Turkey security reports

AVOD A.Ş. is a medium-sized Turkish company specializing in the production and distribution of dried vegetables and related food products. They hold international quality certifications such as BRCGS and IFS, positioning themselves as a leader in Turkey's dried vegetable manufacturing sector with a broad international footprint. Their product portfolio includes sun-dried tomatoes, oven semi-dried tomatoes, sauces, fermented vegetables, and flexible packaging solutions tailored for industrial, food service, and retail customers. The website is built on WordPress with Elementor, featuring a professional design and good mobile optimization. However, it lacks privacy and cookie policies, security headers, and incident response information, which are areas for improvement. The domain is active, locked to transfer, and hosted likely by Hostcini, indicating legitimate business operations. Overall, the website is trustworthy and professional but could enhance its security and privacy posture.

Y

Yünsa Yünlü Sanayi Ve Ticaret A.Ş.

yunsa.com

54

Yünsa Yünlü Sanayi Ve Ticaret A.Ş. is a leading Turkish manufacturer specializing in high-segment wool fabric production, established in 1973 and publicly traded on Borsa Istanbul. The company operates with significant production capacity in yarn and fabric manufacturing and maintains a strong market position as one of the top five global producers in its sector. The website reflects a professional corporate presence with detailed product offerings, company history, and investor relations information. Technically, the website employs modern web technologies including jQuery, Bootstrap, and various UI libraries, with integration of Google Analytics and Google Maps for enhanced user experience and tracking. The site is mobile-optimized and features good navigation and content quality. However, some security best practices such as explicit HTTP security headers and incident response information are missing. From a security perspective, the site uses HTTPS and has cookie consent mechanisms, but lacks visible security policies or vulnerability disclosure channels. The WHOIS data is notably absent or inaccessible, which raises questions about domain registration transparency despite the professional nature of the site content. Overall, the website presents a credible and professional business front with moderate technical maturity and security posture. Strategic improvements in security transparency and WHOIS data clarity would enhance trust and compliance.

E

ERE

ere.com.tr

67

ERE is a well-established Turkish conglomerate with a diversified portfolio in energy, telecommunications, defense, and construction sectors. Founded in 1975, the company has a strong market presence supported by significant projects such as hydroelectric power plants and telecommunications infrastructure. The website reflects a professional corporate image with clear navigation and relevant business content. Technically, the site is built on WordPress using the Avada theme and Yoast SEO plugin, indicating a modern and maintainable infrastructure. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though security headers and privacy policies are lacking. Overall, the site is trustworthy but would benefit from enhanced privacy compliance and clearer contact information.

A

Aytaç Gıda Yatırım Sanayi ve Ticaret Anonim Şirketi

aytac.com.tr

66

Aytaç Gıda Yatırım Sanayi ve Ticaret Anonim Şirketi is a well-established Turkish food company specializing in meat and processed meat products. The company operates under the umbrella of Yıldız Holding, a major conglomerate, and offers a broad portfolio of retail and out-of-home consumption products. The website reflects a professional brand presence with comprehensive product listings, recipe content, and corporate information targeting consumers and business clients in Turkey. Technically, the website uses modern JavaScript libraries such as jQuery and Font Awesome, with cookie consent and CSRF protections implemented, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced and anti-CSRF tokens in place, although some security headers could be improved. Privacy compliance is robust, featuring detailed cookie and privacy policies in Turkish, aligned with GDPR requirements. Overall, the site is trustworthy, accessible, and professionally maintained, with no indications of blocking or malicious content.

KARESİ is a medium-sized Turkish manufacturing company established in 1983, specializing in integrated production across petrochemical raw materials, textile manufacturing, renewable energy, and recycling sectors. The company presents a professional and modern web presence with multimedia content and a focus on sustainability. The technical infrastructure leverages modern front-end technologies such as Bootstrap, jQuery, and fullPage.js, ensuring good mobile optimization and user experience. Security posture is moderate with HTTPS implied and cookie consent implemented, but lacks explicit security headers and detailed security policies. No critical vulnerabilities or suspicious content were detected. Overall, the website reflects a legitimate and established business with room for improvement in security and privacy transparency.

Nimet Abla is a well-established Turkish lottery ticket seller with a long history dating back to 1928. The website serves as an informational and sales platform for lottery tickets, including Milli Piyango and other games, targeting lottery players in Turkey. It provides lottery results, ticket sales information, and contact details for physical lottery offices. The business model is retail-focused with an online presence to support customer engagement. Technically, the website uses common marketing and analytics tools such as Google Tag Manager and Facebook Pixel, along with Elfsight widgets and Bootstrap for styling. The site is moderately optimized for performance and mobile use but lacks advanced SEO and accessibility features. No CMS or complex frameworks are detected, indicating a simple site architecture. From a security perspective, the site uses HTTPS but lacks visible security headers and privacy compliance mechanisms such as privacy and cookie policies. No forms are present to analyze for input security. The WHOIS data is consistent and supports the legitimacy of the domain and business. Overall, the security posture is moderate but could be improved with better headers and compliance. The overall risk is moderate with no critical security issues detected. Strategic improvements in privacy compliance, security headers, and user experience would enhance trust and reduce potential risks.

K

Kentpark

kentpark.com.tr

51

Kentpark is a well-established mixed-use shopping and business center located in Ankara, Turkey, operating since 2010. It offers a broad range of retail stores, services, entertainment, and office spaces, hosting over 200 national and international brands. The website reflects a professional and consistent brand image, targeting general consumers, families, and business clients. Technically, the site uses modern web technologies including OctoberCMS, jQuery, and analytics tools such as Google Analytics, Facebook Pixel, and Microsoft Clarity. Security posture is good with HTTPS enforced and cookie consent implemented, though security headers could be enhanced. Privacy policies are comprehensive and GDPR compliant. Overall, the site is trustworthy and well maintained.

A

Atçı Makina San.ve Tic. A.Ş.

atcimakina.com.tr

44

Atçı Makina San.ve Tic. A.Ş. is a Turkish manufacturing company with over 50 years of experience specializing in machinery for the food sector, including equipment for white meat, red meat, seafood, hygiene, and mussels. The company offers turnkey project planning, production, and after-sales services, targeting food industry businesses. The website is built on WordPress and uses common plugins and Google services for analytics and advertising. It is professionally designed with good navigation and mobile optimization. Security posture is moderate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and a published privacy policy. WHOIS data is unavailable, which slightly reduces domain trust. Overall, the website reflects a credible medium-sized manufacturing business with room for improvement in compliance and security practices.

Samtek is a Turkish manufacturing company specializing in industrial wheels and metal pressing services. Their website primarily targets industrial clients seeking specialized manufacturing products such as molds and sheet metal pressing. The business operates a basic online presence with limited content and minimal digital marketing features. Technically, the website is built on ASP.NET Web Forms and uses older JavaScript libraries like jQuery 1.7.1, which may pose security risks. The site includes Google Analytics for tracking but lacks visible cookie consent mechanisms or privacy policies, indicating low privacy compliance. Security posture is moderate with HTTPS usage but no detected security headers or advanced protections. Overall, the site is functional but requires improvements in security, privacy compliance, and technical modernization to enhance trust and user experience.

Baha Tarım is a Turkish agricultural supply chain and logistics company established in 2009, operating internationally across three continents. The company specializes in supplying grains, oilseeds, and feed raw materials, offering a robust logistics network and digital order tracking services. Their website is built on WordPress with modern plugins and technologies, providing a good user experience and mobile optimization. Security posture is adequate with HTTPS and domain transfer protection, but lacks DNSSEC and security headers. Privacy compliance is weak due to missing privacy and cookie policies. Contact information and social media presence are clear, supporting business credibility. Overall, the website reflects a stable, professional business with room for security and compliance improvements.

The website www.seleks.com.tr currently presents a minimal placeholder page with no substantive content, metadata, or interactive elements. The business behind the domain is not clearly described on the site, and no contact or policy information is provided. The domain is registered in Turkey, consistent with the website domain, indicating legitimacy but limited digital presence. The technical infrastructure appears basic with no detected CMS, scripts, or security headers, and no HTTPS information was provided. Security posture is weak due to lack of HTTPS and absence of security best practices. Overall, the site is not optimized for user engagement, SEO, or compliance, representing a low digital maturity level.

D

DUFC

dufc.co

48

The website www.dufc.co serves as an informational platform focused on the Turkish online betting market, providing insights into local and foreign betting sites, domain changes due to legal restrictions, and features of betting platforms including live betting and casino games. The target audience is Turkish-speaking users interested in online gambling. Technically, the site uses Bootstrap for responsive design and integrates Usermaven for analytics, but lacks advanced SEO and accessibility features. Security posture is weak with no visible HTTPS enforcement or security headers, and no privacy or cookie policies are present, indicating poor compliance with data protection standards. Overall, the site is functional but lacks transparency and professional trust indicators, which may impact user confidence.

S

Sonax Türkiye

sonax.com.tr

42

Sonax Türkiye operates as the official distributor and service provider for SONAX automotive care products in Turkey, offering a wide range of vehicle care, professional detailing, caravan, and bicycle maintenance products alongside application services such as detailing and protective coatings. The website reflects a medium-sized retail business model focused on e-commerce and service delivery to vehicle owners and professional detailers. Technically, the site is built on WordPress with WooCommerce, leveraging modern web technologies including Elementor, Google Analytics, and reCAPTCHA for security and analytics. The site is mobile-optimized and SEO-friendly with good content quality and consistent branding. Security posture is solid with HTTPS and reCAPTCHA, though it lacks some advanced security headers and explicit security policies. Privacy compliance is basic with a cookie policy but no explicit GDPR consent mechanism or detailed privacy policy. Overall, the domain registration appears legitimate and consistent with the business claims, though registrant details are limited. The site is trustworthy, professional, and safe for general audiences.

Ç

ÇİFTÇİOĞLU GRUP

ciftcioglugroup.com

42

ÇİFTÇİOĞLU GRUP is a Turkish construction and contracting company established in 2006, specializing in residential, commercial, and turnkey construction projects. The company positions itself as a reliable partner with over 20 years of engineering experience, offering comprehensive construction services. The website is professionally designed, mobile-optimized, and provides clear contact information, targeting clients in Turkey's real estate and construction sectors. Technically, the site uses modern web standards including HTML5, CSS3, and Google Fonts, but lacks advanced frameworks or CMS indications. Security posture is moderate with HTTPS implied but no visible security headers or privacy policies, and no forms on the homepage to collect user data. WHOIS data is missing, raising concerns about domain registration legitimacy. Overall, the site is functional and trustworthy from a user perspective but requires improvements in security and compliance documentation.

MKG&Partners is a boutique leadership services firm based in Istanbul, Turkey, specializing in executive search and leadership consulting for corporate clients. The company positions itself as Turkey's first national retained search practice focusing on executive and non-executive leadership placements. The website presents a professional image with detailed service descriptions, team profiles, and partner affiliations, indicating a well-established business in the leadership consulting sector. Technically, the website uses standard modern web technologies including Bootstrap, jQuery, and Google Analytics, with good mobile optimization and user experience. However, the absence of privacy and cookie policies suggests compliance gaps, and the login modal lacks visible security features. The WHOIS data is missing, which raises concerns about domain registration transparency. Overall, the website is functional and professional but could improve in privacy compliance and security posture.

M

Bahis Ve Casino Siteleri Yeni Giriş Adresleri

manillapr.com

47

The website manillapr.com operates as an affiliate-style platform primarily targeting Turkish users interested in betting and casino sites, including illegal gambling platforms. It provides updated entry URLs and bonus information for a wide range of betting sites. The business model focuses on referral traffic to these gambling sites, with no direct gambling services offered. Technically, the site uses Bootstrap 5 and Font Awesome for UI, and integrates Google Analytics and Tag Manager for tracking. The site is mobile responsive but lacks advanced SEO and accessibility features. Security posture is weak, with no visible HTTPS enforcement or security headers, and no privacy or cookie policies present. WHOIS data is missing, raising concerns about domain legitimacy and trustworthiness. Overall, the site presents moderate risk due to its promotion of illegal gambling and lack of compliance and security best practices.

H

HKF FUARCILIK A.Ş.

fotegistanbul.com

43

FOTEG İSTANBUL is a well-established international trade fair specializing in food processing technologies, held in Istanbul, Turkey. The event has been active since 2007 and serves as a key meeting point for food industry professionals, exhibitors, and visitors from Turkey and abroad. It offers a broad range of services including exhibitor listings, visitor registration, sponsorship opportunities, and logistical support. The website reflects a medium-sized business with a consistent brand presence and official partnerships, notably with Turkish Airlines and several industry associations. Technically, the website employs modern front-end technologies such as jQuery and Semantic UI, hosted by IHS Telekom, Inc. While the site is functional and mobile-optimized, it lacks advanced SEO and accessibility features. The absence of DNSSEC and security headers indicates room for improvement in security hardening. The site uses AJAX for form submissions but does not visibly implement advanced security controls like CSRF tokens. From a security perspective, the website is accessible without WAF or blocking mechanisms, but it lacks published privacy and cookie policies, which are critical for GDPR compliance. No incident response or security contact information is provided. The domain WHOIS data is consistent with the business claims, showing a long registration history and no privacy protection, supporting legitimacy. Overall, the website scores moderately well in content quality and business credibility but falls short in privacy compliance and security posture. Strategic improvements in security headers, privacy disclosures, and DNS security would enhance trust and compliance.

H

HKF FUARCILIK AŞ

hkf-fairs.com

42

HKF FUARCILIK AŞ is a Turkish company specializing in organizing international specialized trade fairs primarily in transportation, food processing, and poultry sectors. The company holds a reputable market position with memberships and sponsorships in global industry organizations such as UFI and EURASCO. Their website showcases multiple trade fairs and industry events, targeting trade professionals and exhibitors. Technically, the website is built on a modern React framework with Bootstrap and Font Awesome, providing a good user experience and mobile optimization. However, the site lacks visible privacy and cookie policies, security headers, and WHOIS transparency, which impacts its security posture and compliance standing. Overall, the website is professional and content-rich but requires improvements in security and privacy compliance to enhance trustworthiness and regulatory adherence.

The website teknofest.app hosts a landing page titled 'NSosyal' which promotes a social networking mobile application targeted at young people, volunteers, and technology enthusiasts primarily in Turkey. The platform offers features such as following friends, sharing posts including photos and videos, and engaging through likes and comments. The business model revolves around mobile app distribution via Google Play and Apple App Store, with a desktop version accessible through a subdomain. The site content is primarily in Turkish with an English language option. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and Font Awesome icons. It features a visually appealing design with animations and responsive layout optimized for mobile devices. However, there is no evidence of a content management system or advanced frameworks. Performance is moderate with good mobile optimization but basic accessibility and SEO features. From a security perspective, the site uses HTTPS but lacks visible security headers and formal security policies. No forms or sensitive data collection points are present, reducing immediate risk. The absence of privacy, cookie, and terms of service policies indicates compliance gaps, especially regarding GDPR. No contact information or incident response channels are provided, limiting transparency and trust. Overall, the website is functional and visually professional but lacks critical compliance and security documentation. Strategic improvements in privacy policies, security headers, and contact transparency are recommended to enhance trustworthiness and regulatory compliance.

A

Anadolu Ajansı

anadoluimages.com

59

Anadolu Images is the digital content platform of Türkiye’s Global News Agency Anadolu Ajansı, offering a vast archive of editorial photos and videos alongside recent content from global news photographers. The platform targets media outlets and companies worldwide, providing subscription and pay-per-download services. The website is professionally designed with a clear navigation structure and responsive design, leveraging modern web technologies such as Bootstrap, jQuery, and Owl Carousel. Security posture is moderate with HTTPS usage and CSRF protections in forms, but lacks DNSSEC and explicit security headers. Privacy policies are comprehensive and GDPR compliant, though cookie consent mechanisms are absent. Overall, the domain registration data aligns well with the business claims, indicating a legitimate and established media service.

B

BESTCLOUDFORME TEKNOLOJI AS

bestcloudfor.me

22

Bestcloudfor.me is a technology company based in Turkey specializing in advanced cloud, DevOps, and SysOps solutions. The company positions itself as a Premier Tier Partner offering services such as Cloudification, Application Modernization, and AWS Optimization to enhance business competitiveness. The website reflects a professional and modern digital presence with a focus on B2B technology services. Technically, the site leverages React and the Mantine UI framework, integrates HubSpot for forms and analytics, and uses Cloudflare DNS services. Security posture is solid with HTTPS enforced and domain registration protections, though DNSSEC is not enabled and explicit security policies are absent. Privacy compliance is basic with a cookie consent banner but no visible privacy or terms documents. Overall, the site is trustworthy and well-maintained but could improve transparency and security documentation.

E

Eclit

eclit.com

59

Eclit is a Turkish IT services company specializing in managed IT infrastructure, cloud platform services, and tailored technology solutions for businesses ranging from SMEs to large corporates. The company has a strong market presence with over a decade of operation, offering 24/7 system monitoring, cost-effective IT management, and robust data security solutions. Their website reflects a professional and consistent brand image with clear service descriptions and client testimonials. Technically, the site is built on WordPress with modern plugins and integrates Google Analytics and Microsoft Clarity for user insights. Security posture is solid with HTTPS and domain transfer protections, though improvements such as enabling DNSSEC and security headers are recommended. Privacy compliance is basic with a cookie consent banner but lacks a clearly accessible privacy policy. Overall, the site is trustworthy and well-positioned in the technology sector.

I

Error

indieway.biz

50

The domain indieway.biz is currently not connected to an active website and serves a Wix error page indicating the domain is not linked to any Wix site. The business behind the domain is not identifiable from the website content, and no contact or policy information is available. The domain is registered in Turkey with privacy protection and is relatively young, created in 2021. The technical infrastructure is based on Wix platform technologies including AngularJS and jQuery, but the site content is minimal and non-functional. Security posture is weak due to lack of DNSSEC, security headers, and absence of HTTPS enforcement details. Privacy compliance is non-existent as no privacy or cookie policies are found. Overall, the website is not operational and provides no business or security assurances.

O

Odtülüler Dershanesi

ankaradershane.com

45

Odtülüler Dershanesi operates as a boutique educational institution in Ankara, Turkey, specializing in tutoring and exam preparation services for students. The website positions itself as an award-winning center with a high success rate, offering professional coaching, student tracking, motivation programs, and parent communication systems. The target audience primarily consists of students and parents seeking quality educational support in Ankara. Technically, the website is built on WordPress using Elementor and integrates modern plugins for SEO, analytics, and live chat, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and secure forms, but lacks advanced security headers and visible privacy compliance mechanisms. The absence of WHOIS registration data raises concerns about domain legitimacy and transparency. Overall, the site is professional and content-rich but would benefit from enhanced privacy compliance and security practices.

RFL Fuar is a Turkish event organization company specializing in fairs and exhibitions, serving the Turkish foreign trade and industry sectors since 2006. The website presents the company as a leader in providing quality fair services and market access. The business targets professional and corporate clients involved in trade and industry within Turkey. The domain age and WHOIS data support the legitimacy and stability of the business. Technically, the website uses a range of common front-end libraries and frameworks such as Bootstrap, jQuery, and Owl Carousel, hosted on Bluehost. The site shows basic mobile responsiveness and moderate performance but lacks advanced SEO and accessibility features. No CMS or advanced platform is detected, indicating a custom or static site. From a security perspective, the site lacks visible HTTPS confirmation and security headers, and DNSSEC is not enabled. No privacy or cookie policies are published, indicating compliance gaps with GDPR and other privacy regulations. Contact information is clearly provided, but no incident response or security policies are visible. The security posture is moderate but requires improvements to meet best practices. Overall, the website is functional and moderately professional but requires enhancements in security, privacy compliance, and technical modernization to improve trust and user experience. Strategic recommendations include enabling HTTPS, publishing privacy and cookie policies, adding security headers, and improving accessibility and SEO.

RFL Fuar is a Turkish company specializing in organizing trade fairs and exhibitions, serving the Turkish foreign trade and industry sectors since 2006. The website reflects a business-focused approach with clear service offerings and contact information, targeting businesses and professionals interested in trade events. The domain is mature and consistent with the company's history, enhancing credibility. Technically, the website employs a range of common front-end libraries and frameworks such as Bootstrap, jQuery, and Owl Carousel, providing a responsive and user-friendly experience. However, there is no detected CMS or advanced analytics, indicating a relatively simple but functional technical infrastructure. Mobile optimization and navigation clarity are good, though accessibility and SEO could be improved. From a security perspective, the site lacks visible security headers and privacy compliance documentation, which are critical for modern web security and regulatory adherence. The domain is registered with a reputable registrar and DNS hosting provider, but DNSSEC is not enabled. No WAF or blocking mechanisms were detected, and no vulnerabilities were immediately apparent in the HTML content. Overall, the website is functional and credible but requires improvements in security posture and privacy compliance to reduce risk and enhance trustworthiness. Strategic enhancements in these areas would benefit the company's digital maturity and regulatory alignment.

S

Segmentify

segmentify.com

75

Segmentify is a technology company specializing in customer engagement platforms tailored for e-commerce and marketing professionals. Their platform offers a suite of solutions including personalized recommendations, dynamic bundles, real-time analytics, customer data management, and cross-channel marketing. The company is positioned as a medium-sized player in the technology sector, with a focus on enhancing customer lifetime value through data-driven personalization. The website is professionally designed, mobile-optimized, and uses modern web technologies such as WordPress, jQuery, and various marketing analytics tools. Security posture is solid with HTTPS enforced and domain protections in place, but lacks visible security headers and explicit privacy or cookie policies, which are critical for compliance and trust. No WAF or content blocking mechanisms were detected, allowing full content accessibility. Overall, the domain registration data is consistent and trustworthy, supporting the legitimacy of the business.

E

EnterERP

entererp.com

63

EnterERP is a Turkish cloud-based ERP software provider offering a comprehensive suite of business management applications including sales, CRM, finance, accounting, inventory, e-commerce, and more. The platform targets a broad range of industries such as manufacturing, retail, healthcare, and transportation, positioning itself as Turkey's fastest and most comprehensive cloud ERP solution with over 10,000 business users. Technically, the website is built on modern frameworks like Next.js and React, with integrations for Google Analytics, AdRoll, and CookieYes for cookie consent management. The site is well-optimized for mobile and SEO, providing a professional user experience. Security posture is good with HTTPS enforced and cookie consent implemented, but lacks visible security headers and explicit security policies. WHOIS data is missing, which slightly reduces domain trustworthiness. Overall, the website is professional and credible but could improve transparency with privacy and security documentation.

Aktepe is a Turkish company specializing in luxury automotive vehicle transformations and systems, offering a wide range of services including VIP vehicle conversions, marine yacht interior design, and jet interior refits. The company positions itself as a premium provider in the transportation sector with a focus on craftsmanship, quality, and innovation. Their digital presence is built on a modern Next.js framework, providing a responsive and visually appealing website experience. The site includes detailed product catalogs, news updates, and a configurator tool, reflecting a mature digital infrastructure. Security posture is adequate with HTTPS and cookie consent mechanisms, though there is room for improvement in publishing explicit privacy and security policies. WHOIS data confirms the legitimacy and consistency of the domain registration with the business profile. Overall, Aktepe demonstrates a strong market position in luxury vehicle customization with a professional online presence.

Karsan is a well-established Turkish automotive manufacturer specializing in commercial vehicles such as minibuses, buses, and electric minibuses. With over 50 years of experience, the company positions itself as a key player in the Turkish transportation manufacturing sector, targeting commercial vehicle buyers and industry partners. The website reflects a professional and consistent brand image with multilingual support, indicating an international market focus. Technically, the site employs modern frameworks like Bootstrap and integrates common analytics and marketing tools such as Google Analytics and Facebook Pixel. Security measures include HTTPS enforcement and standard security headers, though there is a lack of publicly available security policies or incident response information. The absence of WHOIS data for the domain raises some concerns about domain registration transparency, but the overall business credibility remains high based on website content and contact information. Strategic recommendations include publishing security policies and incident response contacts to enhance trust and compliance.

I

ICA Events

worldfood-istanbul.com

58

WorldFood Istanbul is a well-established international food exhibition organized by ICA Events, targeting food industry professionals globally. The website presents comprehensive information about the event, including exhibitor and visitor resources, agenda, news, and support partners. The technical infrastructure leverages modern web technologies and CMS, ensuring a good user experience and mobile optimization. Security posture is adequate with HTTPS and domain protections, but lacks advanced security headers and published policies. Privacy compliance is partial, with privacy and terms pages present but no cookie consent mechanism. Overall, the site is professional and trustworthy with room for security and privacy improvements.

B

Busworld International BV

busworldturkey.org

51

Busworld Türkiye is a prominent B2B exhibition organizer specializing in the bus and coach industry within Turkey and surrounding regions. The company operates under Busworld International BV, a well-established entity in the transportation exhibition sector. Their flagship event, Busworld Türkiye 2026, is positioned as the largest bus and coach only B2B exhibition in Turkey, attracting thousands of visitors and numerous exhibitors from many countries. The website reflects a professional and consistent brand image, targeting industry professionals and businesses seeking networking and commercial opportunities.

R

RWE Turcas Güney Elektrik Üretim A.Ş.

rwe-turcas.com

64

RWE Turcas Güney Elektrik Üretim A.Ş. is a joint venture between the German utility RWE AG and Turkish energy company Turcas, operating a large, efficient, and environmentally friendly gas-fired combined-cycle power plant in Denizli, Turkey. The company holds a significant market position supplying approximately 1.2% of Turkey's electricity and operates from multiple locations including Ankara, Istanbul, and Denizli. The website presents a professional and comprehensive overview of the business, its mission, and its operations, targeting stakeholders in the energy sector and the general public. Technically, the website uses modern web technologies including JavaScript, CSS, SVG, and UIkit framework, with integration of Google Tag Manager and Usercentrics for consent management. The site is mobile optimized, accessible, and SEO friendly, with good performance metrics. Security posture is solid with HTTPS enforced and cookie consent mechanisms, though explicit security headers and incident response policies are not published. The security evaluation shows no critical vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with a clear privacy policy and cookie consent. However, the WHOIS data for the domain is missing or unavailable, which raises concerns about domain registration transparency and reduces overall trustworthiness. Despite this, the website content and branding align with a legitimate corporate entity. Overall, the site is professional, secure, and compliant with privacy regulations, but the lack of WHOIS data and explicit security policies suggests areas for improvement to enhance trust and security posture.

H

Henkel

henkel-kesifdunyasi.com

61

Henkel's Keşif Dünyası website is a well-structured educational platform aimed at introducing children and teachers in Turkey to scientific concepts through experiments and multimedia content. The initiative aligns with Henkel's corporate social responsibility and brand engagement strategies, focusing on areas relevant to their business such as adhesives, personal care, and sustainability. Technically, the site employs modern web technologies and complies with privacy regulations, including GDPR, with a robust cookie consent mechanism. Security posture is good with HTTPS and Content-Security-Policy headers, though additional security headers and published policies could enhance trust. The absence of WHOIS data is a notable anomaly but does not detract significantly from the site's legitimacy given the strong corporate branding and content quality. Overall, the site presents a professional, trustworthy, and user-friendly experience suitable for its target audience.

N

NESİL BİLİŞİM TEKNOLOJİLERİ TİC. A.Ş.

nesilteknoloji.com

62

NESİL BİLİŞİM TEKNOLOJİLERİ TİC. A.Ş. operates as a prominent Turkish technology company specializing in cybersecurity, data protection, and regulatory compliance services such as KVKK consultancy, penetration testing, and information security management. The company targets corporate clients in regulated sectors including banking, telecommunications, healthcare, and payment systems, positioning itself as a trusted partner with certifications like ISO 27001 and accreditations from TSE and Türkak. Their service portfolio includes software code analysis, AI solutions, and privacy management platforms, reflecting a comprehensive approach to modern cybersecurity challenges. Technically, the website is built on WordPress with modern plugins and frameworks, incorporating SEO best practices, accessibility features, and integration with Google Analytics and Tag Manager. The site demonstrates good mobile optimization and user experience, with clear navigation and professional design. Security measures include HTTPS enforcement and use of reCAPTCHA, though some security headers are not explicitly detected and could be improved. From a security posture perspective, the company shows maturity with published security policies and certifications, but lacks visible incident response or vulnerability disclosure mechanisms. The absence of WHOIS registration data for the domain is a notable anomaly that reduces trust and should be investigated further to confirm domain ownership and legitimacy. Overall, NESİL Teknoloji presents a professional and credible digital presence with strong compliance and security focus, serving a critical niche in the Turkish market. Addressing WHOIS transparency and enhancing security headers would further strengthen their trustworthiness and security posture.

Z

Zeren Group Investment Holding A.Ş.

zerenholding.com

63

Zeren Group Investment Holding A.Ş. is a multinational investment holding company operating across 4 continents and 8 major sectors including energy, manufacturing, shipping, professional services, trading, media, hospitality, and banking. The company positions itself as a reputable group with a strong financial history and entrepreneurial spirit, aiming to create sustainable value globally. The website reflects a mature corporate presence with detailed information about its subsidiaries, sectors, and career opportunities, targeting investors, partners, and potential employees. Technically, the website employs modern JavaScript libraries such as jQuery, Swiper.js, and Google Tag Manager for analytics and user experience enhancements. It features a responsive design with multimedia content and interactive navigation. Cookie consent and privacy compliance mechanisms are well implemented, indicating awareness of GDPR and related regulations. From a security perspective, the site uses HTTPS with good SSL configuration and includes cookie consent banners. However, it lacks explicit security headers and a published security policy or incident response contact. Minor JavaScript warnings exist but do not impact usability. The absence of WHOIS data for the domain is a notable concern for domain legitimacy and transparency. Overall, the website is professional, content-rich, and compliant with privacy norms, but improvements in security posture and domain transparency are recommended to enhance trust and resilience.

Z

Z Sea Line

zsealine.com

63

Z Sea Line is a maritime transportation company specializing in the shipping of crude oil and energy products, operating since 2019 under the Zeren Group Holding Companies. The company positions itself as a reliable partner in global shipping with a focus on sustainable and cost-effective maritime logistics. Their website reflects a professional and business-oriented approach targeting industry professionals and businesses in the energy and transportation sectors. Technically, the website employs a modern frontend stack including jQuery, Bootstrap, and various UI libraries, hosted behind Cloudflare DNS. The site is mobile optimized with good navigation and design quality, though no CMS or advanced backend platform is detected. Performance is moderate with no evident broken elements. However, the site lacks advanced SEO and accessibility features. From a security perspective, the website uses HTTPS and has domain transfer protections but lacks DNSSEC and visible security headers. There are no privacy or cookie policies, nor vulnerability disclosure mechanisms, indicating compliance and security maturity gaps. No analytics or tracking scripts were detected, suggesting minimal user tracking. Overall, the website is functional and professional but would benefit from enhanced privacy compliance, security hardening, and transparency policies to improve trust and regulatory adherence.

Z

Zeren Metal – Gelecek Alüminyum'da

zerenmetal.com

60

Zeren Metal is a Turkish manufacturing company specializing in aluminum products and solutions, targeting various industrial sectors such as automotive, energy, and white goods. The company emphasizes innovation, quality, and sustainability in its production processes. The website reflects a medium-sized enterprise with a professional digital presence built on WordPress and Elementor, showcasing their services and industry expertise. Technical infrastructure is modern with standard CMS and plugins, supported by Cloudflare DNS and HTTPS security. However, the site lacks explicit privacy and cookie policies, which impacts compliance and user trust. Security posture is adequate but could be improved by enabling DNSSEC and adding security headers. Overall, the website is functional, well-branded, and serves its business purpose effectively.

P

Petroleum Energy

petroleumenergy.co

61

Petroleum Energy is a Turkey-based company specializing in services related to the production, distribution, and refining of petroleum products. The company offers a broad range of services including technical and financial feasibility studies, market and regulatory research aimed at local and foreign entrepreneurs in the energy sector. Their website positions them as a service provider with a focus on supporting energy production and sales businesses. Technically, the website uses a modern tech stack including Bootstrap and jQuery libraries, with moderate performance and good mobile optimization. However, there is a lack of advanced SEO and accessibility features. Security posture is weak due to missing HTTPS confirmation, absence of security headers, and no visible privacy or cookie policies. Contact information is clearly provided, including phone, email, and physical address, along with active social media profiles. Overall, the website is professional and business-focused but requires significant improvements in security and privacy compliance to enhance trust and regulatory adherence.

M

MYZ Trading

myztrading.com

63

MYZ Trading is a newly established energy trading company founded in 2024, specializing in the global supply and trading of crude oil, petrochemical products, and investments. The company serves a diverse clientele including national oil companies, multinational corporations, and industrial firms, emphasizing sustainability and responsible business practices. The website reflects a professional and consistent brand image aligned with its parent company, Zeren Group Holding. Technically, the site employs a modern tech stack with popular JavaScript libraries and frameworks, hosted behind Cloudflare DNS, and uses HTTPS for secure communication. However, the absence of security headers and DNSSEC indicates room for improvement in security hardening. Privacy compliance is weak due to missing privacy and cookie policies, and no explicit contact information is provided, which may affect user trust and regulatory compliance. Overall, the website is functional, well-designed, and content-rich but requires enhancements in security and privacy transparency to strengthen its digital maturity and trustworthiness.

M

MYZ Bilgisayar Otomotiv İnşaat Petrol Sanayi Tic. Ltd. Şti.

myzco.com

63

MYZ Bilgisayar Otomotiv İnşaat Petrol Sanayi Tic. Ltd. Şti. is a diversified Turkish company established in 2014, offering a wide range of services including open-air advertising, media and advertising, IT and software development, automotive and fleet rental, consultancy, logistics, supply, and commodity trading. The company targets business clients seeking comprehensive solutions across these sectors and maintains a moderate market position with a medium-sized enterprise profile. Their website reflects a professional and consistent brand image with clear service descriptions and client references. Technically, the website employs modern front-end technologies such as Bootstrap and jQuery, with Cloudflare DNS services. The site is moderately optimized for performance and mobile use, though accessibility and SEO features are basic. No CMS or advanced analytics tools are detected, indicating a relatively straightforward technical infrastructure. From a security perspective, the site uses HTTPS and has domain transfer protections in place, but lacks DNSSEC and important security headers, which are recommended for enhanced protection. No explicit security or incident response policies are published, and no vulnerability disclosure or data protection officer information is available. Cookie consent is implemented with an opt-in mechanism, and a privacy policy is present but basic. Overall, the website is safe, professional, and trustworthy with no adult or questionable content. The domain registration data aligns well with the business history, supporting legitimacy. Strategic improvements in security headers, DNSSEC, and published security policies would enhance the security posture and compliance standing.

T

Turkticaret.net Yazilim Hizmetleri Sanayi ve Ticaret A.S.

myzcocharge.com

61

MYZ Co Charge is a Turkish-based service providing a mobile application platform to help electric vehicle owners locate nearby charging stations with real-time availability. The company targets EV drivers in Turkey, offering convenience through its app available on both the Apple App Store and Google Play. The business is newly established in late 2024, positioning itself in the growing energy and transportation sector focused on sustainable mobility solutions. Technically, the website uses modern frontend technologies such as Bootstrap, jQuery, and Swiper, hosted behind Cloudflare DNS services, ensuring decent performance and mobile responsiveness. However, DNSSEC is not enabled, and security headers are missing, indicating room for improvement in security hardening. The website is accessible without WAF or blocking challenges, and contact information including a corporate email and physical address is clearly provided, enhancing business credibility. Privacy and terms of service documents are present but cookie consent mechanisms are absent, which may affect GDPR compliance. Overall, the site demonstrates a good balance of content quality, technical implementation, and business credibility, scoring 74 out of 100 in AI evaluation.

F

Foxcroft Turizm Otelcilik Seyahat Sanayi ve Tic. A.Ş.

foxcrofthotels.com

59

Foxcroft Turizm Otelcilik Seyahat Sanayi ve Tic. A.Ş. operates in the hospitality sector, likely providing hotel and tourism services in Turkey. The website is currently a minimal 'Coming Soon' placeholder page with very limited content and no interactive features or detailed business information. The target audience appears to be potential customers or visitors interested in hospitality services, but the site does not yet provide sufficient information to engage or convert visitors. Technically, the website uses basic web technologies including HTML5, CSS3, JavaScript, jQuery, and Modernizr. It is hosted behind Cloudflare DNS services, but no detailed hosting or CMS information is available. The site shows basic mobile optimization and accessibility but lacks SEO optimization and advanced technical features. Performance is moderate given the minimal content. From a security perspective, the site lacks visible HTTPS confirmation in the provided data, no security headers are detected, and no privacy or cookie policies are present. There are no forms or data collection points to assess for input security. The domain registration is consistent with the business and country, registered in 2020 with a reputable Turkish registrar. Overall security posture is weak due to missing best practices and policies. The overall risk is moderate given the minimal content and lack of security and privacy features. Strategic improvements should focus on enabling HTTPS, adding privacy and cookie policies, providing contact information, and enhancing security headers and SEO. These steps will improve trust, compliance, and user engagement.

Alpet Madeni Yağları is a Turkish company specializing in the manufacturing and distribution of lubricants and industrial oils, operating for nearly 20 years under the umbrella of Zeren Group Holding. The company serves a broad industrial and commercial audience with a diverse product portfolio including engine oils, marine lubricants, greases, and complementary products. Their market position is that of a well-established domestic producer with an international distribution network spanning 54 distributors. Technically, the website is built on WordPress using modern tools like Elementor and Yoast SEO, providing a good user experience with mobile optimization and SEO best practices. Security posture is adequate with HTTPS enabled but lacks advanced security headers and explicit privacy compliance mechanisms such as cookie consent banners. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, which should be verified. Overall, the website is professional and trustworthy, but improvements in security and privacy compliance are recommended.

N

Nesil Grup Teknoloji Tic. A.Ş

cerezgo.com

70

Nesil Grup Teknoloji Tic. A.Ş operates the Cerezgo platform, a cookie consent management solution designed to help websites comply with Turkish KVKK and GDPR regulations. The company has over 15 years of experience in technology and data protection consultancy, serving a broad range of sectors in Turkey. Their website reflects a professional and trustworthy business with clear service offerings and certifications such as ISO 27001. Technically, the site uses modern web technologies including Bootstrap and jQuery, and integrates multiple analytics and marketing tools. Security posture is solid with HTTPS and domain transfer protections, though improvements like DNSSEC and security headers are recommended. Privacy compliance is partially addressed with a detailed cookie policy and consent mechanism, but lacks a dedicated privacy policy and terms of service pages. Overall, the website and business demonstrate a mature digital presence with room for enhanced security and compliance documentation.

O

ODTU Gelistirme Vakfi Bilgi Teknolojileri Sanayi Ve Ticaret Anonim Sirketi

goturkiye.com

66

GoTürkiye is the official travel guide website for Türkiye, providing comprehensive tourism information, travel planning tools, and cultural insights to visitors worldwide. The website targets tourists interested in exploring Türkiye's diverse destinations, sustainable tourism options, cultural heritage, and events. It operates under the legal entity ODTU Gelistirme Vakfi Bilgi Teknolojileri Sanayi Ve Ticaret Anonim Sirketi, established in 2018, positioning itself as a trusted and official source for travel information. Technically, the website leverages modern web technologies including Next.js and React, hosted with assets on Google Cloud Storage and DNS managed via Cloudflare. It integrates Google Tag Manager for analytics and Google Maps API for location services. The site demonstrates good mobile optimization and SEO practices, though accessibility features are basic. Performance is moderate with room for improvement. From a security perspective, the site uses HTTPS and has domain transfer protections in place. However, DNSSEC is not enabled, and no explicit security headers were detected, which are areas for enhancement. Privacy and cookie policies are not present in the analyzed content, indicating a gap in compliance with GDPR and other privacy regulations. No contact emails or phone numbers were found, limiting direct communication channels. Overall, the website is professionally designed and credible as an official tourism portal but would benefit from improved privacy compliance, enhanced security configurations, and clearer contact information to strengthen trust and regulatory adherence.

Z

Zeren Group Investment Holding A.Ş.

zerengroup.com

62

Zeren Group Investment Holding A.Ş. is a large, multi-sector investment holding company operating across 4 continents and 8 key sectors including energy, manufacturing, shipping, professional services, trading, media, hospitality, and banking. The company presents itself as a reputable group with a strong emphasis on sustainable value creation and entrepreneurship. Their website is professionally designed, mobile-optimized, and provides comprehensive information about their business activities, subsidiaries, and career opportunities. Technically, the website uses modern JavaScript libraries such as jQuery and Swiper.js, integrates Google Analytics for visitor tracking, and employs a cookie consent mechanism powered by Cerezgo, indicating a mature digital infrastructure. The site is served over HTTPS with no visible blocking or WAF challenges, though minor PHP warnings in the HTML source suggest some backend issues that should be addressed. From a security perspective, the site enforces HTTPS and cookie consent but lacks explicit security headers in the provided data. No incident response or security policy pages were found, which could be improved to enhance trust and compliance. The absence of WHOIS data for the domain raises some legitimacy concerns, though the website content and business presence appear professional and consistent with a legitimate enterprise. Overall, the website scores well on content quality, technical implementation, privacy compliance, and business credibility, with recommendations to fix backend warnings, implement security headers, and verify domain registration details to strengthen trustworthiness and security posture.

S

Sonuç Bilişim El. Ev Al.Ser.Tic.Ltd.Şti.

faturago.com

50

Fatura Ödemex is a Turkish online platform specializing in utility bill inquiry and payment services, covering electricity, water, telephone, natural gas, internet, and TV bills. The platform targets individual and corporate customers in Turkey, offering a user-friendly interface with over 300 institutions supported. It operates as a representative of N Kolay Ödeme ve Elektronik Para Kuruluşu A.Ş., indicating a solid partnership and market presence. The website is well-branded, mobile-optimized, and provides social media engagement and mobile applications to enhance accessibility. Technically, the site is built on ASP.NET Web Forms with custom JavaScript and uses common libraries such as FontAwesome. The performance is moderate with good SEO and mobile responsiveness. Security is adequate with HTTPS and 3D secure payment mentions, but lacks some modern security headers and explicit incident response or vulnerability disclosure policies. Analytics usage is moderate with GetClicky tracking. Overall, the security posture is good but could be improved by implementing additional HTTP security headers, cookie consent mechanisms, and publishing security policies. The business credibility is high with clear contact information, user testimonials, and consistent branding. No suspicious or malicious content was detected, and the site is safe for general audiences.

G

GazElektrik

gazelektrik.com

63

GazElektrik.com is a Turkish online platform providing comprehensive guides and application services related to electricity, natural gas, telecommunications, insurance, and security systems. The website serves as an information hub and lead generation portal for consumers seeking to manage utility subscriptions, switch providers, and pay bills. It targets residential and commercial users in Turkey, positioning itself as a niche market player with a focus on energy and telecom sectors. The business is linked to the AkıllıTarife.com brand, indicating a broader ecosystem of related services. Technically, the website is built on Drupal 10, hosted by OVH sas, and uses Cloudflare DNS. It integrates Google Analytics and Google Tag Manager for tracking and marketing purposes. The site is mobile-optimized with good navigation and content relevance, although accessibility features are basic. Security posture is adequate with HTTPS enabled and domain protections in place, but lacks DNSSEC and advanced security headers. Privacy compliance is basic with cookie consent implemented and a privacy policy linked in the footer, though no explicit GDPR compliance statements or security policies are found. Overall, the site is professional and trustworthy but could improve in security and compliance transparency.

A

Akıllı Tarife

akillitarife.com

67

Akıllı Tarife is a Turkish service platform founded in 2015 that offers consumers discounted electricity, natural gas, internet, TV, mobile, alarm systems, and insurance products. The website serves as a comparison and lead generation portal, helping users find cheaper utility and telecommunication services with detailed guides and application forms. The company targets Turkish consumers looking to reduce their bills and manage services efficiently, especially during moving. Technically, the site is built on Drupal 10, hosted by OVH sas, and uses Cloudflare DNS with Google Analytics and Tag Manager for tracking. The site is mobile optimized and well-structured, providing a good user experience. Security posture is solid with HTTPS and cookie consent, though some security headers and explicit policies are missing. WHOIS data is transparent and consistent with the business claims, supporting legitimacy. Overall, the site is professional, trustworthy, and compliant with basic privacy requirements.