Government security reports

Valga Kultuurikeskus is a local cultural center based in Valga, Estonia, established in 2010. It serves as a community hub offering a variety of cultural experiences including theater, concerts, exhibitions, cinema, and room rental services. The website effectively communicates event information and provides contact details, positioning itself as a trusted local institution. Technically, the site uses a modern CMS (Greativ) and integrates popular JavaScript libraries and marketing tools such as Facebook Pixel and Google Analytics. However, it lacks published privacy and cookie policies, which is a compliance gap. Security posture is moderate with HTTPS enabled but missing key security headers and vulnerability disclosure mechanisms. Overall, the site is accessible, professionally designed, and serves its target audience well but should improve privacy compliance and security transparency.

M

MTÜ Eesti Linnade ja Valdade Liit

annateada.ee

50

Anna teada is a public service website operated by MTÜ Eesti Linnade ja Valdade Liit, enabling Estonian citizens to report local maintenance and public order issues to relevant municipal or state authorities. The platform leverages Google Maps API for geolocation and provides a user-friendly interface with clear instructions and privacy policies. It is funded by the European Regional Development Fund and developed in cooperation with the Ministry of Economic Affairs and Communications. The website demonstrates a good level of digital maturity with modern technologies such as Bootstrap, jQuery, Google reCAPTCHA, and Google Analytics integrated for functionality and analytics. Security posture is adequate with HTTPS and spam protection, though improvements are recommended in security headers and DNSSEC. Privacy compliance is basic but present, with clear privacy statements though lacking explicit cookie consent mechanisms. Overall, the site is trustworthy, professionally presented, and serves an essential government-related function.

V

Valga vald

valga.ee

53

Valga.ee is the official website of Valga municipality in Estonia, serving as a comprehensive portal for local government information, news, social services, education, culture, and community engagement. The site targets residents and visitors, providing essential public service information and citizen self-service tools. The website is built on WordPress, leveraging modern plugins such as The Events Calendar and TranslatePress, ensuring multilingual support and event management capabilities. The technical infrastructure is solid, with good mobile optimization and moderate performance. Security posture is strong with HTTPS enforced and appropriate security headers, although explicit security policies and incident response contacts are not published. Privacy compliance is well addressed with a clear cookie consent mechanism and GDPR-compliant privacy policy. Overall, the site reflects a professional and trustworthy government digital presence.

G

Grad Bjelovar

bjelovar.hr

42

Grad Bjelovar operates an official municipal government website serving the city of Bjelovar, Croatia. The site provides residents and visitors with information on local government administration, public calls, events, documents, and services. It maintains a consistent brand presence and leverages social media platforms to engage its audience. The website is built on WordPress with popular plugins for SEO, caching, and analytics, hosted on Totohost servers. The technical infrastructure supports good mobile optimization and accessibility, with moderate performance characteristics. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and incident response information are lacking. Privacy compliance is weak due to absence of explicit privacy and cookie policies. Overall, the site is trustworthy and professional, suitable for its government function.

The website maaamet.ee is currently inaccessible due to a Cloudflare Turnstile CAPTCHA security challenge, preventing access to any meaningful content. Based on the domain and WHOIS data, it is an established domain registered since 2010 under Zone Media OÜ, consistent with an Estonian government entity, likely the Estonian Land Board. The lack of accessible content means no privacy, cookie, or terms of service policies are visible, nor any contact information or business descriptions. The technical infrastructure relies heavily on Cloudflare services for security and analytics, indicating a modern but heavily protected setup. The security posture is difficult to fully assess due to the blocked content, but the presence of Cloudflare WAF and CAPTCHA suggests a focus on mitigating automated threats. Overall, the site cannot be fully analyzed in its current state, and the AI score is low due to lack of accessible content and policies.

S

Střední odborná škola požární ochrany a Vyšší odborná škola požární ochrany

hasici-vzdelavani.cz

53

The website hasici-vzdelavani.cz serves as an educational portal dedicated to fire protection units in the Czech Republic. It is a collaborative project between the Ministry of the Interior's Fire Rescue Service and a specialized vocational school for fire protection. The portal provides a variety of training materials including texts, images, videos, and e-learning modules aimed at supporting professional development in fire safety and emergency response. The site targets fire protection professionals and volunteers, offering structured content relevant to their training needs. Technically, the site is built on Drupal 7 with jQuery and standard web technologies. While functional, the use of an older CMS version and lack of modern security headers indicate potential technical debt and security risks. The site shows moderate performance and basic mobile optimization. No advanced analytics or tracking tools are detected, suggesting minimal user tracking. From a security perspective, the site uses HTTPS and includes CSRF tokens in forms, which is positive. However, the absence of security headers such as Content-Security-Policy and HSTS reduces its security posture. There are no visible privacy or cookie policies, which is a compliance gap under GDPR. No incident response or vulnerability disclosure information is provided. Overall, the website is a legitimate, government-affiliated educational resource with moderate technical maturity and some security and compliance shortcomings. Strategic improvements in security headers, privacy compliance, and CMS modernization are recommended to enhance trust and resilience.

Č

Česká hasičská jednota

hasicskajednota.cz

56

Česká hasičská jednota is a Czech firefighting association providing community services, fire safety education, and support to firefighters. The website serves as an information hub for firefighting activities and public safety in the Czech Republic. The organization appears to be a medium-sized non-profit entity with a focus on government and community sectors. The website is built on a custom CMS platform with integration of Google Analytics, Google Tag Manager, and Google Maps API, reflecting a moderate level of digital maturity. The site is mobile optimized and uses modern web technologies, although some accessibility features could be improved. Security posture is good with HTTPS enforced and standard security headers present, but could benefit from additional headers like CSP and SRI for external scripts. Privacy compliance is well addressed with a comprehensive cookie consent mechanism and GDPR-aligned privacy policy. However, contact information and incident response details are not explicitly provided, which could be enhanced to improve trust and transparency. Overall, the website is professional, trustworthy, and serves its target audience effectively.

G

G20 South Africa

g20.org

55

G20 South Africa is the official website representing the G20 international forum during South Africa's 2025 Presidency. The site provides information about the G20's role as a global economic forum, its member countries, and upcoming events related to the 2025 summit. The website targets governments, policymakers, and the general public interested in global economic governance. It is positioned as a key authoritative source for G20 South Africa activities and related information. Technically, the website is built on WordPress with Elementor and several plugins for events and multimedia content. It uses modern web technologies and is hosted with a reputable registrar. The site is mobile-optimized and performs moderately well, with good SEO practices and accessibility features. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, it lacks DNSSEC and security headers, which are recommended for enhanced protection. No privacy or cookie policies were found, indicating potential compliance gaps. Social media integration is strong, linking to official G20 South Africa accounts. Overall, the website is trustworthy and professional but would benefit from improved privacy compliance and enhanced security configurations to align with best practices and regulatory requirements.

G

Grad Prelog

prelog.hr

45

The website www.prelog.hr serves as the official digital presence of the City of Prelog, Croatia. It provides comprehensive information about city governance, local news, events, public tenders, EU projects, and community services. The site targets residents, local businesses, and visitors seeking municipal information. The business model is that of a government municipal portal, focusing on transparency and public service. The domain age and WHOIS data confirm a long-standing and legitimate presence consistent with a municipal entity. Technically, the website employs a modern tech stack including Bootstrap, jQuery, and accessibility tools from EqualWeb, ensuring good mobile optimization and accessibility compliance. Hosting is managed under Croatian academic network infrastructure (CARNET), which is appropriate for government entities. Performance is moderate with room for optimization. From a security perspective, the site uses HTTPS and includes CAPTCHA mechanisms in forms, but lacks explicit security headers and a published security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the provided content. Privacy compliance is addressed with cookie and privacy policies and consent mechanisms, though GDPR-specific details are minimal. Overall, the website is trustworthy, professional, and serves its purpose well. Strategic recommendations include enhancing security headers, publishing a security policy, and adding vulnerability disclosure information to improve security posture and transparency.

S

Sveitarfélagið Skagaströnd

skagastrond.is

58

Sveitarfélagið Skagaströnd operates an official municipal website serving the local community of Skagaströnd, Iceland. The site provides comprehensive information about local government administration, public services, institutions, news, events, and community resources. It targets residents and visitors seeking municipal information and services. The business model is that of a government service portal, focusing on transparency and community engagement. The website is well-branded and consistent with trust indicators such as official contact details and certifications.

S

Samtök sveitarfélaga á Norðurlandi vestra

ssnv.is

63

Samtök sveitarfélaga á Norðurlandi vestra is a regional association representing municipalities in Northwestern Iceland. The organization focuses on regional development, innovation, funding, and local governance support. Their website provides news, resources, and information targeted at local government officials and community stakeholders. The site is well-structured, professionally designed, and regularly updated, reflecting a credible and active regional government entity. Technically, the website is built on the Moya CMS framework and uses legacy but stable JavaScript libraries such as jQuery 1.11.1 and jQuery UI 1.11.2. The site is mobile-optimized and has good SEO practices, though performance is moderate. Security posture is adequate with HTTPS usage implied, but lacks explicit security headers and cookie consent mechanisms, which are recommended for compliance and protection. Security evaluation shows no critical vulnerabilities or exposed sensitive data, but the absence of WHOIS data and security policies reduces overall trust slightly. The website does not employ tracking or advertising scripts, indicating a privacy-conscious approach. Contact information is transparent and includes email, phone, and physical address, enhancing business credibility. Overall, the website presents a low-risk profile with good business credibility and content quality. Strategic improvements in security headers, cookie consent, and WHOIS transparency would enhance trust and compliance.

M

Mesto Prešov

presov.sk

58

Mesto Prešov operates an official municipal website serving as the primary digital portal for the city government of Prešov, Slovakia. The site provides comprehensive information on city governance, public services, social programs, urban development, and cultural events. It targets local residents, investors, and visitors, positioning itself as a trusted source for municipal information and services. The website is professionally designed with consistent branding and clear navigation, supporting a good user experience and accessibility.

S

Slovenský zväz biatlonu

biathlon.sk

44

Slovenský zväz biatlonu operates as the official Slovak Biathlon Federation, providing comprehensive information, event updates, and resources related to biathlon in Slovakia. The website serves athletes, clubs, fans, and the broader sports community with news, competition calendars, documents, and an e-commerce platform. The organization maintains partnerships with national sponsors and integrates social media channels to engage its audience. Technically, the website is built on WordPress with WooCommerce for e-commerce functionality, enhanced by plugins such as Yoast SEO and Complianz for GDPR compliance. The site uses modern web technologies including Bootstrap and jQuery, hosted on Slovak nameservers, and implements HTTPS with a good SSL configuration. Performance and mobile optimization are adequate, with room for improvement in accessibility. From a security perspective, the site enforces HTTPS and cookie consent mechanisms but lacks explicit security policy disclosures and incident response information. Security headers are not fully evident, suggesting potential areas for enhancement. No vulnerabilities or suspicious activities were detected in the analyzed content. Overall, the website presents a professional and trustworthy digital presence for the Slovak Biathlon Federation, with strong compliance to privacy regulations and a solid technical foundation. Strategic improvements in security policies and accessibility could further strengthen its posture.

I

ISSN International Centre

issn.org

44

The ISSN International Centre website serves as the official portal for the International Standard Serial Number system, coordinating a global network of national centres responsible for assigning ISSNs to serial publications. The organization operates as a non-profit entity with a focus on standardization and registration services for serials in both print and electronic formats. The website targets publishers, libraries, and multinational publishing entities, offering subscription-based access to the ISSN Portal and customized data processing services. The site is multilingual, professionally designed, and provides clear navigation and relevant content for its audience. Technically, the website is built on WordPress and leverages a variety of plugins and libraries including Gravity Forms for contact forms, Google reCAPTCHA for spam protection, and Google Tag Manager for analytics. The site is secured with HTTPS and employs anti-spam measures on forms, but lacks some advanced security headers and explicit cookie consent mechanisms. Performance is moderate with good mobile optimization and basic accessibility features. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and captcha-protected forms, but could improve by implementing security headers, publishing a security policy, and providing incident response contacts. The absence of WHOIS data limits domain trust analysis, but the professional presentation and organizational legitimacy mitigate concerns. No vulnerabilities or suspicious content were detected. Overall, the website is a credible and professional platform for the ISSN International Centre, with room for improvement in privacy compliance and security transparency. Strategic recommendations include enhancing security headers, adding cookie consent, publishing security policies, and improving accessibility to strengthen trust and compliance.

S

Sąd Arbitrażowy przy Krajowej Izbie Gospodarczej w Warszawie

sakig.pl

54

The website represents the Court of Arbitration at the Polish Chamber of Commerce in Warsaw, a well-established institution providing arbitration and mediation services primarily to businesses and legal professionals in Poland and the surrounding region. The institution has a strong market position as the largest and best-known arbitration body in its area, with a history dating back to 1950. The website effectively communicates its services, events, and legal resources, targeting a professional audience seeking dispute resolution mechanisms. Technically, the site is built on WordPress with modern web technologies including Bootstrap, jQuery, and Google Analytics, offering good mobile optimization and accessibility features. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent banner. Overall, the site is professional, trustworthy, and aligned with its institutional role.

U

Urząd Miasta Torunia

torun.pl

56

The website www.torun.pl is the official online presence of the City of Toruń, Poland. It serves as a comprehensive portal for residents, tourists, and businesses, providing extensive information on city governance, cultural events, tourism, education, sports, and development initiatives. The site is well-structured with clear navigation and consistent branding, reflecting its role as a trusted government resource. The content is primarily in Polish, targeting local and regional audiences, with links to English tourism resources.

P

PRZEDSIĘBIORCY.PL Ogólnopolska Federacja Przedsiębiorców i Pracodawców

rekomendowani.org

43

The website rekomendowani.org represents a Polish federation focused on promoting business reliability and cooperation among entrepreneurs, local governments, and institutional partners. It offers membership programs, networking opportunities, legal and economic advisory services, and certification for ethical business practices. The federation holds a notable market position with media patronage and multiple partnerships, targeting business owners, managers, and local government units in Poland. Technically, the website employs modern web technologies including Turbo Frames and Swiper.js for dynamic content presentation. The site is mobile optimized and presents a professional design with clear navigation. However, some technical aspects such as CMS identification and hosting provider remain unclear. Performance is moderate with room for improvement in accessibility and SEO. From a security perspective, the site uses HTTPS (implied by external Google Fonts and script sources) and implements a cookie consent mechanism compliant with GDPR. No explicit security headers or incident response contacts were found, and WHOIS data is unavailable, which reduces domain trustworthiness. No vulnerabilities or exposed sensitive data were detected in the content. Overall, the site is safe, professional, and compliant with privacy regulations, but would benefit from enhanced security headers, transparent WHOIS data, and explicit contact information to improve trust and security posture.

K

Krajowa Izba Gospodarcza

kig.pl

11

Krajowa Izba Gospodarcza (KIG) is a well-established Polish chamber of commerce with over 35 years of history, dedicated to supporting entrepreneurship and especially small and medium-sized enterprises (SMEs) across Poland. The organization offers a broad range of services including economic reporting, training, mediation, arbitration, and sustainable development consulting. The website reflects a mature digital presence with comprehensive content, clear navigation, and active engagement through social media and events. Technically, the site is built on WordPress with modern plugins and scripts, hosted by OVH SAS with DNSSEC and HTTPS enabled, indicating a secure and stable infrastructure. Security posture is strong with best practices observed, though there is room for improvement in publishing explicit security policies and incident response contacts. Privacy compliance is robust, featuring detailed cookie and privacy policies with user consent mechanisms. Overall, the site projects high professionalism and trustworthiness, serving as a key resource for Polish businesses.

S

SPL-XDEMAT

spl-xdemat.fr

47

SPL-XDEMAT is a French public local company established in 2012 by multiple departmental governments to provide digital dematerialization services tailored for local authorities. The company offers a suite of applications and services including administrative document management, electronic signatures, public procurement platforms, and citizen communication tools. The website reflects a mature regional service provider with a strong focus on government clients and compliance with French regulations. Technically, the site uses standard web technologies such as jQuery and JavaScript, with a responsive and accessible design optimized for mobile devices. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers are missing and no explicit incident response or vulnerability disclosure information is provided. Privacy and cookie policies are present and appear comprehensive, supporting GDPR compliance. The absence of WHOIS data limits domain legitimacy verification but the professional presentation and official departmental partnerships support trustworthiness.

S

SPL-XDEMAT

maelis.info

47

Maelis.info is the official website for the MAELIS application, a service provided by SPL-XDEMAT aimed at facilitating local community engagement through a smartphone app. The app offers practical information, alerts, incident reporting, and access to local public services and associations. The website is professionally designed with clear navigation and mobile optimization, targeting French local government citizens and community members. The business model focuses on providing a digital platform for local government communication and citizen participation. Technically, the website uses standard web technologies including HTML5, CSS3, JavaScript, and libraries such as jQuery and AOS for animations. It supports mobile platforms with links to iOS and Android app stores. While the site performs moderately well and is mobile-optimized, there is room for improvement in accessibility and security headers. No CMS or hosting provider details are evident. From a security perspective, the site lacks visible security headers and cookie consent mechanisms, which are important for GDPR compliance and user trust. The WHOIS data is privacy protected, which is common but reduces transparency. No forms or sensitive data collection points are present on the main page, reducing immediate risk exposure. Overall, the security posture is moderate but could be enhanced with standard best practices. The overall risk assessment is low, with no signs of malicious content or suspicious behavior. Strategic recommendations include implementing security headers, adding cookie consent, improving privacy disclosures, and providing clear contact information for security incidents to enhance trust and compliance.

I

IICA - Instituto Interamericano de Cooperación para la Agricultura

iica.int

65

The Instituto Interamericano de Cooperación para la Agricultura (IICA) is a well-established international organization focused on agricultural cooperation and development in the Americas. The website presents a professional and consistent brand image, targeting governments, agricultural institutions, and rural communities. It offers cooperation programs, strategic alliances, and technical assistance to promote innovation and sustainable agriculture. The domain age and WHOIS data align with the organization's history, supporting its legitimacy. Technically, the website is built on WordPress with Elementor and optimized for performance using WP Rocket and Cloudflare services. It employs modern web technologies and provides a good user experience with mobile optimization and clear navigation. However, accessibility features are basic, and explicit privacy and cookie policies are not evident in the provided content. From a security perspective, the site uses HTTPS and benefits from Cloudflare DNS, but lacks explicit security headers and visible incident response contacts. No vulnerabilities or suspicious content were detected. Privacy compliance is limited due to missing policies and consent mechanisms. Overall, the site demonstrates a solid security posture but could improve transparency and compliance. The overall risk is low, with recommendations to enhance privacy disclosures, implement security headers, and provide clear contact information for security incidents to strengthen trust and compliance.

U

Unite Caribbean

unite-caribbean.com

55

Unite Caribbean is a Caribbean-based consulting firm specializing in sustainable development and regional cooperation, with offices in Guadeloupe and Saint Lucia. The company offers consulting services and initiates cooperative projects in partnership with public, private, and philanthropic sectors in the Caribbean. The website is professionally designed using WordPress and Elementor, with multilingual support and SEO optimization. The technical infrastructure includes modern analytics and tracking tools such as Google Analytics and Tag Manager. Security posture is good with HTTPS enabled and domain transfer protection, though improvements can be made by enabling DNSSEC and adding security headers. Privacy compliance is basic, with a cookie consent mechanism but no explicit privacy or terms of service pages found. Overall, the website presents a trustworthy and professional image suitable for its target audience.

M

Montpellier Méditerranée Métropole et ville de Montpellier

montpellier.fr

68

Montpellier Méditerranée Métropole and the city of Montpellier operate an official government website serving residents, visitors, and stakeholders with comprehensive information on local governance, public services, urban projects, and citizen participation. The website is well-structured, professionally designed, and targets a broad audience including citizens and businesses within the metropolitan area. Technically, the site is built on Drupal 10, employs modern JavaScript libraries, and integrates Matomo analytics with privacy considerations such as Do Not Track. Security posture is good with HTTPS enforced and no exposed sensitive data, though explicit security headers and privacy policies are not clearly present in the analyzed content. The absence of WHOIS data limits domain registration trust analysis, but the official .fr domain and consistent branding support legitimacy. Overall, the site demonstrates a mature digital presence appropriate for a large government entity.

N

Nantes Saint-Nazaire Développement

nantes-saintnazaire.fr

11

Nantes Saint-Nazaire Développement is a French economic development agency focused on supporting businesses in implantation and growth within the Nantes Saint-Nazaire region. It emphasizes environmental and societal transitions and positions itself as the first economic development agency with a mission in France. The website is professionally designed, mobile-optimized, and uses modern WordPress technologies including Yoast SEO and WP Rocket for performance and SEO enhancements. Security measures include HTTPS and reCAPTCHA, with a cookie consent mechanism implemented, though explicit security headers and detailed privacy policies are not evident. The absence of WHOIS data is likely due to privacy protections common in French domain registrations. Overall, the site reflects a mature digital presence aligned with its governmental and economic development role.

V

Ville de Tours

tours.fr

55

The website www.tours.fr is the official digital presence of the city of Tours, France, serving as a comprehensive portal for municipal information, citizen services, news, and events. It targets residents, visitors, businesses, and community organizations, providing access to administrative procedures, cultural activities, and participatory governance platforms. The site is well-branded with official logos and consistent design, reflecting its government entity status. Technically, the site is built on WordPress 6.7.2, leveraging modern web technologies such as jQuery, Matomo analytics, and a cookie consent framework (Tarteaucitron). The site demonstrates good mobile optimization, accessibility, and SEO practices, with a moderate performance profile. Security is robust with HTTPS enforced and privacy compliance evident through GDPR-aligned cookie consent and a detailed privacy policy. Security posture is strong, though the absence of explicit security headers and incident response contacts suggests areas for improvement. No vulnerabilities or suspicious content were detected. The lack of WHOIS data limits domain registration trust assessment, but the official nature and content quality strongly support legitimacy. Overall, the site presents a trustworthy, professional, and user-friendly government portal with minor technical and security enhancements recommended to further strengthen its posture.

Tours Métropole Val de Loire is the official metropolitan government entity serving the Tours metropolitan area in France. The website provides comprehensive information about local government services, urban projects, ecological initiatives, and citizen services. It targets residents and stakeholders within the metropolitan region, offering online access to administrative procedures and event information. The site is well-positioned as a regional authority with a clear public service mission. Technically, the website is built on Drupal 7 CMS with a modern JavaScript stack including jQuery, Slick carousel, and Matomo analytics. It demonstrates good mobile optimization, accessibility, and SEO practices. The presence of a cookie consent banner and privacy policy indicates compliance with EU data protection regulations. However, the site lacks some advanced security headers and explicit security or incident response policies. Security posture is generally good with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. The use of Matomo analytics with DoNotTrack enabled shows privacy-conscious tracking. The absence of WHOIS data is a concern but likely due to AFNIC or privacy settings rather than malicious intent. Overall, the site appears trustworthy and professionally maintained. Recommendations include adding security headers, publishing a security policy and incident response contact, and ensuring regular CMS and module updates to maintain security. Enhancing transparency with a vulnerability disclosure policy would further improve trust. The domain WHOIS gap should be investigated to confirm registration legitimacy.

V

Ville de Vandœuvre

vandoeuvre.fr

52

The website www.vandoeuvre.fr serves as the official digital presence for the city of Vandœuvre-les-Nancy in France, providing residents and visitors with access to municipal news, event agendas, and a variety of online administrative services. The site targets a broad audience including families, seniors, students, and local businesses, positioning itself as a comprehensive resource for community engagement and public service delivery. The business model is typical of government websites, focusing on information dissemination and facilitating citizen interactions with municipal services. Technically, the site is built on WordPress CMS, leveraging popular plugins such as Yoast SEO for search optimization and Matomo for privacy-conscious analytics. The inclusion of libraries like jQuery, PhotoSwipe, and Leaflet indicates a moderately modern tech stack aimed at enhancing user experience with interactive elements such as maps and image galleries. The site demonstrates good mobile optimization and accessibility features, contributing to a positive user experience. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism compliant with GDPR principles, allowing users granular control over tracking. However, the absence of explicit security headers and lack of visible privacy policy or terms of service pages represent areas for improvement. The WHOIS data is notably missing, which is unusual for an official municipal domain and slightly detracts from the domain's trustworthiness. Overall, the site is a well-structured, professional municipal portal with solid technical foundations and a focus on user privacy. Strategic enhancements in security policy transparency and domain registration clarity would further strengthen its credibility and compliance posture.

V

Ville de Nancy

nancy.fr

69

The website www.nancy.fr is the official digital portal for the Ville de Nancy, France, providing comprehensive information and services related to municipal administration, cultural events, public services, and citizen engagement. It serves a broad audience including residents, visitors, families, students, and local businesses. The site is well-positioned as the authoritative source for city-related information and services, leveraging a public service business model focused on transparency and accessibility. Technically, the site is built on TYPO3 CMS with modern front-end technologies such as Bootstrap, jQuery, Vue.js, and Swiper for interactive components. It employs Matomo for analytics and uses a robust cookie consent management system (tarteaucitron) to comply with GDPR. The site is mobile-optimized, accessible, and demonstrates good SEO practices. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but could improve by adding additional security headers and publishing explicit security policies or incident response contacts. No vulnerabilities or WAF blocking were detected, indicating a mature security posture suitable for a government website. Overall, the site is professional, trustworthy, and compliant with privacy regulations, making it a reliable resource for its users. Strategic recommendations include enhancing security headers, publishing a security policy, and maintaining regular audits of third-party scripts to sustain security and compliance.

M

Métropole du Grand Nancy

grandnancy.eu

69

The Métropole du Grand Nancy website serves as the official digital presence for the metropolitan government of the Grand Nancy region in France. It provides comprehensive information about metropolitan governance, urban planning, public transportation, cultural events, and citizen services. The site targets residents, visitors, and local businesses, offering a broad range of public sector services and information. The website is well-positioned as a trusted government resource with a consistent brand and professional content. Technically, the site is built on TYPO3 CMS with modern front-end frameworks including Bootstrap and Vue.js, ensuring a responsive and user-friendly experience. It integrates analytics via Matomo and manages cookie consent effectively with the Tarteaucitron tool. The site demonstrates good mobile optimization and SEO practices, although some accessibility improvements could be made. From a security perspective, the website enforces HTTPS and employs cookie consent mechanisms, but lacks some advanced security headers and a published security policy or vulnerability disclosure program. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is privacy-protected, which is typical for government-related domains, and no suspicious patterns were found. Overall, the website presents a low-risk profile with strong business credibility and good technical implementation. Strategic recommendations include enhancing security headers, publishing a security policy, and improving accessibility compliance to further strengthen trust and security posture.

R

Regionalna razvojna agencija Primorsko-goranske županije

prigoda.hr

46

Regionalna razvojna agencija Primorsko-goranske županije (PRIGODA) is a government-established regional development agency focused on coordinating sustainable and balanced regional growth in the Primorsko-goranska County of Croatia. Founded in 2017, it serves as a support center for local governments and legal entities, providing consultancy and project management services, especially related to EU funding and strategic regional development. The website reflects a professional government entity with detailed information on projects, funding opportunities, and regional strategies. Technically, the site is built on WordPress with modern plugins and SEO optimizations, though it lacks some advanced security headers and explicit privacy policies. The security posture is adequate with HTTPS and Google Analytics tracking, but could be improved with better security policies and headers. Overall, the site is trustworthy and well-positioned as a regional government resource, but should enhance privacy and security transparency to improve compliance and user trust.

C

Commissariat aux Assurances

caa.lu

61

The Commissariat aux Assurances website serves as the official regulatory authority for the insurance sector in Luxembourg. It provides comprehensive information and resources for insurance operators, consumers, and stakeholders, including regulatory documents, circulars, and consumer alerts. The site is professionally designed with clear navigation and bilingual support (French and English), targeting industry participants and the general public interested in insurance regulation. Technically, the website employs a modern but straightforward technology stack including jQuery and tarteaucitron.js for cookie consent management. The site is accessible, mobile-optimized, and includes SEO best practices. However, no explicit CMS or hosting provider details are evident. Performance is moderate with room for improvement in accessibility features. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, but lacks visible advanced security headers and explicit security policies. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data limits domain trust assessment, but the official .lu domain and professional content support legitimacy. Google Analytics is used with user consent, indicating privacy awareness. Overall, the website presents a low-risk profile with strong business credibility and good privacy compliance. Strategic recommendations include enhancing security headers, publishing incident response contacts, and improving accessibility to further strengthen trust and compliance.

C

Comité du Risque Systémique

cdrs.lu

32

The website cdrs.lu represents the Comité du Risque Systémique, an institutional entity likely focused on systemic risk in Luxembourg. The site is primarily informational, presented in French, and built on WordPress using the Divi theme. The technical infrastructure is standard for a small institutional website, with moderate performance and basic mobile optimization. However, the site lacks critical privacy and security policies, contact information, and advanced security headers, which limits its compliance and trustworthiness. No WAF or blocking mechanisms were detected, indicating full accessibility. The WHOIS data shows Luxembourg-based name servers consistent with the domain's country code but lacks detailed registrant information, limiting full legitimacy assessment. Overall, the site is safe and suitable for general audiences but requires improvements in privacy, security, and contact transparency to enhance trust and compliance.

The website sam.lrv.lt is currently inaccessible due to a Cloudflare Web Application Firewall (WAF) challenge page employing Turnstile human verification. This security mechanism blocks direct access to the site's content, resulting in no visible business or organizational information. The domain appears to be associated with the Lithuanian government (lrv.lt), but no WHOIS data could be retrieved to confirm registration details or legitimacy. The lack of accessible content prevents a thorough assessment of the business model, services, or audience. Technically, the site leverages Cloudflare's security and performance services, but no further technology stack or CMS information is available. Security posture is limited to the presence of Cloudflare's WAF, with no additional security headers or policies visible. Privacy and compliance documentation such as privacy policies, cookie consent, or terms of service are absent from the accessible content. Overall, the site’s current state limits any meaningful analysis beyond recognizing the protective security layer in place.

H

Hagstofa Íslands

hagstofa.is

58

Hagstofa Íslands is the official national statistical institute of Iceland, providing comprehensive statistical data and services related to population, society, economy, environment, and more. The website serves a broad audience including researchers, government entities, and the general public, offering open data access and custom statistical services. The domain is well-established since 1998, reflecting a stable government entity with a strong market position as Iceland's authoritative statistics provider. Technically, the website employs modern web technologies including jQuery, Matomo analytics for privacy-conscious tracking, and embedded interactive charts via Datawrapper. Hosting is managed by a local Icelandic provider, 1984 Hosting, with a moderate performance profile and good mobile optimization. Security posture is generally good with HTTPS enforced and no exposed sensitive data, though improvements are recommended such as enabling DNSSEC and implementing security headers. Privacy compliance is partially met with a clear privacy policy and GDPR adherence, but lacks a cookie consent mechanism. Overall, the website is professional, trustworthy, and serves its public mission effectively.

The website ribarstvo.hr serves as the official information system for fisheries in Croatia, operated under the Ministry of Agriculture. It provides a suite of official applications, manuals, and resources aimed at government employees, fisheries professionals, and recreational fishers. The platform is co-financed by the European Maritime and Fisheries Fund, reinforcing its legitimacy and governmental backing. The domain is well-established since 2001 and registered with a reputable Croatian academic network registrar, aligning with the website's official nature. Technically, the site is built on ASP.NET Web Forms technology, featuring standard HTML and CSS with hidden form fields for state management. While the site is functional and content-rich, it shows basic mobile optimization and accessibility. No advanced SEO or modern frameworks are detected. Performance is moderate, and no analytics or tracking scripts are present, indicating minimal user tracking. From a security perspective, the site uses HTTPS (implied by domain and typical government standards), but no explicit security headers are detected in the provided content. There is no visible privacy or cookie policy, which is a compliance gap under GDPR. The absence of contact information and security policies reduces transparency. However, no vulnerabilities or suspicious elements are evident in the HTML content. The WHOIS data confirms domain legitimacy with consistent registration details. Overall, the site is a trustworthy government portal with good business credibility but requires improvements in privacy compliance, security headers, and user contact transparency to enhance its security posture and regulatory adherence.

C

CARNET

evisitor.hr

63

The www.evisitor.hr website is an official Croatian government platform managed by CARNET, designed to facilitate the registration and deregistration of tourists in Croatia. It serves commercial and non-commercial accommodation providers, integrating with the national authentication system NIAS for secure user login. The platform is well-positioned as a critical digital service in the Croatian tourism sector, providing essential compliance and informational services to stakeholders. Technically, the site employs modern web technologies including JavaScript, CSS, and Kendo UI components, with a focus on accessibility and multilingual support. Security measures include HTTPS enforcement and anti-CSRF tokens, although some advanced security headers and policies are not visibly implemented. Privacy compliance is basic, with terms of service available but no explicit cookie or privacy policies on the login page. Overall, the site demonstrates a strong business credibility and trustworthy government affiliation, with a moderate to good technical and security posture.

The website tallinn.ee is currently inaccessible due to a Cloudflare Turnstile human verification challenge page, which blocks access to the actual content. The domain is registered to Spin TEK AS, an Estonian company, consistent with the .ee country code top-level domain. The domain was created in 2010, indicating an established presence likely related to government or municipal services. Due to the access block, no business descriptions, contact information, or policies are visible on the site. The technical infrastructure includes Cloudflare security and analytics services, but no CMS or frameworks are detectable from the challenge page. Security posture cannot be fully assessed, but the presence of Cloudflare indicates some level of protection. Privacy and cookie policies are not found, and no contact or incident response information is visible. Overall, the site appears legitimate but inaccessible for detailed analysis.

M

Ministarstvo gospodarstva i održivog razvoja Republike Hrvatske

mingor.hr

65

The website mingor.hr/login serves as a secure login portal for the Nextcloud platform used by the Ministry of Economy and Sustainable Development of the Republic of Croatia. It provides government employees and authorized users with a safe environment for data storage and collaboration. The site leverages modern web technologies including Vue.js and Nextcloud version 30, hosted by CARNET, the Croatian Academic and Research Network. The domain registration data aligns well with the government entity, confirming legitimacy and trustworthiness. Technically, the site demonstrates good security practices such as HTTPS enforcement, Content Security Policy with nonce, and session management. However, it lacks publicly accessible privacy, cookie, and terms of service policies, as well as contact or incident response information, which are important for compliance and user trust. The site is minimalistic as expected for a login page, with no advertising or tracking scripts detected, indicating a focus on privacy and security. Overall, the security posture is strong with no obvious vulnerabilities detected in the provided content. The site is well-optimized for mobile and has a professional design consistent with government branding. The main risks relate to the absence of visible privacy and compliance documentation, which should be addressed to improve transparency and regulatory adherence.

R

Regional Development Agency DUNEA LLC.

dubrovnik-neretva.eu

42

The website represents the official Representation Office of the Dubrovnik-Neretva Region in Brussels, serving as a liaison and promotional platform for the region within the European Union. It highlights the Regional Development Agency DUNEA, which coordinates sustainable development and project management for the region. The site targets regional stakeholders, investors, EU institutions, and the general public interested in regional development. Technically, the site is built on Joomla CMS with a modern but moderate tech stack including Bootstrap, jQuery, and Revolution Slider, offering good mobile optimization and user experience. Security posture is adequate with HTTPS enforced but lacks advanced security headers and explicit security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is professional, trustworthy, and content-rich but would benefit from enhanced privacy and security measures.

Europe Direct Dubrovačko-neretvanske županije operates as a regional EU information center in Croatia, providing citizens with access to EU-related information, events, and services. The website serves as a communication platform to engage the public in discussions about the European Union's future and policies. It is funded by the European Union and acts as a trusted source for regional EU news and resources. The organization targets local citizens and stakeholders interested in EU affairs, promoting transparency and participation.

F

Fond za zaštitu okoliša i energetsku učinkovitost

fzoeu.hr

56

Fond za zaštitu okoliša i energetsku učinkovitost is a Croatian governmental fund dedicated to environmental protection and energy efficiency. Established in 2004, it serves as a national authority providing funding, regulatory oversight, and public information related to waste management, renewable energy, and environmental sustainability. The website offers comprehensive resources including public tenders, announcements, and educational content targeting Croatian citizens, businesses, and public institutions. The organization maintains a consistent and professional online presence aligned with its governmental role. Technically, the website employs modern web technologies including JavaScript, CSS, and HTML5, with Google Analytics integrated for user tracking under a compliant cookie consent mechanism. Hosting and DNS services are supported by Cloudflare, ensuring reliable performance and security. The site is mobile optimized and includes accessibility features enhancing usability for diverse users. From a security perspective, the website enforces HTTPS and implements cookie consent, but lacks visible security policy documentation and incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. The domain registration is consistent with the organization's Croatian governmental identity, enhancing trustworthiness. Overall, the website presents a secure, professional, and informative platform supporting the fund's mission. Strategic improvements include publishing explicit security policies, incident response information, and enhancing security headers to further strengthen the security posture.

Zakon.hr is a well-established Croatian legal information portal operated by cyber_Folks d.o.o., providing comprehensive access to laws, regulations, and legal documents. The website targets legal professionals, businesses, and the general public seeking reliable legal information. It maintains a strong market position as a leading legal resource in Croatia, supported by updated content and a related AI legal assistant service, Zakon.ai. The business model appears to be a combination of subscription and advertising revenue streams.

S

Sveučilšni računski centar - Srce

croris.hr

60

CroRIS is an official Croatian government-supported information system dedicated to the science sector, providing comprehensive data on researchers, projects, publications, and scientific infrastructure. It is operated by the University Computing Centre Srce in partnership with the Ministry of Science and Education and other academic institutions. The platform serves as a central hub for scientific data in Croatia, targeting researchers, academic institutions, and government stakeholders. Technically, the website employs modern web technologies including jQuery, Bootstrap, and Font Awesome, with a custom-built CMS and good mobile and accessibility support. Security measures include HTTPS, CSRF protection, and SAML2 authentication for user login, though some security headers and explicit cookie consent mechanisms are missing. The domain registration is consistent with the official nature of the site, registered under CARNET with Croatian country code and appropriate age. Overall, the site is professional, trustworthy, and well-positioned as a national science information resource.

Općina Krapinske Toplice operates an official municipal website providing comprehensive information and services to residents and stakeholders of the Krapinske Toplice municipality in Croatia. The site offers detailed administrative content including organizational structure, public notices, procurement, and community engagement resources. The website is positioned as a local government authority portal, serving a small-sized municipality with a focus on transparency and public service. Technically, the site is built on WordPress CMS using Elementor page builder, leveraging modern web technologies such as jQuery and Font Awesome for UI elements. Hosting and domain registration are consistent with a Croatian academic network provider, ensuring local presence and legitimacy. Security posture is adequate with HTTPS enabled and no exposed sensitive data, though improvements in security headers and incident response documentation are recommended. Privacy compliance is supported by clear privacy and cookie policies, though a cookie consent mechanism is absent. Overall, the website is professional, trustworthy, and safe for general audiences, with a good balance of content quality and technical implementation.

N

Narodne novine d.d.

nn.hr

56

Narodne novine d.d. is a well-established Croatian company with a 190-year tradition specializing in official government publications, legal books, educational programs, and commercial office supplies. The company serves government entities, legal professionals, and the general public, maintaining a strong market position as the official publisher of Croatia. The website reflects this professional stature with comprehensive content and a consistent brand image. Technically, the site uses legacy technologies such as jQuery 1.8.2 and bxSlider, with Google Analytics and Tag Manager for user tracking. While the site is functional and moderately optimized for mobile, there is room for modernization and improved accessibility. Security posture is good with HTTPS enabled and no visible vulnerabilities, but lacks advanced security headers and updated libraries. Privacy compliance is adequate with a clear privacy policy but lacks a cookie consent mechanism. Overall, the site is trustworthy and professional, with a solid digital presence aligned with the company's business model and sector.

P

Povjerenik za informiranje

pristupinfo.hr

55

The website pristupinfo.hr serves as the official online presence of the Croatian Commissioner for Information, providing comprehensive resources related to the right of access to information. It targets both users seeking information and public authorities, offering legal frameworks, educational webinars, open data initiatives, and event calendars. The site is well-positioned as a government transparency and information access portal with a medium organizational size and a founding date consistent with its domain registration in 2013. Technically, the site is built on WordPress with a modern tech stack including Yoast SEO, Google Analytics, and Fusion Builder. It is hosted by CARNET, a reputable Croatian academic network, ensuring reliable infrastructure. The site demonstrates good mobile optimization, accessibility, and SEO practices, though performance is moderate. From a security perspective, the site enforces HTTPS and uses reCAPTCHA for form protection. However, it lacks some advanced security headers and does not publish explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the website is trustworthy, professional, and aligned with its governmental role. Strategic improvements in privacy compliance, security policy transparency, and enhanced security headers would further strengthen its posture.

The website www.rogatec.si serves as the official digital presence for the Zavod za kulturo, turizem in razvoj Rogatec, a local government entity focused on cultural heritage, tourism, and community development in Rogatec, Slovenia. It provides comprehensive information about local attractions, events, visitor programs, and public procurement, positioning itself as a key resource for tourists and residents alike. The site demonstrates a strong commitment to cultural promotion and community engagement through detailed event calendars, virtual tours, and craft center offerings. Technically, the website is built on a modern WordPress platform with a robust tech stack including Yoast SEO, event calendar plugins, and GDPR compliance tools. It integrates well-known marketing and analytics services such as Google Analytics, Google Tag Manager, and Facebook Pixel, indicating a mature digital marketing approach. The site is mobile-optimized, accessible, and SEO-friendly, ensuring a positive user experience across devices. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms aligned with GDPR requirements. While explicit security headers are not fully confirmed, the presence of security plugins and absence of exposed sensitive data suggest a reasonable security posture. No critical vulnerabilities or suspicious activities were detected. The WHOIS data aligns well with the website's claims, showing a consistent and legitimate registration history. Overall, www.rogatec.si is a professionally managed, secure, and compliant website that effectively supports its mission of cultural and tourism promotion. Strategic recommendations include enhancing security headers, maintaining up-to-date software, and improving incident response visibility to further strengthen its security and trustworthiness.

R

Razvojna agencija Sotla

ra-sotla.si

40

Razvojna agencija Sotla is a Slovenian regional development agency established in 2003, focusing on regional development programs, entrepreneurship support, and project management primarily in the Obsotelje and Kozjansko regions. The agency operates as a non-profit entity serving local governments, entrepreneurs, and community stakeholders. Their website reflects a professional and consistent brand presence with clear navigation and relevant content tailored to their target audience. Technically, the site is built on WordPress using modern plugins such as Elementor and Events Manager, ensuring good mobile optimization and accessibility. Security posture is solid with HTTPS enforced and standard security headers present, though there is room for improvement in publishing explicit security policies and incident response information. Overall, the website is trustworthy, compliant with GDPR cookie requirements, and free from suspicious indicators.

M

Ministerie van Algemene Zaken

government.nl

60

The website government.nl serves as the official online portal for the Government of the Netherlands, managed by the Ministerie van Algemene Zaken. It provides comprehensive information on government services, policies, immigration, housing benefits, citizenship, and current news. The site targets a broad audience including residents, expatriates, and businesses interacting with Dutch government entities. It holds a strong market position as the authoritative source of government information in the Netherlands. Technically, the website employs modern JavaScript libraries such as jQuery UI and integrates Piwik PRO analytics and Pastease survey tools, indicating a mature digital infrastructure. The site is mobile-optimized, accessible, and performs well with fast loading times. The CMS is not explicitly identified but appears to be a custom or government-specific platform. From a security perspective, the site enforces HTTPS and employs secure forms without visible vulnerabilities. However, explicit security headers and a dedicated security policy page are absent, and no incident response contacts are provided. Privacy compliance is strong, with clear privacy and cookie policies and GDPR adherence. No vulnerabilities or suspicious domains were detected. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance suitable for a government entity. Strategic recommendations include enhancing security headers, publishing a security policy, and providing incident response contacts to further strengthen the security posture.

Ž

Žinau, ką renku

zinaukarenku.lt

52

Žinau, ką renku is a Lithuanian non-profit political monitoring platform focused on engaging young citizens across Lithuania in election processes and political awareness. The website provides election information, candidate monitoring, volunteer opportunities, and a blog to inform and empower voters. The platform positions itself as a neutral and civic-minded entity, leveraging modern web technologies to deliver content effectively. Technically, the site uses Laravel Livewire, Alpine.js, and Cloudflare DNS services, ensuring a modern and responsive user experience with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and CSRF protections in place, although some security headers could be improved. Privacy compliance is evident through a clear privacy policy and cookie consent mechanism, aligning with GDPR requirements. Overall, the site is trustworthy, professional, and well-maintained, with no detected blocking or WAF interference.