Education security reports

R

responsiblo s.r.o.

responsiblo.com

60

responsiblo s.r.o. operates a specialized smart education platform targeting businesses in regulated sectors such as alcohol, gambling, tobacco, pharmaceuticals, and financial services. The platform offers interactive, customizable educational content designed to promote responsible product use and help companies meet CSR and regulatory compliance requirements. The company is positioned as an innovative leader in responsible business education with a focus on leveraging AI and machine learning for tracking and analytics. Technically, the website uses modern web technologies including Vue.js and is well-optimized for mobile and SEO, though some security headers and cookie consent mechanisms are missing. The security posture is solid with HTTPS enabled and no exposed sensitive data, but improvements in DNS security and explicit security policies are recommended. Overall, the website is professional, trustworthy, and mature-audience oriented due to the nature of the industries served.

P

PUSCH Praktischer Umweltschutz

pusch.ch

65

PUSCH Praktischer Umweltschutz is a Swiss non-profit organization dedicated to supporting municipalities, schools, and companies in practical environmental protection. Their services include environmental education, consultancy on biodiversity, climate, sustainable procurement, and circular economy. The website is professionally designed using TYPO3 CMS, with a clear structure and multilingual support (German and French). The organization maintains a strong online presence with social media channels and provides comprehensive contact information. Technically, the site uses modern web technologies and includes Google Tag Manager for analytics. Security posture is good with HTTPS enforced and cookie consent implemented, though no explicit security or incident response policies are published. Overall, the domain registration aligns well with the organization's profile, indicating legitimacy and trustworthiness.

P

Pädagogische Hochschule Thurgau

phtg.ch

61

Pädagogische Hochschule Thurgau (PHTG) is a Swiss educational institution specializing in scientifically grounded teacher training and continuing education for all levels of primary and secondary education. The institution offers a broad range of study programs, professional development courses, and research projects, targeting educators and education professionals. The website reflects a strong regional presence with collaborations such as with the University of Konstanz, emphasizing cross-border educational opportunities. Technically, the website is built on modern web standards, leveraging Google Tag Manager and CookieYes for consent management, and is likely hosted on Wix, as indicated by certain cookies. The site is well-optimized for mobile and accessibility, with a professional design and clear navigation. Security-wise, the site enforces HTTPS and implements cookie consent mechanisms but lacks explicit security policy and incident response information. Overall, the domain registration details align with the institution's identity, supporting legitimacy and trustworthiness.

N

NOVÁ ŠKOLA, s.r.o.

english-nns.cz

42

The website www.english-nns.cz/blog is an educational portal operated by NOVÁ ŠKOLA, s.r.o., focused on providing comprehensive English language teaching materials for primary schools and kindergartens in the Czech Republic. It offers textbooks, workbooks, multimedia interactive content, video demonstrations, and downloadable resources aligned with Czech educational standards. The site targets educators and teachers of young learners, supporting effective and engaging English language instruction. Technically, the site is built on WordPress with a moderate modern tech stack including Google Analytics and Tag Manager for tracking, and uses Google reCAPTCHA for form security. The site is mobile optimized and has good navigation and content quality. Security posture is solid with HTTPS and reCAPTCHA, but lacks security headers and explicit privacy and cookie policies, which are compliance gaps. WHOIS data is missing, which reduces trustworthiness and calls for further verification. Overall, the site is functional, professional, and safe for its audience but could improve privacy compliance and security best practices.

N

NOVÁ ŠKOLA, s.r.o.

eduzio.cz

59

Eduzio.cz is an educational platform specializing in online preparatory tests for secondary schools and gymnasiums in the Czech Republic, aligned with the CERMAT standard. The platform collaborates with the established publisher NOVÁ ŠKOLA, s.r.o., which has a history dating back to 1997. Eduzio offers targeted test preparation in Czech language and mathematics, providing immediate feedback to students to enhance learning effectiveness. The website is professionally designed, mobile-optimized, and provides clear navigation and relevant educational content, including a blog and FAQ sections.

N

NOVÁ ŠKOLA, s.r.o.

matyskova-matematika.cz

50

Matýskova matematika is an educational portal focused on providing mathematics learning materials and videos for primary school students from grades 1 to 5. It is part of a broader educational system called AMOS, supported by the company NOVÁ ŠKOLA, s.r.o. The website offers a range of services including video tutorials, interactive textbooks, workbooks, and teacher seminars. The portal targets students, teachers, and parents seeking quality math education resources. Technically, the site is built on WordPress with modern web technologies and includes security features such as HTTPS, Google reCAPTCHA, and anti-spam plugins. However, the absence of WHOIS data and limited privacy and cookie policy disclosures slightly reduce its trustworthiness. Overall, the site is well-designed, accessible, and provides valuable educational content with a good security posture.

N

NOVA SKOLA, s.r.o.

ucebnice.online

51

Učebnice online is an educational platform operated by NOVA SKOLA, s.r.o., offering multimedia interactive textbooks (MIUč+) primarily for primary school students and teachers in the Czech Republic. The website provides both online and installed versions of their educational software, supported by video tutorials and technical assistance. The business model revolves around licensing and subscription access to over 110 interactive textbooks covering a wide range of subjects. The company maintains a moderate market position with a clear focus on digital education content.

N

NOVÁ ŠKOLA, s.r.o.

objevujeme-informatiku.cz

48

The website 'Objevujeme informatiku' is an educational platform presenting a new series of informatics textbooks with video tutorials, published by NOVÁ ŠKOLA, s.r.o. It targets teachers and students in the 4th and 5th grades of Czech elementary schools. The site offers detailed content about the textbooks, including features like QR code usage, motivational tasks, and digital literacy support. The business operates in the education sector with a niche focus on informatics education materials. Technically, the site is built on WordPress with modern libraries such as jQuery and Font Awesome, and it is well-optimized for mobile and accessibility. Security posture is adequate with HTTPS enabled, but lacks some security headers and privacy compliance elements. WHOIS data is unavailable, which limits domain trust assessment but the website content and presentation are professional and trustworthy.

NAŠE ŠKOLA, s.r.o. operates the Media Creator MIUč+ platform, providing educational multimedia software and titles primarily targeting teachers and students in the Czech Republic. The company distributes software builds for multiple platforms including Windows, Android, Linux, macOS, and iOS (limited support). The business model combines free software downloads with paid licenses and certificates sold via a partner e-shop (nns.cz). The website content is focused on educational products with clear versioning and update information, supporting a niche market in educational technology. Technically, the site uses basic HTML, CSS, and JavaScript without advanced frameworks or CMS detected. The software itself leverages Qt5 technology for cross-platform compatibility.

R

Rīgas Valsts Tehnikums

rvt.lv

51

Rīgas Valsts Tehnikums (RVT) is a Latvian state technical school providing vocational education across multiple technical and commercial disciplines. The institution targets students and adult learners, offering a broad range of programs supported by EU projects such as Erasmus+. The website reflects a well-established educational entity with a clear focus on technical training and community engagement. Technically, the site is built on WordPress with Elementor and Astra theme, leveraging modern web technologies and security practices including HTTPS and security headers. However, the absence of a visible cookie consent mechanism and explicit security policies indicates room for compliance improvement. Overall, the site is professional, secure, and trustworthy, with active social media presence and clear contact channels.

J

Jisc

jisc.ac.uk

75

Jisc is a UK-based organization focused on providing digital technology and data services to the tertiary education, research, and innovation sectors. The website demonstrates a strong market position as a leading provider of training, consultancy, connectivity, cloud, AI, cyber security, and data analytics services tailored for educational institutions. The digital infrastructure is modern, leveraging React, Next.js, and Material-UI, with integration of analytics and tracking tools such as Matomo, Google Analytics, and Hotjar, all managed with user consent mechanisms. Security posture is robust with HTTPS, Content Security Policy, and bot protection via hCaptcha, though explicit security policies and incident response details are not published. Overall, the website is professional, accessible, and trustworthy, supporting a large, established organization in the UK education sector.

N

NOVÁ ŠKOLA, s.r.o.

nns.cz

54

NOVÁ ŠKOLA, s.r.o. is a Czech educational publisher specializing in textbooks, interactive learning materials, and educational software primarily targeting primary and secondary schools. The company operates an e-commerce platform offering these products and provides support and downloads for their interactive tools. The website is built on WordPress and uses modern web technologies including Google Tag Manager and Google Analytics with privacy-conscious consent settings. The site is well-structured, mobile-optimized, and provides clear navigation and relevant content for its audience. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and published security policies are absent. WHOIS data for the domain is unavailable, which slightly reduces trustworthiness but does not negate the legitimacy indicated by the website content and business presence. Overall, the site is professional, secure, and compliant with GDPR requirements, serving its educational market effectively.

I

Institut für Kulturforschung Graubünden

kulturforschung.ch

62

The Institut für Kulturforschung Graubünden (ikg) is an independent research institution based in Chur, Switzerland, focusing on humanities, social sciences, and cultural studies related to the Alpine region, especially Graubünden. The website serves as a platform for disseminating research projects, publications, events, and membership information, targeting academics, researchers, and culturally interested audiences. The business model revolves around research, publication, and community engagement through events and memberships. Technically, the website employs modern web technologies including Google Analytics with IP anonymization, Google Tag Manager, Typekit fonts, and Swiper.js for interactive content sliders. The site is mobile-optimized, accessible, and SEO-friendly, though it lacks some advanced security headers. Performance is moderate, with a professional and consistent design. From a security perspective, the site uses HTTPS with good SSL configuration and respects user privacy with cookie consent mechanisms. However, it lacks explicit security headers and does not provide a public incident response or vulnerability disclosure policy. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website is trustworthy, professionally maintained, and compliant with GDPR principles. It effectively supports the institute's mission and audience engagement. Strategic improvements in security headers and transparency around incident response could further enhance its security posture and user trust.

The Bibliotheksverbund Graubünden website serves as a centralized catalog portal for 37 school and community libraries within the canton of Graubünden, Switzerland. It provides users with the ability to search media collections, make reservations, and renew loans. The site supports multiple regional languages (German, Italian, Romansh) reflecting its target audience. The business model is a public service facilitating shared library resources, positioning it as a key regional educational infrastructure.

I

International School Sport Federation (ISF) via Domains By Proxy, LLC

isf-eras.org

53

The ISF ERAS website serves as a registration and login portal for the International School Sport Federation's event management platform. It targets schools, sports organizations, and participants involved in school sports events. The site provides user account creation and login functionalities, with confirmation emails upon approval. The business operates in the education and non-profit sectors, focusing on facilitating school sports event participation internationally. The domain is registered since 2017 and uses privacy protection services, which is typical for organizations of this nature. Technically, the website is built on WordPress using the Divi theme and Gravity Forms plugin for form handling. It integrates Google Analytics and Google Tag Manager for visitor tracking. The site is hosted via GoDaddy, with domain control nameservers. Performance and mobile optimization are moderate to good, but SEO and accessibility features are basic. The site lacks explicit privacy and cookie policies, which impacts compliance and user trust. From a security perspective, the site uses HTTPS and has domain registration locks enabled, indicating good domain management. However, DNSSEC is not enabled, and no security headers such as CSP or HSTS are detected. There is no visible vulnerability disclosure or incident response information. Forms are handled via Gravity Forms, which is a secure and widely used plugin. Overall, the security posture is moderate but could be improved with additional headers and policies. The overall risk assessment is moderate with recommendations to implement privacy and cookie policies, enable DNSSEC, add security headers, and provide vulnerability disclosure information. These steps would enhance compliance, user trust, and security maturity, aligning the site with best practices for organizations handling user registrations and personal data.

R

Responder Alliance

responderalliance.com

56

Responder Alliance is a specialized training organization focused on stress resilience education for first responders and outdoor professionals. Their offerings include group training, online courses, memberships, and resource tools designed to prevent burnout and traumatic stress injury. The organization positions itself as a leading resource with internationally recommended and scientifically validated methods. Technically, the website is built on Squarespace, leveraging modern web technologies and third-party services such as HubSpot and Google Tag Manager. The site is well-designed, mobile-optimized, and provides a good user experience. Security posture is generally good with HTTPS enforced, but lacks some security headers and published policies. The absence of WHOIS data for the domain is a notable concern, though the active and professional website presence mitigates some risk. Overall, the site is trustworthy and safe for general audiences, but improvements in privacy compliance and security transparency are recommended.

A

American Mountain Guides Association

amga.com

55

The American Mountain Guides Association (AMGA) is a well-established 501(c)(3) non-profit organization focused on education, certification, and advocacy for professional mountain guides and climbing instructors in the United States. The organization holds a leading market position with international recognition and offers a range of programs, memberships, and resources to support the mountain guiding community. Their website reflects a professional and consistent brand image targeting both aspiring and current guides as well as outdoor enthusiasts. Technically, the website is built on WordPress with a modern tech stack including jQuery, Google Analytics, and Yoast SEO for optimization. Hosting and DNS services are managed through reputable providers including Network Solutions and Cloudflare. The site demonstrates good mobile optimization and moderate performance, with room for improvement in accessibility and cookie consent compliance. From a security perspective, the site enforces HTTPS, uses domain locking, and employs Google reCAPTCHA to protect forms. However, DNSSEC is not enabled, and there is no visible cookie consent mechanism or published security/incident response policies, which are areas for enhancement. No critical vulnerabilities or suspicious activities were detected. Overall, the AMGA website presents a trustworthy, professional, and content-rich platform with strong business credibility. Strategic improvements in privacy compliance and domain security would further strengthen their security posture and user trust.

A

Asociace školních sportovních klubů České republiky (AŠSK ČR z.s.)

sportujveskole.cz

49

Sportuj ve škole is a Czech Republic-based non-profit project managed by the Association of School Sports Clubs of the Czech Republic (AŠSK ČR z.s.) aimed at promoting physical activity among primary school children. The project offers free weekly sports lessons during school aftercare, focusing on popular sports such as basketball, volleyball, football, handball, and floorball. It enjoys partnerships with notable organizations including Sportisimo and the Ministry of Education, enhancing its credibility and reach. The website is well-structured, mobile responsive, and provides clear contact information and testimonials, supporting its trustworthiness. Technically, the website employs modern web technologies including Bootstrap 4, jQuery, FontAwesome 5, and Owl Carousel, ensuring a good user experience across devices. The site uses HTTPS with a presumably strong SSL configuration, though lacks some advanced security headers and a security.txt file. Cookie consent mechanisms are implemented, reflecting GDPR compliance awareness. However, the absence of WHOIS data limits domain trust verification, which is a moderate concern. Security posture is generally good with HTTPS enforced and no obvious vulnerabilities detected in the content. Privacy compliance is supported by a privacy policy document and cookie consent, but explicit incident response or security policies are not found. The website content is safe for general audiences, focusing on children's sports and education without any adult or explicit material. Overall, the project appears legitimate and professionally managed, though improvements in security headers, WHOIS transparency, and formal security policies would enhance trust and compliance. The site scores well in content quality, technical implementation, security posture, privacy compliance, and business credibility, resulting in a solid overall AI score of 78.

A

Asociace školních sportovních klubů České republiky (AŠSK ČR z.s.)

letnikempyassk.cz

48

The website represents the Asociace školních sportovních klubů České republiky (AŠSK ČR z.s.) and its Letní kempy AŠSK project, a government-funded non-profit initiative focused on providing summer educational camps to children in the Czech Republic. The project aims to mitigate educational disruption caused by the COVID-19 pandemic by offering popular-educational and physical activities to support children's learning and social development. The website is well-structured, professionally designed, and provides clear information about the project, partners, and contact details. Technically, it uses modern web technologies such as Bootstrap, jQuery, and FontAwesome, ensuring good mobile responsiveness and user experience. Security posture is moderate with HTTPS usage and cookie consent mechanisms, but lacks visible advanced security headers or published security policies. WHOIS data is unavailable, which limits domain legitimacy verification, but the presence of government funding and partner references supports trust. Overall, the site is a credible educational resource with room for improvement in security transparency and WHOIS data availability.

M

McDonald’s ČR spol. s r. o.

mcdonaldscup.cz

67

McDonald’s Cup is a well-established youth football tournament in the Czech Republic, targeting children aged 6-11 years from elementary schools. The website serves as an information and registration portal for schools, organizers, and participants, supported by strong partnerships with McDonald’s, the Czech Football Association, UEFA Grassroots, and government bodies. The site features rich multimedia content, event updates, and training resources, reflecting a mature digital presence. Technically, the site is built on WordPress with modern JavaScript libraries and integrates Google Analytics and Tag Manager for tracking, alongside a cookie consent mechanism. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, though some security headers are missing. Privacy and cookie policies are present and GDPR compliant. However, the absence of WHOIS data reduces transparency and trust slightly. Overall, the site is professional, user-friendly, and trustworthy for its audience.

I

International School Sport Federation

isfsports.org

57

The International School Sport Federation (ISF) operates as a global non-profit organization dedicated to promoting school sports and organizing international school sports events. The website reflects a professional and well-structured digital presence, leveraging Drupal 9 CMS and modern web technologies. The organization maintains active social media channels and provides event information and registration through partner domains. Technically, the website is well-implemented with HTTPS, standard security practices, and moderate performance. However, explicit privacy policies, terms of service, and contact information are not prominently available, which could be improved for better transparency and compliance. The WHOIS data is unavailable or protected, which is common for non-profit organizations but limits domain trust analysis. Overall, the website is trustworthy, safe, and serves its educational and sports community effectively.

A

Asociace školních sportovních klubů

assk.cz

49

Asociace školních sportovních klubů (AŠSK ČR) is a Czech non-profit organization dedicated to promoting and organizing school sports clubs and competitions across the Czech Republic. The website serves as a central hub for information on sports events, projects, educational seminars, and partnerships with various sports organizations and governmental bodies. The association targets schools, students, and educators, providing resources and support to foster youth sports engagement. Technically, the website employs a modern tech stack including Bootstrap, jQuery, FullCalendar, and other JavaScript libraries to deliver a responsive and interactive user experience. The site is mobile-optimized and includes cookie consent mechanisms aligned with GDPR requirements. However, some security best practices such as HTTP security headers are not evident, and WHOIS data for the domain is unavailable, which may affect trust perceptions. From a security perspective, the site uses HTTPS and implements cookie consent with granular controls, but lacks visible security headers and explicit security policies. No vulnerabilities or exposed sensitive data were detected in the provided content. The absence of WHOIS data is a notable gap, though the website content and partner affiliations suggest legitimacy. Overall, the website is professionally designed, content-rich, and serves its educational and organizational purpose well. Strategic improvements in security headers, domain registration transparency, and accessibility could enhance trust and compliance.

S

SPŠ stavební Liberec

stavlib.cz

41

SPŠ stavební Liberec is a vocational secondary school specializing in construction and geodesy education located in the Czech Republic. The website serves as an information portal for prospective students, current students, and other stakeholders, offering detailed course information, news, and resources. The institution positions itself as a reputable regional educational provider with a focus on practical training and career readiness in prestigious technical fields. Technically, the website is built on WordPress with a modern tech stack including Yoast SEO, Google Analytics, and social media integrations, reflecting a mature digital presence. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers could be improved. The absence of WHOIS data limits domain trust assessment, but the website content and social media presence support legitimacy. Overall, the site is professional, content-rich, and compliant with GDPR, making it a trustworthy source for its audience.

G

Gymnázium Dr. Antona Randy

randovka.cz

46

Gymnázium Dr. Antona Randy is a well-established educational institution located in Jablonec nad Nisou, Czech Republic, founded in 2010. The school offers modern gymnasium education with a focus on both general and sports-oriented programs, aiming to support student success and comprehensive development. The website reflects a professional and consistent brand image targeting prospective students, parents, and educational stakeholders. The institution maintains an active presence on major social media platforms such as YouTube, Facebook, and Instagram, enhancing its outreach and engagement. Technically, the website is built on WordPress using the Avada theme and Fusion Builder, incorporating modern web technologies like jQuery and Slider Revolution for dynamic content. The site is mobile-optimized and performs moderately well, with good SEO practices evident. Hosting and domain registration are consistent with the Czech Republic location, and the domain age supports the institution's established presence. From a security perspective, the site uses HTTPS with good SSL configuration but lacks visible security headers and published security policies. No forms or data collection mechanisms were detected on the main page, reducing immediate data protection concerns. However, the absence of privacy and cookie policies indicates compliance gaps with GDPR and related regulations. No incident response or vulnerability disclosure information is provided, which could be improved to enhance trust and security posture. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance and security best practices to align with modern standards and regulatory requirements.

ISŠ Vysoké nad Jizerou is a well-established vocational secondary school in the Czech Republic specializing in automotive, logistics, and related technical education. The institution offers a variety of study programs including both vocational and maturitní (graduation) courses, complemented by practical training such as welding courses, driving licenses, and professional internships. The school maintains a strong regional presence with a history dating back to 1998 for the domain and over 100 years of educational tradition. The website reflects a medium-sized educational institution targeting students and the local community with clear navigation and relevant content. Technically, the site uses modern front-end libraries and a CMS platform (Cliquo), with good mobile optimization and moderate performance. Security posture is adequate with HTTPS enforced, but lacks advanced security headers and explicit incident response information. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is professional, trustworthy, and safe for general audiences.

A

Associação Empresarial de Fafe, Cabeceiras de Basto e Celorico de Basto

aefafe.pt

48

Associação Empresarial de Fafe, Cabeceiras de Basto e Celorico de Basto is a regional non-profit business association in Portugal focused on supporting local businesses through professional education, training, and internationalization services. The website serves as an informative and promotional platform for the association's activities, projects, and events, targeting local entrepreneurs and companies in the Fafe, Cabeceiras de Basto, and Celorico de Basto regions. The association operates professional schools and offers various business support programs, positioning itself as a key regional player in business development and education. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and Revolution Slider, ensuring good SEO and user experience. The site is mobile-optimized and uses HTTPS with reCAPTCHA v3 for form protection, reflecting a moderate to good digital maturity. However, some accessibility and security headers could be improved. From a security perspective, the site enforces HTTPS and uses anti-bot measures but lacks explicit security policies and some recommended HTTP security headers. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy policy, which is a compliance gap. Overall, the website is professional, trustworthy, and serves its business purpose well, but it would benefit from enhanced privacy and security disclosures to improve compliance and user trust.

A

AIRV

airv.pt

46

AIRV is a well-established Portuguese non-profit business association founded in 1982, serving over 500 member companies primarily in the Viseu region. The organization focuses on supporting regional businesses through innovation, training, legal assistance, incubation, and entrepreneurship development. Their website reflects a mature digital presence built on WordPress with modern technologies and SEO optimizations. Privacy and cookie compliance are well implemented, including GDPR consent mechanisms. The security posture is solid with HTTPS and no critical vulnerabilities detected, though some security headers could be improved. Overall, AIRV demonstrates a credible and trustworthy online presence aligned with its mission to promote regional economic and social development.

Malmö universitet is a well-established public university located in Malmö, Sweden, founded in 2003. It serves approximately 24,000 students and focuses on innovative, urban, and international education and research that contributes to societal development. The website reflects a professional academic institution with a clear focus on education and research services. Technically, the site uses modern web technologies including React and third-party widgets, hosted on Oracle Cloud DNS. However, there is room for improvement in security posture, including enabling DNSSEC, implementing security headers, and publishing privacy and cookie policies. No signs of WAF or content blocking were detected, allowing full content accessibility. Overall, the site is credible and trustworthy but could enhance privacy compliance and security best practices.

J

Jazyková paměť regionů

jamap.cz

55

Jazyková paměť regionů is an academic and research-focused project dedicated to the preservation, documentation, and presentation of Czech language dialects. The website serves as a platform offering various tools such as a dialect sound database, dialect detector, automatic transcription services, and dialect maps. It is affiliated with reputable Czech academic institutions and funded by the Czech Ministry of Culture, positioning it as a unique educational resource in the Czech Republic. Technically, the site is built on WordPress with modern plugins and integrates Google Analytics for user tracking. The site is well-structured, mobile-optimized, and includes GDPR-compliant cookie consent mechanisms. Security posture is good with HTTPS enforced, though additional security headers could enhance protection. The absence of WHOIS data reduces domain transparency and trust slightly, but the academic nature and institutional affiliations mitigate this concern. Overall, the site is a credible, well-maintained educational resource with moderate technical sophistication and good privacy compliance.

ALEA - Ação Local de Estatística Aplicada is an educational project affiliated with the Instituto Nacional de Estatística in Portugal. It provides educational resources, challenges, and statistical information aimed primarily at students, educators, and the general public interested in statistics and civic education. The platform is well-positioned as a government-supported initiative to enhance statistical literacy and education in Portugal. Technically, the website is built on Joomla! CMS with Bootstrap and jQuery frameworks, offering a responsive and moderately performant user experience. Security posture is solid with HTTPS enforced and cookie consent implemented, though it lacks advanced security headers and explicit incident response policies. Overall, the site is trustworthy, professionally maintained, and compliant with privacy regulations, making it a reliable resource for its audience.

Childhood Education International is a well-established international non-profit organization focused on advancing education and child development globally since 1892. The organization operates a professional website that highlights its global network, educational services, publications, and partnership opportunities. The site targets educators, donors, and partners interested in international development and education innovation. The business model centers on collaboration, professional learning, and advocacy to improve educational outcomes worldwide. The organization maintains a reputable market position with certifications and trust indicators supporting its credibility. Technically, the website is built on WordPress with a modern tech stack including Yoast SEO, Google Tag Manager, and multiple analytics and marketing tools. The site is mobile-optimized, accessible, and SEO-friendly, providing a good user experience. Hosting and DNS are managed via reputable providers, with Cloudflare DNS and GoDaddy registrar. Performance is moderate with room for optimization. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms, but lacks DNSSEC and explicit security headers. No critical vulnerabilities or exposed sensitive data were found. Privacy policies and terms of service are present and GDPR compliant. However, no explicit security policy or incident response contacts were identified, suggesting room for improvement in security governance. Overall, the website presents a professional, trustworthy, and content-rich platform for its audience. The risk profile is low with minor security enhancements recommended. Strategic focus on publishing security policies and enabling DNSSEC would strengthen the security posture and trust further.

M

MARE - Centro de Ciências do Mar e do Ambiente

mare-centre.pt

59

MARE - Centro de Ciências do Mar e do Ambiente is a Portuguese national research center focused on marine and environmental sciences. It operates as a scientific research, technological development, and innovation hub with a broad territorial presence in Portugal. The center targets academic researchers, students, and environmental stakeholders, offering educational programs and engaging in collaborative projects with national and international partners. The website reflects a well-structured and professionally designed platform built on Drupal 7, featuring multilingual support and integration with social media and analytics tools. Security posture is adequate with HTTPS enabled and IP anonymization in analytics, but lacks advanced security headers and explicit privacy compliance mechanisms such as cookie consent. Contact information is limited on the website, and no dedicated security or incident response policies are published. Overall, the site is trustworthy and serves its educational and research mission effectively.

U

Universidade de Lisboa

ulisboa.pt

62

Universidade de Lisboa is the largest Portuguese university and among the largest in Europe, offering a wide range of undergraduate and graduate programs, research initiatives, and international cooperation. The website reflects a mature digital presence built on Drupal CMS, with good mobile optimization, accessibility, and SEO practices. The site uses modern analytics tools such as Google Analytics and Tag Manager, and implements GDPR-compliant cookie consent mechanisms. Security posture is strong with HTTPS enforced and appropriate security headers, though explicit security policies and incident response information are not published. WHOIS data confirms the legitimacy and consistency of the domain registration, matching the university's public identity. Overall, the website is professional, trustworthy, and well-maintained, serving a broad academic audience effectively.

C

Centrum dopravního výzkumu, v. v. i.

detivdoprave.cz

46

The website 'Děti v dopravě' is an educational platform operated by Centrum dopravního výzkumu, v. v. i., focused on providing traffic safety education materials primarily for children, parents, and educators in the Czech Republic. It offers certified methodologies and downloadable resources to support traffic education in kindergartens, primary, and secondary schools. The site holds accreditation from the Ministry of Education, which enhances its credibility and market position as a trusted educational resource. Technically, the website is built using modern web technologies including React and Gatsby, with Material-UI for styling. It is a statically generated site optimized for performance and mobile responsiveness, providing a good user experience and accessibility. The site implements cookie consent mechanisms aligned with GDPR requirements, though no explicit privacy policy page was found on the main domain; instead, a related domain hosts the cookie policy. From a security perspective, the site uses HTTPS and has implemented cookie consent, but lacks visible security headers and formal security policies or incident response contacts. No vulnerabilities or tracking scripts were detected in the analyzed content, indicating a low-risk profile. However, the absence of WHOIS data reduces transparency and slightly impacts trustworthiness. Overall, the website is a well-structured, professional educational resource with strong content quality and compliance with privacy norms. The main risk lies in the lack of publicly available domain registration data and limited explicit contact information, which could be improved to enhance trust and security posture.

A

ABNT

abntcatalogo.com.br

54

ABNT Catalogo is a professional e-commerce platform operated by ABNT, the Brazilian Association of Technical Standards, providing access to Brazilian technical standards, certifications, and related educational resources. The platform targets businesses and professionals requiring official standards for compliance and quality assurance. The website is well-branded, consistent, and offers a good user experience with clear navigation and mobile optimization. It integrates Google Analytics for user tracking and provides contact information including email and phone support. Technically, the site is built on a mature ASP.NET WebForms framework with Telerik UI components, indicating a stable but somewhat legacy infrastructure. Performance is moderate with basic SEO and accessibility features. Security posture is adequate with HTTPS enforced but lacks some advanced security headers such as Content-Security-Policy and X-Frame-Options. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the security posture is solid but could be improved by implementing additional security headers and cookie consent mechanisms. The domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness. No critical vulnerabilities or suspicious patterns were detected, and the content is safe for general audiences.

A

Annual Reviews

annualreviews.org

66

Annual Reviews is a well-established nonprofit academic publisher specializing in comprehensive review articles across a broad spectrum of scientific disciplines. Founded in 1932, it serves researchers, academics, librarians, and informed citizens by providing high-quality synthesized knowledge through journals and magazines such as Knowable Magazine and Katina Magazine. The organization operates a subscription-based and open access business model, including initiatives like Subscribe to Open (S2O), positioning itself as a leader in scholarly publishing. The website infrastructure employs a mix of legacy and modern web technologies including jQuery, Google Tag Manager, Adsense, and MathJax for rendering scientific content. The site is mobile optimized, accessible, and well-structured with clear navigation and professional design. Privacy and cookie policies are present with consent mechanisms, reflecting good compliance practices. However, explicit security headers and a published security policy are absent, representing an area for improvement. Security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. The lack of WHOIS data due to privacy protection is typical for organizations of this type and does not detract from legitimacy. Overall, the site demonstrates a mature digital presence with moderate tracking and advertising practices consistent with nonprofit academic publishing. Strategically, Annual Reviews should enhance security transparency by publishing incident response contacts and security policies, update legacy libraries, and implement comprehensive security headers to strengthen defenses. These steps will improve trust and compliance while maintaining their strong market position.

V

Veselá věda kroužky a tábory, SVČ z.ú. / Veselá věda středisko volného času s.r.o.

veselaveda.cz

46

Veselá věda is a Czech educational organization specializing in science clubs and camps for children, operating for over 12 years with a presence in more than 350 cities. Their offerings include science experiment clubs, LEGO building clubs, day camps, and residential camps, targeting children and parents seeking engaging educational activities. The website is professionally designed with clear navigation and mobile optimization, leveraging modern web technologies including jQuery, Nette Framework, and various analytics and marketing tools such as Google Analytics, Facebook Pixel, and Hotjar. Privacy and cookie policies are present with consent mechanisms, reflecting good GDPR compliance. Security posture is adequate with HTTPS enforced but could be improved by adding more security headers and publishing a formal security policy. The absence of WHOIS data reduces domain trustworthiness, but the website content and business information appear legitimate and consistent with an established educational service provider. Overall, the site presents a trustworthy and professional front for its business activities.

Městská knihovna Blansko operates as a municipal public library serving the Blansko region in the Czech Republic. The website provides comprehensive information about library services, including book lending, cultural and educational events, and digital resources. The target audience spans children, students, adults, and seniors, reflecting a community-focused approach. The library maintains a consistent brand presence and offers transparent privacy and cookie policies, indicating compliance with GDPR regulations. Technically, the website is built on WordPress 6.6.2 with common plugins such as Contact Form 7 and Complianz GDPR for cookie consent management. The site demonstrates good mobile optimization, accessibility, and SEO practices, although hosting details are not explicitly identified. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though security headers could be enhanced. The absence of WHOIS data limits domain registration insights, but the website's content and official municipal references strongly support its legitimacy. No WAF or blocking mechanisms were detected, allowing full content access. Overall, the site reflects a well-maintained, community-oriented public service platform with moderate technical sophistication and good privacy compliance.

T

TicTac Learn AB

tictaclearn.net

74

TicTac Learn AB is a European-based company specializing in e-learning and digital learning solutions, combining human creativity with AI-powered technology to deliver scalable learning platforms and custom content. The company holds a strong market position as a Core Leader on the Fosway 9-Grid™ and is ISO 27001 certified, emphasizing its commitment to security and compliance. Their offerings include well-known platforms such as Articulate 360, Docebo, Vyond, and Skillhabit, supported by comprehensive customer success services including training, onboarding, and AI readiness consulting. Technically, the website is built on Webflow CMS with integrations including Google Tag Manager, Sendinblue for marketing automation, Weglot for multilingual support, and Captcha.eu for form security. The site is well-optimized for performance, mobile responsiveness, and accessibility, with strong SEO practices and modern web technologies. Security posture is robust with HTTPS enforced, ISO certification, GDPR compliance, and use of CAPTCHA on forms. However, the absence of visible HTTP security headers and lack of published incident response or vulnerability disclosure policies represent areas for improvement. The missing WHOIS registration data is a notable concern for domain legitimacy, though the website content and trust signals strongly support business credibility. Overall, the website presents a professional, secure, and user-friendly digital presence suitable for its B2B education market. Strategic recommendations include enhancing security header implementation, publishing incident response information, and verifying domain registration details to strengthen trust and compliance.

R

RichmondShare Blog | High quality content and interaction in the ELT world | RichmondShare is a free-access blog aimed at teachers and future teachers of English as a Foreign Language where ELT professionals (authors, editors, teachers educators, teachers etc) share their ideas, experiences and reflections.

richmondshare.com.br

68

RichmondShare is a niche educational blog focused on English Language Teaching (ELT) professionals and future teachers, primarily targeting the Brazilian market. The website serves as a free-access platform for sharing ideas, experiences, and reflections within the ELT community. It operates on a WordPress CMS with standard SEO optimizations and integrates Google Analytics and Tag Manager for visitor tracking. Hosting infrastructure appears to be on Amazon AWS, providing reliable performance and scalability. The site demonstrates good mobile optimization and accessibility basics, supporting a positive user experience for its audience. However, the absence of explicit privacy and terms of service pages, as well as contact information, limits its compliance and business transparency. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and published policies. Overall, RichmondShare is a credible educational resource with room for improvement in privacy compliance and business information transparency.

Santillana is a well-established educational content provider focused on Spanish language learning materials in Brazil. The website serves as a portal offering catalogs, educational resources, and accessible content for students and educators. The business operates under the Grupo Santillana umbrella, leveraging partnerships with related educational brands such as Moderna and Richmond. The site is professionally designed with consistent branding and targets educational institutions and learners. Technically, the site uses a custom CMS (Lumis Portal) and integrates common analytics and tracking tools such as Google Analytics and Facebook SDK. Hosting is professional, utilizing AWS DNS infrastructure. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks some security headers and explicit privacy policies. Overall, the site is safe, accessible, and trustworthy for its intended audience.

B

BiblioHelp

bibliohelp.cz

51

BiblioHelp is a Czech educational and therapeutic resource website focused on bibliotherapy, providing curated book recommendations for individuals facing psychological, physical, and social challenges. The site is supported by academic sponsorship from Masaryk University and funded by the Czech Ministry of Culture, positioning it as a niche non-profit resource in the education and healthcare sectors. Technically, the website runs on Drupal CMS with jQuery and integrates Google Analytics for visitor tracking. The design is professional with clear navigation, though mobile optimization and accessibility are basic. Security posture is moderate with HTTPS usage implied but lacking explicit security headers and privacy compliance documents. WHOIS data is unavailable, which raises concerns about domain legitimacy, but the website content and academic backing provide some trust. Overall, the site is a valuable resource but needs improvements in privacy compliance and security best practices.

H

Handelshøyskolen BI

bi.no

66

Handelshøyskolen BI is a leading Norwegian business school offering a wide range of educational programs including bachelor, master, PhD, executive education, and corporate training. The institution is internationally accredited and targets students and professionals seeking high-quality business education. The website reflects a mature digital presence with modern technologies, strong content quality, and clear navigation. The technical infrastructure includes advanced tracking and consent management tools, ensuring compliance with privacy regulations. Security posture is strong with HTTPS enforcement and security headers, although explicit security policies and incident response information are not publicly detailed. Overall, the site demonstrates legitimacy and professionalism consistent with a reputable educational institution.

A

Avalia Educacional

avaliaeducacional.com

55

Avalia Educacional is an established educational assessment service provider operating as part of Grupo Santillana, the largest educational group in Latin America. The company focuses on delivering quality educational evaluations to support managers, teachers, and students across 22 countries, with a significant market presence and recognition. The website serves primarily as an informational landing page with basic content and contact details, indicating a medium-sized business with a solid foundation and market leadership in its sector. Technically, the website is simple and uses basic web technologies such as HTML5, CSS3, and Google Fonts. Hosting and domain registration are managed through Amazon Registrar, Inc., suggesting reliable infrastructure. However, the site lacks advanced technical features such as CMS, analytics, or security headers, and the performance and mobile optimization are basic. There is no evidence of modern frameworks or platforms, and SEO and accessibility features are minimal. From a security perspective, the site uses domain status protections but lacks DNSSEC and security headers. There is no visible privacy policy, cookie consent, or incident response information, which are critical for compliance and user trust. No forms or data collection mechanisms are present, reducing immediate risk but also limiting user engagement and data-driven insights. The absence of tracking or analytics tools suggests minimal user tracking, which is positive for privacy but limits marketing intelligence. Overall, the website is safe and appropriate for a general audience, with no adult or questionable content. The domain age and WHOIS data support the legitimacy of the business. Strategic recommendations include enhancing security posture by enabling DNSSEC and security headers, publishing privacy and cookie policies, and adding incident response and vulnerability disclosure information. Improving technical sophistication and user engagement features would also benefit the business's digital maturity and compliance standing.

S

SANTILLANA GLOBAL, S.L

educate.global

64

Educate Global, operated by SANTILLANA GLOBAL, S.L, is an educational platform likely focused on delivering digital learning resources. The website is professionally designed with good user experience and mobile optimization. It employs modern technologies including Svelte framework, WordPress CMS with Elementor plugin, and AWS hosting infrastructure. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanisms, although no explicit terms of service or security policy pages were found. Security posture is solid with HTTPS enabled and consent management in place, but could be improved by enabling DNSSEC and publishing vulnerability disclosure information.

Richmond, operated under Santillana Educação, is an educational content portal serving primarily Brazilian educators and students. The website offers access to educational materials, catalogs, and exclusive content, with a focus on accessibility and user experience. The portal integrates with other Santillana and Moderna educational platforms, indicating a broad ecosystem of educational services. Technically, the site uses a legacy CMS (Lumis Portal) and includes standard tracking and consent mechanisms, but relies on older JavaScript libraries which may pose security risks. Security posture is moderate with room for improvement in headers and modern best practices. Privacy compliance is basic, with cookie consent implemented but no explicit privacy policy found in the analyzed content. Overall, the site is professional, trustworthy, and safe for general audiences.

E

Editora Moderna

salamandra.com.br

73

Editora Moderna is a well-established Brazilian educational publisher specializing in literature and didactic materials for schools and educational institutions. The website serves as a comprehensive catalog for their literature offerings, targeting educators, students, and institutions. The company operates under the Santillana group, with related brands such as Richmond and Santillana Espanol. The site demonstrates a professional digital presence with modern web technologies and a focus on accessibility and privacy compliance. Technically, the site uses Next.js framework, hosted on AWS infrastructure, and integrates analytics and tracking tools such as Google Analytics, Facebook Pixel, and Hotjar. Security posture is strong with HTTPS enforcement and standard security headers, though explicit security policies and incident response contacts are not published. Overall, the site is trustworthy, well-maintained, and compliant with privacy regulations, making it a reliable resource for its target audience.

S

Santillana Educação

sistemafb.com.br

64

Sistema Farias Brito de Ensino, operated by Santillana Educação, is a leading educational platform in Brazil specializing in ENEM exam preparation. The website presents a professional and consistent brand image, targeting students and educational institutions. The business model focuses on providing comprehensive teaching systems and educational content to prepare students for academic success. Technically, the site is built on WordPress with modern integrations such as Google Tag Manager, AddThis, and RD Station, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though explicit security policies and incident response information are not publicly available. Overall, the site demonstrates a good balance of usability, compliance, and marketing sophistication, positioning it well in the Brazilian education sector.

S

Santillana

santillana.com.br

68

Santillana is a well-established educational publisher operating in Brazil, providing educational content and learning resources targeted at students, educators, and educational institutions. The website reflects a professional digital presence with consistent branding and good content quality focused on education. The technical infrastructure leverages modern analytics and marketing technologies, hosted on AWS with strong HTTPS enforcement and security headers, indicating a mature digital setup. However, explicit security policies and incident response information are not publicly available, which could be improved to enhance trust and compliance. Overall, the website demonstrates a solid security posture with no critical vulnerabilities detected, and privacy compliance is supported by comprehensive cookie and privacy policies integrated with a recognized consent management platform. Strategic recommendations include publishing clear security and incident response policies, implementing a vulnerability disclosure mechanism, and enhancing accessibility features to further improve user experience and compliance.