Netherlands security reports

G

Green Solutions International B.V.

gardenconnect.com

54

Garden Connect is a garden retail marketing platform recently acquired by Green Solutions Software in 2023. The website primarily serves as a login portal for existing users and provides basic company information. The business operates in the retail sector, targeting garden retail businesses with marketing solutions. The website content is minimal but professional, with clear branding and partner association with Green Solutions International B.V. The technical infrastructure uses modern frontend technologies such as Bootstrap and Google Fonts, but lacks visible CMS or advanced frameworks. Security posture is moderate with secure form practices but missing explicit HTTPS confirmation and security headers. Privacy and cookie policies are absent, indicating compliance gaps. Overall, the website is functional but could improve in transparency and security.

N

Nameshift.com

houseoffire.co.uk

56

The website houseoffire.co.uk is a domain sales landing page operated via Nameshift.com, a Netherlands-based domain escrow and transfer service. The business focuses on providing a secure, fast, and fee-free domain purchase experience for buyers, ensuring payment only after successful domain transfer. The site is minimalistic with placeholder content indicating the domain is for sale rather than an active business presence. The technical infrastructure is modern, leveraging SvelteKit and hosted by Hosting Concepts B.V., but lacks comprehensive privacy and security policies. Security posture is moderate with HTTPS implied but no visible security headers or incident response contacts. Overall, the site is legitimate but basic, with room for improvement in compliance and security transparency.

K

Karl Beaney t/a Beaneys

fueltanksdirect.co.uk

51

The website fueltanksdirect.co.uk is currently a parked domain listed for sale via Nameshift.com, a domain marketplace and escrow service. The domain is registered to Karl Beaney t/a Beaneys, with registration details consistent with the domain sale purpose. The site does not operate an active business but offers a secure and fast domain transfer service through Nameshift.com, targeting domain investors and businesses seeking domain acquisition. The content is minimal and focused solely on domain sale information, with trust signals such as a verified seller badge and Trustpilot widget. Technically, the site is built using modern SvelteKit technology, with good mobile optimization and fast performance. However, it lacks comprehensive SEO and accessibility features. Security posture is basic, with no visible security headers or privacy policies, though the use of an escrow service adds transactional security. No contact emails or phone numbers are provided, limiting direct communication options. Overall, the site is legitimate for its purpose as a domain sale landing page but lacks privacy compliance and detailed business information. There are no indications of malicious content or security vulnerabilities, but improvements in transparency and security best practices are recommended. Strategic recommendations include adding privacy and cookie policies, implementing security headers, providing clear contact information, and publishing a vulnerability disclosure policy to enhance trust and compliance.

T

Tata Steel Netherlands

tatasteeleurope.com

70

Tata Steel Netherlands operates as a major steel manufacturer and supplier, offering a wide range of steel products and services through its business units including IJmuiden and Downstream Solutions. The company targets industrial and business clients across Europe, maintaining a strong market position as a leading steel producer. The website reflects a professional corporate presence with clear navigation, multilingual support, and comprehensive product information. Technically, the site is built on Drupal 10, leveraging modern libraries such as Bootstrap and Font Awesome, and integrates advanced analytics and consent management tools like Google Tag Manager and Cookiebot. Security posture is solid with HTTPS enforced and monitoring via Dynatrace, although explicit security headers could be improved. Privacy compliance is well addressed with a detailed privacy policy and cookie consent mechanism. However, the WHOIS data is missing or unavailable, which slightly reduces domain trustworthiness despite the reputable branding. Overall, the site demonstrates good digital maturity and business credibility.

N

NRF

nrf.eu

52

NRF is a well-established manufacturer and supplier specializing in automotive aftermarket parts and industrial cooling solutions, with nearly a century of industry presence. The company serves diverse sectors including automotive, marine, railway, and industrial markets, positioning itself as a leading global supplier with a strong reputation for quality and technical expertise. Their website reflects a mature digital presence with multilingual support and comprehensive product and service information. Technically, the site is built on WordPress with modern libraries such as Swiper.js and integrates Google Tag Manager and Cookiebot for analytics and privacy compliance. Security posture is solid with HTTPS enforcement, cookie consent mechanisms, and no visible vulnerabilities, although explicit security policies and incident response information are not publicly available. Overall, NRF demonstrates a strong business credibility and digital maturity, with recommendations to enhance transparency around security policies and vulnerability disclosures to further strengthen trust.

H

Hair Graphics

hairgraphics.com

53

Hair Graphics is a Dutch-based e-commerce retailer specializing in printed promotional materials such as banners, posters, flags, and textile frames. Established in 2003, the company targets businesses and individuals seeking quality promotional graphics with competitive pricing. The website is built on the Magento platform, leveraging modern web technologies and Cloudflare DNS services. It offers multi-language support and a professional user experience with clear navigation and product categorization. Security posture is adequate with HTTPS enforced and domain transfer protection, but lacks advanced security headers and cookie consent mechanisms. Privacy compliance is basic with a privacy policy present but no explicit cookie consent. Overall, the business demonstrates a credible online presence with room for security and privacy improvements.

A

Arcadis N.V.

arcadis.com

78

Arcadis N.V. is a leading global design and consultancy firm specializing in natural and built assets, operating in over 30 countries with a workforce exceeding 34,000 professionals. The company focuses on infrastructure, sustainability, energy, transportation, and real estate sectors, delivering services that modernize critical infrastructure and provide asset advisory. The website reflects a mature digital presence with professional design, comprehensive content, and clear navigation tailored to business and government clients. Technically, the site leverages modern frameworks such as React, integrates Azure Application Insights for telemetry, and employs Google Tag Manager and Cookiebot for analytics and consent management, indicating a high level of digital maturity. Security posture is strong with HTTPS enforcement, security headers, and no visible vulnerabilities, though the absence of a public vulnerability disclosure policy and incident response contacts suggests room for improvement. Overall, the site is trustworthy and professional, though the lack of WHOIS data transparency slightly reduces domain trustworthiness. Strategic recommendations include enhancing transparency on security incident response and maintaining up-to-date third-party components.

P

Paul Marks t/a Swift Hosting

speedyclean.co.uk

55

The website speedyclean.co.uk is a domain sales landing page indicating that the domain is for sale via Nameshift.com, a domain marketplace and escrow service. The business model focuses on facilitating safe and fast domain transfers with no fees for buyers, positioning itself as a trusted intermediary in domain transactions. The target audience includes domain investors and businesses seeking to acquire this specific domain. The site is professionally designed with good user experience and clear navigation, though content is limited to domain sale information and related FAQs. Technically, the site is built using modern technologies such as SvelteKit and JavaScript, hosted by the registrar Paul Marks t/a Swift Hosting. Performance and mobile optimization are moderate to good, but accessibility and SEO could be improved. The site lacks a CMS and relies on static or server-side rendered content. No major technical issues were detected, but security headers are missing, and privacy compliance is minimal. From a security perspective, the site uses HTTPS (implied by external links), but no explicit security headers or policies are published. The escrow service provides a layer of transactional security for buyers. No vulnerabilities or exposed sensitive data were found in the HTML content. However, the absence of privacy and cookie policies, incident response information, and vulnerability disclosure reduces the overall security posture. Overall, the website is a legitimate domain sales platform with moderate trustworthiness and business credibility. Strategic improvements in privacy compliance, security headers, and transparency would enhance its security posture and user trust.

D

De Meteoor Beton B.V.

meteoor.nl

68

De Meteoor Beton B.V. is a well-established Dutch manufacturer specializing in prestressed concrete products, including the original Stelcon plates, rail industry prefab concrete, and concrete waste pits. As part of the BTE Groep, it holds a strong market position with a history dating back to 1907. The company targets construction, infrastructure, and rail sectors with a focus on quality and reliability. The website reflects a professional and modern digital presence built on HubSpot CMS, featuring comprehensive product information and clear contact details. Privacy and cookie policies are implemented with consent mechanisms, supporting GDPR compliance. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though dedicated security and incident response policies are not publicly disclosed. Overall, the site demonstrates high trustworthiness and business credibility.

N

Nameshift.com

asdc.co.uk

56

The website asdc.co.uk is a domain sales landing page operated by Nameshift.com, a domain marketplace and escrow service provider based in the Netherlands. The site offers a safe and fast way to purchase the domain asdc.co.uk, leveraging escrow services to protect buyers and providing free domain transfer assistance. The business targets domain investors and buyers seeking secure domain acquisition. The website is built with modern technologies such as SvelteKit and includes trust signals like a Trustpilot widget and verified seller badge. However, it lacks privacy and cookie policies, and no direct contact emails or phone numbers are provided, which limits transparency. WHOIS data shows inconsistencies, including a future domain creation date and registrant information pointing to the registrar rather than the business, which reduces trustworthiness from a domain registration perspective. Overall, the site is functional and moderately professional but could improve in compliance and security transparency.

N

NVA Online Advertising B.V.

creativebuilding.co.uk

57

The website creativebuilding.co.uk is a domain sales landing page operated by NVA Online Advertising B.V., a domain expert business founded in 2004 based in the Netherlands. The site offers the domain for sale via the Nameshift.com platform, which provides escrow and domain transfer services to ensure safe and fast transactions. The business model focuses on domain brokerage and facilitating secure domain ownership transfers with no fees for buyers. The target audience includes domain investors and businesses seeking premium domain names. Technically, the site is built using modern web technologies including SvelteKit and JavaScript, with external integrations such as Trustpilot for customer reviews and a tracking script from stats.nameshift.com. The site is well-optimized for performance and mobile devices, though accessibility features are basic. SEO optimization is minimal but sufficient for its purpose as a sales landing page. From a security perspective, the site uses HTTPS and an escrow service to mitigate transaction risks. However, no explicit security headers or policies are present, and privacy and cookie policies are missing, which reduces compliance posture. The WHOIS data shows inconsistencies, including a domain creation date in the future and registrant information pointing to the registrar rather than the business, which is typical for domains listed for sale but impacts trustworthiness. Overall, the website is functional and professional for its domain sales purpose but lacks comprehensive privacy and security policies. Strategic improvements in these areas would enhance trust and compliance. The domain's WHOIS inconsistencies should be clarified to improve legitimacy perception.

J

JMT

jmt.co.uk

66

JMT is a Netherlands-based company specializing in the rental of furniture and floor coverings for exhibitions, events, and congresses across Europe. The website presents a professional and comprehensive catalog of products and services, targeting event organizers and corporate clients. The company maintains a strong market position with a broad event calendar and emphasizes sustainability and service quality. Technically, the website employs modern technologies such as Google Tag Manager, Google Analytics, and a Symfony-based backend, ensuring good performance and mobile optimization. Security practices include HTTPS enforcement, secure form handling, and standard security headers, although explicit security policies and incident response contacts are not publicly detailed. Overall, the site is trustworthy, GDPR compliant, and free from suspicious content or blocking mechanisms.

H

HITEC Power Protection

hitec-ups.com

66

HITEC Power Protection is a medium-sized international company specializing in the design, development, and manufacturing of advanced Dynamic UPS systems. Established in 2004 and headquartered in the Netherlands, the company serves a broad range of critical industries including telecommunications, manufacturing, semiconductor, data centers, finance, healthcare, and government sectors. With a strong parent company affiliation (Air Water INC) and a global footprint supporting over 500 customers in 60 countries, HITEC positions itself as a reliable provider of continuous power solutions. The website infrastructure is built on WordPress, leveraging modern technologies such as jQuery, Google Tag Manager, Hotjar, and Gravity Forms. The site is well-optimized for mobile devices and demonstrates good SEO and accessibility practices. Security measures include HTTPS enforcement, Google reCAPTCHA on forms, and Cloudflare DNS usage, although some security headers and DNSSEC are not enabled. From a security perspective, the site shows a mature posture with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. However, the absence of a dedicated security policy or incident response page and lack of vulnerability disclosure mechanisms are areas for improvement. Overall, HITEC Power Protection's website reflects a professional, trustworthy, and business-focused digital presence with solid technical and security foundations, supporting its role as a key player in the power protection industry.

M

Michael Bailey Associates

michaelbaileyassociates.com

53

Michael Bailey Associates is a well-established international recruitment consultancy specializing in IT & Technology, Life Sciences, Finance, and Energy sectors. With over 30 years of experience, the company offers recruitment and project resource solutions to a global client base, emphasizing strong local networks and market-focused relationships. The website reflects a professional and consistent brand image, targeting job seekers and corporate clients alike. Technically, the website employs modern web technologies including Bootstrap, jQuery, Owl Carousel, and Google reCAPTCHA v3 for security. It is mobile-optimized with good SEO practices and integrates Google Tag Manager for analytics. The site uses HTTPS exclusively, ensuring secure data transmission. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and CAPTCHA integration on forms. However, it lacks visible security headers and explicit incident response or security policy documentation. The absence of WHOIS domain registration data is a notable concern, potentially indicating privacy protection or domain registration issues, which slightly impacts trustworthiness. Overall, the website is professional, secure, and compliant with GDPR, but the missing WHOIS data and lack of explicit security policies suggest areas for improvement. Strategic recommendations include enhancing security headers, publishing incident response policies, and verifying domain registration details to strengthen trust and compliance.

S

Sam Media

sam-media.com

63

Sam Media is a well-established digital content company founded in 2000, specializing in next-generation mobile and digital content accessible globally. The company leverages alternative payment solutions to expand its reach, particularly in markets with limited traditional payment access. Their market position is strengthened by industry awards and a strong social media presence. Technically, the website is built on WordPress with modern plugins like Elementor and Yoast SEO, hosted on AWS infrastructure, and optimized for mobile users. Security posture is solid with HTTPS and cookie consent mechanisms, though DNSSEC is not enabled and some security headers could be improved. Privacy compliance is robust with clear policies and GDPR adherence. Overall, the website reflects a credible, professional business with good digital maturity and governance.

T

Top10casino.nl

top10casino.nl

44

Top10casino.nl is a specialized Dutch media website focused on providing detailed reviews, rankings, and guides for legal online casinos in the Netherlands. Established in 2021, it serves Dutch adult players by offering trustworthy information about licensed gambling operators, bonuses, games, and responsible gambling practices. The site operates primarily on an affiliate marketing business model, promoting licensed casinos with clear disclosures and expert editorial content authored by named professionals. Technically, the website uses a modern Bootstrap framework, jQuery, and Amazon Cloudfront CDN, with Google Analytics integrated for user tracking. Age verification and ad consent mechanisms are implemented via custom JavaScript to comply with Dutch regulations. Security posture is good with HTTPS enforced, but the site lacks explicit privacy and cookie policies and some security headers. Overall, the site is professional, trustworthy, and compliant with Dutch gambling laws, targeting adults 24+ with safe gambling content.

Adwise – Your Digital Brain is a leading fullservice digital agency based in the Netherlands, recognized as the best fullservice agency in the Emerce100 2024. The company offers a comprehensive suite of digital marketing, technology, and strategy services to help businesses accelerate growth and gain competitive advantage. With over 140 professionals, Adwise targets businesses seeking digital transformation and integrated marketing solutions. Their market position is strong, supported by awards, client case studies, and a consistent brand presence. Technically, the website demonstrates a mature digital infrastructure leveraging modern technologies such as HubSpot, Google Tag Manager, Cookiebot, and Cloudflare. The site is well-optimized for performance, mobile responsiveness, and SEO, with a professional design and clear navigation. The use of multiple analytics and marketing tools indicates a data-driven approach to customer engagement. From a security perspective, the site employs HTTPS with good SSL configuration and cookie consent mechanisms. While explicit security headers are not fully confirmed, the overall posture is solid with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with comprehensive policies and consent management, aligning with GDPR requirements. Overall, the website and business present a low-risk profile with strong credibility and professionalism. Strategic recommendations include enhancing security header implementation, publishing a formal security policy, and adding a vulnerability disclosure mechanism to further strengthen trust and compliance.

V

Van Geenen

van-geenen.com

50

Van Geenen is a Dutch metal finishing company specializing in high-tech, esthetic, and industrial metal processing solutions. The company positions itself as a comprehensive partner offering services such as polishing, grinding, coating, and cleanroom assembly. The website is professionally designed with multilingual support and clear navigation, targeting business clients in manufacturing sectors. Technically, the site uses modern JavaScript frameworks including Alpine.js and Livewire, integrates Google Tag Manager and Cookiebot for analytics and consent management, and is hosted on TransIP infrastructure. Security posture is generally good with HTTPS enforced and cookie consent implemented, but lacks DNSSEC and explicit security headers. WHOIS data shows inconsistencies with a future domain creation date, which may be a data anomaly but slightly impacts trust. Overall, the website is credible, well-maintained, and compliant with GDPR requirements.

P

PowNed

helpmee.tv

54

The website www.helpmee.tv serves as a membership enrollment portal for PowNed, a Dutch media organization focused on providing an alternative voice in the Hilversum broadcasting landscape. The business model revolves around annual membership fees (€8.50 per year) to support their media activities. The site is well-branded, consistent, and targets Dutch-speaking individuals interested in media and alternative perspectives. The content is relevant and professionally presented, with clear calls to action for membership sign-up. Technically, the website employs modern tracking and analytics technologies including Google Tag Manager, Google Analytics, Facebook Pixel, and DoubleClick advertising services. The site is served over HTTPS with CSRF protection tokens present, indicating a baseline of security awareness. However, there is no evidence of advanced security headers or cookie consent mechanisms, which are important for compliance and security hardening. The site is mobile optimized and SEO friendly but lacks accessibility features beyond basic levels. From a security perspective, the site shows good use of HTTPS and some security best practices but lacks visible security headers and formal security policies or incident response contacts. The absence of WHOIS data and domain registration transparency reduces trustworthiness, although the website content and business appear legitimate. No critical vulnerabilities or adult content were detected, and the site is fully accessible without WAF or blocking mechanisms. Overall, the website scores moderately well on content quality, technical implementation, and business credibility but has room for improvement in privacy compliance and security posture. Strategic recommendations include implementing cookie consent, adding security headers, publishing security policies, and improving domain registration transparency to enhance trust and compliance.

S

Stichting Activityclub

mastodon.nl

68

Mastodon.nl is an independent Mastodon server operated by Stichting Activityclub, serving the Dutch Mastodon and fediverse community. It provides a social networking platform focused on community engagement without ads or algorithms, emphasizing privacy and open source principles. The website is well designed, mobile optimized, and offers features such as trending posts and profile directories. Technically, it runs Mastodon version 4.4.7 with modern web technologies including Ruby on Rails and React, and employs secure HTTPS connections with DNSSEC enabled for domain security. Security posture is strong with no evident vulnerabilities or exposed sensitive data, though some security headers could be improved. Privacy compliance is basic, with a privacy policy present but lacking cookie consent mechanisms and terms of service. Overall, the site is trustworthy and professional, catering to a niche community audience.

A

ArchiXL B.V.

wikixl.nl

58

ArchiXL B.V. operates a specialized semantic wiki knowledge management platform called WikiXL™, targeting organizations that require structured and unstructured content management solutions. The company positions itself as a niche provider in the Dutch market offering SaaS-based platforms built on open source MediaWiki technology, complemented by consulting and training services. The website reflects a professional and consistent brand image with clear contact information and social media presence. Technically, the platform uses modern web technologies including jQuery, Flatpickr, Matomo analytics, and Google Tag Manager, ensuring good mobile optimization and accessibility. Security posture is solid with HTTPS enforced and privacy-conscious analytics, though the absence of explicit security headers and privacy/cookie policies indicates room for improvement. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

A

ArchiXL B.V.

archixl.nl

58

ArchiXL B.V. is a specialized Dutch company focused on enterprise and information architecture consulting, knowledge management platforms, and training services. Their website presents a professional and comprehensive overview of their offerings, targeting organizations seeking to improve their data, information, and knowledge management capabilities. The company positions itself as a trusted expert in the Dutch market with a strong emphasis on knowledge sharing and pragmatic solutions. Technically, the website employs modern web technologies including jQuery, Matomo analytics, Google Tag Manager, and SVG graphics. The site is mobile optimized, accessible, and well-structured, providing a good user experience. Performance is moderate with no critical technical issues detected. However, the CMS appears custom or proprietary with no common CMS identified. From a security perspective, the website enforces HTTPS and avoids exposing sensitive data. However, it lacks important security headers and does not provide explicit privacy or cookie policies, which are compliance gaps. No incident response or vulnerability disclosure information is available. Analytics usage is moderate with Matomo and Google Tag Manager tracking users, but privacy compliance is basic. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance and security best practices. There are no indications of malicious content or blocking mechanisms, making it fully accessible for analysis.

B

Breedveld Staal

breedveldstaal.nl

60

Breedveld Staal is a well-established steel and metal supplier based in the Netherlands, with a business history dating back to 1946 and an active domain since 2003. The company serves industrial and business clients requiring steel products, positioning itself as a trusted B2B supplier in the manufacturing sector. The website reflects a professional business presence with good content quality and clear navigation, targeting business customers in need of steel and metal materials. Technically, the site uses modern JavaScript libraries such as Swiper.js and Fancybox, along with Google reCAPTCHA for form security, and implements cookie consent mechanisms aligned with GDPR requirements. Security posture is solid with HTTPS and DNSSEC enabled, though some security headers and policies could be improved or explicitly published. No critical vulnerabilities or blocking mechanisms were detected, and the domain registration data aligns well with the business claims, supporting legitimacy. Overall, the website demonstrates a good balance of business credibility, technical implementation, and privacy compliance, suitable for its industry and audience.

Grünbauer BV is a small manufacturing company based in the Netherlands specializing in steel processing services including cambering, straightening, splitting, sawing, cold rolling, and production of various steel girders and beams. The company targets steel fabricators and steel traders with a niche B2B business model. The website provides multilingual content describing their services and contact information but lacks modern web technologies and advanced digital features. The technical infrastructure is basic, with no detected CMS or analytics tools, and the site appears static and somewhat outdated. Security posture is weak due to lack of HTTPS enforcement and missing security headers, although DNSSEC is enabled on the domain. Privacy compliance is minimal with no privacy or cookie policies present. Overall, the website is functional but requires improvements in security, privacy, and technical modernization to enhance trust and compliance.

M

Materials innovation institute (M2i)

m2i.nl

46

Materials innovation institute (M2i) is a well-established network organization specializing in materials research, connecting industry, academia, and research institutes primarily in The Netherlands and Europe. The website reflects a professional and focused business model aimed at facilitating collaboration and innovation in materials science. The organization targets industry professionals and academic researchers, providing support in product development and production processes. The site is built on a mature WordPress infrastructure using the Avada theme and integrates modern web technologies and analytics tools with privacy considerations.

LinkmasterMonkey is a small web design and hosting service provider based in the Netherlands, targeting businesses or individuals seeking website creation and hosting solutions. The website presents basic information about ongoing projects and offers contact via email. The technical infrastructure is built on WordPress with Oxygen Builder and uses common web technologies such as jQuery and Google Fonts. Performance and mobile optimization are moderate to good, but accessibility and SEO are basic. Security posture is limited with no detected security headers or privacy policies, and WHOIS data is unavailable, raising concerns about domain legitimacy. Overall, the website is functional but lacks comprehensive security and compliance features.

K

Koninklijke Staalfederatie

staalfederatie.nl

51

Koninklijke Staalfederatie operates as a professional platform and representative body for steel and metal traders in the Netherlands, focusing on relationship management and knowledge exchange within the manufacturing sector. The website is built on WordPress using the Avada theme and integrates SEO and analytics tools such as Yoast SEO and Google Analytics with privacy features enabled. The technical infrastructure is modern and moderately optimized for performance and mobile use. Security posture is adequate with HTTPS enforced and tracking anonymization, but lacks explicit security headers and published security policies. Privacy compliance is limited due to absence of visible privacy and cookie policies. Overall, the website presents a credible and professional image consistent with its business purpose.

V

Van Geenen

vangeenen-metallschleiferei.de

43

Van Geenen is a specialized B2B company offering comprehensive metal finishing and processing solutions targeting industrial, high-tech, and aesthetic sectors. The company positions itself as a one-stop-shop for metal refinement services including polishing, grinding, coating, and cleanroom packaging. The website reflects a professional and consistent brand image with clear service offerings and a project portfolio, catering primarily to industrial clients in the Netherlands and surrounding regions. Technically, the website employs modern JavaScript frameworks such as Alpine.js and Livewire, integrates Google Tag Manager for analytics, and uses Cookiebot for cookie consent management, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enforced and consent mechanisms in place, but lacks advanced security headers and published security policies. The domain is newly registered in 2025 with minimal WHOIS registrant information, which slightly reduces trust but is offset by the professional website presentation and clear contact details. Overall, the website is well-structured, user-friendly, and business-focused, with room for improvement in privacy and security transparency.

B

Bouwen met Staal

staalbouwdag.nl

41

Bouwen met Staal organizes the annual Staalbouwdag event, a leading Dutch trade fair and congress focused on steel construction. The event targets decision-makers across the steel and construction sectors, offering networking, knowledge sharing, and showcasing innovations. The website is professionally designed using WordPress and the Divi theme, with good SEO practices and structured data implementation. However, it lacks privacy and cookie policies, and the Google Analytics plugin is installed but not configured. Security posture is adequate with HTTPS but missing security headers and incident response information. Overall, the site is trustworthy and serves its business purpose well but should improve compliance and security transparency.

N

Nationale staalprijs

nationalestaalprijs.nl

46

Nationale staalprijs is a Dutch organization dedicated to promoting and awarding excellence in steel construction projects. The website serves as a platform to showcase nominations, winners, and project submissions related to steel construction within the Netherlands. It targets professionals and companies in the steel construction industry, providing information and recognition to encourage innovation and quality in this sector. The business model appears to be non-profit or industry promotional in nature, focusing on national recognition rather than commercial sales. Technically, the website is built on Drupal 10 CMS and integrates modern web technologies including Google Tag Manager, Google Analytics, YouTube and Vimeo APIs, and Google reCAPTCHA for form security. The site is mobile optimized with good navigation and SEO practices, although some accessibility features could be improved. Performance is moderate with asynchronous loading of scripts. From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA on user registration and login forms to mitigate automated abuse. However, no explicit security headers were detected in the provided content, and there is no published security policy or incident response information. No vulnerabilities or exposed sensitive data were found in the analysis. Privacy compliance is limited as no privacy or cookie policies were found on the homepage content, which could be improved to meet GDPR standards. Overall, the website is professional, trustworthy, and well-targeted to its audience. The main risks relate to privacy compliance and security policy transparency. Strategic recommendations include publishing privacy and cookie policies, implementing security headers, and providing vulnerability disclosure information to enhance trust and compliance.

B

Bouwen met Staal

brandveiligmetstaal.nl

38

Brandveiligmetstaal.nl is a specialized Dutch digital information platform dedicated to fire safety in steel constructions. It provides comprehensive resources, including practical design tools, publications, and expert support, primarily targeting construction professionals such as architects and engineers. The website is supported by recognized industry partners, enhancing its credibility and market position within the niche of fire-safe steel construction. Technically, the site employs a modern but standard web technology stack including Bootstrap, jQuery, and Font Awesome, ensuring a responsive and user-friendly experience. However, there is room for improvement in security practices, particularly in implementing security headers and privacy compliance mechanisms. The security posture is moderate with HTTPS usage but lacks advanced protections. Overall, the site is professional, trustworthy, and content-rich, but would benefit from enhanced privacy and security policies to align with best practices and regulatory requirements.

B

Bouwen met Staal

staalconserveren.nl

39

Bouwen met Staal operates the Conserveringsinformatiesysteem, a specialized digital information portal focused on the design and assessment of steel constructions for durability, particularly addressing corrosion protection in infrastructure projects such as bascule bridges. The website serves a niche audience of engineers and construction professionals by providing curated, phase-based technical content supported by industry partners. The business model centers on knowledge sharing and industry collaboration rather than direct commercial sales. Technically, the website employs legacy technologies including Prototype.js and Adobe GoLive for content management, with JavaScript-based UI elements such as slideshows and lightbox galleries. While HTTPS is used, there is a lack of modern security headers and cookie consent mechanisms, indicating room for improvement in security and privacy compliance. The site performance is moderate with basic mobile optimization and accessibility features. From a security perspective, the site shows basic best practices such as HTTPS and form POST methods but lacks advanced protections like CSP or HSTS headers. No privacy or cookie policies are published, which is a compliance gap under GDPR. Contact information is clearly provided, enhancing business credibility. No WAF or blocking mechanisms were detected, allowing full content access. Overall, the website is a moderately professional and trustworthy resource within its niche but would benefit from enhanced security measures, privacy compliance, and modernization of its technical stack to improve user trust and regulatory adherence.

D

Duurzaam in Staal

duurzaaminstaal.nl

40

Duurzaam in Staal is a specialized information platform focused on promoting steel as a sustainable building material in the Netherlands. The website provides comprehensive content on sustainability themes such as energy use, light construction, recycling, and reuse, targeting professionals and stakeholders in the construction and steel industries. It maintains a niche authoritative position by offering access to publications, events, and tools related to sustainable steel construction. Technically, the site uses a traditional web stack including Bootstrap, jQuery, and common CSS/JS libraries, with moderate performance and basic mobile optimization. Security posture is average, with HTTPS implied but lacking advanced security headers and privacy compliance mechanisms such as cookie consent. Contact information is clearly presented, including phone and physical address, and social media presence is established on LinkedIn and Twitter. Overall, the site is professional and trustworthy but would benefit from enhanced security and privacy compliance measures.

B

Bouwen met Staal

staalsupport.nl

40

Staalsupport.nl is a specialized digital information platform operated by Bouwen met Staal, focused on providing technical guidance and support for steel construction professionals in the Netherlands. The website serves as a knowledge base with over 300 questions and answers related to steel design, connections, fire safety, materials, sustainability, and execution. It is supported by the Koninklijke Staalfederatie, enhancing its credibility and industry relevance. The platform also offers direct helpdesk support for unanswered queries, positioning itself as a trusted resource in the niche market of steel construction. Technically, the website employs standard web technologies including HTML, CSS, JavaScript, and external libraries such as Font Awesome and Google Fonts. It uses HTTPS and includes analytics tools like Mtrack and MonkeyStats for user tracking. While the site is mobile responsive at a basic level and has good navigation and content structure, it lacks advanced security headers and formal privacy or cookie policies, which are areas for improvement. From a security perspective, the site benefits from HTTPS encryption and absence of exposed sensitive data or vulnerable libraries. However, the lack of security headers and absence of privacy and cookie policies reduce its compliance posture. No WAF or blocking mechanisms are detected, and the domain registration data aligns well with the website's business claims, indicating a trustworthy and legitimate online presence. Overall, Staalsupport.nl is a professionally maintained, niche informational website with good business credibility and moderate technical maturity. Enhancing privacy compliance and security best practices would further strengthen its risk profile and user trust.

B

Bouwen Met Staal

bouwenmetstaal.nl

50

Bouwen Met Staal is a Dutch knowledge and network organization dedicated to the application of steel in construction. The website serves professionals in the construction and infrastructure sectors by providing educational courses, research publications, events, and design tools. The platform is well-established with a consistent brand and a clear focus on steel construction knowledge dissemination. Technically, the site is built on Drupal 10, employs modern web technologies, and is optimized for mobile devices. Security posture is solid with HTTPS, security headers, and secure forms, though explicit privacy and security policies are lacking. The site uses Google Tag Manager for analytics and has a cookie compliance mechanism in place. Overall, the website is professional, trustworthy, and serves its target audience effectively.

S

Solid Solutions

solidsolutionsai.com

52

Solid Solutions is a small technology company based in the Netherlands specializing in custom AI and large language model (LLM) application development. Their services focus on delivering tailor-made conversational AI solutions that integrate with business processes to enhance efficiency and growth. The website presents a professional image with clear descriptions of their offerings, targeting businesses seeking AI automation and personalized AI solutions. Technically, the site is built on Webflow with modern web fonts and scripts, delivering moderate performance and good mobile optimization. However, the security posture is limited due to lack of visible security headers and absence of privacy or cookie policies. The WHOIS data is missing, raising concerns about domain registration legitimacy. Contact information is limited to an email address on a different domain, which may affect trust. Overall, the site is functional and business-focused but would benefit from improved security and compliance transparency.

W

WNL

wnl.tv

62

WNL is a Dutch media broadcaster specializing in news, political commentary, and societal programming. The website serves as a digital platform for delivering news articles, video content, and podcasts to a Dutch-speaking audience. It also promotes membership support to sustain its operations. The site is well-integrated with the Dutch Public Broadcasting (NPO) infrastructure, indicating a reputable and established presence in the media sector. Technically, the website employs modern frameworks such as Laravel with Livewire, Alpine.js, and Swiper.js for a responsive and interactive user experience. Hosting and DNS are managed via Cloudflare, ensuring reliable performance and security. Security posture is strong with HTTPS enforced and CSRF protections in place, although some security headers could be explicitly confirmed and DNSSEC is not enabled. Privacy compliance is partial; while a cookie consent mechanism is present, no explicit privacy policy or terms of service were found in the provided content. Business credibility is high given the consistent WHOIS data, official social media presence, and professional content. Overall, the website is a trustworthy and professional media outlet with room for improvement in privacy and security policy transparency.

N

NPO

omroepzwart.nl

49

Omroep ZWART is a Dutch public broadcasting platform under the NPO umbrella, established in 2020. It focuses on cultural diversity and representation through radio, podcast, television, and online media content. The website offers a modern user experience with video streaming capabilities and active social media engagement. Technically, it employs a robust tech stack including Bitmovin Player, Google Tag Manager, and multiple analytics services, indicating a mature digital infrastructure. Security posture is strong with HTTPS, DNSSEC, and cookie consent mechanisms, though explicit privacy and terms policies are missing. Overall, the site is trustworthy and professionally maintained, serving a general audience with safe content.

V

VPRO

vpro.nl

67

VPRO is a well-established Dutch public media organization offering a broad range of original and impactful content including TV programs, documentaries, podcasts, and events. The website serves as a comprehensive media platform targeting a general audience interested in cultural and societal topics. Technically, the site is built on modern frameworks such as Astro, integrates advanced video streaming via Mux, and employs analytics and error tracking tools like Google Tag Manager and Sentry. The site is performant, mobile-optimized, and accessible with a professional design and clear navigation. Security posture is strong with HTTPS and secure script loading, though explicit security headers and formal security policies are absent. Privacy compliance is basic, with no visible privacy or cookie policy pages but a consent mechanism is implied. Overall, the domain registration data aligns well with the organization's identity, supporting legitimacy and trustworthiness.

P

PowNed

powned.tv

61

PowNed is a Dutch media organization focused on delivering news, investigative journalism, and video content primarily for a general audience in the Netherlands. The website serves as a platform for their latest news, programs, and membership engagement. It is affiliated with public broadcasting entities, enhancing its credibility and market position. Technically, the site uses modern web technologies including Vue.js and Tailwind CSS, with integrations for analytics and video streaming. The site is mobile optimized and provides a good user experience with clear navigation and professional design. Security posture is solid with HTTPS enforced and cookie consent implemented, though the absence of security headers and explicit privacy policies indicates room for improvement. The lack of WHOIS data reduces domain trustworthiness but does not detract from the site's operational legitimacy. Overall, PowNed's website is a well-maintained media platform with moderate technical sophistication and a good security baseline.

N

NTR

ntr.nl

56

NTR is a Dutch public broadcasting organization operating under the NPO umbrella, providing a wide range of programming focused on information, education, culture, youth, and diversity. The website serves as a portal to their content offerings, including television and radio programs, with a clear focus on accessibility and relevance for all audience segments. The site is well-branded, consistent, and professionally maintained, reflecting its status as a major public media entity in the Netherlands. Technically, the website employs modern web technologies including jQuery, Bitmovin video player, and a cookie consent management system. It is mobile-optimized with responsive design elements and integrates tracking and analytics tools compliant with privacy regulations. The site uses HTTPS with DNSSEC enabled, indicating strong foundational security practices, although some advanced security headers are not explicitly detected. From a security perspective, the site demonstrates good practices such as encrypted connections and cookie consent mechanisms. However, it lacks publicly visible security policies or incident response contacts, which could be improved to enhance transparency and trust. No vulnerabilities or suspicious content were detected, and the domain registration data aligns well with the organization's identity and history. Overall, the website is a trustworthy, professional platform for a public broadcaster with a strong compliance posture and good user experience. Strategic improvements in security policy disclosure and header implementation could further strengthen its security posture.

H

Hunkemöller

hunkemoller.nl

10

Hunkemöller is a well-established European lingerie and swimwear retailer with a strong online presence, targeting primarily women shoppers in the Netherlands and other European countries. The company operates multiple country-specific websites and offers a broad range of products including lingerie, swimwear, and nightwear. Their market position is strong as a leading brand in the retail lingerie sector. Technically, the website is built on modern frameworks such as React and uses Bloomreach CMS, with good mobile optimization and accessibility features. The security posture is robust, featuring HTTPS, security headers, and no visible vulnerabilities, although explicit security policies and incident response information are not publicly available. Overall, the site demonstrates a mature digital infrastructure with extensive analytics and marketing tools, balanced with good privacy compliance. The risk profile is low with recommendations to enhance transparency on security policies and incident response.

R

Reuzenpanda

reuzenpanda.nl

57

Reuzenpanda is a small retail business operating a website built on WordPress using the Elementor page builder. The site presents a professional and consistent design with good mobile optimization and user experience. The business appears to target a general audience in the Netherlands, offering products or services typical of a retail ecommerce model. Technically, the site uses modern frontend libraries such as Swiper.js and Font Awesome, but lacks advanced analytics or marketing tools. Security posture is basic with HTTPS enabled but missing important security headers and no visible incident response or security policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the domain registration data aligns well with the website content, supporting legitimacy. Strategic improvements in privacy compliance, security headers, and contact transparency would enhance trust and security.

U

Untyped BV

getuntyped.ai

65

Untyped BV offers an AI-powered email drafting solution integrated with Gmail and Outlook, targeting professionals who want to save time on repetitive email responses. The company positions itself as a productivity enhancer with a subscription-based SaaS model and early bird pricing. The website is professionally designed, mobile-optimized, and GDPR compliant, reflecting a mature digital presence. Technically, the site uses modern web technologies including Webflow, Google Tag Manager, and GSAP, ensuring good performance and user experience. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and incident response policies are absent. WHOIS data is incomplete, likely due to privacy protection, which is common for startups but slightly reduces domain trust verification. Overall, Untyped presents as a credible, professional technology startup with a focus on privacy and user-centric AI services.

svt Products BV operates a specialized web platform and Android app called the Logboek manager, designed to facilitate fire protection project management including recordings, inventories, work preparations, and logbook compilation for clients and regulatory bodies. The company targets professionals and organizations involved in fire safety compliance in the Netherlands, positioning itself as a niche provider with a focused service offering. The website is built on a legacy ASP.NET WebForms platform with Telerik UI components, indicating a stable but somewhat dated technical infrastructure. The presence of DNSSEC and an active domain registered since 2015 supports the legitimacy and operational maturity of the business. However, the website lacks modern privacy and cookie policies, and security headers are absent, which are areas for improvement.

S

Sleak

sleak.chat

71

Sleak is a Dutch technology company specializing in AI chatbot solutions designed to enhance customer service and lead generation for customer-centric businesses. Positioned as a market leader in the Netherlands, Sleak offers a SaaS platform that includes AI agent builders, live chat inboxes, and integration services with CRM and ticketing systems. The website reflects a professional and consistent brand image, targeting Dutch businesses seeking advanced AI-driven customer interaction tools. Technically, the site is built on Webflow CMS and incorporates modern analytics and marketing technologies such as Google Analytics, Hotjar, Facebook Pixel, and TikTok Pixel, demonstrating a mature digital infrastructure. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. The absence of public WHOIS data suggests privacy protection, which is justified for this business type. Overall, the site is trustworthy, well-designed, and compliant with privacy regulations.

N

NPO

npoplayer.nl

66

NPO.nl is the official public broadcasting portal of the Netherlands, operated by the NPO organization. It aggregates programs, documentaries, podcasts, and articles from various Dutch public broadcasters, serving as a centralized media platform for Dutch audiences. The website is well-established, with a domain age dating back to 1998, reflecting its long-standing presence in the Dutch media landscape. The portal targets a broad audience interested in public media content and offers a comprehensive range of services including streaming and content aggregation from multiple broadcasters. Technically, the website employs modern web technologies such as JavaScript, CSS, SVG, and lazy loading for images to optimize performance and user experience. It uses a custom content management framework (CCM) and integrates third-party scripts for cookies and advertising opt-out. The site is mobile-optimized and accessible, with good SEO practices evident in meta tags and structured navigation. Security-wise, the site enforces HTTPS with DNSSEC enabled, uses crossorigin anonymous scripts, and avoids exposing sensitive data, indicating a strong security posture. However, the site lacks explicit privacy and cookie policies in the provided HTML content, and no visible consent mechanism for cookies was detected. Contact information such as emails or phone numbers is not explicitly present in the analyzed content, which may impact user trust and compliance. There is also no visible security policy or incident response contact information. Overall, the site is professional, trustworthy, and secure but could improve transparency and compliance by publishing clear privacy, cookie, and security policies. The overall risk assessment is low, with recommendations focusing on enhancing privacy compliance, publishing security and incident response policies, and implementing explicit cookie consent mechanisms to align with GDPR and best practices.

S

SalesFeed Nederland B.V.

salesfeed.com

55

SalesFeed Nederland B.V. is a Dutch technology company specializing in B2B lead generation, marketing automation, and account based marketing software. The company offers a SaaS platform focused on business recognition, real-time website personalization, and CRM enrichment to help businesses optimize sales and marketing efforts. The website is professionally designed, targeting Dutch B2B companies, and demonstrates a mature digital presence with integrations of modern marketing and analytics tools. Security posture is good with HTTPS and cookie consent mechanisms in place, though some security headers and explicit policies are missing. WHOIS data is unavailable, which slightly reduces trust but the overall business credibility remains high based on website content and branding.

A

Applepie

applepie.nl

62

Applepie is a well-established full-service digital agency based in the Netherlands, specializing in branding, digital marketing, campaign content, and web development services primarily for small and medium-sized enterprises (SMEs). The company positions itself as a growth partner with over 20 years of experience and a strong client portfolio exceeding 200 organizations. Their service offerings are comprehensive, covering branding and positioning, digital marketing and data analytics, campaign and content creation, and web development technologies. The website reflects a professional and consistent brand image with excellent content quality and user experience. Technically, the website employs modern web technologies including jQuery, Google Tag Manager, Bing Ads, LinkedIn Insight Tag, and Leadinfo for analytics and marketing purposes. The site is built on a proprietary CMS (ApplepieCMS) and demonstrates good mobile optimization and SEO practices. Performance is moderate, with asynchronous loading of scripts to enhance speed. However, explicit security headers are not visibly implemented, though HTTPS is enforced, indicating a good SSL configuration. From a security standpoint, the website follows best practices such as HTTPS enforcement and cookie consent mechanisms compliant with GDPR. Certifications like Google Partner and Meta Certified, along with industry awards, enhance trustworthiness. However, the absence of a published security policy, incident response contacts, or a vulnerability disclosure mechanism suggests room for improvement in security transparency and readiness. Overall, Applepie presents a low-risk profile with a strong business credibility and digital maturity. Strategic recommendations include implementing explicit security headers, publishing a security policy and incident response information, and adding a security.txt file to facilitate vulnerability reporting. These steps would further strengthen their security posture and compliance stance.

V

Van der Horst aannemers

vanderhorstaannemers.nl

51

Van der Horst aannemers is a medium-sized Dutch construction company specializing in complex building projects with a strong focus on budget management, planning, logistics, and fire safety. The company maintains a significant portfolio of residential and commercial properties and has a solid regional market presence. Their website reflects a professional and consistent brand image, targeting construction clients and municipalities. Technically, the website employs modern analytics and marketing tools, including Google Analytics, Facebook Pixel, and Hotjar, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though additional security headers could enhance protection. No critical vulnerabilities or blocking mechanisms were detected, and WHOIS data supports the legitimacy of the domain and business. Overall, the site demonstrates a good balance of business credibility, technical implementation, and privacy compliance.