Government security reports

Valga Sport is a local Estonian sports organization focused on promoting youth and community sports activities, managing sports facilities, and organizing events. The website serves as an information portal for sports opportunities, events, and news relevant to the Valga region. The organization appears to be a small-sized entity with a public or non-profit orientation, supported by local government affiliations. Technically, the website is built on the Greativ CMS platform and uses common web technologies including Google Analytics and Facebook Pixel for tracking. The site is mobile-optimized with a moderate performance profile and basic SEO and accessibility features. Hosting and domain registration are consistent with a local Estonian provider, Telia Eesti AS. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks advanced security headers and does not provide explicit security policies or incident response contacts. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. The WHOIS data is transparent and consistent with the business claims, supporting legitimacy. Overall, the website is professional and trustworthy for its intended audience but could improve in privacy compliance and security posture to better align with modern standards.

Z

Zagorska razvojna agencija

cro-si-safe.eu

50

The CRO-SI-SAFE website represents a regional cooperation project aimed at enhancing cross-border partnerships among emergency rescue services in the Krapinsko-zagorska and Savinjska regions. The project focuses on improving civil protection systems and increasing resilience to disasters. The website is professionally designed using WordPress and Elementor, with clear navigation and multilingual support in Croatian, Slovenian, and English. Key services include training, publications, and collaborative activities supported by EU funding. The site demonstrates a solid market position as a government/non-profit regional initiative with trusted partners.

The website 'Crveni popis Hrvatske' is an official Croatian government portal managed by the Ministry of Environment and Green Transition, specifically the Institute for Environmental Protection and Nature. It serves as a comprehensive resource for data on endangered wild species in Croatia, providing risk assessments, conservation information, and public education. The portal targets a broad audience including researchers, policymakers, and the general public interested in biodiversity and environmental protection. Technically, the site employs modern web technologies such as HTML5, CSS3, JavaScript, Chart.js for data visualization, and Leaflet.js for mapping. The presence of a CSRF token and HTTPS indicates a secure infrastructure, although some security headers are missing. Accessibility is addressed but with room for improvement, particularly in image alt attributes and text scaling. The site is moderately performant and mobile-optimized. From a security perspective, the portal demonstrates good practices including GDPR compliance, cookie consent mechanisms, and secure form handling. However, it lacks explicit incident response contact details and a published vulnerability disclosure policy. No critical vulnerabilities or suspicious activities were detected. WHOIS data confirms the domain's legitimacy and alignment with the governmental nature of the site. Overall, the website is trustworthy, professionally maintained, and fulfills its mission effectively. Strategic improvements in security headers, accessibility, and incident response transparency would further enhance its posture.

E

Europe Direct Informacijski ured Split

europedirect-split.hr

43

Europe Direct Informacijski ured Split operates as an official European Union information center serving the Split region in Croatia. The website provides comprehensive information and advisory services about the EU, targeting local citizens and residents. It is part of the Europe Direct network, offering free services and acting as a trusted source for EU-related news, publications, and guidance. The business model is non-profit and government-affiliated, focusing on public information dissemination. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and Revolution Slider, ensuring good SEO and user experience. The site is mobile-optimized and includes accessibility features, enhancing usability for diverse audiences. External integrations include Google Tag Manager and Facebook SDK for analytics and social media engagement. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms compliant with GDPR. While explicit security headers are not fully confirmed, no critical vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns with the website's claims, showing consistent registration details and domain age appropriate for the organization's history. Overall, the website demonstrates a solid security posture, good privacy compliance, and professional business credibility. Recommendations include enhancing security headers, publishing incident response and vulnerability disclosure policies, and expanding contact channels for security matters.

A

Azelija Eko d.o.o.

azelija-eko.hr

47

Azelija Eko d.o.o. is a Croatian municipal service company specializing in waste management, recycling, cemetery services, public lighting maintenance, and chimney sweeping within the Ozalj region and surrounding municipalities. The company operates fixed and mobile recycling yards and provides essential environmental services to local residents and businesses. The website reflects a local government service provider with clear contact information and service descriptions, targeting the regional community. Technically, the website is built on Joomla CMS with a Bootstrap framework and uses common JavaScript libraries such as jQuery and Font Awesome for UI elements. The site includes image sliders and responsive design elements, indicating moderate digital maturity. Hosting is provided by CARNET, a reputable Croatian academic network, which aligns with the local focus. From a security perspective, the site lacks visible security headers and explicit HTTPS enforcement in the provided data, which lowers its security posture. No privacy or cookie policies were found, indicating potential GDPR compliance gaps. The site does not use tracking or advertising technologies, which reduces privacy risks but also limits marketing insights. Overall, the website is functional and professional for its purpose but would benefit from enhanced security measures, privacy compliance improvements, and clearer policies to strengthen trust and regulatory adherence.

K

Komunalno Ozalj d.o.o.

komunalno-ozalj.com

50

Komunalno Ozalj d.o.o. is a municipal utility company based in Ozalj, Croatia, providing essential services such as water supply, sewage, and wastewater treatment to local residents and businesses. The website serves as an informational portal offering updates on infrastructure projects, regulatory documents, and contact information. The company appears to be a small-sized government sector entity with a domain registered since 2007, consistent with its operational history. Technically, the website is built on Joomla CMS and uses older JavaScript libraries like jQuery and MooTools. The site demonstrates basic mobile responsiveness and SEO optimization but lacks advanced technical features or modern frameworks. Hosting is inferred to be with zonet.com.hr based on DNS data. Performance is moderate with room for improvement in accessibility and mobile optimization. From a security perspective, the site uses HTTPS but lacks DNSSEC and security headers, which lowers its security posture. There is no evidence of privacy or cookie policies, which indicates compliance gaps with GDPR and related regulations. No incident response or vulnerability disclosure information is present. Contact information is clearly provided, enhancing business credibility. Overall, the website is functional and trustworthy for its purpose but would benefit from enhanced security measures, privacy compliance, and modernization to improve user trust and regulatory adherence.

A

Agencija za gospodarenje otpadom d.o.o.

ago-dnz.hr

43

Agencija za gospodarenje otpadom d.o.o. operates as a regional governmental agency responsible for waste management in the Dubrovačko-neretvanska županija region of Croatia. The website serves as an informational and project communication platform, highlighting EU-funded initiatives under the Operational Programme Competitiveness and Cohesion 2014-2020. The agency provides key services including waste management infrastructure development, public education, and regulatory compliance support. Their market position is that of a specialized public sector entity with strong governmental and EU partnerships.

C

Centar za poduzetništvo d.o.o.

czp.hr

43

Centar za poduzetništvo d.o.o. is a regional entrepreneurial support center serving the Dubrovnik-Neretva County in Croatia. The organization focuses on providing a range of services including education, business consulting, credit programs, and assistance with EU funding projects. Their website reflects a government-affiliated entity aimed at fostering entrepreneurship and small business growth in the region. The target audience primarily consists of local entrepreneurs and small business owners seeking support and resources. Technically, the website employs a modern technology stack featuring jQuery, Bootstrap, FontAwesome, and various plugins for enhanced user experience and accessibility. The site is mobile-optimized, uses HTTPS with strong SSL configuration, and integrates Google Analytics and UserWay accessibility tools, indicating a mature digital infrastructure. The website content is well-structured, professionally designed, and includes clear navigation and relevant business information. From a security perspective, the site enforces HTTPS and obfuscates email addresses to reduce spam. However, it lacks explicit security policies and incident response contact details. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with GDPR-aligned privacy and cookie policies and a consent mechanism in place. The website demonstrates a good security posture but could improve by adding formal security documentation and security headers. Overall, the website is trustworthy, professional, and serves its business purpose effectively. The domain registration data aligns with the website's claims, reinforcing legitimacy. Strategic recommendations include enhancing security transparency, publishing incident response information, and maintaining regular security audits to sustain trust and compliance.

J

Javna ustanova za upravljanje zaštićenim dijelovima prirode Dubrovačko-neretvanske županije

zastita-prirode-dnz.hr

48

The website represents the official public institution responsible for managing protected natural areas in the Dubrovnik-Neretva County of Croatia. It provides information about environmental protection projects, permits, public procurement, and general organizational details. The site targets the general public, environmental stakeholders, and government entities, positioning itself as a regional governmental authority with a focus on nature conservation. Technically, the website is built on WordPress using the Enfold theme and several plugins including Yoast SEO and Event Organiser. It employs Google Analytics and Tag Manager for traffic analysis and has implemented cookie consent mechanisms, indicating GDPR awareness. The security posture is solid with HTTPS enabled and no obvious vulnerabilities detected, though some security headers could be improved. Overall, the site is professional, trustworthy, and well-maintained, with clear branding and consistent content quality.

R

Regionalna razvojna agencija Dubrovačko-neretvanske županije - DUNEA

dunea.hr

41

Regionalna razvojna agencija Dubrovačko-neretvanske županije (DUNEA) is a government-established regional development agency founded in 2006 in Dubrovnik, Croatia. The agency focuses on promoting sustainable and balanced regional development, coordinating existing development activities, and aligning with national and EU requirements. Their key services include strategic planning, EU project management, and regional economic development initiatives. The website reflects a professional and consistent brand presence targeting regional stakeholders, local government, and businesses involved in development projects. Technically, the site is built on Joomla CMS with modern frontend frameworks and libraries, offering moderate performance and good mobile optimization. Security posture is adequate with HTTPS and cookie consent but lacks advanced security headers and explicit incident response policies. Overall, the site is trustworthy and compliant with GDPR, providing clear contact information and partner links.

D

Dubrovačko-neretvanska županija

edubrovnik.org

53

Dubrovačko-neretvanska županija operates as the official regional government website for the Dubrovnik-Neretva County in Croatia. The site provides comprehensive information about county administration, public notices, events, documents, and contact details, targeting residents and stakeholders within the region. It serves as a key communication channel for government services and public information dissemination. Technically, the website is built on WordPress 6.6.1 with multilingual support via WPML, uses modern web technologies including jQuery and Google Fonts, and implements a cookie consent mechanism to comply with privacy regulations. The site demonstrates good mobile optimization, accessibility, and SEO practices, contributing to a positive user experience. Security-wise, the website enforces HTTPS and uses updated software versions, but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or malicious indicators were detected. Overall, the website is trustworthy and professional, though improvements in privacy policy visibility and security disclosures are recommended.

M

Ministarstvo zaštite okoliša i zelene tranzicije

bioportal.hr

48

Bioportal.hr is the official web portal for the Information System for Nature Protection in Croatia, operated by the Ministry of Environment and Green Transition. It serves as a comprehensive platform providing biodiversity data, observation reporting tools, red list assessments, and other resources aimed at supporting nature conservation efforts. The website targets researchers, environmental professionals, government agencies, and the general public interested in Croatian natural heritage. It holds a strong market position as the authoritative national resource for environmental data and reporting. Technically, the website is built on WordPress with multilingual support via WPML, leveraging modern JavaScript libraries such as jQuery and Swiper.js for interactive features. The site includes a GDPR-compliant cookie consent mechanism and integrates Google Analytics for visitor insights. Performance and mobile optimization are good, with accessibility features implemented to support diverse users. From a security perspective, the site enforces HTTPS and uses cookie consent best practices. However, some security headers like Content-Security-Policy and X-Frame-Options are not explicitly detected and could be improved. No vulnerabilities or exposed sensitive data were found. The WHOIS data confirms the domain's legitimacy and alignment with the governmental entity operating the site. Overall, bioportal.hr demonstrates a solid security posture, good privacy compliance, and professional digital presence. It is a trustworthy platform for environmental data dissemination with room for minor security enhancements.

APIS IT d.o.o. operates as an IT service provider specializing in identity federation and authentication services primarily for Croatian government entities such as Grad Zagreb and the Ministry of Culture. The website analyzed is a Home Realm Discovery page facilitating user authentication selection among trusted identity providers. The business targets organizational users within government and affiliated institutions, leveraging Microsoft Active Directory Federation Services (ADFS) technology to provide secure access management. The company holds a moderate market position as a government IT service provider with a medium-sized organizational footprint in Croatia. Technically, the site employs standard web technologies including HTML5, JavaScript, and CSS, integrated with Microsoft ADFS frameworks. The site is functional with basic mobile optimization and accessibility features but lacks advanced SEO and performance optimizations. The infrastructure appears stable but could benefit from enhanced security headers and improved user experience elements. From a security perspective, the site uses HTTPS and implements basic input validation on forms. However, it lacks explicit security headers such as Content-Security-Policy and Strict-Transport-Security, which are recommended for modern secure web applications. No privacy or cookie policies are present, indicating gaps in compliance and user transparency. No contact or incident response information is provided, limiting user support and security communication channels. Overall, the website is safe and professional for its intended government audience but requires improvements in privacy compliance, security hardening, and user support to enhance trust and regulatory adherence.

G

Gradski muzej Novalja

gradskimuzejnovalja.hr

40

Gradski muzej Novalja is a small government/non-profit cultural institution based in Croatia, focused on preserving and presenting the cultural heritage of Novalja and its surroundings. The website serves as an informational and educational platform offering museum exhibitions, lectures, and workshops to the local community and visitors. The digital presence is built on a modern WordPress CMS with Elementor and Astra theme, providing a good user experience with mobile optimization and SEO enhancements. Security posture is adequate with HTTPS enabled and no visible exposed sensitive data, but lacks advanced security headers and incident response information. Privacy compliance is limited, with no explicit cookie consent or detailed GDPR policy. Overall, the website is trustworthy and professionally maintained, suitable for its cultural mission.

C

Centar za kulturu Grada Novalje

czknovalja.hr

41

Centar za kulturu Grada Novalje is a Croatian cultural center focused on promoting and organizing cultural and sports events in Novalja and surrounding areas. The website serves as an information hub for upcoming and past events, official documents, and community engagement. It targets local residents and visitors interested in cultural activities. The site is built on WordPress with a modern theme and multilingual support, reflecting a moderate level of digital maturity. Security posture is solid with HTTPS and GDPR-compliant cookie consent, though some security headers are missing and no explicit security policies are published. Overall, the site is trustworthy and professionally maintained, suitable for its public cultural institution role.

DVD Novalja is a small, local volunteer firefighting organization based in Novalja, Croatia, serving the community on the island of Pag. The website provides information about their firefighting activities, technical interventions, and community safety efforts. The organization appears to be well-established with a domain age dating back to 2005, consistent with their operational history. The site targets local residents and visitors needing emergency and safety information. Technically, the website uses older web technologies such as jQuery 1.4.2 and lacks modern security features like HTTPS and security headers. The site is basic in design and functionality, with limited mobile optimization and no visible analytics or tracking tools. Contact information is clearly presented, but there are no privacy or cookie policies, which is a compliance gap. From a security perspective, the absence of HTTPS and use of outdated libraries pose risks. No advanced security policies or incident response contacts are provided. The site does not appear to collect user data via forms, reducing exposure but also limiting engagement. Overall, the security posture is weak and requires improvements to protect users and enhance trust. The overall risk is moderate due to the lack of encryption and outdated technology, but the site content is safe and non-malicious. Strategic recommendations include implementing HTTPS, updating libraries, adding privacy and cookie policies, and enhancing security headers to improve compliance and user trust.

J

Javna ustanova za Zaštitu i očuvanje prirode Ličko senjske Županije

zop-lsz.hr

44

The website represents a Croatian public institution dedicated to the protection and preservation of nature in the Ličko-senjska County. It provides comprehensive information about protected areas, educational programs, projects, and public announcements. The institution targets local citizens, environmental professionals, and visitors interested in nature conservation. The business model is that of a government entity focused on environmental stewardship and public service. Technically, the website is built on WordPress using popular plugins such as Elementor, WPBakery, LayerSlider, and Slider Revolution. It employs modern web technologies including HTTPS, jQuery, and Google Fonts. The site is mobile-optimized and includes accessibility features, enhancing user experience for diverse audiences. From a security perspective, the site uses HTTPS with good SSL configuration and security headers. No critical vulnerabilities or exposed sensitive data were detected. However, the site lacks explicit security policies or incident response information. Privacy compliance is addressed with a privacy policy and cookie consent mechanism, aligned with GDPR requirements. Overall, the website is trustworthy, professionally maintained, and serves its public institution role effectively. Strategic recommendations include publishing a dedicated security policy, incident response contacts, and vulnerability disclosure information to further enhance trust and compliance.

J

Javna ustanova Razvojna agencija Ličko-senjske županije - LIRA

lsz-lira.hr

55

Javna ustanova Razvojna agencija Ličko-senjske županije - LIRA is a Croatian regional government agency established in 2008, focused on promoting and coordinating regional development activities in Ličko-senjska županija. The agency facilitates investment climate improvement, entrepreneurship, and socio-economic growth through project management, funding administration, and strategic planning. Their website reflects a professional and consistent brand presence, targeting regional stakeholders, investors, and public entities. Technically, the site uses modern frameworks like Bootstrap and jQuery, includes accessibility features, and is mobile optimized, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced and secure forms, though some security headers are missing and no explicit incident response or vulnerability disclosure policies are found. Overall, the site is trustworthy, compliant with GDPR, and provides comprehensive contact and policy information.

Z

Zavod za prostorno uređenje Ličko-senjske županije

zzpulsz.hr

47

Zavod za prostorno uređenje Ličko-senjske županije is a Croatian government agency established in 2008, responsible for coordinating, monitoring, and implementing spatial planning within the Ličko-senjska county. The website serves as an official portal providing information about spatial plans, reports, and institutional activities targeting local residents, government officials, and urban planning professionals. The business model is focused on public sector service delivery with a clear mandate and regional authority. Technically, the website employs a modern but straightforward technology stack including jQuery, Modernizr, and Owl Carousel, hosted on a CMS platform developed by VIT. The site is mobile-optimized, accessible with multiple user-friendly features such as font resizing and contrast modes, and implements cookie consent mechanisms. SEO and metadata are well handled, though no structured JSON-LD data was found. From a security perspective, the site uses HTTPS with a good SSL configuration and basic security best practices like form validation and cookie consent. However, it lacks advanced security headers and does not publish a security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, the website is trustworthy, professional, and serves its government function well. The main risks relate to missing privacy and security policy documentation and absence of explicit incident response information. Addressing these gaps would improve compliance and user trust.

A

Arburoža d.o.o.

arburoza.hr

47

Arburoža d.o.o. is a municipal service company serving the city of Novalja, Croatia, specializing in waste management, public procurement, financial planning, and cemetery services. The website is well-structured, providing clear information and easy navigation for residents and businesses. The company maintains a local government service profile with transparent contact details and public tenders. Technically, the site is built on WordPress with modern plugins and is optimized for mobile devices. Security posture is solid with HTTPS, security headers, and GDPR compliance, though it lacks explicit security and incident response policies. Overall, the site reflects a trustworthy and professional municipal service provider with room for enhanced security transparency.

G

Gradska uprava Novalja

novalja.hr

45

The website www.novalja.hr serves as the official digital portal for the city of Novalja, Croatia, providing residents, tourists, and businesses with comprehensive information about municipal services, news, public procurement, and community events. It holds a strong position as the primary communication channel for the local government, offering transparency and accessibility to public data and administrative resources. The site targets a broad audience including local citizens, government officials, and visitors interested in the city. Technically, the website employs a modern tech stack including Bootstrap, jQuery, and various JavaScript libraries to deliver a responsive and user-friendly experience. While the site is mobile-optimized and well-structured, there is room for improvement in accessibility and SEO practices. Security-wise, the site uses HTTPS and trusted external libraries but lacks several important security headers and does not provide visible incident response or vulnerability disclosure policies. Privacy compliance is partially met with a clear privacy policy but lacks cookie consent mechanisms. Overall, the site is trustworthy and professional but would benefit from enhanced security and privacy features to align with best practices and regulatory requirements.

J

Javna ustanova "Priroda"

ju-priroda.hr

42

Javna ustanova "Priroda" is a governmental institution responsible for managing protected natural areas in the Primorsko-goranska County of Croatia. The website serves as an informative portal offering educational content, visitor center information, and publications related to nature conservation. The organization targets the general public, local communities, and stakeholders interested in environmental protection. The business model is non-profit and government-funded, focusing on regional nature preservation and education. Technically, the website is built on WordPress with a modern tech stack including Visual Composer, WPML for multilingual support, and various plugins for galleries and PDF viewing. The site is mobile optimized, accessible, and uses HTTPS with Google Tag Manager for analytics. Performance is moderate with good SEO and accessibility practices. Security posture is solid with HTTPS enforced and no exposed sensitive data, but lacks some security headers and formal incident response information. Privacy and cookie policies are missing, representing compliance gaps. Social media integration is present and professional. Overall, the website is trustworthy and professional, with room for improvement in privacy compliance and security hardening. Strategic recommendations include publishing privacy and cookie policies, implementing security headers, and establishing a vulnerability disclosure channel.

Z

Zavod za prostorno uređenje Dubrovačko-neretvanske županije

zzpudnz.hr

65

The website zzpudnz.hr is the official online portal for the Zavod za prostorno uređenje Dubrovačko-neretvanske županije, a governmental spatial planning institute serving the Dubrovnik-Neretva County in Croatia. It provides comprehensive spatial planning documentation, project information, and news updates relevant to local government officials, urban planners, and the public. The site is well-structured, professionally designed, and offers extensive archives of news and legal documents related to spatial planning. The target audience includes government entities, municipalities, and citizens interested in regional planning and development. Technically, the website is built on the DotNetNuke (DNN) CMS platform, utilizing modern JavaScript libraries such as jQuery, Vue.js, and Bootstrap for responsive design and user experience. The site is mobile optimized and includes accessibility features. Security best practices are observed with HTTPS enforced, appropriate security headers, and secure form handling. Google Analytics is used for visitor tracking, with a cookie consent mechanism in place to comply with GDPR requirements. From a security perspective, the site shows a mature posture with no detected vulnerabilities or exposed sensitive data. However, there is no explicit public security policy or vulnerability disclosure page, and incident response contact information is not provided. The WHOIS data confirms the domain's legitimacy, consistent with the Croatian governmental entity it represents, and the domain age aligns with the institution's operational history. Overall, zzpudnz.hr is a credible, secure, and professionally maintained governmental website that effectively serves its informational and public service role. Strategic recommendations include publishing a dedicated security policy, adding vulnerability disclosure information, and providing clear incident response contacts to enhance transparency and trust.

D

Dubrovačko-neretvanska županija

dnz.hr

53

Dubrovačko-neretvanska županija operates as the official regional government authority for the Dubrovnik-Neretva County in Croatia. The website serves as a comprehensive portal for residents and stakeholders, providing news, administrative services, public notices, and access to official documents. It targets local citizens and government officials, positioning itself as a trusted source of regional governance information. Technically, the website is built on WordPress 6.6.1 with a modern theme and plugins such as WPML for multilingual support and Cookie Law Info for GDPR compliance. The site demonstrates good mobile optimization, accessibility, and SEO practices, although hosting provider details are not explicitly identified. From a security perspective, the site enforces HTTPS, employs standard security headers, and implements a cookie consent mechanism aligned with GDPR. However, it lacks explicit privacy policies, security policies, incident response information, and vulnerability disclosure mechanisms, which are recommended for enhanced transparency and compliance. Overall, the website presents a professional and trustworthy digital presence for a government entity, with moderate technical maturity and a solid security posture. Strategic improvements in privacy and security documentation would further strengthen its compliance and user trust.

Javna ustanova RERA S.D. za koordinaciju i razvoj Splitsko-dalmatinske županije is a Croatian public institution focused on regional development and coordination within the Split-Dalmatia County. The organization provides technical assistance, project preparation, and manages EU fund utilization to support local government, entrepreneurs, and NGOs. The website reflects its authoritative role with comprehensive content, official documentation, and transparent public procurement information. Technically, the site uses modern web technologies including Bootstrap, jQuery, and analytics tools, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforced and cookie consent implemented, though additional security headers and explicit security policies could enhance protection. Overall, the domain registration and WHOIS data align well with the institution's identity, indicating legitimacy and trustworthiness.

U

Underwater heritage

underwater-heritage.hr

54

The website 'Underwater heritage' serves as an informational platform dedicated to underwater cultural heritage in Croatia, including catalogues, maps, and detailed information about ancient architecture, shipwrecks, and other underwater archaeological sites. It targets researchers, historians, archaeologists, and tourists interested in maritime heritage. The site is built on the Wix platform, leveraging Wix's Thunderbolt framework and associated UI libraries, with additional integrations such as Sentry for error monitoring and Vidjet for chat support. The technical infrastructure is modern and well-implemented, with HTTPS enforced and moderate performance and mobile optimization. However, the site lacks explicit privacy, cookie, and terms of service policies, and no direct contact information is provided, which impacts privacy compliance and business credibility scores. Security posture is decent with HTTPS and some best practices, but missing security headers and formal policies reduce the overall security maturity. Overall, the site is a good quality, niche cultural heritage resource with moderate trustworthiness but would benefit from enhanced privacy and security disclosures.

G

Grad Ozalj

ozalj.hr

42

Grad Ozalj operates as the official municipal government website for the city of Ozalj in Croatia, providing comprehensive information and services to residents, investors, businesses, and tourists. The site covers a wide range of municipal functions including city governance, budget transparency, procurement, local projects, and community engagement. It serves as a central digital platform for public communication and administrative transparency. Technically, the website is built on WordPress using the Elementor page builder, enhanced with SEO tools like Rank Math and privacy compliance plugins such as Complianz. The infrastructure supports modern web standards including HTTPS and responsive design, ensuring accessibility across devices. Google Analytics is employed for visitor tracking with an explicit cookie consent mechanism, reflecting a mature digital presence. From a security perspective, the site enforces HTTPS and implements cookie consent, but lacks explicit advanced security headers and published incident response policies. No vulnerabilities or exposed sensitive data were detected in the content. The WHOIS data confirms the domain's legitimacy and consistency with the municipal entity, reinforcing trustworthiness. Overall, Grad Ozalj's website demonstrates a solid balance of content quality, technical implementation, and privacy compliance suitable for a government entity. Strategic improvements in security headers and incident response transparency could further enhance its security posture and public trust.

G

Grad Duga Resa

dugaresa.hr

50

Grad Duga Resa operates an official municipal website serving the city of Duga Resa in Croatia. The site provides public information, news, and municipal services to residents and visitors. It positions itself as the authoritative source for local government communications and community engagement. The website is built on WordPress using the Divi theme, enhanced with SEO and GDPR compliance plugins, reflecting a moderate level of digital maturity. The technical infrastructure supports responsive design and basic accessibility, ensuring usability across devices. Security posture is adequate with HTTPS enabled and cookie consent implemented, though additional security headers and explicit policies could enhance protection. Overall, the site is legitimate and trustworthy, though WHOIS privacy limits domain ownership transparency. Strategic recommendations include improving security headers, publishing privacy and incident response policies, and enhancing contact information visibility.

J

Javna ustanova Regionalna razvojna agencija Karlovačke županije

ra-kazup.hr

55

Javna ustanova Regionalna razvojna agencija Karlovačke županije (JURRA) is a regional government agency established by Karlovačka županija to coordinate and promote regional development. The agency provides free expert assistance in project preparation and implementation, educational and advisory services primarily targeting public legal entities and institutions within the Karlovačka županija region. The website is professionally designed, well-structured, and optimized for SEO and accessibility, reflecting a mature digital presence. Technically, it is built on WordPress with modern plugins for SEO, cookie consent, and analytics, ensuring compliance with GDPR and user privacy standards. Security posture is good with HTTPS enabled and cookie consent mechanisms in place, though some security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. Overall, the domain is privacy protected in WHOIS as per GDPR, which is justified for this type of public institution. The website content and structured data strongly support the legitimacy and trustworthiness of the agency.

Muzej Međimurja Čakovec is a well-established regional museum in Croatia, offering a broad range of cultural, historical, and artistic exhibits. The website reflects a mature digital presence with detailed content about museum collections, exhibitions, and educational programs. The institution targets general audiences including tourists, researchers, and local visitors. Technically, the website uses modern web technologies such as Bootstrap, jQuery, and Google Tag Manager, hosted on a Croatian hosting provider. Security posture is adequate with HTTPS enabled but lacks some security headers and formal privacy and cookie policies, which are important for compliance and trust. Overall, the site is professional and trustworthy but could improve privacy compliance and security best practices.

Ž

Županijska uprava za ceste Međimurske županije

zuc-ck.hr

49

Županijska uprava za ceste Međimurske županije is a Croatian government agency responsible for managing county and local roads within Međimurje County. The website serves as an informational portal providing details on road maintenance, construction projects, legal frameworks, public procurement, and access to official information. The target audience includes local residents, government officials, contractors, and other stakeholders interested in regional road infrastructure. The agency operates under the Croatian national registrar CARNET, with a domain established in 2005, reflecting a mature and stable online presence. Technically, the website is built on Joomla CMS using the Helix Ultimate framework and SP Page Builder, incorporating modern web technologies such as Bootstrap 5 and jQuery. Hosting is provided by Totohost, a Croatian hosting provider. The site demonstrates moderate performance and good mobile optimization, with basic accessibility features. SEO optimization is basic but functional, and the site uses HTTPS with a good SSL configuration. Security practices include CSRF token implementation and HTTPS enforcement, though explicit security headers are not clearly present. From a security perspective, the site shows a solid posture for a government informational portal, with no visible vulnerabilities or exposed sensitive data. However, it lacks explicit privacy and cookie policies, which are important for GDPR compliance and user trust. There is no evidence of incident response or vulnerability disclosure mechanisms. The absence of tracking or advertising technologies indicates a privacy-conscious approach, though formal policies are missing. Overall, the website is professional, trustworthy, and serves its governmental function well. Strategic improvements include adding comprehensive privacy and cookie policies, enhancing security headers, and publishing incident response and vulnerability disclosure information to strengthen compliance and security transparency.

R

Regionalni Centar za Investicije - Međimurje d.o.o.

rci.hr

60

Regionalni Centar za Investicije - Međimurje d.o.o. is a government-affiliated regional investment center focused on supporting local businesses and stakeholders in the Međimurje region of Croatia. The organization provides services including investment support, dissemination of information on EU and national tenders, and regional development initiatives. The website reflects a professional and consistent brand presence, targeting local entrepreneurs and agricultural producers. Technically, the site is built on WordPress with Elementor, leveraging modern web technologies and optimized for mobile devices. Security posture is solid with HTTPS and no exposed sensitive data, though it lacks explicit security headers and published security policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the domain registration data aligns well with the business claims, supporting legitimacy. The site is accessible without WAF or blocking mechanisms, and content is safe for general audiences.

Z

Zavod.hr

zavod.hr

47

Zavod.hr is the official website of the Zavod za prostorno uređenje Međimurske županije, a government spatial planning institute serving the Međimurje County in Croatia. The organization focuses on spatial planning and economic zone development within the region, targeting local government entities, businesses, and citizens. The website is built on WordPress using the Divi theme and incorporates SEO and accessibility plugins, reflecting a moderate level of digital maturity. The technical infrastructure is hosted by a Croatian provider with a domain registered since 2012, consistent with the organization's history. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though security headers and explicit policies are lacking. Privacy compliance is limited due to absence of a privacy policy and terms of service, though a cookie consent mechanism is present. Overall, the site is professional, trustworthy, and serves its government function effectively, but could improve compliance and security transparency.

J

Javna ustanova za razvoj Međimurske županije REDEA

redea.hr

48

Javna ustanova za razvoj Međimurske županije REDEA is a Croatian public institution focused on regional development within Međimurje County. It acts as a regional coordinator supporting social, economic, and strategic planning initiatives, primarily funded by government and European Union sources. The website reflects a professional government agency with clear communication channels, project showcases, and public tenders. Technically, the site is built on WordPress using modern libraries and plugins, with good mobile optimization and accessibility features. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and explicit policies could be improved. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. Overall, the site is trustworthy and serves its public institutional role effectively.

I

Invest in ZAGORJE

investinzagorje.hr

45

Invest in ZAGORJE is a regional investment promotion website focused on the Krapinsko-zagorska županija region in Croatia. It promotes the region's strategic advantages, quality of life, entrepreneurial climate, and diverse industrial sectors including tourism, manufacturing, agriculture, and healthcare. The website serves as a portal for investors and businesses seeking information and support for economic development in the region. It features business success stories, news updates, and a contact form for direct inquiries. Technically, the site is built on WordPress with a modern plugin ecosystem including Yoast SEO, WPBakery, and Slider Revolution, ensuring good SEO and user experience. Security measures include HTTPS and Google reCAPTCHA on forms, but lack visible security headers and published privacy or cookie policies, which are recommended for compliance and trust. Overall, the site is professional, content-rich, and trustworthy, but could improve privacy compliance and security transparency.

The website partnerstvo-razvoj.net serves as the official portal for the Zagorska razvojna agencija, a regional development agency focused on employment, education, and entrepreneurship within the Krapinsko-zagorska županija region in Croatia. It provides job listings, scholarship information, public tenders, and educational resources aimed at residents and stakeholders in the region. The site is primarily in Croatian with an English language option, targeting local citizens and regional partners. The business model is that of a government or non-profit entity facilitating regional development and public information dissemination. Technically, the website employs older JavaScript libraries such as jQuery 1.6, Google Analytics for tracking, and some custom scripts for UI elements like menus and pagination. The site appears to be custom-built without a popular CMS. Performance is moderate with basic mobile optimization and accessibility features. SEO is basic but functional. Hosting and domain registration are consistent with a legitimate regional agency, with the domain registered since 2011. From a security perspective, the site uses HTTPS but lacks visible security headers and employs outdated JavaScript libraries that may expose it to vulnerabilities. There is no DNSSEC enabled, and no explicit privacy or security policies are published. The login form is minimal and lacks visible advanced protections. Cookie policy scripts exist but without a clear consent mechanism, indicating partial privacy compliance. Overall, the website is functional and credible for its purpose but has room for improvement in security posture, privacy compliance, and technical modernization. Strategic enhancements in these areas would improve trust and resilience against threats.

O

Obrtnička komora Krapinsko-zagorske županije

okkzz.hr

47

Obrtnička komora Krapinsko-zagorske županije is a regional chamber of trades and crafts in Croatia, affiliated with the national Croatian Chamber of Trades and Crafts. The organization supports local craftsmen and entrepreneurs through education, advocacy, and networking. The website provides event announcements, educational content, and contact information primarily targeting the local business community. Technically, the site runs on an outdated Joomla! 1.5 CMS, which poses security risks, though it uses HTTPS and basic email obfuscation. Security posture is moderate but lacks modern security headers and incident response contacts. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is functional and trustworthy but requires modernization and compliance improvements.

Ž

Županijska uprava za ceste Krapinsko-Zagorske županije

zuc-kzz.hr

56

Županijska uprava za ceste Krapinsko-Zagorske županije is a Croatian government agency responsible for managing county roads within the Krapinsko-Zagorska region. The website serves as an official platform providing information on road maintenance, closures, public procurement, financial plans, and legal documentation. It targets local residents, businesses, and stakeholders involved in regional infrastructure. The business model is that of a public sector entity focused on infrastructure management and transparency. Technically, the website is built on WordPress with common plugins such as WPBakery Page Builder, Contact Form 7, and Slider Revolution. It uses modern web technologies including HTTPS, Google Fonts, and jQuery. The site is moderately performant, mobile-optimized, and accessible, with good SEO practices. However, some improvements can be made in security headers and analytics configuration. From a security perspective, the site enforces HTTPS and uses CAPTCHA for forms, but lacks explicit security headers and a formal security policy or incident response contact. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is indicated by a comprehensive privacy policy and GDPR adherence, though cookie consent mechanisms are missing. Overall, the website is trustworthy and professional, reflecting its government entity status. Strategic recommendations include implementing cookie consent, enhancing security headers, properly configuring analytics, and publishing security and incident response information to improve compliance and security posture.

Z

Zagorje Priroda

zagorje-priroda.hr

54

Zagorje Priroda is a Croatian public institution dedicated to the protection and management of natural protected areas within the Krapinsko-Zagorska County. The organization focuses on environmental conservation, education, research, and public engagement through events and publications. Their website serves as an informative portal for the public and stakeholders, highlighting their activities, projects, and news. The institution is regionally positioned as a key governmental entity for nature protection with a clear mission and community focus. Technically, the website is built on WordPress CMS with common plugins such as WPBakery Page Builder and Slider Revolution. It integrates Google Analytics and Google Tag Manager for traffic and user behavior analysis. The site is mobile-optimized and uses HTTPS, ensuring secure communication. However, some security headers are missing, and the jQuery version is outdated, which could pose minor security risks. From a security and compliance perspective, the website enforces HTTPS and does not expose sensitive data. It provides a comprehensive privacy policy in Croatian, indicating GDPR awareness, though it lacks an explicit cookie consent mechanism. Contact information is clearly presented, including email, phone, and physical address, enhancing trust. No incident response or security policy pages were found, suggesting room for improvement in transparency and readiness. Overall, the website is professional, trustworthy, and serves its purpose well. Strategic improvements in security headers, updating libraries, and implementing cookie consent would enhance its security posture and compliance. The domain registration data aligns well with the organization's claims, supporting legitimacy and credibility.

The website represents the Zavod za prostorno uređenje Krapinsko-zagorske Županije, a Croatian government institute responsible for spatial planning in the Krapinsko-zagorska County. It provides official news, spatial plans, documents, and public information access, targeting local residents, government officials, and urban planners. The site is well-structured with clear navigation and consistent branding, reflecting its role as a regional government authority. Technically, the site uses Bootstrap and jQuery with Google Analytics for visitor tracking. It is served over HTTPS with a cookie consent mechanism compliant with GDPR, although some security headers are missing. No forms or social media links were detected in the analyzed content. WHOIS data confirms the domain's legitimacy and appropriate registration details consistent with a government entity. Overall, the website is professional, trustworthy, and secure with room for improvement in security headers and incident response transparency.

P

Poduzetnički centar Krapinsko-zagorske županije d.o.o.

poduzetnickicentar-kzz.hr

48

Poduzetnički centar Krapinsko-zagorske županije d.o.o. is a regional business support organization based in Croatia, focused on fostering entrepreneurship, innovation, and business growth within the Krapinsko-zagorska County. The center offers a variety of services including project preparation, mentoring, coworking spaces, and specialized programs such as the Health IT Academy and Invest in Zagorje. Their market position is that of a trusted regional facilitator supported by local government and EU initiatives. Technically, the website is built on a modern WordPress platform using Elementor and Yoast SEO plugins, ensuring good SEO and responsive design. The site uses HTTPS with a valid SSL certificate and integrates Google Analytics for visitor tracking. While the site performs moderately well, there is room for improvement in accessibility and security headers. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms, but lacks published security policies, incident response contacts, and security headers which are recommended for enhanced protection. No vulnerabilities or suspicious content were detected. The WHOIS data confirms the domain's legitimacy and consistency with the business's regional focus. Overall, the website is professional, trustworthy, and serves its business purpose well, but could improve privacy compliance and security posture by publishing relevant policies and implementing additional security headers.

Z

Zagorska razvojna agencija

zara.hr

47

Zagorska razvojna agencija (ZARA) is a regional development agency focused on fostering sustainable growth and economic development in Krapinsko-zagorska County, Croatia. The agency acts as a partner for excellence and creativity, supporting local government bodies, public institutions, and businesses through project management, consulting, and strategic planning. It holds recognized certifications such as ISO 9001, ISO 21502, and ISO 26000, and is a member of the UN Global Compact network, underscoring its commitment to sustainability and governance standards. Technically, the website is built on WordPress using Elementor, with modern web technologies including jQuery and Font Awesome. It integrates marketing tools like Brevo for newsletter management and employs accessibility and GDPR compliance plugins. The site demonstrates good mobile optimization, accessibility, and SEO practices, providing a professional user experience. From a security perspective, the site uses HTTPS with strong SSL configuration and implements cookie consent mechanisms. However, explicit security headers are not clearly detected, and there is no dedicated security policy or incident response contact information, representing areas for improvement. No vulnerabilities or exposed sensitive data were found in the analysis. Overall, the website is trustworthy, professionally maintained, and compliant with privacy regulations. It effectively communicates its mission and services to its target audience. Strategic recommendations include enhancing security headers, publishing a security policy, and improving incident response visibility to further strengthen its security posture.

B

Bündnis "Gemeinsam gegen Sexismus"

gemeinsam-gegen-sexismus.de

50

The website 'Bündnis Gemeinsam gegen Sexismus' represents a German government-supported non-profit alliance focused on combating sexism and sexual harassment across various sectors. It provides educational resources, advocacy, and a platform for organizations to join the cause. The site is professionally designed, mobile-optimized, and uses modern web technologies including WordPress and Yoast SEO. It integrates privacy-compliant cookie consent mechanisms and minimal user tracking via Plausible Analytics. Security posture is strong with HTTPS and security headers in place, though explicit security policies and incident response contacts are not published. Overall, the domain registration and website content align well, indicating a legitimate and trustworthy initiative.

K

Kuratorium Deutsche Altershilfe

berufundpflege-nrw.de

48

The website berufundpflege-nrw.de represents a government-supported non-profit program managed by Kuratorium Deutsche Altershilfe, aimed at improving the compatibility of professional work and caregiving responsibilities for employees in North Rhine-Westphalia, Germany. It offers a comprehensive web portal, qualification programs for workplace care guides, a digital care toolkit, and employer branding tools. The program targets companies seeking to support employees with caregiving duties and secure skilled workforce retention. The site is well-positioned regionally with strong institutional backing and partnerships. Technically, the website is built on WordPress with modern plugins such as Yoast SEO, Advanced Custom Fields Pro, and Borlabs Cookie for privacy compliance. It uses Bootstrap for responsive design and integrates Matomo Tag Manager for analytics, reflecting a mature digital infrastructure. The site is mobile-optimized, accessible, and SEO-friendly, though some security headers could be improved. From a security perspective, the site enforces HTTPS and cookie consent mechanisms, with no visible vulnerabilities or exposed sensitive data. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms, which are recommended for enhanced trust and compliance. The WHOIS data is minimal but consistent with the business profile, showing no suspicious patterns. Overall, berufundpflege-nrw.de is a professional, trustworthy, and well-maintained website serving a clear social and governmental mission. Strategic improvements in security headers and transparency around incident response would further strengthen its posture.

I

Instytut Przemysłów Kreatywnych

crpk.pl

48

Instytut Przemysłów Kreatywnych is a Polish government institution dedicated to supporting and developing the creative industries sector. It offers programs such as the Program Wsparcia Gier Wideo and Rozwój Sektorów Kreatywnych, publishes research reports, and promotes Polish creative industries domestically and internationally. The website is professionally designed, uses Joomla CMS, and integrates multiple analytics and tracking tools to monitor user engagement. The institution maintains a clear online presence with official social media channels and comprehensive contact information. Security posture is adequate with HTTPS and cookie consent mechanisms, though improvements are recommended in DNSSEC deployment and security headers. WHOIS data shows inconsistencies in domain creation date, which may be a data error but should be monitored. Overall, the website is trustworthy, compliant with GDPR, and serves its government mandate effectively.

The website www.sp.gov.br is the official digital portal for the Government of the State of São Paulo, Brazil, managed by the Companhia de Processamento de Dados do Estado de São Paulo (Prodesp). It serves as a comprehensive platform providing institutional information, public services, news updates, and communication channels to residents, government employees, and visitors. The site demonstrates a mature digital presence with consistent branding and a clear focus on accessibility and transparency. Technically, the site leverages modern web technologies including jQuery, Bootstrap, FontAwesome, and Slick Carousel, integrated within an IBM WebSphere Portal framework. It employs Google Tag Manager and Microsoft Clarity for analytics and user behavior tracking. The site is mobile-optimized and includes accessibility features such as VLibras for sign language support, reflecting a commitment to inclusive design. From a security perspective, the website enforces HTTPS and provides clear incident response contacts including a CSIRT email. While explicit security headers were not fully visible in the HTML, the overall posture is strong with no exposed sensitive data or vulnerable libraries detected. Privacy and cookie policies are comprehensive and GDPR-compliant, supporting user data protection and transparency. Overall, the website is trustworthy, professionally maintained, and aligned with the expectations for a government portal. It effectively balances user experience, accessibility, and security, making it a reliable resource for its audience.

The website www.charitiesregulator.ie is currently inaccessible due to a Cloudflare Turnstile security challenge page that blocks direct access to content. This prevents extraction of meaningful business, contact, or policy information. The domain appears to be associated with a government or non-profit entity in Ireland, but no WHOIS data or registrant details are available to confirm legitimacy or domain age. The site uses Cloudflare services for security and performance, but no visible privacy, cookie, or terms of service policies are present on the challenge page. The lack of accessible content and contact information limits the ability to assess the business model, market position, or technical maturity.

A

Abion AB

spelpaus.se

10

Spelpaus.se is a Swedish government-backed online service that enables individuals to self-exclude from all licensed gambling operators in Sweden. The service is operated by Abion AB and closely affiliated with Spelinspektionen, the Swedish Gambling Authority. It provides a critical public health function by helping users control gambling addiction through a legally binding exclusion period verified by secure identity methods such as BankID and Freja eID+. The website is professionally designed, mobile-optimized, and offers multilingual support including Swedish, English, and Arabic. It includes educational content about gambling addiction and support for relatives of problem gamblers. Technically, the website uses a modern tech stack including Umbraco CMS, Bootstrap framework, and Matomo analytics for user tracking. The site is served over HTTPS with secure forms implementing anti-forgery tokens, ensuring a strong baseline security posture. However, DNSSEC is not enabled and security headers are not explicitly detected, representing areas for improvement. Privacy compliance is supported by clear GDPR documentation, although no cookie consent mechanism is present despite analytics usage. From a security perspective, the site demonstrates good practices such as secure identity verification and no visible vulnerabilities or exposed sensitive data. The domain registration is consistent and transparent, registered to Abion AB since 2015, aligning with the service's operational timeline. No WAF or blocking mechanisms interfere with content access. Overall, the site is trustworthy, safe, and serves an essential government function with a high level of professionalism. Strategically, the site would benefit from implementing cookie consent, publishing explicit security and incident response policies, enabling DNSSEC, and adding security headers to further enhance trust and compliance. These improvements would strengthen the security posture and privacy compliance, supporting the site's critical role in responsible gambling in Sweden.

R

Rijksoverheid

cruksregister.nl

64

The website cruksregister.nl is an official Dutch government platform managed by Rijksoverheid, providing the Central Register Exclusion Gambling (CRUKS) service. It enables Dutch residents to register a gambling stop to control their gambling behavior, supported by multiple contact channels and comprehensive informational content. The site is well-positioned as the authoritative source for gambling exclusion in the Netherlands, with a clear focus on public service and support.

H

Hagstofa Íslands

tekjusagan.is

51

Tekjusagan is a government-operated interactive tool managed by Statistics Iceland and the Prime Minister's Office of Iceland. It provides accessible visualizations of income, assets, and demographic data spanning over 25 years, aimed at the general public and policymakers. The website is positioned as an authoritative source for income and living standards data in Iceland, supporting government decision-making and public transparency. Technically, the site uses AngularJS 1.7.2, Bootstrap 4.1.3, and jQuery, hosted on Microsoft Azure DNS infrastructure. While the site is functional and mobile-optimized, it uses somewhat dated frameworks and lacks modern security headers and DNSSEC, which are recommended improvements. Security posture is moderate with no critical vulnerabilities detected, but privacy compliance is weak due to missing privacy and cookie policies and absence of consent mechanisms. The site employs Google Analytics and Tag Manager for user tracking without visible consent banners, which may pose compliance risks. Overall, the domain registration and WHOIS data align well with the government entity, supporting high legitimacy and trustworthiness.