Government security reports

M

Musée des Beaux-Arts de Bordeaux

musba-bordeaux.fr

57

The Musée des Beaux-Arts de Bordeaux is a well-established cultural institution showcasing European art from the 15th to the 20th century. It offers permanent collections, temporary exhibitions, educational programs, and public events, serving a broad general audience including families, students, and art enthusiasts. The museum is positioned as a key cultural entity within Bordeaux, supported by official city partnerships and a strong online presence. Technically, the website is built on Drupal 11, leveraging modern web technologies such as jQuery and Bootstrap for responsive design. It incorporates privacy and cookie consent management via Tarteaucitron and uses Piano Analytics for visitor tracking. The site is mobile-optimized and accessible, with good SEO practices and clear navigation. From a security perspective, the site enforces HTTPS and manages cookie consent effectively. However, it lacks explicit security headers and a published security policy or incident response information, which are recommended for enhanced security posture. No vulnerabilities or exposed sensitive data were detected. Overall, the website is professional, trustworthy, and compliant with GDPR requirements. The absence of WHOIS data slightly reduces trust but does not detract from the legitimacy indicated by the content and official affiliations. Strategic improvements in security transparency and header implementation would further strengthen the site’s security and compliance stance.

V

Ville de Bordeaux

bordeaux.fr

71

The website www.bordeaux.fr is the official municipal portal for the city of Bordeaux, France. It provides comprehensive information about city news, events, public services, administrative procedures, and guides for residents and visitors. The site is well-branded with consistent city logos and uses Drupal 11 as its content management system, indicating a modern and maintainable technical infrastructure. Navigation is extensive and well-structured, targeting a broad audience including residents, professionals, and visitors. The site is mobile-optimized and accessible, with good SEO practices evident from meta tags and structured data. Security-wise, the site implements a cookie consent mechanism but lacks visible security headers and explicit privacy or security policies in the provided content. WHOIS data is unavailable due to privacy restrictions typical for .fr domains, but the domain's legitimacy is supported by its official nature and consistent branding. Overall, the site scores well on content quality, technical implementation, and business credibility, with room for improvement in security posture and privacy compliance.

E

Eurométropole de Metz

eurometropolemetz.eu

66

The Eurométropole de Metz website serves as the official digital presence of the metropolitan government entity responsible for the Metz region in France. It provides comprehensive information about local governance, public services, urban planning, cultural activities, and economic development initiatives. The site targets residents, businesses, visitors, and public stakeholders, offering a broad range of civic resources and support. The business model is that of a public sector government authority, focusing on service provision and community engagement. Technically, the website is built on the TYPO3 CMS platform, leveraging modern web technologies such as jQuery, Foundation CSS framework, and OpenLayers for mapping. It integrates Matomo analytics for user tracking with GDPR-compliant cookie consent mechanisms. The site demonstrates good mobile optimization, accessibility, and SEO practices, although some improvements in security headers could enhance its posture. From a security perspective, the site enforces HTTPS and employs explicit cookie consent aligned with GDPR requirements. However, it lacks visible HTTP security headers and does not provide explicit security policies or incident response contacts. The WHOIS data is privacy protected by EURid, which is typical for EU domains and justified for this public entity. No critical vulnerabilities or suspicious patterns were detected. Overall, the website is professional, trustworthy, and well-maintained, with a solid foundation for public service delivery. Strategic recommendations include enhancing HTTP security headers, publishing security and incident response policies, and adding vulnerability disclosure mechanisms to further strengthen trust and compliance.

S

Stadt Trier

trier.de

63

The Stadt Trier website serves as the official digital portal for the city of Trier, Germany, providing a broad range of municipal services, citizen information, cultural events, and administrative resources. It targets residents, visitors, and businesses, positioning itself as a comprehensive government resource. The site is well-branded, professionally designed, and offers extensive navigation and content coverage, reflecting a mature digital presence for a public sector entity. Technically, the website employs a modern technology stack including jQuery, Bootstrap 4, and privacy-focused analytics via Matomo, hosted on Azure Cloud infrastructure. Accessibility features such as Eye-Able tools and social share privacy plugins enhance user experience and compliance. Performance is moderate with good mobile optimization and SEO practices. From a security perspective, the site uses HTTPS and privacy-respecting analytics, but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with clear privacy and cookie policies and GDPR adherence. Overall, the website presents a low-risk profile with a high degree of trustworthiness and professionalism. Strategic improvements in security headers and incident response transparency would further enhance its security posture.

A

Administration communale de la Ville de Luxembourg

vdl.lu

63

The website www.vdl.lu is the official digital presence of the Administration communale de la Ville de Luxembourg, serving as the primary portal for municipal information and services. It targets residents, visitors, and businesses in Luxembourg City, offering comprehensive content on city governance, administrative procedures, mobility, cultural events, and community engagement. The site is well-branded with consistent official logos and provides clear contact channels including email, phone, and social media links. Technically, the site is built on Drupal 9, leveraging modern web technologies and integrating Matomo for analytics and CookieYes for consent management. The site demonstrates good mobile optimization, accessibility, and SEO practices. Security is robust with HTTPS enforced and appropriate security headers, although no explicit security policy or incident response information is published. From a security and privacy perspective, the site implements a comprehensive cookie consent mechanism aligned with GDPR requirements, and no vulnerabilities or exposed sensitive data were detected. However, the absence of WHOIS data due to registry restrictions limits domain trust verification. Overall, the site presents a low risk profile with strong compliance and professional standards. Strategically, the site should consider publishing a dedicated security policy and incident response contacts to enhance transparency and trust. Additionally, implementing a vulnerability disclosure policy or security.txt file would further strengthen its security posture.

P

Pennsylvania CareerLink® Delaware County

pacareerlinkdelco.org

59

Pennsylvania CareerLink® Delaware County operates as a government employment office serving Delaware County, Pennsylvania. The organization connects job seekers with employers and provides free career resources including job matching, resume development, training opportunities, and specialized programs for veterans, young adults, and older job seekers. The website reflects a local government service with a clear focus on workforce development and community support. The business model is government-funded and targets residents and employers within the county. The site is well-branded and consistent with official government employment services. Technically, the website is built on WordPress using the Elementor page builder and Astra theme, supported by Cloudflare DNS and Tucows as the registrar. It integrates common analytics and marketing tools such as Google Analytics, Google Tag Manager, and Facebook Pixel. The site is mobile-optimized and performs moderately well, with good SEO and accessibility basics. However, some technical security enhancements like DNSSEC and security headers are missing. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and does not provide a privacy or cookie policy, which are important for compliance and user trust. No vulnerability disclosure or incident response information is available. The domain registration data is consistent and legitimate, supporting the site's credibility. Overall, the website is a trustworthy and professional government resource but would benefit from improved privacy compliance and enhanced security configurations to strengthen user trust and regulatory adherence.

D

Delaware County District Attorneys Office

delcoda.com

57

The Delaware County District Attorneys Office website serves as the official online presence for the government legal entity led by District Attorney Jack Stollsteimer. It provides information relevant to residents and stakeholders of Delaware County regarding legal prosecution and public safety. The website is built on WordPress using the Divi theme and incorporates SEO best practices via Yoast SEO. Hosting and domain registration are managed through GoDaddy, with the domain established in 2006, reflecting a mature and stable online presence. Security posture is adequate with HTTPS enabled and registrar locks in place, though DNSSEC is not enabled and security headers are not explicitly detected. Privacy and cookie policies are absent, indicating a gap in compliance and transparency. No incident response or vulnerability disclosure information is provided. Overall, the site is professional, trustworthy, and safe for general audiences, but could improve in privacy compliance and security hardening.

A

America250PADelco

america250padelco.org

56

The website america250padelco.org serves as the official online presence for the Delaware County, Pennsylvania committee dedicated to celebrating America's 250th birthday. The site provides informational content about the committee's activities and events, targeting a general audience interested in local government and community celebrations. The website is professionally designed with consistent branding and good content relevance, though it lacks detailed business information and contact data. Technically, the site uses modern web fonts and JavaScript libraries, hosted on a platform associated with f-static.com, but does not reveal advanced frameworks or CMS details. Security posture is moderate; HTTPS is implied but no security headers or policies are detected, and WHOIS data is unavailable, limiting domain trust assessment. Privacy and cookie policies are absent, which impacts compliance and user trust. Overall, the site is functional and informative but would benefit from enhanced security and compliance features.

C

CYBERsicher

transferstelle-cybersicherheit.de

54

CYBERsicher is a German government-related initiative dedicated to enhancing cybersecurity awareness and capabilities among small and medium-sized enterprises (SMEs), startups, and craft businesses. The website serves as a comprehensive platform offering free resources, workshops, events, and emergency support services tailored to the needs of the Mittelstand. It positions itself as a national hub for cybersecurity knowledge transfer and practical assistance, leveraging partnerships and official backing to build trust and reach its target audience effectively. The content is well-maintained, regularly updated, and presented in a professional manner, reflecting a strong commitment to user education and support. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and WP Rocket, ensuring good performance, SEO optimization, and mobile responsiveness. The use of Borlabs Cookie indicates attention to privacy compliance and user consent management. Hosting is provided via rzone.de, and the site employs HTTPS with a solid SSL configuration. Accessibility and navigation are well-implemented, contributing to a positive user experience. From a security perspective, the site demonstrates good practices including HTTPS enforcement and cookie consent mechanisms. However, it lacks explicit published security policies, incident response contacts, and vulnerability disclosure information, which are recommended for enhanced transparency and trust. No vulnerabilities or exposed sensitive data were detected in the analyzed content. Overall, the security posture is solid but could be improved with additional documentation and security headers. The overall risk assessment is low, with the site appearing trustworthy and professionally managed. Strategic recommendations include publishing dedicated security and incident response policies, adding security headers, and considering a vulnerability disclosure framework. These steps would further strengthen the site's security maturity and user confidence.

B

Bundesministerium für Wirtschaft und Klimaschutz

mittelstand-digital.de

66

Mittelstand-Digital is a German government initiative under the Bundesministerium für Wirtschaft und Klimaschutz, focused on supporting small and medium-sized enterprises (SMEs) in their digital transformation journey. The website offers comprehensive information, practical examples, workshops, and tools related to digitalization, artificial intelligence, and cybersecurity. It serves as a trusted resource with official government backing, targeting the German SME sector with free and neutral guidance. Technically, the website employs modern web technologies including JW Player for video content, Slick Slider for UI elements, and eTracker for analytics, all integrated with user consent mechanisms. The site is mobile-optimized, accessible, and performs moderately well. Hosting is managed via managed-ip.com name servers, consistent with a professional government hosting environment. From a security perspective, the site enforces HTTPS, uses cookie consent banners, and requires explicit user consent for video tracking services. While explicit security headers are not fully detailed, no vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with clear GDPR-aligned policies and a named data protection officer contact. Overall, the website presents a low-risk profile with high trustworthiness and professionalism. It effectively balances user privacy, security, and usability, making it a reliable digital resource for its target audience.

L

La Boge

laboge.fr

58

La Boge is a French government-supported digital platform dedicated to providing young people aged 13 to 29 in Saint-Étienne with access to discounts, event information, and social support resources. The website offers a comprehensive guide to aids, events, and youth services, positioning itself as a trusted local resource. Technically, the site is built on Drupal 9, leveraging modern web technologies and analytics tools such as Matomo and Google Tag Manager, ensuring a responsive and user-friendly experience. Security posture is adequate with HTTPS enforced and cookie consent implemented, though improvements in security headers are recommended. The absence of WHOIS data slightly impacts trust but is likely due to registry restrictions common in French domains. Overall, the site is professional, content-rich, and serves its target audience effectively.

S

Středočeský kraj

bezpecnevotice.cz

54

Bezpecnevotice.cz is a regional government website operated under the Středočeský kraj authority, providing public safety information, announcements, and contact details for police and municipal services in the Votice area. The site serves local residents and community members seeking crime prevention updates and emergency contact information. The business model is a government-funded public service project focused on community safety and crime prevention. Technically, the website is built on WordPress 5.3.20 with common plugins such as Yoast SEO and uses standard web technologies including jQuery, Slick Carousel, and Lightbox. The site is moderately optimized for performance and mobile devices, with basic accessibility features and good SEO practices. However, some scripts are loaded over HTTP, which may cause mixed content warnings, and Google Analytics is incompletely configured. From a security perspective, the site uses HTTPS but lacks explicit security headers and advanced security policies. The cookie consent banner is implemented, indicating some privacy compliance, but no detailed privacy or security policies are published. No incident response or vulnerability disclosure information is available. The domain registration is consistent with the website's government affiliation and age, supporting legitimacy. Overall, the website is a trustworthy and professional regional government portal with good content quality and user experience. Security posture can be improved by addressing mixed content issues, adding security headers, and enhancing privacy and incident response disclosures. The site poses no content safety risks and is suitable for general audiences.

W

WEBHOUSE, s.r.o.

mkcvotice.cz

45

The website mkcvotice.cz serves as the official municipal information center for the town of Votice in the Czech Republic. It provides residents and tourists with comprehensive information about local culture, events, accommodation, and news. The site is well-structured, professionally designed, and targets a local audience seeking municipal and tourist information. The business model is public service-oriented, focusing on community engagement and information dissemination. Technically, the website is built on the vismo CMS platform, utilizing standard web technologies such as HTML5, CSS, and JavaScript. It incorporates Google reCAPTCHA for form security and Google Maps for location embedding. The site demonstrates good mobile optimization, accessibility, and SEO practices, although some modern security headers are missing. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms, indicating a reasonable security posture. However, it lacks explicit security policies, incident response contacts, and advanced security headers, which could be improved to enhance trust and compliance. No vulnerabilities or suspicious activities were detected. Overall, mkcvotice.cz is a trustworthy, well-maintained municipal website with a solid foundation in content quality and technical implementation. Strategic improvements in security policies and headers would further strengthen its security posture and compliance standing.

Poznej Příbram is the official tourism portal for the city of Příbram, Czech Republic, providing comprehensive information on local attractions, cultural events, restaurants, accommodations, and outdoor activities. The website targets tourists, families, and culture enthusiasts, positioning itself as a key regional resource supported by the municipal government. Technically, the site employs modern JavaScript libraries such as jQuery, Flatpickr, and Google Maps API to deliver interactive features including a trip planner and event calendar. The site is mobile-optimized with good navigation and content relevance, though some accessibility features could be enhanced. Security-wise, the website enforces HTTPS and includes a cookie consent mechanism, but lacks advanced security headers and explicit security policies. No critical vulnerabilities or exposed sensitive data were detected, indicating a solid security posture for a government tourism site. Overall, the site is trustworthy, professionally maintained, and compliant with GDPR requirements, though it could benefit from improved security headers and clearer contact information.

O

Obec Podlesí

obecpodlesi.cz

51

Obec Podlesí operates an official municipal website serving the local community of Podlesí in the Czech Republic. The site provides comprehensive information about local government, community events, official documents, and contact details. It targets residents and visitors seeking municipal services and updates. The website is well-structured with clear navigation and mobile optimization, reflecting a good level of digital maturity for a small government entity. Technically, it employs common JavaScript libraries such as jQuery, Bootstrap, and Swiper.js to enhance user experience. Security posture is moderate; HTTPS is used, and a cookie consent mechanism is implemented, but security headers and explicit privacy policies are lacking. The absence of WHOIS data reduces trust slightly, though the official nature and content quality support legitimacy. Overall, the website is functional and trustworthy but would benefit from enhanced security and privacy transparency.

Město Příbram operates an official municipal website serving residents and visitors of the city of Příbram in the Czech Republic. The site provides comprehensive information about city governance, public services, events, and citizen portals. It targets local citizens and tourists, offering services such as public tenders, event calendars, and contact information. The business model is that of a government entity providing transparent and accessible information to its community. The website maintains consistent branding and trust indicators including official contact details and social media presence. Technically, the website uses established JavaScript libraries such as jQuery, MasterSlider, and Lightbox to enhance user experience. The site is moderately performant with good mobile optimization and basic accessibility features. SEO practices are adequately implemented with proper meta tags and structured navigation. However, no CMS or hosting provider details were detected. The site enforces HTTPS and includes a cookie consent mechanism, reflecting good privacy compliance. From a security perspective, the website shows a solid posture with HTTPS enabled and no exposed sensitive data. However, no explicit security policies or incident response information are published. Security headers are not evident in the provided data, and there is no vulnerability disclosure or security.txt file. The site does not use advertising or tracking services, minimizing privacy risks. Overall, the security score is good but could be improved by adding formal security documentation and headers. The overall risk assessment is low given the official nature of the site and its compliance with privacy regulations. Strategic recommendations include publishing a security policy, implementing security headers, and enhancing accessibility. These steps would strengthen trust and security culture while maintaining the site’s role as a reliable municipal information portal.

M

Městský úřad Votice

mesto-votice.cz

45

The website www.mesto-votice.cz serves as the official online portal for the town of Votice, Czech Republic. It provides residents and visitors with municipal information, news, public services, event calendars, and contact details. The site is clearly targeted at local citizens and stakeholders interested in town governance and community activities. The business model is that of a government municipal service portal, focusing on transparency and public communication. Technically, the website is built on the vismo CMS platform, utilizing standard web technologies such as HTML5, CSS3, and JavaScript. It integrates Google services like Maps and Translate to enhance user experience and accessibility. The site demonstrates good mobile optimization and accessibility features, with a clear navigation structure and consistent branding. From a security perspective, the site uses HTTPS, which is a fundamental security measure. However, it lacks visible security headers and a cookie consent mechanism, which are important for GDPR compliance and enhanced security posture. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS data is a concern for domain legitimacy but does not directly impact the website's operational security. Overall, the website is a well-maintained municipal portal with good content quality and user experience. Strategic improvements in security headers, privacy compliance mechanisms, and domain registration transparency would enhance trust and security posture significantly.

M

Město Benešov

benesov-city.cz

50

The website benesov-city.cz serves as the official digital portal for the city of Benešov, Czech Republic. It provides residents and visitors with comprehensive municipal information, including news, events, public services, and administrative contacts. The site is well-positioned as a government entity portal, offering key services such as online citizen services, event calendars, and official announcements. The target audience primarily consists of local citizens and visitors seeking city-related information and services. From a technical perspective, the website employs a traditional web stack with HTML5, CSS, and JavaScript, leveraging the Vismo CMS platform. It integrates modern tools such as Google Analytics for visitor tracking and Google reCAPTCHA for form security. The site is hosted under a Czech registrar with a domain age dating back to 1998, indicating a mature and stable online presence. Mobile optimization and accessibility features are well implemented, contributing to a positive user experience. Security posture is solid with HTTPS enforced and reCAPTCHA protecting forms. Cookie consent mechanisms comply with GDPR requirements, enhancing privacy compliance. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not detected, representing an area for improvement. No vulnerabilities or exposed sensitive data were found in the analysis. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations. It effectively serves its role as a municipal information hub with good technical and security practices. Strategic recommendations include enhancing security headers, publishing a formal security policy, and considering a vulnerability disclosure program to further strengthen security posture.

V

Ville de Saint-Étienne

saint-etienne.fr

72

The website www.saint-etienne.fr is the official digital portal for the city government of Saint-Étienne, France. It serves as a comprehensive resource for residents and visitors, offering access to municipal services, news, cultural and sporting events, administrative procedures, and employment opportunities. The site is well-positioned as an authoritative source for local information and community engagement. Technically, the site is built on Drupal 10, leveraging modern web technologies including Google Tag Manager, Google Analytics (GA4), Matomo Analytics, and OneSignal for push notifications. It employs a robust cookie consent mechanism via Tarteaucitron, ensuring GDPR compliance. The site demonstrates good mobile optimization, accessibility, and SEO practices, contributing to a positive user experience. From a security perspective, the site enforces HTTPS with strong SSL configuration and includes essential security headers. No critical vulnerabilities or exposed sensitive data were detected. However, the site lacks a publicly available security policy or incident response contact, which could enhance transparency and trust. Overall, the website presents a low-risk profile with strong business credibility and technical maturity. Strategic recommendations include publishing a formal security policy, incident response information, and a vulnerability disclosure program to further strengthen security posture and user trust.

The website www.reseauhaj.org/login serves as an intranet login portal for users with @reseauhaj.org accounts, providing access to the Unhaj intranet. It leverages Google OAuth for authentication, ensuring secure login without sharing user data beyond credentials. The site is built on WordPress with plugins such as WooCommerce and Elementor, indicating a modern CMS infrastructure. However, the absence of visible privacy and cookie policies and lack of security headers suggest areas for improvement in compliance and security hardening. The WHOIS data is unavailable due to a malformed response, limiting domain trust assessment, but the site content and technology usage indicate a legitimate organizational portal.

T

Tender systems s.r.o.

tenderarena.cz

50

Tender arena is a Czech Republic-based certified electronic tool designed for public procurement and e-auctions, primarily serving contracting authorities and suppliers. The platform facilitates the announcement of tenders and submission of bids, positioning itself as a specialized government sector service. The business is operated by Tender systems s.r.o., established in 2013, indicating a mature presence in the public procurement technology market. Technically, the website is built using Angular 8.2.14 and integrates Google Analytics for user tracking. Hosting is provided by Websupport, a Czech hosting provider, consistent with the domain's nameservers. The site demonstrates good mobile optimization and SEO practices but lacks some accessibility features. Performance is moderate, with modern frameworks employed. From a security perspective, the site uses HTTPS with excellent SSL configuration but lacks visible security headers such as Content-Security-Policy or X-Frame-Options. No sensitive data exposure or vulnerable libraries were detected. However, the absence of privacy and cookie policies, as well as contact information for security incidents, represents compliance and transparency gaps. Overall, the website is professional and trustworthy within its niche but would benefit from enhanced privacy compliance and security best practices. There are no indications of malicious content or blocking mechanisms, making it accessible and functional for its intended audience.

V

Viamédia

avispublicsdebretagne.com

54

Bretagne Marchés Publics is a regional public procurement portal serving Brittany and other regions in France. Operated by Viamédia since 2011, it provides services for public buyers to publish tenders and for companies to consult and respond to public market opportunities. The website is professionally designed, mobile-optimized, and includes modern analytics and consent management tools, reflecting a mature digital infrastructure. Security posture is good with HTTPS and cookie consent mechanisms, though some security headers could be improved. The absence of WHOIS registration data is a concern but does not currently impact the legitimacy of the active and professional website. Overall, the site is a trusted resource for public procurement in its region.

S

Statutární město Opava

opava-city.cz

64

Statutární město Opava operates an official municipal website serving as the primary digital platform for city residents, visitors, and local businesses. The site provides comprehensive information about city governance, public services, news, events, and contact details. It targets a broad audience including citizens, municipal employees, and tourists, positioning itself as a trusted source of local government information. The business model is that of a government service portal, focusing on transparency and community engagement. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript with jQuery, Bootstrap framework, and mapping libraries like Leaflet.js. It uses WebJET CMS for content management and integrates Google Tag Manager and Google Analytics for tracking and analytics. The site is mobile-optimized, accessible, and SEO-friendly, with structured data enhancing search engine understanding. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms aligned with GDPR requirements. However, it lacks explicit privacy policy and terms of service pages, security headers, and incident response contacts, which are areas for improvement. No vulnerabilities or malicious content were detected, and the site maintains a good security posture overall. Overall, the website is a professional and trustworthy municipal portal with good content quality and technical implementation. The absence of WHOIS data limits domain transparency, but the official branding and comprehensive contact information support its legitimacy. Strategic recommendations include publishing privacy and security policies, enhancing security headers, and providing incident response contacts to strengthen compliance and trust.

U

Urssaf

urssaf.fr

57

Urssaf.fr is the official website of the French social security contribution agency, providing personalized support and online services for employers, independent workers, and associations in France. The site offers comprehensive information, declaration services, and legal documentation, positioning itself as a key government resource in the social security sector. The website is professionally designed with consistent branding and good content quality, targeting a broad audience involved in social security contributions. Technically, the site uses a modern technology stack including jQuery, Bootstrap, and the Jahia CMS platform. It is mobile-optimized, accessible, and includes privacy and cookie consent mechanisms compliant with GDPR. Performance is moderate, with a well-structured HTML and CSS foundation. Analytics and chatbot services are integrated for user engagement and data collection. From a security perspective, the site enforces HTTPS, includes CSRF protection, and follows best practices, although explicit security headers could be verified further. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is unavailable, which is typical for AFNIC-managed .fr domains, and does not detract from the site's legitimacy. Overall, Urssaf.fr presents a low-risk profile with strong business credibility and compliance posture. Strategic recommendations include enhancing visible security headers, publishing incident response contacts, and maintaining up-to-date third-party libraries to sustain security and trust.

V

Virtual Visit s.r.o.

domovyonline.cz

48

Domovy online is a Czech Republic based service provider specializing in enhancing the online presentation of social service organizations. Their offerings include modern website creation, virtual tours, graphic design, and premium digital tools aimed at improving communication and operational efficiency for social service providers and regional governments. The company positions itself as a trusted partner with multiple regional government clients and a focus on GDPR compliance and accessibility. Technically, the website employs a modern tech stack including jQuery, Nette Framework, Google reCAPTCHA, and Cookiebot for consent management, ensuring a secure and user-friendly experience. Security posture is strong with HTTPS, secure forms, and no visible vulnerabilities, though explicit privacy and security policies are not published. Overall, the website is professional, accessible, and well-structured, supporting the company's credibility and market position.

C

Conseil de la protection sociale des indépendants (CPSTI)

secu-independants.fr

50

The Conseil de la protection sociale des indépendants (CPSTI) website serves as an official French government portal dedicated to providing social protection services for independent workers. It offers comprehensive information and services related to social contributions, health reimbursements, retirement planning, mediation for disputes, and social aid. The site is well-positioned as a trusted intermediary between independent workers and major social institutions such as Urssaf, Ameli, and Assurance Retraite. The target audience is clearly defined as independent workers in France, and the business model revolves around public service and support.

P

PMS ČR

pmscr.cz

55

The website pms.gov.cz is the official portal for the Probační a mediační služba (Probation and Mediation Service) of the Czech Republic, a government agency under the Ministry of Justice. It provides a wide range of services including probation supervision, mediation between victims and offenders, juvenile justice, electronic monitoring, parole, community service, and victim support. The site targets the general public, legal professionals, victims, and offenders, positioning itself as a key national public service entity in the justice sector. The content is comprehensive, professionally presented, and consistent with government standards.

O

Obec Šilheřovice

silherovice.cz

51

Obec Šilheřovice operates an official municipal website serving the local community and visitors with comprehensive information about local governance, events, public services, and tourism. The site is well-positioned as a trusted source for residents, providing timely updates and access to official documents. The website leverages modern web technologies including jQuery, Bootstrap, and Leaflet for maps, ensuring a responsive and user-friendly experience across devices. Privacy and cookie consent mechanisms are implemented, reflecting compliance with GDPR requirements. Security posture is solid with HTTPS enforced and no evident vulnerabilities, though formal security policies and incident response contacts are absent. Overall, the site demonstrates a mature digital presence appropriate for a small municipal government entity.

V

Viamédia

bretagne-marchespublics.com

53

Bretagne Marchés Publics is a regional public procurement portal serving Brittany and broader France, operated by Viamédia since 2011. The platform facilitates the publication and consultation of public tenders, targeting both public buyers and enterprises. It holds a strong market position as a trusted regional resource with clear business identity and affiliations to reputable media groups. Technically, the website employs modern JavaScript frameworks, consent management via Didomi, and analytics tools like Piano Analytics and Google Tag Manager, reflecting a mature digital infrastructure. Security posture is robust with HTTPS, security headers, and secure login forms, although explicit security policies and incident response contacts are absent. Privacy compliance is well implemented with GDPR-aligned cookie consent mechanisms. Overall, the site is professional, trustworthy, and well-optimized for users, with recommendations to enhance security transparency and accessibility.

M

město Dobříš

mestodobris.cz

47

The website mestodobris.cz serves as the official online presence of the town of Dobříš, Czech Republic. It provides comprehensive information about the municipality, including local government activities, public services, events, and community resources. The site targets residents, visitors, and stakeholders interested in municipal affairs and local culture. The business model is that of a government entity providing public information and services digitally, with a well-established market position supported by a domain registered since 2003. Technically, the website employs a modern CMS platform (vismo), integrates Google Analytics and Google Tag Manager for analytics, and uses LimeTalk for live chat support. The site is mobile-optimized, accessible, and includes cookie consent mechanisms aligned with GDPR requirements. Hosting is provided by REG-ZONER, a reputable registrar and hosting provider. From a security perspective, the site enforces HTTPS and uses consent-based analytics tracking. However, explicit security headers are not clearly visible in the HTML source, and no published security policy or incident response contacts were found. No vulnerabilities or suspicious content were detected, and the WHOIS data confirms the domain's legitimacy and consistency with the municipal identity. Overall, the website demonstrates a solid digital presence with good privacy compliance and user engagement features. Strategic improvements could include publishing a formal security policy, enhancing security headers, and providing incident response contact information to strengthen trust and security posture further.

C

Conseil Régional de Guadeloupe

regionguadeloupe.fr

60

The website www.regionguadeloupe.fr is the official digital presence of the Regional Council of Guadeloupe, serving as a comprehensive portal for regional aids, services, news, and public transport information. It targets a broad audience including local residents, businesses, students, and public sector entities. The site leverages TYPO3 CMS and integrates common web technologies such as jQuery, Google Analytics, and social media SDKs to deliver content and track engagement. While the site is well-structured and professionally designed, it lacks a publicly accessible privacy policy and shows accessibility non-compliance, which are areas for improvement. Security posture is moderate with HTTPS enabled but missing some security headers. WHOIS data is unavailable, which slightly impacts trust but the official .fr domain and consistent content support legitimacy.

V

Valabre

valabre.com

49

Valabre is a French public institution specializing in civil security training, research, new technologies, and prevention against major natural and technological risks. The organization serves as a central hub for professional training in civil security, conducting research programs, and developing innovative technologies to support risk management and emergency response. The website reflects a well-established entity with a clear focus on public safety and education, targeting professionals and public agencies involved in civil security and risk prevention. Technically, the site is built on WordPress with modern frameworks like Bootstrap and integrates SEO and performance optimization tools. Security posture is strong with HTTPS and no visible vulnerabilities, though some security headers and explicit policies are missing. Privacy compliance is limited due to the absence of clear privacy and cookie policies. The WHOIS data is unavailable, which raises questions about domain registration transparency but does not detract significantly from the site's legitimacy given the professional content and social media presence. Overall, Valabre's digital presence is professional and trustworthy, with room for improvement in privacy disclosures and security transparency.

M

Ministrstvo za digitalno preobrazbo

eu-skladi.si

56

The website eu-skladi.si is an official Slovenian government portal managed by the Ministry for Digital Transformation, providing comprehensive information and services related to European Union funds and cohesion policy. It serves as a key resource for Slovenian businesses, public institutions, and citizens seeking funding opportunities, calls for proposals, and policy updates. The site is well-branded, consistent, and professionally maintained with clear navigation and relevant content tailored to its audience. Technically, it is built on the Plone CMS platform with modern frontend technologies such as jQuery, Foundation CSS, and Font Awesome, hosted behind Cloudflare DNS services. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though it lacks some advanced security headers and explicit security policies. Privacy compliance is partially addressed with a cookie consent banner but no visible privacy policy page. Contact information is clearly provided, including emails, phone numbers, and physical address, enhancing trust and credibility. Overall, the site is trustworthy, safe, and serves its government function effectively.

D

Deutsches Zentrum für Integrations- und Migrationsforschung DeZIM e.V.

dezim-institut.de

53

The Deutsches Zentrum für Integrations- und Migrationsforschung DeZIM e.V. is a German non-profit research institute specializing in integration, migration, discrimination, and racism studies. The website serves as a professional platform to disseminate research findings, publications, and event information targeting academics, policymakers, and practitioners. The institute is funded by the German Federal Ministry for Family Affairs, Senior Citizens, Women and Youth, indicating strong institutional backing and credibility. Technically, the website is built on TYPO3 CMS with modern frameworks like Bootstrap and jQuery, and it integrates accessibility tools such as ReadSpeaker webReader. The site is well-optimized for mobile and SEO, with a clear navigation structure and professional design. Security-wise, HTTPS is enforced, and a cookie consent mechanism is implemented with Matomo analytics configured for privacy. However, additional security headers and explicit security policies could enhance the security posture. Overall, the website is trustworthy, compliant with GDPR, and provides a safe browsing experience.

C

Creative Bureaucracy Festival

creativebureaucracy.org

62

Creative Bureaucracy Festival is a well-established international event focused on public sector innovation, attracting thousands of participants from government and civil society. The website is professionally designed using Drupal 10, with modern analytics and consent management tools implemented. Security posture is solid with HTTPS and cookie consent mechanisms, though DNSSEC and security headers could be improved. The domain registration data aligns well with the festival's founding and operations, indicating legitimacy. Overall, the website effectively supports the festival's mission and audience engagement.

B

Business at OECD

biac.org

11

Business at OECD (BIAC) is a well-established advocacy organization representing the private sector's interests at the OECD. Founded in 1962, it connects over 55 national business and employer bodies, facilitating dialogue between business and government to promote economic growth and sustainable development. The website reflects a professional and authoritative presence with comprehensive policy content, reports, and event information targeting business leaders, policymakers, and OECD stakeholders. Technically, the site is built on HubSpot CMS, leveraging modern web technologies and analytics tools, with good mobile optimization and accessibility. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities. Privacy compliance is evident with a clear privacy policy and cookie consent mechanisms. Overall, the site demonstrates high business credibility and trustworthiness, though WHOIS data is unavailable due to privacy protection, which is justified given the organization's nature.

П

Политическа партия Русофили за възраждане на Отечеството

ppvo.bg

43

The website represents a Bulgarian political party named "Политическа партия Русофили за възраждане на Отечеството" focused on Russian-Bulgarian relations and patriotic themes. It serves as an information and advocacy platform with regular content updates, news, and partner affiliations. The site is built on WordPress with a modern tech stack including Bootstrap and jQuery, hosted likely by SuperHosting.BG. The design is professional and mobile-optimized, providing a good user experience with clear navigation. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though some security best practices like CSP headers and security.txt are missing. Privacy compliance is partial with a GDPR-compliant privacy policy but lacking cookie consent mechanisms. WHOIS data is limited due to GDPR but domain status and nameservers indicate legitimacy. Overall, the site is functional, trustworthy, and serves its political advocacy purpose effectively.

B

Biosphärenreservat Bliesgau

biosphaere-bliesgau.eu

45

The website www.biosphaere-bliesgau.eu represents the Biosphere Reserve Bliesgau, a regional environmental and cultural preservation entity in Germany. It provides information about the biosphere reserve, events, and local products, targeting a general audience interested in environmental conservation and regional culture. The site is supported by European Union funding and regional government partners, indicating a strong legitimacy and community focus. Technically, the site is built on TYPO3 CMS, uses Matomo for analytics with consent mechanisms, and shows good mobile optimization and SEO practices. However, explicit privacy and cookie policies are not clearly found, and no direct contact information is visible in the provided content. Security posture is good with HTTPS and no visible vulnerabilities, but security headers are not detected and no incident response or vulnerability disclosure information is provided. Overall, the site is professional and trustworthy but could improve transparency and compliance documentation.

R

Reformierte Kirche Kanton Luzern

reflu.ch

62

The website www.reflu.ch serves as the official online presence of the Reformed Church of the Canton of Luzern, Switzerland. It provides information about church services, pastoral care, community events, and regional church congregations. The site targets local German-speaking community members seeking spiritual support and church-related activities. The business model is non-profit and government-affiliated, focusing on community and religious services. The website is well-branded and consistent with the church's identity, featuring event calendars and news updates that demonstrate active engagement with its audience. Technically, the site employs modern web technologies including HTML5, CSS3, JavaScript, and integrates tracking pixels from TikTok, Facebook, and Google Tag Manager. The site is mobile-optimized and offers a good user experience with clear navigation and relevant content. However, it lacks explicit privacy and cookie policies, which is a notable compliance gap. Security posture is generally good with HTTPS enforced, but the absence of security headers and explicit incident response contacts reduces the overall security maturity. From a security and compliance perspective, the site does not present critical vulnerabilities or exposed sensitive data. The WHOIS data aligns well with the website's claims, showing consistent registrant information appropriate for a regional church organization. No WAF or blocking mechanisms were detected, allowing full content access. The site does not contain any adult or NSFW content, making it safe for general audiences. Overall, the website is credible and professionally maintained but would benefit from enhanced privacy compliance measures and improved security headers. Adding clear contact information for security incidents and a vulnerability disclosure policy would further strengthen trust and compliance.

Pfarrei St. Theodul Littau is a local parish community serving the Littau-Luzern area in Switzerland. The website provides comprehensive information about religious services, community events, social projects, and educational offerings targeted at families, youth, seniors, and the broader local community. The organization operates as a non-profit religious entity with a strong focus on community engagement and spiritual support. Technically, the website uses modern web technologies including Google Tag Manager and OpenStreetMap, with a responsive design and moderate performance. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers and explicit policies are missing. Overall, the site is trustworthy, professionally presented, and compliant with basic privacy regulations.

S

SAJV (Schweizerische Arbeitsgemeinschaft der Jugendverbände)

jugendsession.ch

39

Jugendsession.ch is the official website for the Eidgenössische Jugendsession, a prominent Swiss non-profit youth political participation project organized by the Schweizerische Arbeitsgemeinschaft der Jugendverbände (SAJV). The platform facilitates annual gatherings of 200 young people from across Switzerland to discuss political issues and formulate demands, aiming to strengthen youth political engagement. The website is professionally designed, multilingual, and supported by numerous Swiss cantons and federal offices, reflecting a strong market position within the government and non-profit sectors. Technically, the website employs modern web technologies including jQuery, Swiper.js, and FontAwesome, with image optimization via ImageKit. It is likely powered by the Contao CMS. The site is mobile-optimized and performs moderately well, with good SEO and basic accessibility features. Security posture is strong with HTTPS enforced and appropriate security headers present, though there is room for improvement in privacy compliance and incident response transparency. Security-wise, the site shows no critical vulnerabilities or exposed sensitive data. However, it lacks a cookie consent mechanism and a vulnerability disclosure policy, which are recommended for compliance and transparency. Contact information is clearly provided, but no dedicated security or incident response contacts are visible. Overall, jugendsession.ch is a trustworthy, well-maintained government-affiliated site with a clear mission and solid technical foundation. Strategic enhancements in privacy compliance and security transparency would further strengthen its risk profile and user trust.

The Wasser- und Bodenverband "Untere Tollense / Mittlere Peene" is a regional government-related organization based in Jarmen, Germany, focused on water and soil management. Their website provides comprehensive information about their tasks, organizational structure, and current activities, targeting local stakeholders and the public interested in environmental and water management issues. The site is professionally designed with clear navigation and relevant content, reflecting a small-sized public service entity. Technically, the website is built on TYPO3 CMS 6.2 with common web technologies such as Bootstrap, jQuery, and Font Awesome. While the site is mobile-optimized and performs moderately well, it uses an outdated CMS version which may pose security risks. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks important security headers and incident response information. Privacy compliance is limited, with no cookie consent mechanism and only a basic privacy policy present. Overall, the website is trustworthy and serves its informational purpose effectively but would benefit from modernization and enhanced security and privacy practices.

The Wasser- und Bodenverband Mittlere Uecker-Randow is a regional public law corporation in Germany responsible for the maintenance and management of secondary water bodies and related infrastructure within the Uecker and Randow river basins. Founded in 1992, the organization serves municipalities and landowners in a defined geographic area, providing essential environmental and water management services. The website reflects this mission with detailed descriptions of its history, responsibilities, and operational scope, targeting local stakeholders and the general public. Technically, the website is built on TYPO3 CMS version 6.2, utilizing Bootstrap and common JavaScript libraries such as jQuery and Flexslider. The site is moderately optimized for mobile devices and offers a clear navigation structure. Hosting is managed via DomainControl nameservers, indicating professional domain management. However, the CMS version is outdated, which may pose security risks. From a security perspective, the site uses HTTPS but lacks visible security headers and cookie consent mechanisms, indicating partial compliance with modern security and privacy standards. No incident response or vulnerability disclosure information is provided. No tracking or analytics scripts were detected, suggesting minimal user tracking. Overall, the website is trustworthy and professional for its public sector role but would benefit from updates to security practices, privacy compliance, and CMS modernization to enhance its security posture and regulatory adherence.

S

Sozialversicherung für Landwirtschaft, Forsten und Gartenbau (SVLFG)

svlfg.de

65

The SVLFG website represents the Sozialversicherung für Landwirtschaft, Forsten und Gartenbau, a German government social insurance institution focused on agricultural, forestry, and horticultural sectors. The organization provides statutory insurance services including accident insurance, pension schemes, health and nursing care insurance, and prevention programs. The website is professionally designed, well-structured, and targets a broad audience including farmers, employers, employees, medical professionals, and related institutions. It offers comprehensive information and digital services tailored to its sector. Technically, the website is built on the Scrivito CMS platform, utilizing modern web technologies such as JavaScript and CSS. It includes accessibility features, mobile optimization, and SEO best practices. The site uses HTTPS with strong SSL configuration and security headers, ensuring secure communication. Tracking is implemented via etracker, with a cookie consent mechanism in place, reflecting good privacy compliance. Security posture is solid with no visible vulnerabilities or exposed sensitive data. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are absent, which could be improved to enhance transparency and trust. The WHOIS data aligns with the website's claims, indicating a legitimate and consistent domain registration. Overall, the website scores highly in content quality, technical implementation, security, privacy compliance, and business credibility, making it a trustworthy and professional digital presence for a government social insurance entity.

R

Regionaler Entwicklungsträger Sursee-Mittelland

sursee-mittelland.ch

55

Regionaler Entwicklungsträger Sursee-Mittelland is a regional development organization focused on fostering economic growth and quality of life in the Sursee-Mittelland region of Switzerland. The organization supports regional actors, initiates projects, and promotes networking across various sectors including politics, economy, environment, and culture. The website reflects a professional and consistent brand presence targeting local stakeholders and the community. Technically, the site is built on Silverstripe CMS with modern JavaScript libraries and includes embedded multimedia content. Security posture is solid with HTTPS and cookie consent mechanisms, though it lacks explicit security headers and published incident response policies. Overall, the site is trustworthy, well-structured, and compliant with GDPR requirements.

The Fédération Suisse des Parlements des Jeunes (FSPJ) is a Swiss non-profit organization dedicated to youth political education and participation. It serves as a neutral competence center supporting 65 youth parliaments across Switzerland and Liechtenstein. The website provides comprehensive information about its mission, services, and offers tailored for young people, educators, and local governments. Multilingual support and partnerships with organizations like easyvote.ch and engage.ch enhance its outreach and impact. Technically, the site is built on WordPress with modern plugins and optimizations, delivering a responsive and accessible user experience. Security posture is solid with HTTPS, cookie consent, and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is well addressed with detailed policies and consent mechanisms. Overall, the site reflects a professional, trustworthy, and mission-driven organization with a strong digital presence.

L

Landeswasserverbandstag Thüringen e. V.

lvt-thueringen.de

50

The Landeswasserverbandstag Thüringen e. V. (LVT) is a non-profit umbrella organization representing water management associations in the German state of Thüringen. Established following the 2019 regional law, it serves as a coordinating and representative body for twenty water maintenance associations. The website provides information about the organization, its members, and current news, targeting stakeholders in the water management sector and regional authorities. The site is professionally designed using WordPress and Elementor, with clear navigation and relevant content in German. Technically, the site employs modern web technologies and is hosted on servers associated with rzone.de. Security posture is adequate with HTTPS enabled and cookie consent implemented, though explicit security headers and policies are not publicly disclosed. Overall, the site is trustworthy and compliant with GDPR requirements, reflecting a legitimate regional government-related entity.

W

Wasserverband Nettelnburg

nettelnburg.com

63

Wasserverband Nettelnburg is a public law entity responsible for maintaining the drainage ditches in the Nettelnburg district of Hamburg, Germany. The website serves as an official information portal providing details about the association's tasks, legal framework, events, and member responsibilities. It targets local residents and members of the water association, focusing on community engagement and regulatory compliance. The business operates in the government sector with a small organizational size and a history dating back to the 1920s. Technically, the website is built on WordPress using the Avada theme and employs the Complianz GDPR plugin for cookie consent management. The site is moderately optimized for performance and mobile devices, with basic accessibility and good SEO practices. No advanced analytics or marketing tools are detected, indicating a focus on privacy and minimal user tracking. From a security perspective, the site uses HTTPS and has implemented cookie consent mechanisms, but lacks visible security headers and explicit security policies. No vulnerabilities or exposed sensitive data were found in the content. However, the absence of WHOIS registration data for the domain raises concerns about domain legitimacy, although the website content itself appears professional and trustworthy. Overall, the website presents a solid digital presence for a local government entity with good content quality and privacy compliance. The main risk lies in the missing WHOIS data, which should be investigated further to confirm domain ownership and registration legitimacy.

The Landesverband der Wasser und Bodenverbände Mecklenburg-Vorpommern is a regional non-profit association representing water and soil associations in Mecklenburg-Vorpommern, Germany. The website serves as an information portal for members and stakeholders, providing job postings, publications, and organizational details. The site is professionally designed with consistent branding and clear navigation, targeting members and professionals in water and soil management sectors. Technically, the site is built on the Contao CMS platform, utilizing modern JavaScript libraries such as jQuery and Rocksolid Slider, with good mobile optimization and moderate performance. Security posture is solid with HTTPS enforced and visible security badges, though some HTTP security headers and formal security policies are absent. Privacy compliance is well addressed with a cookie consent mechanism and a linked privacy policy. Overall, the website is trustworthy and professionally maintained, suitable for its governmental and non-profit role.

L

Landeswasserverbandstag Brandenburg e.V.

lwt-brandenburg.de

47

The Landeswasserverbandstag Brandenburg e.V. (LWT) is a regional non-profit organization serving as the umbrella association for public water management entities in Brandenburg, Germany. The website provides information about the organization's mission, events, and member services, targeting stakeholders in water supply, wastewater management, and water body maintenance. The site is built on Joomla CMS with Yootheme and UIkit frameworks, offering a responsive and well-structured user experience. Technical infrastructure is modern and adequate for the organization's needs, hosted on a regional provider with secure HTTPS connections. Security posture is solid with HTTPS and CSRF protections, but lacks advanced security headers and cookie consent mechanisms, which are recommended for compliance and enhanced protection. Overall, the website is professional, trustworthy, and safe, with no signs of malicious content or blocking mechanisms.