Government security reports

G

Granicus

granicus.com

73

Granicus is an established enterprise technology company founded in 1999, specializing in digital government solutions and citizen experience platforms. Their offerings include cloud-based SaaS products such as Government Experience Cloud, Service Cloud, Engagement Cloud, and AI-powered digital agents, targeting government organizations and public sector entities. The company positions itself as a leader in transforming government service delivery and engagement through technology, connecting millions of citizens and thousands of government organizations worldwide. The website reflects a mature digital presence with professional design, comprehensive content, and strong branding consistency.

C

Centro de Administraciones Tributarias Subnacionales (CeATS)

ceats.org

44

Centro de Administraciones Tributarias Subnacionales (CeATS) is a well-established non-profit organization based in Argentina, focused on subnational tax administration collaboration, training, and research. The website reflects a professional presence with clear navigation, relevant content, and active engagement through events and educational programs. The organization partners with universities and government tax agencies, reinforcing its credibility and market position in the government and education sectors. Technically, the website uses a modern but standard technology stack including Bootstrap, jQuery, and various carousel and slider libraries. Hosting is stable with a reputable registrar, and the site is mobile optimized with moderate performance. However, there is room for improvement in accessibility and SEO optimization. From a security perspective, the site uses HTTPS but lacks advanced security headers and DNSSEC, which are recommended to enhance protection. No privacy or cookie policies were found, indicating compliance gaps with GDPR and other privacy regulations. Contact information is clearly provided, supporting business credibility. Overall, the website is trustworthy and functional but would benefit from enhanced privacy compliance and security hardening to align with best practices and regulatory requirements.

N

Nova Scotia Legislature

nslegislature.ca

67

The Nova Scotia Legislature website serves as the official online presence for the legislative branch of the Government of Nova Scotia. It provides comprehensive access to legislative business including debates, bills, statutes, committee information, and live legislative TV. The site targets residents, government officials, researchers, and the general public interested in provincial governance. It holds a strong market position as an authoritative government resource with consistent branding and trust indicators such as official domain and social media presence. Technically, the website is built on Drupal 7 with a moderate technology stack including jQuery 1.10, Slick Carousel, and Colorbox. The site is moderately performant with good mobile optimization and basic accessibility features. SEO is basic but sufficient for the target audience. Hosting details are not explicit but domain registration is consistent with a Canadian government entity. From a security perspective, the site uses HTTPS and has domain transfer protections enabled. However, DNSSEC is not enabled, and security headers are not detected. The use of an outdated jQuery version poses potential vulnerabilities. There is no published security policy or incident response contact, and no cookie consent mechanism despite use of Google Tag Manager for analytics. These gaps reduce privacy compliance and security posture scores. Overall, the website is trustworthy and professional, with high business credibility. The main risks relate to technical security improvements and privacy compliance enhancements. Strategic recommendations include enabling DNSSEC, updating JavaScript libraries, implementing security headers, publishing security policies, and adding cookie consent mechanisms to improve compliance and user trust.

The City of Long Beach official website serves as a comprehensive portal for residents, businesses, visitors, and city employees. It provides detailed information about city officials, municipal services, business resources, visitor attractions, and employment opportunities. The site is well-structured with clear navigation and a professional design consistent with government standards. The target audience includes local residents, business owners, visitors, and municipal staff. The business model is that of a government service provider, focusing on transparency, accessibility, and community engagement.

G

Granicus

primegov.com

72

Granicus is an established enterprise-level technology company specializing in digital solutions for government organizations. Their product 'OneMeeting' offers cloud-based agenda and meeting management designed to streamline workflows, ensure compliance, and enhance public engagement for medium to large government entities. The website reflects a mature digital presence with professional design, structured data, and integration of modern web technologies such as WordPress CMS, Google Tag Manager, and New Relic monitoring. However, the site lacks visible privacy and cookie policies, security policies, and incident response information, which are critical for compliance and trust in the public sector domain. The domain is long-standing and registered consistently with the business identity, enhancing credibility.

The Long Beach City Prosecutor Doug Haubert website serves as the official online presence for the city prosecutor's office responsible for prosecuting adult misdemeanor crimes within Long Beach, California. The site provides comprehensive information about prosecutorial services, community programs, diversion initiatives, and resources for victims and residents. It targets local residents and community stakeholders, positioning itself as a trusted government service provider. The business model is public service under the government sector, with a medium-sized operational scope and a founding date consistent with the domain registration in 2011. Technically, the website is built on WordPress with common plugins such as Yoast SEO and Google Language Translator, hosted by GoDaddy. The site demonstrates moderate performance and good mobile optimization, with a clean and professional design. SEO practices are adequately implemented, though accessibility features are basic. The presence of multiple external domains, some suspicious, suggests potential security review is warranted. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks DNSSEC and explicit security headers, which are recommended for enhanced protection. No privacy or cookie policies are present, indicating compliance gaps with GDPR and other privacy regulations. Contact information is clearly provided, enhancing business credibility. No incident response or vulnerability disclosure information is available, which could be improved. Overall, the website is functional, professional, and trustworthy for its intended government service role but would benefit from enhanced security measures and privacy compliance to strengthen its posture and user trust.

L

Long Beach City Auditor's Office

cityauditorlauradoud.com

44

The Long Beach City Auditor's Office website serves as the official online presence for the city government auditing authority. It provides information about independent audits, fraud investigations, and promotes transparency and accountability in city operations. The site targets residents, government officials, and community stakeholders interested in city financial oversight. Technically, the website is built on WordPress with common plugins and uses Google Analytics and Google Translate for analytics and multilingual support. The site is accessible, mobile-optimized, and professionally designed with consistent branding. Security posture is moderate with HTTPS enabled but lacks advanced security headers and explicit privacy or cookie policies. The absence of WHOIS registration data is a notable concern, potentially indicating domain registration or data retrieval issues, which impacts domain legitimacy assessment. Overall, the site is trustworthy and safe for general audiences but would benefit from enhanced security and privacy compliance measures.

Periscope Holdings is a U.S.-based company specializing in procurement software solutions tailored for government buyers and suppliers. Their flagship product, Periscope ePro, automates the procure-to-pay process, enhancing compliance and cost savings. The company holds exclusive rights to market the National Institute of Governmental Purchasing (NIGP) Commodity/Services Code and maintains a strong presence in the public sector procurement market with a broad agency network. The website reflects a professional and consistent brand image, targeting government entities and suppliers with clear messaging and comprehensive service offerings. Technically, the website employs a modern technology stack including jQuery, Google Tag Manager, Facebook Pixel, LinkedIn Insight Tag, and conditional loading of Hotjar and Google Analytics based on user cookie consent. The site is mobile-optimized with good SEO practices and a responsive design. However, some security best practices such as explicit security headers are not evident, and WHOIS data for the domain is missing, which raises some concerns about domain registration transparency. The security posture is generally strong with HTTPS enforced and cookie consent mechanisms in place, but the absence of detailed security policies and incident response information suggests room for improvement. Privacy compliance is well addressed with comprehensive privacy and cookie policies linked to a partner domain. Overall, the site is trustworthy and professional, though the domain registration inconsistency slightly reduces the overall trust score. Strategically, Periscope Holdings should focus on enhancing domain registration transparency, implementing additional security headers, and publishing explicit security and incident response policies to strengthen trust and compliance posture.

The website p3tips.com serves as a platform for anonymous crime tip submissions, supporting Crime Stoppers programs, law enforcement, schools, and corporations globally. It is part of the Navigate360 family, indicating a medium-sized business focused on public safety and crime prevention. The site offers key services such as anonymous tip submission via web and mobile apps, targeting a broad audience including the public and institutional entities. Technically, the site uses basic HTML, CSS, and JavaScript without modern frameworks or CMS, hosted likely on AWS infrastructure. Mobile optimization and accessibility are basic, and SEO is minimal. Security posture shows some strengths like domain registration protections but lacks DNSSEC and security headers, with no visible privacy or cookie policies, indicating compliance gaps. Overall, the site is functional and trustworthy but would benefit from enhanced security and privacy measures.

U

U.S. Department of Labor, Employment and Training Administration

onetonline.org

66

O*NET OnLine is a comprehensive U.S. Department of Labor sponsored platform providing detailed occupational information and career exploration tools. It serves a broad audience including job seekers, workforce professionals, students, and researchers by offering extensive data on over 900 occupations. The site is well-structured with multiple search and browse functionalities, crosswalks to other classification systems, and links to partner resources. Technically, the website employs a modern technology stack including Bootstrap 5, jQuery, Font Awesome, and various JavaScript libraries to deliver a responsive, accessible, and user-friendly experience. The site is mobile-optimized and demonstrates good SEO and accessibility practices. From a security perspective, the site uses HTTPS and secure form handling but lacks explicit security headers and a public vulnerability disclosure policy. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is supported by a comprehensive privacy policy, though cookie consent mechanisms are not evident. Overall, the website presents a low risk profile with strong legitimacy as a government resource. Strategic recommendations include enhancing security headers, publishing a security.txt file, and improving incident response contact visibility to further strengthen trust and security posture.

Antispam.br is a Brazilian governmental initiative under the Comitê Gestor da Internet no Brasil (CGI.br) focused on combating spam and promoting internet security awareness. The website serves as an educational platform providing resources, guidelines, and campaigns aimed at reducing spam and improving network security for Brazilian internet users and network administrators. The site is well positioned as a trusted source within Brazil's internet governance ecosystem. Technically, the website uses legacy XHTML and CSS without modern JavaScript frameworks or analytics tools. The site lacks mobile optimization and accessibility features, and no HTTPS enforcement or security headers were detected in the provided content. The site includes a basic search form but does not collect sensitive user data. SEO and privacy compliance are minimal, with no visible privacy or cookie policies. From a security perspective, the site shows a low maturity level with missing HTTPS enforcement and security headers, which are critical for protecting user data and trust. No incident response or vulnerability disclosure information is provided. The WHOIS data confirms the domain's legitimacy and consistency with the website's mission and affiliation with CGI.br. Overall, Antispam.br is a credible and authoritative informational resource with room for improvement in technical modernization, security posture, and privacy compliance to enhance user trust and protection.

K

Košický samosprávny kraj

kosickazupa.sk

57

Košický samosprávny kraj operates as the official regional government authority for the Košice region in Slovakia, providing a comprehensive digital platform for citizens and stakeholders. The website offers extensive information on governance, social services, culture, health, education, transport, and regional development, positioning itself as a key resource for regional administration and public engagement. The site maintains a strong market position as a trusted government entity with a clear focus on transparency and citizen services. Technically, the website employs a modern technology stack including jQuery, Bootstrap, Google reCAPTCHA v3, and Hotjar for analytics and user experience enhancement. The site is mobile-optimized, accessible, and SEO-friendly, with secure HTTPS implementation and ISO 27001 certification indicating a mature security posture. Forms are protected with CSRF tokens and reCAPTCHA, ensuring secure data collection. Security-wise, the site demonstrates good practices such as HTTPS enforcement and certified information security management. However, it lacks explicit security headers and a visible incident response or vulnerability disclosure policy, which are recommended for enhanced security transparency and readiness. Privacy compliance is strong with a comprehensive GDPR-aligned privacy policy, though a cookie consent mechanism is missing. Overall, the website is professional, trustworthy, and well-maintained, serving its public sector role effectively. Strategic improvements in security headers, cookie consent, and incident response disclosures would further strengthen its security posture and compliance standing.

The website instytutpolski.pl serves as the official online presence for the network of Polish Institutes, which are government cultural institutions promoting Polish culture internationally. The site features an interactive map showcasing the locations of these institutes across Europe and Asia, providing users with easy navigation to individual institute pages. The business operates within the government sector, focusing on cultural diplomacy and international cultural promotion. The domain is registered with a reputable registrar and has an appropriate age for its business purpose. Technically, the website employs modern JavaScript libraries such as Leaflet.js for map rendering and clustering, and it is hosted by cyber_Folks S.A. The site uses HTTPS and includes performance monitoring via Akamai mPulse. However, the site lacks advanced security headers and comprehensive privacy or cookie policies, which are important for GDPR compliance and user trust. The mobile optimization and accessibility are basic but functional. From a security perspective, the site benefits from HTTPS but lacks DNSSEC and security headers, which could improve its security posture. No forms or user input fields are present on the homepage, reducing attack surface. There is no evidence of vulnerability disclosure or incident response policies. The absence of privacy and cookie policies indicates a compliance gap with GDPR requirements. Overall, the website is moderately secure and credible but would benefit from enhanced privacy compliance, security hardening, and inclusion of contact and policy information to improve user trust and regulatory adherence.

I

Institut français

institutfrancais.com

63

Institut français is a key governmental cultural operator under the French Ministry of Europe and Foreign Affairs and the Ministry of Culture. It implements France's external cultural policy by supporting and animating the French cultural cooperation network abroad, assisting creators and cultural industries internationally, and promoting the French language and plurilingualism. The website reflects a professional and comprehensive digital presence with rich content, clear navigation, and strong branding consistent with its governmental affiliation. Technically, the site is built on Drupal 10, uses Matomo for analytics with privacy-respecting settings, and implements a cookie consent mechanism. Security posture is good with HTTPS enforced and no visible vulnerabilities, though some security headers are missing. WHOIS data is unavailable, which is unusual but likely due to query or server issues rather than malicious intent. Overall, the site is trustworthy, well-maintained, and compliant with privacy regulations.

W

WorkSafe Saskatchewan

worksafesask.ca

47

WorkSafe Saskatchewan is a government agency dedicated to promoting workplace health and safety within the province of Saskatchewan, Canada. The organization provides regulatory oversight, educational resources, and support services to employers and workers to foster safe working environments. The website serves as a comprehensive portal for information, incident reporting, and access to safety programs, positioning WorkSafe Saskatchewan as the authoritative body in its sector. Technically, the website is built on WordPress using the Avada theme and incorporates modern web technologies including jQuery, Google Analytics, Facebook Pixel, and LinkedIn Insight Tag for analytics and marketing. The site demonstrates good mobile optimization and accessibility features, though there is room for improvement in accessibility compliance. Performance is moderate, with a well-structured layout and clear navigation enhancing user experience. From a security perspective, the site enforces HTTPS, employs multiple security headers, and avoids exposing sensitive data. However, it lacks a publicly available security policy and vulnerability disclosure mechanism, which are recommended for transparency and incident management. Privacy compliance is strong, with clear privacy and cookie policies and consent mechanisms in place, reflecting adherence to GDPR principles. Overall, the website is professional, trustworthy, and well-maintained, serving its government mandate effectively. The absence of WHOIS data is noted but likely due to registry policies rather than malicious intent. Strategic recommendations include publishing a formal security policy, implementing a vulnerability disclosure program, and enhancing accessibility to further strengthen the site's security posture and user inclusivity.

G

Government of Nova Scotia

novascotia.ca

66

The Government of Nova Scotia's official website serves as a comprehensive portal for provincial government services, information, and news. It targets residents, businesses, and stakeholders within Nova Scotia, Canada, providing access to programs, government departments, and public service job opportunities. The site is well-branded, consistent, and reflects its authoritative government status with clear trust indicators such as official social media accounts and Crown copyright notices. Technically, the website is built on Drupal 10, leveraging modern web technologies and analytics tools like Google Analytics and Cloudflare Insights. It is mobile-optimized and accessible, offering a positive user experience with clear navigation and relevant content. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security headers and policies could be improved. Privacy compliance is basic, with a privacy policy present but lacking a cookie consent mechanism. Overall, the site is highly legitimate and trustworthy, though it would benefit from enhanced transparency around security and privacy practices.

The City of Long Beach operates the Economic Development & Opportunity Workforce Development Bureau, providing comprehensive workforce services including career guidance, training scholarships, job search assistance, and business engagement programs. The website serves job seekers, employers, veterans, youth, and local businesses, positioning itself as a key government resource for economic opportunity in the Long Beach area. The site is well-branded, professionally designed, and content-rich, reflecting a mature government digital presence. Technically, the site uses modern web technologies such as jQuery, Bootstrap, Google Tag Manager, and Episerver CMS, with good mobile optimization and moderate performance. Security posture is solid with HTTPS and no visible vulnerabilities, though improvements are recommended in DNSSEC and security headers. Privacy compliance is basic, with a privacy policy present but lacking cookie consent mechanisms. Overall, the site is trustworthy and authoritative, with clear contact information and official social media channels.

G

Government of Canada

canada.ca

48

Canada.ca is the official Government of Canada website serving as a centralized portal for all federal programs, services, departments, ministries, and organizations. It targets Canadian residents and citizens seeking government information and services. The site is authoritative, enterprise-scale, and bilingual, reflecting Canada's official languages. The business model is a government service portal, providing comprehensive access to public resources and information. The website is well-branded with consistent government identity and offers excellent content quality and user experience.

B

Befalets Fellesorganisasjon

bfo.no

57

Befalets Fellesorganisasjon (BFO) is a leading Norwegian trade union representing military personnel across all ranks. The organization provides career support and union representation, positioning itself as a trusted advocate for its members. The website reflects a professional and consistent brand image, targeting military personnel and related stakeholders in Norway. Technically, the site employs modern web technologies including Craft CMS, Vite, and integrates analytics tools such as Matomo and Google Analytics, alongside a robust cookie consent mechanism via Cookiebot. Security posture is strong with HTTPS enforcement, CSRF protection, and standard security headers, though explicit security and privacy policies are not clearly presented on the site. Overall, the site is well-structured, mobile-optimized, and trustworthy, with extensive user tracking balanced by consent mechanisms. Recommendations include publishing comprehensive privacy and security policies and enhancing contact transparency to improve compliance and user trust.

P

Politiets Fellesforbund

pf.no

60

Politiets Fellesforbund is the largest police trade union in Norway, representing approximately 17,000 members. The organization provides membership services, advocacy on wages and working conditions, training, legal assistance, and insurance partnerships. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive content tailored to its target audience of police employees and stakeholders in Norway. Technically, the site uses Craft CMS, integrates modern JavaScript libraries, and employs a robust cookie consent mechanism ensuring GDPR compliance. Security posture is strong with HTTPS, CSRF protection, and anonymized analytics, though explicit security policy and incident response contacts are not publicly visible. Overall, the domain age and registrant data align well with the organization's profile, indicating high legitimacy and trustworthiness.

F

FO (Fellesorganisasjonen)

fo.no

10

FO (Fellesorganisasjonen) is a Norwegian union or professional organization serving members primarily in Norway. The website is well-structured, professionally designed, and uses modern web technologies including WordPress, Yoast SEO, and Cookiebot for cookie consent management. The organization targets Norwegian professionals or union members, providing information, news, and advocacy services. The website is fully accessible without any WAF or security challenge blocking content. Security posture is good with HTTPS enforced and consent mechanisms in place, though there is room for improvement in security headers and published security policies. Overall, the site demonstrates a mature digital presence appropriate for a medium-sized non-profit organization.

N

Norsk Tjenestemannslag

ntl.no

51

Norsk Tjenestemannslag (NTL) is a large Norwegian labor union affiliated with LO, representing over 38,000 members primarily in the public sector and state-affiliated enterprises. The website serves as a comprehensive portal for membership information, union services, events, and educational resources. It targets public sector employees, students, and apprentices, with special offerings for younger members under 35 years old. The business model focuses on membership engagement, support, and benefits including insurance, loans, and training. Technically, the site employs modern web technologies including Bootstrap, jQuery, Google Tag Manager, and Microsoft Clarity, with a strong emphasis on privacy and consent management via CookieYes. The site is well-optimized for mobile and accessibility, with good SEO practices and clear navigation.

G

Gjerholm AS

hkinfo.no

65

HK Norge is a Norwegian workers union organization dedicated to ensuring safe workplaces and good labor conditions, with a history dating back to 1908. The website serves as an informational platform targeting Norwegian workers and union members, providing advocacy and union services. Technically, the site is built on WordPress using the Astra theme and incorporates modern SEO and cookie consent tools, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks explicit security headers and published privacy policies, which are areas for improvement. Overall, the site is professional and trustworthy but could enhance compliance and security transparency.

Y

Yrkesorganisasjonenes Sentralforbund

ys.no

60

Yrkesorganisasjonenes Sentralforbund (YS) is a well-established Norwegian labor organization founded in 1999, representing employees across various sectors. The website serves as an information and service portal for members and the public, offering news, membership benefits, and advocacy information. The organization maintains a strong market position within Norway's labor union landscape, targeting employees and workers nationwide. The site is professionally designed with consistent branding and good content quality, supporting Norwegian and English languages.

L

Landsorganisasjonen i Norge

lo.no

72

Landsorganisasjonen i Norge (LO) is the largest trade union confederation in Norway, serving as a representative body for workers and providing member support and advocacy. The website www.lo.no acts as an information portal primarily targeting Norwegian workers and union members, offering resources related to labor rights and union activities. The site is professionally designed with consistent branding and good content quality, reflecting its position as a major non-profit organization in the government sector. Technically, the website employs a modern technology stack including Google Tag Manager, Cookiebot for cookie consent management, Hotjar for user behavior analytics, Meta Pixel for marketing, Snap Pixel, Plausible Analytics, and Microsoft Application Insights for telemetry. The site is mobile-optimized and uses HTTPS, ensuring secure communications. However, explicit security headers and detailed privacy or terms of service pages are not detected, indicating areas for improvement in security posture and compliance transparency. From a security perspective, the website demonstrates good practices such as HTTPS enforcement and a comprehensive cookie consent mechanism with granular user controls. No critical vulnerabilities or exposed sensitive data were found. The absence of WHOIS data is likely due to privacy protections common in Norwegian domains and does not detract from the site's legitimacy. Overall, the site maintains a moderate to good security posture but would benefit from publishing explicit security policies and contact information for incident response. The overall risk assessment is low, with the website appearing trustworthy and professionally managed. Strategic recommendations include enhancing security headers, publishing privacy and security policies, adding vulnerability disclosure mechanisms, and improving accessibility features to meet compliance standards. These steps will strengthen trust and security culture while ensuring regulatory adherence.

W

WIS

foreningsportal.no

57

Foreningsportal.no is a Norwegian platform operated by WIS in collaboration with Norges Frivilligsentraler, providing municipalities and associations with a centralized portal to manage and display information about local organizations and activities. The platform supports administrative functions, communication tools, and data integration from official registers, serving a broad user base across Norway with over 107 portals and nearly 20,000 registered organizations. Technically, the site uses a modern stack including jQuery, Bootstrap, Froala Editor, and other JavaScript libraries, hosted on a custom CMS called WisWeb. The website is well-structured, mobile-optimized, and provides good user experience, though some SEO and accessibility features are basic. Security posture is moderate, with HTTPS implied but lacking explicit security headers and published policies. Privacy compliance is limited, with a basic privacy policy present but no cookie consent or GDPR indicators. Overall, the site is legitimate, consistent with its WHOIS data, and serves an important role in the Norwegian non-profit and municipal sector.

D

Defense News

defensenews.com

10

Defense News is a prominent global media outlet specializing in the politics, business, and technology of defense. It serves senior military and industry decision-makers with comprehensive news coverage, special reports, whitepapers, and event partnerships. The website demonstrates a mature technical infrastructure leveraging modern web technologies, CDNs, and performance monitoring tools, ensuring fast and responsive user experience across devices. Security posture is solid with HTTPS and inferred security headers, though explicit security policies and incident response contacts are absent. Privacy compliance is weak due to missing visible privacy and cookie policies. The domain WHOIS data is unavailable, raising transparency concerns but the brand presence and content quality strongly support legitimacy. Overall, the site is professional, content-rich, and trustworthy but could improve transparency and privacy compliance to enhance user trust and regulatory adherence.

O

Openbaar Ministerie

openbaarministerie.nl

63

The Openbaar Ministerie (OM) website serves as the official online presence of the Dutch Public Prosecution Service, a key government entity responsible for criminal prosecution and law enforcement leadership in the Netherlands. The site provides comprehensive information about the OM's role, ongoing cases, news updates, and public resources. It targets a broad audience including the general public, legal professionals, victims, and suspects, offering transparency and accessibility to justice-related information. The OM operates under the Ministry of Justice and Security, reinforcing its authoritative position in the national justice system. Technically, the website employs modern web technologies including JavaScript and jQuery UI, with analytics powered by Piwik PRO, reflecting a moderate to advanced digital maturity. The site is hosted on government infrastructure, ensuring reliability and compliance with national standards. Mobile optimization and accessibility features are well implemented, contributing to a positive user experience. SEO and metadata are properly configured, enhancing discoverability. From a security perspective, the site enforces HTTPS with strong SSL configuration and uses nonce attributes in scripts to mitigate injection risks. Privacy and cookie policies are clearly presented with consent mechanisms, aligning with GDPR requirements. However, explicit security policy documentation and incident response contacts are not publicly available, representing an area for improvement. No vulnerabilities or suspicious activities were detected in the content or technical setup. Overall, the OM website demonstrates a high level of professionalism, trustworthiness, and compliance appropriate for a government justice institution. Strategic recommendations include publishing formal security policies, enhancing security headers, and providing clear incident response contacts to further strengthen security posture and public trust.

Barcelona Activa's mobile website (barcelonactiva.mobi) is currently non-operational, serving only as a redirect notice to the main Barcelona Activa website. The business behind the domain is CIBERPYME BARCELONA, S.L., a local government or non-profit entity focused on supporting entrepreneurship and business development in Barcelona. The domain is aged since 2014 but has been expired for over 8 months, which poses a risk to trust and continuity. The website itself is minimalistic, with no interactive elements, forms, or contact information, indicating a low level of digital maturity and technical sophistication. Hosting is provided by SiteGround, a reputable provider, but no advanced security or privacy features are implemented.

F

Fira de Barcelona

firabarcelona.com

66

Fira de Barcelona is a prominent event management organization specializing in hosting trade fairs, exhibitions, and conferences in Barcelona, Spain. The website presents a professional and well-structured digital presence, targeting a general audience interested in upcoming events and venue information. The business operates in the government sector and is recognized as a large entity within its market. Technically, the site is built on WordPress using Elementor, with modern JavaScript libraries such as jQuery and FontAwesome, and includes a cookie consent mechanism via Usercentrics. Analytics are managed through Google Tag Manager, indicating a moderate level of digital maturity. Security posture is generally good with HTTPS enforced and consent management in place; however, the absence of security headers and explicit privacy policies suggests room for improvement. The WHOIS data is notably missing, which raises questions about domain registration transparency but does not necessarily indicate malicious intent given the professional nature of the site. Overall, the website is trustworthy and functional but would benefit from enhanced transparency and security practices.

A

Ajuntament de Barcelona

barcelona.cat

67

Ajuntament de Barcelona operates the official municipal website for the city of Barcelona, providing residents and visitors with comprehensive information about city services, news, cultural events, transport, and business resources. The website is positioned as a key digital gateway for public services and community engagement in Barcelona. The site targets a broad audience including residents, businesses, and tourists, offering multilingual support and extensive navigation options. Technically, the site is built on Drupal 10 with modern frontend frameworks like Bootstrap, and integrates multiple analytics platforms including Matomo and Plausible, alongside marketing and tracking tools such as Adobe Visitor Tracking and Google Analytics. The site demonstrates a mature digital infrastructure with good mobile optimization and accessibility features. Security posture is strong with HTTPS enforced and anti-CSRF protections evident, though explicit security headers are not visible in the provided content and should be verified. Privacy compliance is well addressed with a detailed cookie consent mechanism and granular cookie categorization, although no explicit privacy policy or terms of service URLs were found in the provided content. WHOIS data is privacy protected by puntCAT, which is typical for government domains under the .cat TLD, and does not raise legitimacy concerns. Overall, the website is a professional, secure, and trustworthy government portal with extensive content and good user experience.

L

Landeshauptstadt Erfurt

erfurt.de

55

Landeshauptstadt Erfurt operates the official city portal for the capital of Thuringia, Germany, providing comprehensive information and services related to city administration, culture, education, economy, and citizen services. The website serves a broad audience including residents, visitors, and businesses, positioning itself as a central digital hub for municipal engagement and information dissemination. The business model is public sector focused, delivering government transparency and community resources. Technically, the site is built on the IMPERIA CMS platform with a mix of legacy and modern JavaScript libraries such as jQuery and Flexslider, enhanced with accessibility and SEO best practices. The site is mobile optimized and employs privacy-conscious analytics (Matomo) with Do Not Track and cookie consent mechanisms in place, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced and privacy-respecting analytics, though there is room for improvement by adding security headers and explicit incident response information. No vulnerabilities or suspicious content were detected. The domain WHOIS data is limited but consistent with institutional hosting, supporting legitimacy. Overall, the website is professional, trustworthy, and well-maintained, fulfilling its role as an official government portal effectively.

C

Comitê Gestor da Internet no Brasil (CGI.br)

cgi.br

62

CGI.br (Comitê Gestor da Internet no Brasil) is a Brazilian governmental and non-profit entity established in 1995 to coordinate and integrate Internet services initiatives in Brazil. It acts as a multistakeholder governance body promoting technical quality, innovation, and dissemination of Internet services. The website reflects a mature digital presence with comprehensive content, multilingual support, and strong branding consistency. The technical infrastructure uses modern frameworks like Bootstrap and jQuery, with analytics powered by Piwik/Matomo. Security posture is solid with HTTPS enforced, though some security headers and explicit incident response contacts are missing. Privacy compliance is partial, with a clear privacy policy but no cookie consent mechanism detected. Overall, the site is professional, trustworthy, and serves a broad audience including government, technical communities, and civil society.

N

NIC.br - Núcleo de Informação e Coordenação do Ponto BR

cetic.br

59

Cetic.br is a regional center under NIC.br dedicated to producing ICT indicators, statistics, and research to support digital policy formulation in Brazil and Portuguese-speaking countries. It holds a prestigious status as a UNESCO Category 2 Center, reinforcing its role in regional digital development and cooperation. The website is professionally designed, multilingual, and provides extensive content on ICT adoption and digital transformation. Technically, the site uses modern frameworks like Bootstrap and jQuery, with strong accessibility features including a VLibras sign language plugin. Security posture is solid with HTTPS and no visible vulnerabilities, though it lacks explicit security policies and vulnerability disclosure mechanisms. Privacy compliance is good with a comprehensive privacy policy hosted on the parent NIC.br domain, but cookie consent mechanisms are absent. Overall, the site is trustworthy, authoritative, and well-positioned in its niche.

F

Forsvarets Personellservice

fp.no

71

Forsvarets Personellservice operates as a dedicated membership and service office for employees of the Norwegian Armed Forces, providing services such as membership management, insurance, and loans. The website is professionally designed, targeting a niche government audience, and is hosted on Microsoft Azure with a modern technology stack including Sitecore CMS and ASP.NET framework. The site demonstrates a mature digital infrastructure with good mobile optimization and accessibility features. Security posture is strong with HTTPS enforcement, comprehensive cookie consent mechanisms, and appropriate security headers, although incident response and vulnerability disclosure information are absent. Privacy compliance is well addressed with detailed policies and GDPR-aligned consent management. Overall, the website presents a trustworthy and professional front for its specialized audience, though transparency could be improved by publishing contact and security policy details.

The Florida Sheriffs Association is a well-established statewide organization supporting law enforcement and corrections communities in Florida. Their primary services include training and advocacy for public safety legislation. The website reflects a professional and consistent brand presence with good SEO and structured data, targeting law enforcement professionals and public safety stakeholders. Technically, the site is built on WordPress with common marketing and analytics tools integrated, hosted behind Cloudflare DNS, and secured with HTTPS. Security posture is solid with domain locking and HTTPS, though DNSSEC is not enabled and no explicit security or incident response policies are publicly available. Privacy compliance is weak due to the absence of privacy and cookie policies or consent mechanisms. Overall, the domain registration is consistent and trustworthy, reflecting a legitimate and mature organization.

T

Texas Association of School Boards, Inc.

buyboard.com

64

BuyBoard Purchasing Cooperative is a well-established purchasing cooperative affiliated with the Texas Association of School Boards, Inc., serving schools, municipalities, counties, and non-profits primarily in Texas and nationally. The cooperative offers streamlined purchasing services with free membership, facilitating public procurement and vendor contracting. The website presents a professional and clear structure with dedicated sections for national and Texas cooperatives, vendors, and industry insights. Technically, the site uses modern web technologies including Bootstrap, jQuery, Google Tag Manager, and Microsoft Application Insights, hosted likely on Microsoft Azure. The site is mobile optimized and SEO friendly, though accessibility features are basic. Security posture is good with HTTPS enforced and monitoring tools in place, but lacks some security headers and a cookie consent mechanism. WHOIS data is unavailable, which reduces transparency but the website content and contact information strongly support legitimacy. Overall, the site is trustworthy and professionally maintained, with room for improvement in privacy compliance and security best practices.

N

NorSIS

slettmeg.no

47

Slettmeg.no is a Norwegian website operated by NorSIS, providing free advice and guidance on deleting personal information from internet services and offering privacy and digital rights support. The site targets Norwegian users seeking assistance with online data removal and privacy issues. Technically, the site is built on WordPress with modern plugins such as Yoast SEO, Matomo analytics for privacy-respecting tracking, and Google invisible reCAPTCHA for form security. The website is mobile-optimized and accessible, with good SEO practices. Security posture is moderate with HTTPS enforced and no exposed sensitive data, but lacks explicit security headers and has some technical issues with a Facebook deceased profile deletion form. Privacy compliance is good with clear privacy and cookie policies, though no terms of service or vulnerability disclosure policies are found. Overall, the site is trustworthy, professional, and serves a niche government/non-profit role in Norway.

P

Pfarrei Hl. Edith Stein

heiligeedithstein.de

46

The website represents the Catholic parish 'Hl. Edith Stein' located in Berlin, Germany, serving the local community with religious services, events, and pastoral care. It operates under the Erzbistum Berlin and targets parishioners and interested individuals in the region. The site provides comprehensive information about services, events, and community life, reflecting a small but active religious organization. Technically, the site is built on TYPO3 CMS, utilizing legacy jQuery libraries and Shadowbox.js for media display. The site is moderately optimized for performance and mobile devices, with good accessibility and SEO practices. Cookie consent is implemented with granular user choices, reflecting good privacy compliance. Security posture is moderate; while HTTPS is implied, no explicit security headers were detected, and no published security or incident response policies are available. The site does not expose sensitive data and uses consent-based activation for tracking and media embeds. No WAF or blocking mechanisms were detected, allowing full content access. Overall, the website is trustworthy and professional, with good content quality and privacy compliance. Recommendations include enhancing security headers, publishing security policies, and considering vulnerability disclosure mechanisms to improve security maturity and trust further.

N

Norsk Tipping AS

norsk-tipping.no

65

Norsk Tipping AS is the official Norwegian state-owned lottery and sports betting operator, providing a wide range of gaming products including lotteries, sports betting, and instant games. The website targets Norwegian adults over 18 years and emphasizes responsible gaming with clear age restrictions and links to support organizations. Norsk Tipping holds a leading market position in Norway's regulated gambling sector, offering trusted and popular gaming services. The website content is rich, professionally designed, and well-structured, supporting a positive user experience and clear navigation.

Ø

Østre Toten kommune

ototen.no

65

Østre Toten kommune operates as the official municipal government entity for the Østre Toten region in Norway, providing a broad range of public services and information to residents, employees, and visitors. The website serves as a comprehensive portal for municipal services, political information, job opportunities, and community events, positioning itself as a trusted local government resource. The target audience primarily includes local residents, municipal employees, and regional stakeholders. The business model is typical of a public sector organization, focusing on service delivery rather than commercial revenue generation. Technically, the website is built on a legacy CMS platform (ACO CMS) with a technology stack that includes older versions of jQuery and vanilla JavaScript modules. While the site is functional and includes accessibility features and SEO optimizations, there is room for modernization, particularly in updating JavaScript libraries and enhancing mobile responsiveness. The site uses HTTPS and includes privacy and cookie policies, though it lacks explicit cookie consent mechanisms and advanced security headers. From a security perspective, the site demonstrates a moderate security posture with no visible vulnerabilities or exposed sensitive data. However, the use of outdated JavaScript libraries and absence of security headers suggest potential areas for improvement. The lack of a published security policy, incident response contacts, and vulnerability disclosure mechanisms indicates a need to strengthen security governance and transparency. Overall, the website is a credible and professional municipal portal with good content quality and user experience. The domain's WHOIS data is not publicly available due to Norwegian domain privacy policies, which is standard and does not detract from legitimacy. Strategic recommendations include updating technical components, enhancing security headers, implementing cookie consent, and publishing security and incident response policies to improve trust and compliance.

L

Luftmilitært Samfund

luftmils.no

56

Luftmilitært Samfund (LMS) is a Norwegian non-profit organization dedicated to preserving the history, traditions, and interests of the Norwegian Air Force. The organization serves current and former officers and non-commissioned officers by organizing events, marking significant dates, and fostering social connections within the Air Force community. The website reflects a focused mission with professional design and relevant content tailored to its niche audience. Technically, the website is built on the Webflow platform, utilizing modern web technologies such as Google Fonts, jQuery, and Google Tag Manager for analytics. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. However, some technical improvements could be made in accessibility and SEO optimization. From a security perspective, the site uses HTTPS and does not expose sensitive data. However, it lacks important security headers and visible privacy or cookie policies, which are critical for compliance and user trust. The absence of contact information and incident response details limits transparency. The WHOIS data is unavailable due to Norid's privacy policies, but the domain and website content appear legitimate and consistent with the organization's mission. Overall, the website presents a moderate risk profile with room for improvement in privacy compliance, security best practices, and contact transparency. Strategic enhancements in these areas would strengthen trust and compliance while maintaining the organization's reputable presence.

B

Business Post

economicoutlookforum.ie

60

The Economic Outlook Forum website represents a professional event platform focused on Ireland's premier economic summit for senior business leaders and policymakers. The forum emphasizes technology and AI as key drivers of economic growth and transformation. The site is well-branded, consistent, and provides clear information about event dates, speakers, venue, and sponsorship opportunities. The business model revolves around event organization and sponsorship, positioning itself as a key annual economic dialogue platform in Ireland. Technically, the site is built on WordPress with Elementor and related plugins, hosted by a reputable Irish hosting provider. The site shows good mobile optimization and SEO practices, though some minor accessibility improvements could be made. Security posture is solid with HTTPS enabled and no exposed sensitive data, but DNSSEC is not enabled and security headers are missing, which are recommended improvements. Privacy compliance is basic with a privacy policy linked externally and no visible cookie consent mechanism. Overall, the site is trustworthy and professionally maintained, suitable for its target audience and business purpose.

M

Maldives Space Research Organisation

msro.mv

59

The Maldives Space Research Organisation (MSRO) is a governmental or non-profit entity focused on advancing space research, technology, and education within the Maldives. The website presents a professional and consistent brand image, targeting a general audience interested in space and science. The organization appears to be small in size and operates primarily in the government and education sectors. Technically, the website is built using Framer, leveraging modern web fonts and JavaScript, with moderate performance and good mobile optimization. However, the site lacks comprehensive privacy and cookie policies, and no contact information is readily available, which impacts user trust and compliance. Security posture is moderate with HTTPS enabled but missing important security headers and incident response details. Analytics are implemented via Metricool without visible consent mechanisms, indicating privacy compliance gaps. WHOIS data is consistent with the organization's identity, supporting legitimacy. Overall, the website is functional and professional but requires improvements in privacy, security, and contact transparency to enhance trust and compliance.

M

Ministerie van Buitenlandse Zaken

netherlandsworldwide.nl

62

NetherlandsWorldwide is an official Dutch government website managed by the Ministry of Foreign Affairs (Ministerie van Buitenlandse Zaken). It serves as a comprehensive information portal for Dutch citizens and residents who travel, live, work, or study abroad. The website provides detailed guidance on topics such as travel, identity documents, work, family matters, education, living arrangements, financial issues, transport, and health. It is positioned as a trusted government resource with a clear focus on serving the needs of Dutch nationals overseas. Technically, the website is built using modern web technologies including React and Next.js, with content managed via Hippo CMS (Bloomreach). It employs Piwik PRO for analytics and uses SVG images and CSS modules for styling. The site demonstrates good mobile optimization, accessibility, and SEO practices, contributing to a positive user experience. Performance is moderate, with asynchronous loading of scripts and use of nonces for script security. From a security perspective, the site enforces HTTPS and uses secure form practices. However, explicit security headers such as Content-Security-Policy and X-Frame-Options are not evident in the HTML content. There is no visible privacy or cookie policy on the homepage, nor is there a security policy or incident response contact information. The site uses tracking scripts for analytics and surveys but lacks explicit consent mechanisms. Overall, the security posture is solid but could be improved by adding formal policies and headers. The website is legitimate and trustworthy, with WHOIS data confirming registration by the Dutch Ministry of Foreign Affairs. No suspicious patterns or privacy protection inconsistencies were found. The content is safe for general audiences, with no adult or questionable material. Strategic recommendations include publishing privacy and cookie policies with consent mechanisms, implementing security headers, and providing vulnerability disclosure information to enhance transparency and compliance.

Z

ZEKO - Zentrale Ethikkommission bei der Bundesärztekammer

zentrale-ethikkommission.de

64

The Zentrale Ethikkommission (ZEKO) is an official ethics commission affiliated with the German Medical Association (Bundesärztekammer), established in 1994 to provide independent ethical guidance in medicine and related fields. The website serves as a platform for publishing ethical statements, resolutions, and supporting medical professionals and the public in ethical discourse. The target audience includes physicians, healthcare professionals, and interested members of the public. Technically, the website is built on the TYPO3 CMS platform, leveraging modern frontend technologies such as Bootstrap 5 and FontAwesome. It is hosted by SchlundTech and employs privacy-conscious analytics via Matomo and consent management through Cookiebot. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS, uses cookie consent mechanisms compliant with GDPR, and avoids exposing sensitive data. While some security headers are not explicitly visible in the HTML, the overall posture is strong with no detected vulnerabilities. The WHOIS data aligns with the organization's official status, enhancing trust. Overall, the website presents a low-risk profile with strong compliance and professionalism. Strategic recommendations include enhancing explicit security headers and publishing a vulnerability disclosure policy to further strengthen security transparency.

F

Forsvaret

forsvaret.no

70

Forsvaret.no is the official website of the Norwegian Armed Forces, providing comprehensive information about military tasks, training, education, recruitment, veteran affairs, and public communication. The site targets Norwegian citizens interested in military service and the general public seeking authoritative defense information. The website demonstrates a high level of professionalism, with clear navigation, consistent branding, and relevant content tailored to its audience. Technically, the site employs modern web technologies including Vue.js and Google Tag Manager, and appears to be built on the Enonic CMS platform. The site is mobile-optimized, accessible, and SEO-friendly, with a moderate to fast performance profile. Privacy compliance is well addressed with a detailed privacy policy and cookie consent mechanisms. From a security perspective, the site uses HTTPS and implements cookie consent, but lacks explicit security headers and publicly available security policies or incident response information. No vulnerabilities or exposed sensitive data were detected in the HTML content. The domain WHOIS data is not publicly available due to Norid privacy policies, but the domain is consistent with an official Norwegian government entity. Overall, Forsvaret.no presents a trustworthy, secure, and well-maintained digital presence for the Norwegian Armed Forces, with recommendations to enhance security headers and publish vulnerability disclosure information to further strengthen its security posture.

N

Norsk Reservistforbund

nrof.no

44

Norsk Reservistforbund (NROF) is a Norwegian non-profit organization dedicated to supporting the Norwegian Armed Forces by fostering defense willingness and organizing activities that maintain the competence of its members. The website serves as a hub for news, events, membership information, and publications such as the Pro Patria magazine. The organization targets military reservists and supporters within Norway, positioning itself as a key player in the defense support sector. Technically, the website is built on WordPress with modern frontend technologies including Bootstrap and Swiper.js, and integrates Google Analytics for visitor tracking. The site is mobile-optimized and SEO-friendly, though it lacks visible privacy and cookie policies, which impacts compliance ratings. Security posture is generally good with HTTPS enforced, but security headers are not evident in the provided data. The absence of WHOIS data reduces domain trustworthiness, but the website content and structure indicate a legitimate and professional entity. Overall, the site is well-maintained, content-rich, and serves its audience effectively, though improvements in privacy compliance and security headers are recommended.

The United States Military Academy (USMA) operates the domain usma.edu, a government-affiliated educational institution providing undergraduate education and military training. The domain is legitimate and consistent with the institution's long history. However, the website content is currently inaccessible, returning a 403 Forbidden error with no visible content, metadata, or interactive elements. This severely limits the ability to assess the site's technical infrastructure, security posture, and compliance status. The lack of accessible content also prevents evaluation of privacy policies, contact information, or user engagement features. From a security perspective, the absence of security headers and HTTPS status is unknown, but the blocked access suggests restrictive security controls are in place. Overall, the site is legitimate but currently inaccessible, resulting in a low AI score and limited insights.

K

Kungl Krigsvetenskapsakademien

kkrva.se

43

Kungl Krigsvetenskapsakademien (The Royal Swedish Academy of War Sciences) is a well-established Swedish academic institution focused on defense and security sciences. The website serves as a platform for disseminating research, projects, and news related to Sweden's security policy and cooperation within EU and NATO frameworks. The organization targets academics, policymakers, and defense professionals, providing open access to publications and hosting relevant projects. The domain has a long history dating back to 1998, reinforcing its credibility and authority in the sector. Technically, the site is built on WordPress with a modern tech stack and good mobile optimization, though some minor improvements in security headers and DNSSEC could be made. The security posture is solid with HTTPS and no visible vulnerabilities, but lacks explicit vulnerability disclosure and incident response information. Privacy compliance is good with a comprehensive privacy policy, though cookie consent mechanisms are not evident. Overall, the site is professional, trustworthy, and content-rich, serving its niche audience effectively.