Security Directory

N

Norges Blindeforbund

blindeforbundet.no

57

Norges Blindeforbund is a leading non-profit organization in Norway dedicated to supporting blind and visually impaired individuals. The organization provides a wide range of services including membership benefits, advocacy, educational courses, assistive devices, and media content such as podcasts and nettradio. Their market position is strong within the Norwegian non-profit sector focused on visual impairment. Technically, the website is built on modern frameworks like Next.js and React, with good performance, mobile optimization, and accessibility features. The security posture is solid with HTTPS and no obvious vulnerabilities, though some security headers and policies could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website reflects a professional and trustworthy organization with a clear mission and audience.

D

DELK – Det evangelisk-lutherske kirkesamfunn

ryenbergetskole.no

52

Ryenberget skole is a Christian private school located in Oslo, Norway, operated by DELK (Det evangelisk-lutherske kirkesamfunn). The school has a long history dating back to 1879 and offers education grounded in Christian values, welcoming all students regardless of belief. It emphasizes practical and aesthetic skills, community belonging, and cooperation with families and congregations. The website is professionally designed, content-rich, and targeted primarily at parents and students seeking Christian education. Technically, the site runs on WordPress 7.0 with modern plugins and uses HTTPS with good security practices, although some security headers could be improved. Privacy and cookie policies are present, indicating GDPR awareness, but no explicit consent mechanism is detected. Contact information is clearly provided, enhancing business credibility.

T

Esports Ladder & Tournament Hosting | TWL

teamwarfare.net

54

Team Warfare Ladder (TWL) operates as a specialized esports platform providing ladder and tournament hosting services for competitive gaming communities. The website presents a focused business model targeting esports players and organizers, leveraging modern web technologies and cloud services to deliver its platform. The domain is well-established since 2018, consistent with the business timeline. Technically, the website uses Bootstrap for frontend styling, integrates with Supabase for backend services, and employs Plausible Analytics for user tracking. Hosting is via AWS infrastructure as indicated by DNS records. The site is mobile optimized and offers a good user experience, though accessibility and SEO optimizations are basic. From a security perspective, HTTPS is enabled, but the absence of security headers and DNSSEC reduces the overall security posture. No privacy or cookie policies are present, indicating compliance gaps with GDPR and related regulations. Contact and incident response information are not provided, limiting transparency and trust. Overall, the website is functional and professional but would benefit from enhanced privacy compliance, security hardening, and clearer contact channels to improve trust and regulatory adherence.

E

Emsleys Solicitors

emsleys.co.uk

63

Emsleys Solicitors is a well-established, award-winning law firm based in Leeds, UK, providing a broad range of legal services including conveyancing, family law, employment law, dispute resolution, and wills & probate. The firm targets individuals and businesses primarily in Yorkshire and surrounding areas, positioning itself as a leading regional legal service provider with a strong reputation evidenced by multiple industry awards and excellent client reviews. Their business model focuses on client-centric, practical legal advice with fixed fee options to enhance transparency and accessibility. Technically, the website is built on a modern stack including Craft CMS, jQuery, Google Tag Manager, and Cookiebot for consent management, complemented by Plausible Analytics for privacy-friendly traffic analysis. The site is well-optimized for mobile and accessibility, with good SEO practices and fast loading performance. The presence of comprehensive metadata, structured data, and social media integration reflects a mature digital presence. From a security perspective, the site enforces HTTPS, uses CSRF tokens, and integrates cookie consent mechanisms, demonstrating adherence to best practices. No critical vulnerabilities or exposed sensitive data were detected. However, explicit security headers like X-Frame-Options and Content-Security-Policy should be verified and enhanced if missing. The absence of a published incident response or vulnerability disclosure policy is noted. Overall, the website presents a low-risk profile with strong business credibility and privacy compliance. The WHOIS data could not be retrieved due to querying a subdomain rather than the registered domain, but this does not detract from the legitimacy of the business. Strategic recommendations include enhancing security headers, publishing incident response and vulnerability disclosure policies, and maintaining up-to-date third-party libraries.

D

Daltec AI Limited

dal-tec.com

54

Daltec AI Limited is a UK-based company specializing in automotive engineering products with a focus on vehicle safety technology and tools. The company offers a broad range of products including camera systems, vehicle lighting, workshop essentials, power management, and digital storage solutions. With over two decades of experience, Daltec positions itself as a trusted partner for automotive professionals and fleet operators, emphasizing quality and innovation through partnerships with leading brands such as Virtus Fleet and Tesa. The website is built on the Odoo CMS platform, leveraging modern web technologies and analytics tools to provide a professional and user-friendly e-commerce experience. Security posture is generally good with HTTPS enforced and cookie consent mechanisms in place, though the absence of security headers and vulnerability disclosure information suggests room for improvement. The lack of WHOIS data raises concerns about domain registration legitimacy, warranting further verification. Overall, Daltec presents a credible and professional online presence with strong business and technical foundations.

R

Raine & Co

raineandco.com

44

Raine & Co is a well-established real estate and letting agency operating since 1991, serving multiple locations including Potters Bar, Hatfield, St Albans, Mayfair, and surrounding areas. The company emphasizes high service standards, honesty, and professionalism, offering a broad range of services such as residential sales, lettings, auctions, property management, and financial advice. Their market position is supported by multiple office locations, award recognition, and a strong online presence. Technically, the website is built on modern frameworks like Next.js and React, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and secure forms, though there is room for improvement in security headers and explicit privacy compliance. Overall, the website presents a professional and trustworthy image, though the lack of WHOIS data for the domain raises some concerns about domain registration legitimacy. Strategic recommendations include enhancing privacy and cookie policies, adding security headers, and clarifying domain registration details to improve trust and compliance.

L

London TravelWatch

londontravelwatch.org.uk

62

London TravelWatch operates as the statutory transport watchdog for London, advocating on behalf of the public to improve transport services across the capital. The organization maintains a strong market position as an independent watchdog, partnering with Transport Focus to enhance its reach and effectiveness. Their key services include transport advocacy, handling complaints, conducting research, and providing public advice. The website reflects a professional and trustworthy image with consistent branding and comprehensive content tailored to London transport users and stakeholders. Technically, the website is built on WordPress with a modern tech stack including jQuery, Yoast SEO, Algolia Search, and Plausible Analytics. It demonstrates good performance, mobile optimization, accessibility, and SEO practices. The site uses HTTPS and includes cookie consent mechanisms aligned with GDPR requirements, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS and employs cookie consent with denied personalization and tracking by default. While explicit security headers are not fully confirmed, no vulnerabilities or exposed sensitive data were detected. The absence of a security.txt or vulnerability disclosure page is noted as an area for improvement. Overall, the security posture is solid but could be enhanced with additional headers and formal vulnerability disclosure. The WHOIS data is unavailable due to domain naming rules errors, limiting direct verification of domain registration details. Despite this, the website content, certifications, and partner references strongly indicate legitimacy. The overall risk is low, but the lack of WHOIS transparency slightly reduces trustworthiness. Strategic recommendations include improving security headers, publishing a security.txt file, and ensuring WHOIS data availability or transparency to enhance domain trust.

EU Automation is a professional B2B supplier specializing in sourcing and supplying industrial automation and control spare parts globally. The company offers a comprehensive catalog of parts from leading manufacturers, backed by a 12-month warranty and fast worldwide delivery. Their website is well-designed, mobile-optimized, and provides multiple contact channels including phone, email, live chat, and contact forms, supporting a strong customer service approach. Technically, the site employs modern analytics and marketing tools such as Google Analytics, Facebook Pixel, and MessageBird Live Chat, indicating a mature digital infrastructure. Security posture is solid with HTTPS, security headers, and cookie consent mechanisms in place, although no explicit security policy or incident response information is published. The absence of WHOIS registration data for the domain is a notable concern, reducing overall trustworthiness despite the professional online presence. Overall, the site is safe, business-focused, and well-optimized for its target industrial audience.

New Beginnings Day Nursery is a small, family-owned childcare provider based in Buckinghamshire, UK, offering full day care and early childhood education services. The website presents a professional and consistent brand image with clear contact information and social media presence. The business targets parents seeking quality nursery services and emphasizes a nurturing environment with qualified staff. Technically, the website is built on the Webador CMS platform, uses HTTPS with valid SSL, and incorporates Google reCAPTCHA for form security. However, it lacks published privacy and cookie policies, which impacts compliance. The WHOIS data is unavailable due to a domain naming rule violation error, which raises questions about domain registration legitimacy but does not directly affect the website's operational credibility. Overall, the site is functional, secure, and trustworthy but would benefit from improved compliance documentation and security headers.

M

MotorSport Vision

palmersport.com

57

PalmerSport, operated by MotorSport Vision, is a premier motorsport driving experience based at Bedford Autodrome in the UK. The company offers a range of driving events featuring high-performance and racing cars, supported by expert instruction and first-class hospitality. The website presents a professional and engaging digital presence with comprehensive content targeting motorsport enthusiasts, corporate clients, and groups of friends and family. The business is well-positioned in the motorsport event sector with a strong brand and customer trust signals. Technically, the website employs modern web technologies including JavaScript frameworks, FontAwesome icons, and analytics tools such as Microsoft Clarity, Google Tag Manager, and Plausible Analytics. The site is mobile-optimized, fast-loading, and accessible, with secure HTTPS connections and CAPTCHA-protected forms enhancing security. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanisms. Security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. However, explicit security policies and incident response information are not published, representing an area for improvement. The WHOIS data for the domain is unavailable or privacy-protected, which reduces transparency but does not detract significantly from the site's legitimacy given the professional content and branding. Overall, PalmerSport's website demonstrates a high level of professionalism, security, and user experience, supporting its position as a leading motorsport driving experience provider. Strategic recommendations include publishing security and incident response policies, adding a security.txt file, and maintaining vigilance on third-party scripts to sustain security and trust.

East Sperrin is a small manufacturing business specializing in precision metal fabrication and agricultural attachments based in Cookstown, Northern Ireland. Their services include bespoke steel fabrication, CNC plasma cutting, CNC press work, and a proprietary range of Sperrin Attachments designed for farming and construction sectors. The company targets local homeowners, agricultural businesses, construction firms, and local councils, positioning itself as a trusted local specialist with a focus on quality and durability. Technically, the website is built on the Webador platform, leveraging modern web technologies and includes basic mobile optimization and SEO best practices. Security posture is adequate with HTTPS and cookie consent implemented, but lacks advanced security headers and formal privacy or terms of service documentation. The absence of WHOIS data for the domain introduces some uncertainty about domain registration legitimacy, although the website content and contact information appear professional and trustworthy. Overall, the site demonstrates good business credibility and technical implementation but would benefit from enhanced privacy compliance and security hardening.

W H Malcolm Ltd operates as a well-established UK-based company specializing in logistics, rail, construction, maintenance, and sports surfaces. The company demonstrates a strong market position with multiple service divisions and recognized industry awards, targeting business customers and partners in transportation and construction sectors. The website content is professionally presented, consistent in branding, and provides comprehensive information about the company's services and corporate details. Technically, the website employs a modern tech stack including Bootstrap, jQuery, Google Fonts, and multiple analytics platforms, with good mobile optimization and SEO practices. Security measures include HTTPS, Google reCAPTCHA, and cookie consent mechanisms, though explicit security headers and incident response policies are not evident. The WHOIS lookup failed due to querying an invalid subdomain, but company registration details and website content support legitimacy. Overall, the site is secure, compliant with GDPR, and trustworthy, with room for improvement in security policy transparency and technical security headers.

H

Harley Street Maxillofacial Clinic

kavehshakib.com

57

Harley Street Maxillofacial Clinic is a specialized healthcare provider in the UK focusing on maxillofacial surgery and related treatments. The website highlights its expert consultants, including Professor Kaveh Shakib, and offers detailed information about services such as facial surgery and corrective jaw treatment. The clinic is part of the Akessa Group, indicating a reputable market position within healthcare. The digital infrastructure is built on WordPress with modern plugins for forms and anti-spam, complemented by Google Tag Manager and Plausible Analytics for tracking and marketing. The site is well-optimized for mobile and accessibility, providing a professional user experience. Security posture is good with HTTPS and anti-spam measures, though some improvements like enabling DNSSEC and adding security policies are recommended. Privacy compliance is partially met with a cookie consent mechanism but lacks explicit privacy and terms of service pages. Overall, the website is trustworthy and professional, serving its target audience effectively.

iACS is a UK-based specialist company providing advanced HVAC control solutions including Air Handling Unit (AHU) controls, Fan Coil Unit controls, Heat Recovery Systems, Smoke Extract controls, and Retrofit solutions. The company targets commercial and industrial sectors, offering custom panel solutions, integrated automation, and training services. Their market position is supported by over 40 years of experience and thousands of successful projects, positioning them as a trusted provider in the HVAC controls industry. Technically, the website is built on the Odoo CMS platform, utilizing modern web technologies such as Bootstrap, FontAwesome, Google Fonts, and embedded multimedia content including YouTube videos and Google Maps. The site is mobile-optimized, accessible, and SEO-friendly, with moderate performance. Analytics tools like Google Tag Manager and Plausible Analytics are employed for user tracking. From a security perspective, the site uses HTTPS and includes CSRF tokens in scripts, but lacks visible security headers and explicit privacy or cookie policies. No forms are present on the main page, reducing immediate input risks. WHOIS data for the subdomain is unavailable due to Nominet UK naming rules, but the main domain appears legitimate. Overall, the security posture is moderate with room for improvement in policy transparency and header implementation. The overall risk is low given the professional presentation and clear contact information, but the absence of privacy and cookie policies and missing security headers are notable gaps. Strategic recommendations include adding comprehensive privacy and cookie policies, implementing security headers, and publishing incident response and vulnerability disclosure information to enhance trust and compliance.

Bidvest Noonan is a well-established facilities management service provider operating primarily in the United Kingdom and Ireland. The company offers a broad range of services including security, cleaning, technical services, energy management, and integrated facilities management solutions. Positioned as a leading provider in its sector, Bidvest Noonan targets corporate clients across multiple industries such as healthcare, education, transport, government, and retail. The website reflects a professional but basic content presentation with clear navigation and consistent branding, although some pages return 404 errors indicating minor content management issues. Technically, the website is built on WordPress using the Genesis Framework, leveraging modern analytics tools like Google Analytics, Ahrefs, and Plausible, alongside a GDPR-compliant cookie consent mechanism. The site is mobile-optimized and uses Cloudflare for DNS, but lacks DNSSEC and explicit security headers, which are areas for improvement. Performance is moderate, and accessibility features are basic. From a security perspective, the site enforces HTTPS and employs cookie consent best practices but does not publicly disclose a security policy or incident response plan. No critical vulnerabilities or exposed sensitive data were detected. The domain registration data is consistent with the business profile, showing a domain age appropriate for the company's history and no privacy protection, which aligns with transparency expectations for this business type. Overall, Bidvest Noonan's digital presence is credible and compliant with privacy regulations, though there is room to enhance security posture and content completeness. Strategic improvements in security headers, DNS security, and comprehensive policy disclosures would strengthen trust and resilience.

Generator AI Music is a technology-focused company offering an AI-powered music generation platform that enables users to create unique music tracks from text, lyrics, or by remixing existing songs. The platform targets a broad audience including musicians, content creators, podcasters, and marketers, providing subscription-based plans with tiered features from free to professional levels. The website demonstrates a modern technical infrastructure using Next.js, React, Stripe for payments, and multiple analytics tools, reflecting a mature digital presence with good performance and mobile optimization. Security posture is generally good with HTTPS and secure payment integration, but lacks published privacy and cookie policies, and DNSSEC is not enabled. The WHOIS data raises concerns due to a domain creation date set in the future, which impacts trustworthiness. Overall, the site is professional and content-rich but would benefit from improved compliance documentation and domain legitimacy verification.

N

Nana Banana Pro

nanabanana-pro.com

58

Nana Banana Pro is a small technology startup offering an advanced AI-powered image editing SaaS platform. The service leverages cutting-edge AI models such as Imagen 3 and Gemini 3 to provide users with powerful text-to-image and image-to-image generation capabilities. The website presents a professional and modern interface with clear descriptions of features, pricing plans, and user benefits, targeting both individual creators and professional users. Technically, the platform is built on modern web technologies including React and Next.js, hosted with Cloudflare DNS services, and integrates multiple analytics tools for user tracking and marketing insights. Security posture is generally good with HTTPS enforced and domain transfer lock enabled, but lacks DNSSEC and visible security policies. Privacy compliance is partially addressed with published privacy and cookie policies, though no active consent mechanism is detected. The domain WHOIS data raises some concerns due to a future creation date and minimal registrant information, which may indicate a new or pre-launch product. Overall, the website is trustworthy and professional but would benefit from enhanced transparency in security and privacy practices.

W

Wiley-VCH GmbH

chemistryviews.org

57

ChemistryViews is a well-established online magazine serving the European chemistry community, operated under Wiley-VCH GmbH and affiliated with Chemistry Europe. It offers a broad range of content including news, research highlights, educational articles, and videos targeting chemistry professionals, researchers, educators, and students. The website demonstrates a mature digital presence with a professional design, clear navigation, and comprehensive content that is regularly updated. The technical infrastructure is based on WordPress CMS, enhanced with modern analytics tools such as Google Analytics, Google Tag Manager, and Plausible Analytics, alongside a robust cookie consent management system by Osano. The site employs HTTPS with strong security headers, indicating a good security posture. No blocking or WAF mechanisms interfere with content accessibility. Security-wise, the site follows best practices with HTTPS enforcement, security headers, and user consent for cookies and tracking. However, it lacks explicit published security policies or incident response contacts, which could be improved to enhance transparency and readiness. Privacy compliance is strong, with clear privacy and cookie policies and GDPR adherence. Overall, ChemistryViews presents a trustworthy, professional, and secure platform for chemistry-related content. Strategic recommendations include publishing detailed security and incident response policies, enhancing direct contact information, and maintaining vigilance on third-party script security to sustain trust and compliance.

S

Spitex Limmat Aare Reuss AG

spitex-lar.ch

50

Spitex Limmat Aare Reuss AG is a Swiss healthcare provider specializing in outpatient nursing and care services. The company emphasizes professional, high-quality care with a strong focus on collaboration with healthcare professionals and families. Their services include somatic and psychiatric nursing, wound and stoma care, palliative care, dementia care, household services, and additional comfort services. They also invest in education and training, positioning themselves as a regional leader in outpatient care. Technically, the website is built on WordPress with modern analytics and security tools such as Google reCAPTCHA and Plausible Analytics. The site is well-optimized for mobile and SEO, with clear navigation and professional design. Security posture is good with HTTPS and form protections, though some security headers and policies could be improved. Privacy compliance is strong with clear policies and consent mechanisms. Overall, the website reflects a trustworthy and professional healthcare organization with a solid digital presence.

R

Renault Hrvatska

renault.hr

54

Renault Hrvatska operates as the official Croatian website for the Renault automotive brand, providing comprehensive information on new and used vehicles, financing options, after-sales services, and vehicle configurators. The website targets Croatian consumers interested in purchasing Renault vehicles, offering a broad portfolio including electric and hybrid models. The site reflects a mature digital presence consistent with a large automotive brand, supported by structured navigation and official branding. Technically, the site employs modern JavaScript libraries, Google Tag Manager, and Plausible Analytics, alongside a cookie consent mechanism compliant with GDPR signals. Security posture is strong with HTTPS enforced and privacy-respecting analytics loading conditioned on user privacy signals. However, explicit privacy policies, terms of service, and security incident response information are not directly visible in the provided content. WHOIS data confirms domain legitimacy and consistency with Renault's global presence. Overall, the site is professional, trustworthy, and well-optimized for its audience.

D

Desk Kreativne Europe – Ured MEDIA Hrvatske

mediadesk.hr

54

Desk Kreativne Europe – Ured MEDIA Hrvatske is the official Croatian office supporting the Creative Europe MEDIA sub-programme. It serves Croatian audiovisual creators, film and TV professionals, and video game authors by providing information, organizing workshops, and facilitating access to EU funding opportunities. The website reflects a well-established entity with over 15 years of operation, consistent with its domain age and WHOIS data. The business model is non-profit and government-supported, focusing on cultural and media sector development within Croatia and the EU framework. The target audience includes professionals and organizations in the audiovisual and cultural sectors seeking EU MEDIA programme support. Technically, the website is built on the Webflow CMS platform, utilizing modern web technologies such as jQuery, Google reCAPTCHA, Google Tag Manager, and Plausible Analytics. Hosting and DNS are managed via Cloudflare, ensuring reliable performance and security. The site is mobile-optimized, accessible, and SEO-friendly, with bilingual content in Croatian and English. The presence of accessibility features and cookie consent mechanisms indicates a mature digital infrastructure. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms from abuse. However, explicit security headers are not detected in the HTML content, suggesting room for improvement. No vulnerabilities or exposed sensitive data were found. Privacy compliance is supported by visible privacy and cookie policies, with GDPR considerations addressed. Contact information is clearly provided, enhancing trust and transparency. Overall, the website presents a low-risk profile with a strong business credibility and good technical implementation. It effectively serves its niche audience with relevant content and services. Strategic recommendations include enhancing security headers, formalizing incident response policies, and maintaining up-to-date third-party components to sustain security and compliance standards.

P

Pevně Spolu

pevnespolu.cz

45

Pevně Spolu is a Czech-based corporate group website associated with RADKA Group, focusing on recruitment and corporate services primarily in real estate and energy sectors. The site targets job seekers and partners, offering open positions and a CV submission form. The business model revolves around employment and corporate group services, positioning itself as a medium-sized regional player with several subsidiaries under the RADKA brand. Technically, the website is built on WordPress CMS, utilizing Gravity Forms for data collection and CookieHub for cookie consent management. It employs modern web technologies including jQuery and Google Fonts, and integrates Plausible Analytics for privacy-conscious visitor tracking. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a moderate to good level of digital maturity. From a security perspective, the site enforces HTTPS and includes cookie consent mechanisms aligned with GDPR requirements. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure information. The absence of WHOIS registration data is a notable concern, impacting domain trustworthiness despite the professional presentation and corporate affiliations. Overall, Pevně Spolu presents a professional and compliant web presence with room for improvement in transparency and security documentation. Strategic enhancements in security headers, incident response visibility, and WHOIS data transparency would strengthen its risk posture and trustworthiness.

R

RADKA Pardubice a.s.

radka-group.eu

41

RADKA Group is a medium-sized holding company based in Czechia with over 30 years of tradition. It operates multiple subsidiaries across Europe specializing in chemical production and distribution, industrial real estate rental and management, specialized industrial technology development, and water treatment solutions. The company targets B2B clients in the chemical and industrial sectors, leveraging a family-owned business model with strong local and international presence. The website reflects a professional and consistent brand image with clear navigation and relevant business content. Technically, the website uses modern web technologies including jQuery and Google Fonts, with integration of Plausible Analytics for user tracking. The site is mobile optimized and loads with moderate performance. However, it lacks advanced security headers and comprehensive privacy or cookie policies, which limits its privacy compliance maturity. No CMS or hosting provider details are evident, and no forms or direct contact information are provided on the main site. From a security perspective, the site uses HTTPS and defers analytics scripts, but lacks visible security headers and incident response information. The WHOIS data is fully privacy protected under EURid, which is common for European businesses but limits transparency. No critical vulnerabilities or suspicious content were detected. Overall, the security posture is moderate but could be improved with better policy disclosures and security headers. The overall risk is moderate with no blocking or WAF detected. Strategic recommendations include implementing privacy and cookie policies with consent mechanisms, adding security headers, publishing contact and incident response information, and improving accessibility and compliance features to enhance trust and security culture.

A

Association for Progressive Communications

apc.org

10

The Association for Progressive Communications (APC) is a well-established global non-profit organization dedicated to advancing human rights, digital inclusion, and internet governance through advocacy, grants, and community support. Their website reflects a mature digital presence with comprehensive content targeting civil society organizations and digital rights advocates worldwide. Technically, the site is built on Drupal 10, employs modern web technologies, and integrates privacy-conscious analytics tools such as Matomo and Plausible. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers could be improved. The absence of WHOIS registrant data is mitigated by the professional and consistent branding and content, indicating legitimacy. Overall, the site demonstrates a strong commitment to privacy, accessibility, and user experience, positioning APC as a credible and trustworthy entity in the non-profit digital rights sector.

R

RADKA spol. s r.o.

radka.cz

45

RADKA spol. s r.o. is a Czech-based chemical distribution company with over 30 years of history, specializing in high-quality chemical products including plastics, elastomers, coatings, adhesives, and water treatment chemicals. As a member of the RADKA Group, it holds a solid market position in the manufacturing and chemical distribution sectors, targeting industrial and commercial clients. The website reflects a professional and consistent brand image with clear business information and certifications such as ISO 9001 and ISO 14001, enhancing trustworthiness. Technically, the website is built on WordPress 6.8.3 with modern performance optimizations including WP Rocket and Rank Math SEO. It uses Google Fonts and integrates Plausible Analytics for privacy-conscious tracking. The site is mobile-optimized and loads quickly, with good SEO practices and basic accessibility features. However, explicit privacy and cookie policies are not found, which is a gap in compliance. From a security perspective, the site uses HTTPS with excellent SSL configuration and secure form handling. No major vulnerabilities or exposed sensitive data were detected. Security headers are not explicitly present, and there is no visible vulnerability disclosure or security.txt file, which could improve the security posture. The WHOIS data is unavailable, likely due to privacy protection, which slightly reduces trust but is common for commercial entities. Overall, RADKA.cz presents a trustworthy and professional online presence with strong business credibility and technical implementation. To further enhance security and compliance, the company should publish clear privacy and cookie policies, implement security headers, and consider a vulnerability disclosure policy. These steps will improve user trust and regulatory compliance.

N

Nim Programming Language

nim-lang.org

55

The Nim Programming Language website serves as the official portal for the Nim open source project, a statically typed compiled systems programming language. The site provides comprehensive information about Nim's features, installation, documentation, community engagement, and recent updates. It targets developers and programmers interested in efficient and expressive programming languages, offering resources such as an online playground, blog, and community forums. The project is volunteer-driven and supported by donations, reflecting a small but active open source community. Technically, the website employs modern web technologies including Pure.css for styling, FontAwesome for icons, and integrates analytics tools like Google Analytics and Plausible. Hosting and DNS services are managed via Cloudflare, ensuring fast and reliable delivery. Security posture is generally good with HTTPS enforced and domain transfer protections in place; however, the absence of DNSSEC and security headers represents areas for improvement. Privacy compliance is limited due to the lack of explicit privacy and cookie policies, which should be addressed to meet regulatory standards. Overall, the site is professional, well-structured, and trustworthy, with a high level of content quality and user experience.

C

C4Media

infoq.com

74

InfoQ is a well-established technology news and knowledge platform focused on software development, architecture, and emerging technologies such as AI and DevOps. Owned by C4Media, InfoQ serves a global audience of over 1.5 million developers and IT professionals, providing high-quality articles, presentations, podcasts, and events. The website demonstrates a mature digital presence with professional design, clear navigation, and rich content authored by industry experts. Technically, the site employs modern web technologies including Google Tag Manager, Facebook Pixel, and Plausible Analytics, with a fast loading performance and good mobile optimization. Security best practices are observed with HTTPS enforcement and cookie consent mechanisms, although some advanced security headers and explicit security policies are not publicly disclosed. The security posture is solid with no visible vulnerabilities or exposed sensitive data. Privacy compliance is strong, supported by comprehensive privacy and cookie policies aligned with GDPR requirements. However, the absence of WHOIS data and registrant information introduces some uncertainty regarding domain registration transparency. Overall, InfoQ presents a trustworthy and professional platform with a strong focus on delivering valuable content to the software development community. Strategic recommendations include enhancing security headers, publishing a vulnerability disclosure policy, and providing clearer contact information for incident response.

S

Swisscare

swisscare.ch

69

Swisscare is an established insurance provider specializing in international health and travel insurance for students, interns, au pairs, travelers, and expatriates primarily in Europe and Switzerland. The company offers a digital-first experience with instant online insurance certificates and a customer account portal. The website is professionally designed, mobile-optimized, and supports multiple languages, reflecting a mature digital presence. Technically, the site uses modern web standards, Cloudflare DNS, and privacy-respecting analytics, though DNSSEC is not enabled. Security posture is good with HTTPS and CSRF tokens, but lacks explicit security policies and some security headers. Privacy compliance is strong with GDPR and FADP policies and cookie consent mechanisms. Overall, the domain and website content align well, indicating a legitimate and trustworthy business with a solid market position in niche insurance services.

S

Stiftung Standortförderung Aarau und Region

asf-aarau.ch

63

The Stiftung Standortförderung Aarau und Region operates as a regional non-profit foundation focused on promoting economic development, tourism, and city management in Aarau and its surrounding region. The website clearly communicates its mission to unite business, quality of life, culture, and leisure under one umbrella, targeting local businesses, residents, tourists, and event organizers. The foundation offers services including economic promotion, city management, tourism marketing, and event planning, positioning itself as a key regional player fostering sustainable growth and community engagement. Technically, the website employs modern web technologies such as ES modules, Tailwind CSS, and integrates privacy-focused analytics via Plausible. The site is well-optimized for mobile devices, loads quickly, and features a professional design with clear navigation. Hosting and media assets are served via reliable providers, ensuring good performance and availability. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data or vulnerable libraries. However, it lacks explicit security headers and a cookie consent mechanism, which are recommended for enhanced protection and GDPR compliance. No incident response or vulnerability disclosure policies are published, indicating room for improvement in security transparency and readiness. Overall, the website presents a trustworthy and professional digital presence for the foundation, with minor gaps in privacy and security best practices. Strategic enhancements in these areas would strengthen compliance and user trust, supporting the foundation's mission and reputation.

A

Aarau Info

aarauinfo.ch

56

Aarau Info is a local tourism promotion entity focused on showcasing the city of Aarau, Switzerland, as an attractive destination for visitors. The website provides comprehensive information about cultural events, guided tours, accommodation, and local highlights, targeting tourists and residents interested in leisure activities. The business operates primarily as a regional tourism information provider with a small organizational size. Technically, the website employs modern web technologies including JavaScript modules, lazy loading, and plausible analytics, hosted on a cloud platform with good performance and mobile optimization. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and formal policies are absent. Privacy compliance is partial, lacking cookie consent mechanisms and explicit GDPR indicators. Contact information is clearly presented, enhancing business credibility. Overall, the site is professional, trustworthy, and well-positioned for its market niche.

Svatba.cz s.r.o. operates a leading Czech online wedding planning platform offering a professional wedding planner with budgeting tools, a comprehensive supplier catalog, wedding websites, inspiration, blog, and forum. Established in 1997, it serves engaged couples and wedding suppliers primarily in the Czech Republic, positioning itself as a mature and trusted market leader in the hospitality sector. The website employs modern web technologies including React and Next.js, hosted on DigitalOcean, and integrates multiple analytics tools such as Microsoft Clarity, Google Tag Manager, and Plausible Analytics. The site is well-optimized for mobile and SEO, providing an excellent user experience with clear navigation and professional design. Security posture is strong with HTTPS and best practices observed, though explicit security headers and a cookie consent mechanism are recommended. Privacy and terms of service pages are present and GDPR compliant, but direct contact information and security incident response details are not prominently displayed. Overall, the platform demonstrates a high level of digital maturity and business credibility with moderate room for improvement in privacy compliance and security transparency.

W

WMD d.o.o.

wmd-webprostor.com

47

WMD d.o.o. is a Croatian technology company specializing in web hosting, domain registration, and related web services. The company positions itself as a provider of super fast support available 24/7/365, targeting web developers and businesses seeking reliable hosting and domain solutions. Their market presence includes over 10,000 users across 73 countries, emphasizing experience and customer service. The website content is professional and well-structured, reflecting a mature business model focused on service quality and customer satisfaction. Technically, the website leverages modern web technologies including jQuery, Bootstrap, FontAwesome Pro, and Craft CMS with Formie forms. It integrates Plausible Analytics for privacy-focused tracking and Crisp Live Chat for customer support. The site is mobile optimized and performs well, with HTTPS enforced and CSRF protections in place. However, DNSSEC is not enabled, and security headers are not explicitly detected, indicating room for security enhancements. Security posture is moderate with good practices like HTTPS and domain transfer protection, but lacks published security policies or incident response contacts. Privacy compliance is weak due to absence of privacy and cookie policies and no consent mechanisms, which could pose regulatory risks especially under GDPR. The domain WHOIS data is consistent and supports the legitimacy of the business. Overall, WMD d.o.o. presents a credible and professional web presence with strong business credibility and technical implementation. Strategic improvements in privacy compliance and security hardening would enhance trust and regulatory adherence.

S

Swedish Council for Higher Education

nordplusonline.org

60

Nordplusonline.org is the official platform for Nordic-Baltic educational collaboration, administered by the Swedish Council for Higher Education on behalf of the Nordic Council of Ministers. The website facilitates funding applications, project management, and dissemination of educational projects and events within Nordic and Baltic countries. It targets educational institutions and project coordinators seeking collaboration and funding opportunities. The platform holds a strong market position as an official government-backed initiative with a clear focus on education and regional cooperation. Technically, the website employs modern web technologies including Bootstrap for responsive design, privacy-friendly Plausible Analytics for user insights, and Klaro for cookie consent management. The CMS appears to be Episerver, indicating a mature content management infrastructure. The site is mobile-optimized, accessible, and SEO-friendly, with moderate performance. Hosting and domain registration are consistent with a legitimate government-related entity. From a security perspective, the site uses HTTPS with a good SSL configuration and enforces clientTransferProhibited status on the domain. Cookie consent mechanisms and privacy policies are in place, reflecting GDPR compliance. However, DNSSEC is not enabled, and security headers are not explicitly detected, suggesting room for improvement. No critical vulnerabilities or exposed sensitive data were found. Overall, the website presents a low-risk profile with strong business credibility and good privacy compliance. Strategic recommendations include enabling DNSSEC, publishing explicit security policies, and adding terms of service to enhance transparency and trust.

P

Project Jupyter

jupyter.org

57

Project Jupyter is a leading open-source initiative providing interactive computing tools widely used in data science, education, and research. The platform offers multiple key services including JupyterLab, Jupyter Notebook, JupyterHub, and Voilà, supporting over 40 programming languages. The website reflects a mature, well-established project with a large user base and strong community backing. Technically, the site is built on modern web technologies with responsive design and privacy-conscious analytics. Security posture is strong with HTTPS and domain protections, though some improvements in security headers and vulnerability disclosure could be made. Overall, the site is professional, trustworthy, and safe for general audiences.

B

Bündnis "Gemeinsam gegen Sexismus"

gemeinsam-gegen-sexismus.de

50

The website 'Bündnis Gemeinsam gegen Sexismus' represents a German government-supported non-profit alliance focused on combating sexism and sexual harassment across various sectors. It provides educational resources, advocacy, and a platform for organizations to join the cause. The site is professionally designed, mobile-optimized, and uses modern web technologies including WordPress and Yoast SEO. It integrates privacy-compliant cookie consent mechanisms and minimal user tracking via Plausible Analytics. Security posture is strong with HTTPS and security headers in place, though explicit security policies and incident response contacts are not published. Overall, the domain registration and website content align well, indicating a legitimate and trustworthy initiative.

V

visuellverstehen GmbH

visuellverstehen.de

53

visuellverstehen GmbH is a German-based digital agency specializing in app and software development, website creation, branding, and SEO services with a strong emphasis on sustainability and the common good economy. The company positions itself as a niche player focusing on innovative digital solutions that combine technical expertise with creativity and strategic insight. Their market presence is supported by multiple certifications and memberships that reinforce their commitment to quality and sustainability. Technically, the website is built on the TYPO3 CMS platform, utilizing modern web technologies including JavaScript and CSS, and integrates privacy-friendly analytics via Plausible. The site demonstrates good mobile optimization, accessibility, and SEO practices, although there is room for improvement in security headers and cookie consent mechanisms. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and does not provide visible incident response or vulnerability disclosure information. The WHOIS data is consistent with the website's claims, showing no privacy protection or suspicious patterns, indicating a legitimate and trustworthy domain registration. Overall, the website is professional, trustworthy, and well-structured, with minor gaps in privacy compliance and security best practices. Strategic improvements in these areas would enhance the site's security posture and regulatory adherence.

M

Mister EV

mister-ev.com

71

Mister EV operates as a specialized e-commerce retailer focused on electric vehicle charging solutions, including cables, charging stations, plugs, and accessories. The website targets electric vehicle owners and businesses primarily in France, offering a broad product catalog with a professional and user-friendly online shopping experience. The company leverages Shopify's robust e-commerce platform, integrating multiple third-party services for customer reviews, marketing automation, live chat support, and analytics, reflecting a mature digital infrastructure. Technically, the website is well-constructed with modern technologies, including Shopify Liquid templates, JavaScript frameworks, and integrations with Google Tag Manager, Trustpilot, Judge.me, Klaviyo, and Plausible Analytics. The site demonstrates good performance, mobile responsiveness, and SEO optimization, ensuring a positive user experience across devices. From a security perspective, the site enforces HTTPS with strong SSL configuration and implements essential security headers. However, it lacks publicly available security policies, incident response contacts, and vulnerability disclosure mechanisms, which are recommended for enhanced trust and compliance. The absence of WHOIS registration data raises concerns about domain legitimacy, although the live and functional website mitigates immediate risk. Overall, Mister EV presents a trustworthy and professional online presence in the EV charging market, with room for improvement in transparency around security policies and domain registration details. Strategic recommendations include publishing security and incident response information, verifying domain registration, and continuous monitoring of third-party integrations for vulnerabilities.

S

Swiss Visceral Surgeons

viszeralchirurgie.ch

50

Swiss Visceral Surgeons (SGVC) is a professional medical society dedicated to promoting and securing the field of visceral surgery within Switzerland. The organization provides education, certification, and advocacy services to medical professionals specializing in visceral surgery. Their website reflects a strong national presence with clear membership and educational offerings, including congresses, courses, and fellowships. The target audience is primarily healthcare professionals in Switzerland. Technically, the website employs modern web technologies such as Vue.js, Three.js for visual effects, and Flickity for carousels, hosted likely on a CMS platform (Statamic). The site is mobile-optimized, accessible, and SEO-friendly, with a moderate performance profile. Security-wise, the site enforces HTTPS and includes a cookie consent mechanism aligned with GDPR requirements. However, explicit security headers and incident response policies are not present, representing areas for improvement. Overall, the domain registration data is consistent with the website's claims, indicating legitimacy and trustworthiness.

S

Schweizer Gesellschaft für Chirurgie

sgc-ssc.ch

51

The Schweizer Gesellschaft für Chirurgie (SGC) is a professional medical society representing surgeons in Switzerland. The website serves as a comprehensive portal offering information on education, specialist examinations, events, and official publications such as the SwissKnife. It targets medical professionals and surgeons, providing them with resources and membership services. The organization holds a strong market position as a national professional association with a clear focus on continuing education and quality assurance in surgery. Technically, the website employs modern web technologies including JavaScript ES modules, Vue.js components, and Three.js for interactive WebGL effects. It uses Statamic CMS inferred from consent management keys and integrates privacy-focused analytics via Plausible. The site is well-optimized for mobile devices, accessible, and SEO-friendly, with multi-language support enhancing its reach. From a security perspective, the site enforces HTTPS and implements a consent management system for cookies, reflecting good privacy practices. However, explicit security headers and a published security policy or incident response contact are absent, representing areas for improvement. No vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, the website is professional, trustworthy, and compliant with GDPR requirements. It demonstrates a mature digital presence suitable for its audience. Strategic recommendations include enhancing security headers, publishing a security policy, and implementing a security.txt file to improve transparency and incident response readiness.

S

Schweizerische Gesellschaft für Gefässchirurgie

swissvasc.ch

50

The Schweizerische Gesellschaft für Gefässchirurgie is a leading Swiss professional society dedicated to vascular surgery. It focuses on promoting excellent patient care, innovative research, and continuous education for vascular surgeons and medical professionals. The website serves as a comprehensive resource for members and interested parties, offering information on events, training, and the Swissvasc registry. Technically, the site employs modern web technologies including Vue.js and WebGL for interactive content, and uses privacy-respecting analytics (Plausible). The site is well-structured, mobile-optimized, and accessible, reflecting a mature digital presence. Security-wise, the site enforces HTTPS and cookie consent mechanisms but lacks explicit security headers and a published security policy or incident response contacts. Overall, the domain registration aligns well with the organization's identity, indicating legitimacy and trustworthiness.

S

Swiss College of Surgeons

swisscollegeofsurgeons.ch

52

The Swiss College of Surgeons (SCS) is a prominent professional organization in Switzerland dedicated to advancing surgical competencies and education. The website serves as a comprehensive platform offering information on surgical training, certification, projects, events, and membership benefits. It targets surgeons and medical professionals within Switzerland, positioning itself as a leading authority in the surgical field. The content is well-structured, multilingual, and professionally presented, reflecting a mature digital presence.

S

Schweizerische Gesellschaft für Pulmonale Hypertonie

sgph.ch

58

The Schweizerische Gesellschaft für Pulmonale Hypertonie (SGPH) is a specialized non-profit medical society founded in 1998 in Bern, Switzerland. It serves as a reference center for pulmonary hypertension, providing education, research support, and networking for medical professionals and patients. The organization has a strong market position in Switzerland with over two decades of expertise and collaboration with pharmaceutical partners. The website reflects a professional and focused digital presence, targeting healthcare professionals and patients interested in pulmonary hypertension.

S

Sameinaða útgáfufélagið ehf.

stundin.is

57

Heimildin is an Icelandic independent media company founded in 2023, operating under Sameinaða útgáfufélagið ehf. The website serves as a platform for investigative journalism, news, interviews, and multimedia content targeting Icelandic readers interested in politics, society, and culture. The business model includes subscriptions and donations, supporting its independent stance. Technically, the site uses a modern JavaScript stack with libraries such as jQuery, Axios, and Moment.js, hosted on DigitalOcean. While the site is mobile optimized and SEO friendly, there is room for improvement in security practices, including enabling DNSSEC and implementing security headers. Privacy compliance is minimal with no explicit privacy or cookie policies detected. Overall, the site is professional, content-rich, and trustworthy, with moderate technical maturity and some security gaps.

S

Sameinaða útgáfufélagið ehf.

kjarninn.is

57

Heimildin is an Icelandic independent media company founded in 2023 by the merger of Stundin and Kjarninn. It operates as a digital news platform offering investigative journalism, news articles, multimedia content, and print newspaper issues. The website targets Icelandic readers interested in independent and investigative news coverage. The business model includes subscriptions and donations, positioning Heimildin as a trusted independent media outlet in Iceland.

O

Organikk

organikk.cz

55

Organikk.cz is a Czech Republic based e-commerce platform specializing in sustainable lifestyle products including household items, personal care, kitchenware, dental care, and fashion accessories. The company emphasizes eco-friendly, chemical-free, and plastic-free products, supporting small producers and environmental causes. The website is professionally designed with clear navigation, comprehensive product information, and customer testimonials, positioning Organikk as a niche leader in sustainable retail within its market. Technically, the site runs on the Shoptet platform, uses modern analytics and marketing tools with GDPR-compliant cookie consent, and maintains a good security posture with HTTPS and CSRF protections. However, the WHOIS data is unavailable, limiting domain trust assessment. Overall, Organikk demonstrates a mature digital presence with room for security header enhancements and updated libraries.

V

Velux Foundations

veluxfoundations.dk

59

Velux Foundations is a Danish non-profit organization associated with VELUX FONDEN and Villum Fonden, focusing on philanthropic foundation activities. The website serves as a portal to these foundations, providing basic information and navigation. The site is built on Drupal 10, uses SVG logos for branding, and employs Plausible Analytics for privacy-conscious visitor tracking. The technical infrastructure is modern and mobile-optimized, though some security best practices such as security headers and DNSSEC are not implemented. No privacy or cookie policies are present, and no contact information is provided on the main page, which limits transparency and user trust. The domain is well-established since 2009, registered with a reputable registrar, and consistent with the website's branding and purpose.

T

Two Inc

two.inc

73

Two Inc is a leading B2B payments platform specializing in providing instant net terms credit and Buy Now Pay Later (BNPL) solutions to business customers. The company leverages advanced credit and fraud engines to enable merchants to increase sales, improve average order values, and reduce risk. Their market position is strong, supported by partnerships with major financial institutions such as Santander, Allianz, ABN AMRO, and Visa. The platform offers a suite of products including Guest Checkout, Trade Accounts, Risk-as-a-Service, and Instalments, targeting B2B merchants and buyers primarily in the finance and retail sectors.

4

4networks SK&CZ, s.r.o.

modrastrecha.cz

64

Modrastrecha.cz is a well-established online platform operated by 4networks SK&CZ, s.r.o., targeting individuals interested in housing, construction, renovation, household, and gardening topics primarily in the Czech Republic and Slovakia. The platform offers a rich ecosystem including forums, photo blogs, a marketplace, professional catalogs, and magazine content, positioning itself as a comprehensive community and content hub in its niche. The business model leverages advertising and professional service listings to generate revenue. Technically, the website employs modern web technologies such as StimulusJS, Turbo (Hotwire), and integrates multiple analytics and advertising services including Google Tag Manager, Gemius, and Plausible Analytics. The site is mobile-optimized with good SEO and accessibility practices, although some accessibility features could be enhanced. Performance is moderate, with asynchronous loading of scripts and a clean, professional design. From a security perspective, the site enforces HTTPS and uses a consent management platform for GDPR compliance. However, explicit security headers like X-Frame-Options and X-Content-Type-Options are not clearly present, and there is no public security policy or incident response information. No vulnerabilities or exposed sensitive data were detected in the content. Privacy compliance is strong with clear privacy and cookie policies and user consent mechanisms. Overall, the site presents a low-risk profile with good business credibility and technical maturity. The main concern is the lack of WHOIS data, which reduces domain trustworthiness and should be investigated further. Strategic recommendations include enhancing security headers, publishing a vulnerability disclosure policy, and improving accessibility compliance.

C

Crystallize

theproductuniverse.com

59

The Product Universe website serves as a professional event landing page for the 2026 conference organized by Crystallize, a headless commerce platform. The site targets eCommerce professionals and developers interested in AI-driven and API-based commerce ecosystems. The business model centers on event organization and platform promotion, with a clear focus on technology and innovation in commerce. The website demonstrates a modern technical infrastructure using Tailwind CSS, JavaScript modules, and integrates Plausible Analytics for minimal user tracking. Security posture is adequate with HTTPS and domain locks, but lacks DNSSEC and security headers, and no privacy or cookie policies are published. Overall, the site is well-designed, mobile-optimized, and trustworthy, though privacy compliance could be improved.

V

Vaduz Classic Management Anstalt

vaduzclassic.li

57

Vaduz Classic Management Anstalt operates the Vaduz Classic festival, a well-established open-air classical music event held annually in Vaduz, Liechtenstein. The festival features renowned classical artists and offers a variety of concert formats aimed at classical music lovers and families. The website reflects a professional and consistent brand image, providing clear event information, ticketing links, and contact details. The business model centers on event management and ticket sales, positioning Vaduz Classic as a key cultural event in the region.