performance. However, there is room for improvement in SEO and accessibility features. Security posture is adequate with HTTPS enabled but lacks important HTTP security headers and formal security policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the website presents a trustworthy and professional image suitable for its industry. Key strengths include clear contact information with 24/7 phone availability and a consistent brand presence. Areas for improvement include adding privacy and cookie policies, implementing security headers, and providing vulnerability disclosure information to enhance trust and compliance. These steps will strengthen the security posture and regulatory adherence, reducing risk and improving user confidence.

N

Nexus Chafer

cropsprayers.com

53

Nexus Chafer operates as a specialized manufacturer of crop spraying and granular application machinery, targeting agricultural businesses and farmers. The company emphasizes custom-built, technologically advanced equipment designed for performance and productivity. The website reflects a professional presence with clear business focus but lacks explicit contact details and privacy policy documentation. Technically, the site is built on WordPress using the Avada theme, integrating SEO and GDPR compliance plugins, and employs Google Analytics with consent management. Security posture is moderate with HTTPS enabled but could benefit from enhanced security headers and regular plugin updates. The absence of WHOIS registration data is a notable concern, impacting domain trustworthiness. Overall, the site is functional and professional but requires improvements in transparency and security practices.

O

Oldacres Limited

oldacres.co.uk

58

Oldacres Limited is a well-established, family-run printing company based in London since 1897, specializing in both digital and lithographic printing services. Their website reflects a professional and consistent brand image, targeting businesses and individuals seeking high-quality print products such as art catalogues, brochures, menus, and personalized design services. The company emphasizes customer service and quality, supported by testimonials and a long business history. Technically, the website is built on WordPress with Elementor, employing modern web technologies and providing a responsive user experience. Security posture is adequate with HTTPS enabled and cookie consent mechanisms in place, though some security headers and policies could be improved. Privacy compliance is good, with accessible privacy and cookie policies. Overall, the website presents a trustworthy and credible business presence with moderate technical sophistication and solid content quality.

N

Network Blinds Ltd

networkblinds.com

60

Network Blinds Ltd is a well-established UK-based manufacturer specializing in made-to-measure window blinds since 1992. The company holds a strong market position as one of the leading independent blind manufacturers in the UK, serving both residential and commercial customers. Their key services include planning, design, manufacturing, and supplying a wide range of blinds with a focus on quality and customer support. The website reflects a professional business model with clear branding and consistent messaging.

Resin Bound Gravel Ltd. is a UK-based company specializing in the supply and installation of resin bound and resin bonded gravel paving solutions for residential, commercial, and industrial clients. The company positions itself as the UK's leading supplier and installer of resin bound gravel, offering a wide range of products and services including driveways, pathways, patios, and commercial hard landscaping. Their website reflects a professional business with a clear focus on quality and customer service, supported by certifications such as CHAS and Constructionline. Technically, the website is built on WordPress using the Divi theme, leveraging standard web technologies like jQuery and MediaElement.js. The site is hosted behind Cloudflare DNS but lacks advanced security configurations such as DNSSEC and security headers, which could be improved. The website is mobile-optimized with good navigation and content relevance but lacks privacy and cookie policies, which are important for compliance. From a security perspective, the site uses HTTPS and has domain registration protections in place, but the absence of security headers and vulnerability disclosure policies indicates room for improvement. No signs of WAF blocking or malicious content were detected, and the site is safe for general audiences. Overall, Resin Bound Gravel Ltd. presents a credible and professional online presence with moderate technical maturity and security posture. Strategic enhancements in privacy compliance and security best practices would strengthen their digital trust and compliance standing.

N

Network Scientific Recruitment

networkscientificrecruitment.com

55

Network Scientific Recruitment is a specialized UK-based recruitment agency focusing on scientific, medical device, laboratory, and biotech sectors. The company offers expert recruitment services including temporary, permanent, and contract placements, positioning itself as an award-winning leader in its niche. The website is built on a modern WordPress platform using the Divi theme and SEO optimizations, reflecting a professional digital presence. However, the absence of WHOIS registration data raises concerns about domain legitimacy and trustworthiness. Security posture is moderate with no visible security headers or policies, and privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is accessible and content-rich but requires improvements in transparency and security to enhance trust and compliance.

M

MBA Polymers Inc.

mbapolymers.com

44

MBA Polymers Inc. is a globally recognized leader in the plastic recycling industry, specializing in converting post-consumer durable goods waste into high-value recycled plastic granulates. Founded in 1997, the company operates state-of-the-art production units across multiple countries including Germany, China, India, and the UK, serving manufacturers worldwide with sustainable materials that reduce energy consumption and carbon emissions. Their patented technology and numerous certifications underscore their market leadership and commitment to quality and sustainability. Technically, the website is built on a modern WordPress platform using the Enfold theme, enhanced with SEO and performance plugins like Yoast SEO and WP Rocket. The site demonstrates excellent mobile optimization, fast loading times, and good accessibility features. Analytics are implemented via Google Analytics and Tag Manager with privacy-conscious configurations such as IP anonymization. From a security perspective, the site uses HTTPS with strong SSL configuration and implements cookie consent mechanisms. However, explicit security headers and a public security policy or incident response contacts are not found, representing areas for improvement. The domain registration is consistent with the company’s history and business claims, enhancing trustworthiness. Overall, MBA Polymers presents a professional, trustworthy, and well-structured digital presence aligned with their business objectives. Strategic enhancements in security policy transparency and DNS security could further strengthen their security posture and compliance.

S

Sterling Hydrotech

sterling-hydrotech.co.uk

40

Sterling Hydrotech is a well-established UK-based specialist in swimming pool filtration and water treatment, operating since 1988. The company offers a comprehensive range of services including design, supply, installation, servicing of filtration and water treatment equipment, and training for pool plant operators. Their market position is strong within commercial leisure facilities, local authorities, schools, NHS, military, and other institutional clients. The website reflects a professional and consistent brand image with clear service offerings and accreditations that enhance trust. Technically, the website is built on WordPress using the Uncode theme, leveraging modern web technologies such as jQuery, Owl Carousel, and Google reCAPTCHA for security. The site is hosted by a reputable UK registrar and shows good mobile optimization and SEO practices. Performance is moderate with room for improvement in accessibility features. From a security perspective, the site enforces HTTPS, uses reCAPTCHA to protect forms, and implements cookie consent mechanisms aligned with GDPR. However, it lacks visible security policies, incident response information, and vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected. Overall, Sterling Hydrotech presents a low-risk profile with a mature online presence, good business credibility, and adequate security posture. Strategic improvements in security transparency and accessibility could further enhance trust and compliance.

W

WOLFF Werbetechnik

wolff-werbetechnik.de

52

WOLFF Werbetechnik is a small regional business based in Aurich, Germany, specializing in advertising technology services including graphic design, vehicle branding, digital printing, signage, and lighting solutions. The company offers end-to-end services from design through production to installation, targeting businesses and organizations primarily in the Ostfriesland region. Their market position is that of a trusted local specialist with a consistent brand presence and active social media engagement. Technically, the website is built on a modern WordPress platform using the Enfold theme and a suite of well-known plugins such as Yoast SEO and Complianz GDPR for compliance. The site demonstrates good mobile optimization, accessibility, and SEO practices, with structured data implemented for enhanced search engine understanding. Hosting is provided by rzone.de, and the site uses HTTPS with a valid SSL certificate. From a security perspective, the site employs HTTPS, cookie consent mechanisms, and hCaptcha for form protection, indicating a good baseline security posture. However, no explicit security policies or incident response information are published, and security headers are not explicitly detected. No vulnerabilities or exposed sensitive data were found during analysis. Overall, the website is professional, trustworthy, and compliant with GDPR requirements. It provides clear contact information and maintains a good user experience. Strategic recommendations include enhancing security headers, publishing security policies, and adding a vulnerability disclosure mechanism to further strengthen trust and security posture.

T

Tägi AG

taegi.ch

59

Tägi AG operates a regional leisure and sports center in Wettingen, Switzerland, offering year-round facilities including indoor and outdoor swimming pools, an ice rink, mini golf, sauna, and event spaces. The website reflects a well-established business with a clear focus on community recreation and event hosting. Their market position is that of a key local provider of sports and leisure services, targeting general public and sports enthusiasts. Technically, the website is built on WordPress with a modern theme and plugins, including Yoast SEO and Cookiebot for privacy compliance. The site is mobile-optimized and integrates social media channels effectively. Security posture is solid with HTTPS enforced and bot protection via Google reCAPTCHA, though some security headers could be improved. Privacy compliance is strong, with a comprehensive privacy policy and cookie consent mechanism. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

P

Palliative Care und Begleitung der Aargauer Landeskirchen

palliative-begleitung.ch

48

Palliative Care und Begleitung der Aargauer Landeskirchen is a non-profit organization providing volunteer-based accompaniment services for seriously ill and dying individuals and their families in the canton of Aargau, Switzerland. The organization also offers educational programs in palliative and spiritual care for both professionals and volunteers. The website is well-structured, professionally designed, and provides clear information about services, events, and educational offerings. Technically, the site is built on WordPress with modern plugins and themes, ensuring moderate performance and good mobile optimization. Security posture is solid with HTTPS and some security best practices, though additional headers and policies could enhance protection. Privacy compliance is limited, lacking explicit privacy and cookie policies or consent mechanisms. WHOIS data confirms the legitimacy and consistency of the domain registration with the organization's identity. Overall, the website is trustworthy and serves its target audience effectively, but could improve in privacy and security transparency.

B

BTC d.d.

btc.si

48

BTC d.d. is a well-established Slovenian company specializing in real estate management, logistics, and retail operations, notably managing BTC City, one of Europe's largest shopping and business centers. The company targets business partners, tenants, and visitors, offering a broad range of services including property leasing, logistics, and event hosting. The website reflects a mature digital presence with multilingual support and strong SEO practices. Technically, the site is built on WordPress with modern plugins and optimized for performance and mobile use. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are absent. Overall, BTC d.d. presents a trustworthy and professional online presence consistent with its business stature.

E

ENERGY PLUS d.o.o.

energyplus.hr

44

ENERGY PLUS d.o.o. is a Croatian company established in 2005 specializing in professional LED lighting, industrial machinery production, and renewable energy solutions such as photovoltaic systems. The company targets industrial and business clients seeking modern lighting and machinery solutions. Their website reflects a stable, small-sized manufacturing business with consistent branding and clear service offerings. Technically, the website is built on WordPress using the Divi theme, with standard libraries like jQuery and MediaElement.js, hosted likely under Croatian infrastructure. The site is moderately performant, mobile-optimized, and accessible at a basic level. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks advanced security headers and documented security policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the website is professional and trustworthy but could improve in compliance and security transparency.

K

Koninklijke Staalfederatie

staalfederatie.nl

51

Koninklijke Staalfederatie operates as a professional platform and representative body for steel and metal traders in the Netherlands, focusing on relationship management and knowledge exchange within the manufacturing sector. The website is built on WordPress using the Avada theme and integrates SEO and analytics tools such as Yoast SEO and Google Analytics with privacy features enabled. The technical infrastructure is modern and moderately optimized for performance and mobile use. Security posture is adequate with HTTPS enforced and tracking anonymization, but lacks explicit security headers and published security policies. Privacy compliance is limited due to absence of visible privacy and cookie policies. Overall, the website presents a credible and professional image consistent with its business purpose.

B

BTC d.d.

misijazeleno.si

48

BTC d.d. is a large Slovenian company specializing in sustainable urban development, real estate management, logistics, and innovation ecosystems. The company positions itself as a leader in sustainability with a strong focus on green energy, environmental protection, and social responsibility. Their website reflects a mature digital presence with comprehensive content, professional design, and clear navigation aimed at business partners, visitors, and the local community. Technically, the site is built on WordPress with modern plugins and SEO tools, delivering moderate performance and good mobile optimization. Security posture is solid with HTTPS enforced and no critical vulnerabilities detected, though some security headers could be improved. Privacy compliance is well addressed with visible cookie consent and privacy policies. Overall, BTC d.d. demonstrates high business credibility and trustworthiness supported by multiple awards and certifications.

Invest Pomurje is a regional development agency focused on promoting foreign direct investment in the Pomurje region of Slovenia. The website highlights the region's strategic location in Central Europe and offers detailed information on business opportunities in sectors such as tourism, sport, renewable energy, advanced agriculture, and metal processing. The agency provides support services to investors and showcases success stories to build credibility. The target audience includes foreign investors and businesses seeking expansion in Central and South-Eastern Europe. Technically, the website is built on WordPress using the Uncode theme and integrates common tools like Yoast SEO, Google Analytics, and Google Maps API. The site is mobile optimized and demonstrates good SEO practices. Security-wise, the site enforces HTTPS and includes a cookie consent mechanism, but lacks explicit security policies or incident response information. No vulnerabilities or suspicious content were detected, and the domain registration is consistent with a legitimate business entity. Overall, the website presents a professional and trustworthy front for regional investment promotion.

D

DÉVELOPPEMENT ÉCONOMIQUE DE LA VILLE DE VANDOEUVRE

vandeco.fr

45

The website www.vandeco.fr serves as the official digital platform for the economic development and employment services of the Ville de Vandœuvre-lès-Nancy, France. It targets local businesses, job seekers, institutions, students, and the general public by providing comprehensive information on business creation, development, employment opportunities, training, and local events. The platform is positioned as a key local government service to foster economic growth and employment within the community. Technically, the site is built on WordPress using Elementor and several popular plugins such as Yoast SEO and Contact Form 7. The infrastructure supports responsive design and basic accessibility features, with moderate performance. The site employs HTTPS with a valid SSL certificate, but lacks advanced security headers and explicit incident response policies. From a security perspective, the site demonstrates good baseline practices including encrypted connections and cookie consent mechanisms compliant with GDPR. However, the absence of security headers and vulnerability disclosure policies suggests room for improvement in security maturity. No critical vulnerabilities or exposed sensitive data were detected. Overall, the site is trustworthy and professional, reflecting its role as a municipal service. The lack of WHOIS data reduces domain registration transparency but does not detract significantly from the site's legitimacy given the official branding and contact information. Strategic recommendations include enhancing security headers, publishing security policies, and improving accessibility compliance to strengthen trust and resilience.

3

3 LAN, d.o.o. M.Sobota

mikk.si

38

MIKK is a youth information and cultural club based in Murska Sobota, Slovenia, operating since 2007. The organization focuses on providing cultural events and informational services to the local youth and community. The website serves as a digital platform to promote these activities and engage with its audience. Technically, the site is built on WordPress using the Metrolo Premium theme and several common plugins such as Jetpack and EventON Lite, indicating a moderate level of digital maturity. The site is mobile optimized and uses HTTPS, but lacks some advanced security headers and explicit privacy and security policies. Security posture is adequate but could be improved with better header implementation and formalized incident response information. Overall, the site is functional and trustworthy for its community role but would benefit from enhanced privacy compliance and security transparency.

P

PROHELP SERVICES, s.r.o.

komunikacni-systemy.cz

39

PROHELP SERVICES, s.r.o. operates the website komunikacni-systemy.cz, providing wireless full-duplex communication systems tailored for retail, hospitality, manufacturing, and service industries. Their key products, Quail Digital Pro9 and Pro10, target businesses requiring efficient team communication solutions such as quick service restaurants, drive-thru operations, warehouses, and hotels. The company positions itself as a specialist in communication technology within the Czech Republic and surrounding regions, leveraging a B2B business model. Technically, the website is built on WordPress CMS with a modern tech stack including jQuery, FontAwesome, and various plugins for GDPR compliance, customer support, and media embedding. The site is mobile-optimized, accessible, and SEO-friendly, with good performance metrics. HTTPS is enforced, and cookie consent mechanisms are implemented, reflecting a mature digital infrastructure. From a security perspective, the site benefits from HTTPS and cookie consent compliance but lacks visible HTTP security headers and explicit incident response information. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, impacting overall trustworthiness. Overall, the website presents a professional and trustworthy front for PROHELP SERVICES, s.r.o., but the missing WHOIS information and lack of some security best practices suggest areas for improvement to enhance credibility and security posture.

The Landesinnungsverband Elektro- und Informationstechnik Schleswig-Holstein is a regional trade association representing over 800 electrical and information technology companies in Schleswig-Holstein, Germany. The organization focuses on advocacy, member support, training, and standardization within the electrical trade sector. Their website provides comprehensive information about their services, events, and industry news, targeting professionals and apprentices in the electrical industry. Technically, the site is built on the Contao CMS platform and uses modern JavaScript libraries to enhance user experience. The site is well-structured, mobile-optimized, and maintains good SEO practices. Security-wise, the site enforces HTTPS and uses secure forms with CSRF tokens, but lacks advanced HTTP security headers and a public security policy. Privacy compliance is addressed with a clear privacy policy and cookie consent mechanism. Overall, the website is professional, trustworthy, and serves its business purpose effectively.

BIOK laboratorija is a Lithuanian cosmetics manufacturing company specializing in natural and innovative cosmetic and oral care products. They manage multiple brands and serve Nordic and European markets with over 250 products. The website is professionally designed, mobile-optimized, and includes comprehensive privacy and cookie policies compliant with GDPR. Technically, the site uses a mix of legacy and modern JavaScript libraries, Google Analytics, and Facebook SDK for marketing and tracking. Security posture is generally good with HTTPS and reCAPTCHA implemented, but lacks explicit security headers and uses an outdated jQuery version. WHOIS data is missing, which raises some concerns about domain registration transparency. Overall, the site is trustworthy and professional but could improve security and domain registration visibility.

TZ Stara Novalja is a local tourism organization dedicated to promoting the town of Stara Novalja on the island of Pag, Croatia. The website serves as a comprehensive portal offering event calendars, local attractions, outdoor activities, and useful information for tourists and property renters. It targets visitors interested in cultural events, outdoor sports, and local hospitality services. The organization appears well-established with a domain registered since 2001 and consistent WHOIS data. Technically, the website is built on WordPress using the Avada theme, leveraging common web technologies such as jQuery and MediaElement.js. It integrates Google Analytics for visitor tracking and implements cookie consent mechanisms. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. From a security perspective, the site enforces HTTPS, includes standard security headers, and avoids exposing sensitive data. However, it lacks a formal security policy, incident response contacts, and vulnerability disclosure mechanisms. Privacy compliance is basic, with a privacy notice present but limited GDPR-specific details. Overall, the website is trustworthy and professional, serving its purpose as a tourism information hub effectively. Strategic improvements in privacy compliance, security transparency, and accessibility could further enhance its posture and user trust.

T

Televize Přerov s.r.o.

tvprerov.cz

47

Televize Přerov s.r.o. is a small regional media company based in the Czech Republic, specializing in local news, video reports, and live TV streaming focused on the city of Přerov and its surroundings. The website serves residents and visitors interested in timely local information and event coverage. The business operates primarily as a media content provider with a focus on digital news delivery and community engagement through social media channels. Technically, the website is built on WordPress CMS with a modern plugin ecosystem including Jetpack and TD Composer, ensuring a good level of content management and user experience. The site is mobile optimized and uses HTTPS, but performance is moderate and accessibility features are basic. Security posture is adequate with HTTPS and no exposed sensitive data, but lacks advanced security headers and visible anti-CSRF protections on login forms. Privacy compliance is weak due to the absence of privacy and cookie policies, which poses a compliance risk under GDPR. Overall, the domain registration data is consistent with the business claims, showing a legitimate and established local media presence. Strategic improvements in privacy compliance and security hardening are recommended to enhance trust and regulatory adherence.

C

Comexposium

foiredeparis.fr

66

Foire de Paris is a prominent and historic French trade fair event organized by Comexposium, attracting over 400,000 visitors annually. The website provides comprehensive information about the event, including ticketing, exhibitors, and cultural programming. Technically, the site uses modern web technologies such as Bootstrap, jQuery, and Sitecore CMS, with good mobile optimization and accessibility. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are not published. WHOIS data is unavailable, likely due to privacy protection, but the site shows strong trust signals and professional branding. Overall, the website is well-designed, user-friendly, and trustworthy for its audience.

A

AFS Intercultural Programs

globalup.com

60

The Global Up website represents the AFS Intercultural Programs' Global Competence Certificate (GCC) initiative, a well-established non-profit educational program focused on developing global skills through blended learning. The site is professionally designed, content-rich, and targets students, educators, and professionals worldwide. It leverages modern web technologies including WordPress, Gravity Forms, and Google reCAPTCHA to provide a secure and user-friendly experience. The presence of multiple contact channels, social media integration, and downloadable resources enhances engagement and trust. However, the absence of WHOIS registration data for the domain www.globalup.com raises transparency concerns, although the website content and branding strongly align with the reputable AFS organization. Security posture is solid with HTTPS and CAPTCHA protections, but could be improved by implementing explicit security headers and formal incident response policies. Overall, the website is a credible and valuable resource for global competence education with moderate risk due to domain registration opacity.

Weingut Hauser is a traditional German winery located in Bötzingen am Kaiserstuhl with over 200 years of history. The company specializes in producing and selling a variety of regional wines including Burgunder, Spätburgunder, Müller-Thurgau, Riesling, and Gewürztraminer, as well as pilzwiderstandsfähige (fungus-resistant) grape varieties. Their business model focuses on quality wine production, direct sales, and wine tasting experiences, targeting wine enthusiasts and regional customers. The website reflects a well-established small business with consistent branding and a clear presentation of their offerings. Technically, the website is built on WordPress using the Enfold theme, hosted on Kasserver infrastructure. It employs standard web technologies such as jQuery and MediaElement.js, and includes SEO optimizations and mobile responsiveness. The site uses HTTPS with good SSL configuration and implements a GDPR-compliant cookie consent mechanism. However, there is room for improvement in accessibility and security headers. From a security perspective, the site enforces HTTPS and has implemented cookie consent, but lacks explicit security policies and incident response contacts. No vulnerabilities or exposed sensitive data were detected. The absence of terms of service and security policy pages suggests an opportunity to enhance trust and compliance. Overall, the security posture is solid but could benefit from additional formal documentation and security headers. The overall risk assessment is low, with no signs of malicious activity or blocking mechanisms. Strategic recommendations include publishing a security policy, adding incident response contacts, enhancing security headers, and maintaining up-to-date software. These steps will improve compliance, security posture, and user trust.

VšĮ Respublikinė Panevėžio ligoninė is a well-established public healthcare institution in Lithuania, founded in 2007. It provides a broad range of medical services including consultations, diagnostics, treatment, and rehabilitation, serving patients primarily in the Panevėžys region. The website reflects a professional and comprehensive digital presence with clear navigation, multilingual support, and extensive patient education resources. The institution maintains active communication channels including email, phone, and social media platforms, enhancing accessibility and engagement with its audience. The business model is focused on public healthcare service delivery, supported by government and healthcare partners.

M

Mangold Photovoltaik GmbH

mangold-photovoltaik.de

39

Mangold Photovoltaik GmbH is a German company specializing in photovoltaic solar energy solutions, offering a comprehensive range of products and services including solar modules, inverters, mounting, maintenance, and expert consulting. With over 20 years of experience and TÜV Rheinland certification, the company holds a strong regional market position in Schwäbisch Gmünd, Germany. Their business model focuses on direct sales, installation, and customer education through training courses. Technically, the website is built on custom HTML with JavaScript libraries such as jQuery and Highslide, hosted on kasserver.com. While the site is accessible and content-rich, it lacks advanced security headers and cookie consent mechanisms, which are recommended for improved GDPR compliance and security posture. Overall, the website demonstrates good professionalism and trustworthiness but could benefit from enhanced security and privacy features.

S

Solgal

solgal.ch

46

Solgal is a Swiss company specializing in photovoltaic system installations, targeting residential and commercial customers interested in solar energy solutions. The website is built on WordPress using the Divi theme and includes WooCommerce for e-commerce capabilities. The technical infrastructure is moderate with standard plugins and libraries but lacks advanced performance and accessibility optimizations. Security posture is weak due to the absence of security headers, privacy policies, and incident response information. No contact details or GDPR compliance indicators are present, which may affect user trust and regulatory compliance. Overall, the website provides basic information about the business but requires significant improvements in security, privacy, and user engagement to enhance credibility and compliance.

M

Ministarstvo rada, mirovinskog sustava, obitelji i socijalne politike

mrms.hr

54

The website represents the official online presence of the Croatian Ministry of Labour, Pension System, Family and Social Policy. It serves as a comprehensive information portal for Croatian citizens and stakeholders regarding labor laws, social welfare programs, pension regulations, and family policies. The site is well-positioned as a government resource, providing authoritative content and official communications. The target audience includes citizens, social service users, and public sector employees. Technically, the website employs a traditional web stack with jQuery, Modernizr, and various UI libraries such as Fancybox and Owl Carousel. It uses HTTPS with Google Analytics for visitor tracking, and includes cookie consent mechanisms compliant with GDPR. The site demonstrates good mobile optimization and accessibility features, though some libraries like jQuery are outdated, which could pose security risks. From a security perspective, the site enforces HTTPS and has implemented cookie consent, but lacks visible security headers and explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the provided content. The WHOIS data is unavailable due to GDPR privacy restrictions, but the domain is a government .gov.hr domain, indicating high legitimacy. Overall, the website is a trustworthy and professional government portal with good content quality and privacy compliance. Strategic improvements include updating technical libraries, enhancing security headers, and publishing security policies to strengthen trust and resilience.

A

AFS Honduras

afs.hn

58

AFS Honduras operates as a local branch of the global AFS Intercultural Programs, providing intercultural exchange opportunities primarily for students, families, and volunteers. The organization is positioned as a reputable non-profit educational entity with a strong focus on cultural exchange, volunteerism, and global citizenship. The website is well-structured, professionally designed, and optimized for SEO and mobile devices, reflecting a mature digital presence. Technically, it leverages WordPress with modern plugins and CDN hosting, ensuring moderate to good performance and accessibility. Security posture is adequate with HTTPS and reCAPTCHA integration, though some security headers could be improved. Privacy compliance is strong with clear policies and consent mechanisms. However, the WHOIS data is incomplete and shows a prohibited registration status, which is inconsistent with the active website presence and may warrant further investigation. Overall, the site demonstrates a trustworthy and professional front for AFS Honduras with minor technical and registration concerns.

A

AFS

afs.lv

49

AFS Latvia is a non-profit organization focused on providing intercultural learning opportunities through student exchange programs, hosting foreign students, and volunteer engagement. The website positions itself as a trusted platform for Latvian students and families interested in global cultural exchange. The business model revolves around educational and volunteer services, supported by a recognized international parent organization, AFS International. The site demonstrates a solid market position within Latvia's educational non-profit sector, targeting youth, families, and volunteers. Technically, the website is built on WordPress with modern SEO and security practices such as HTTPS and Google reCAPTCHA, ensuring a secure and user-friendly experience. However, there is room for improvement in security headers and incident response transparency. Overall, the site is professional, trustworthy, and well-structured, with clear contact information and social media presence.