Transportation security reports

The Commercial Vehicle Show website represents a major UK event focused on road freight, transport, distribution, and logistics solutions. It serves as a platform for industry professionals to connect, learn, and showcase innovations driving decarbonisation and digital transformation. The site is well-branded and content-rich, targeting fleet managers, manufacturers, and policy-makers. Technically, the site uses modern JavaScript libraries, HubSpot marketing tools, and analytics pixels from major platforms, indicating a mature digital marketing infrastructure. Security posture is generally good with HTTPS enforced and cookie consent implemented, though explicit security headers are not detected and WHOIS data is missing, which reduces domain trustworthiness. Overall, the site is professional and trustworthy from a content and marketing perspective but would benefit from improved transparency in domain registration and enhanced security headers.

The website nasar.org represents NASAR, an established organization likely operating in the transportation or rescue sector, as indicated by the domain and WHOIS data. The domain is long-standing, created in 1995, and registered under Network Solutions, LLC with no privacy protection, indicating transparency and legitimacy. However, the website content is currently inaccessible due to a web application firewall or bot protection mechanism, which blocks direct content access and prevents a full analysis of the site's offerings, policies, and technical infrastructure. From the limited data, the technical infrastructure includes third-party captcha delivery services, but no further technologies or CMS platforms are detectable. The lack of visible content, metadata, or contact information severely limits the ability to assess the website's digital maturity, user experience, and compliance posture. Security posture cannot be fully evaluated, but the absence of DNSSEC and security headers is noted as an area for improvement. Overall, the site presents a low risk in terms of content safety, with no adult or explicit material detected. The domain registration data supports the legitimacy of the organization, but the lack of accessible content and policies reduces trust and professional appearance. Strategic recommendations include enabling DNSSEC, publishing privacy and cookie policies, improving security headers, and providing clear contact and incident response information to enhance trust and compliance.

M

Mezzo Technologies

mezzotechnologies.com

53

Mezzo Technologies is a specialized engineering and manufacturing company focused on custom microtube heat exchangers designed for extreme performance in demanding industries such as aerospace, military, automotive racing, and modular nuclear applications. The company operates as a part of Signia Aerospace, leveraging a strong parent company relationship to enhance its market position. Their website reflects a mature business with detailed product offerings, clear market segmentation, and a professional digital presence. Technically, the site is built on WordPress with Elementor and includes modern SEO and analytics tools, indicating a moderate to advanced digital maturity. Security posture is good with HTTPS and domain transfer protections, though improvements such as DNSSEC and enhanced security headers are recommended. Privacy compliance is partially addressed with a comprehensive privacy policy but lacks a cookie consent mechanism. Overall, the business demonstrates high credibility and trustworthiness with no critical security issues detected.

International Water-Guard (IWG) is a Canadian-based company specializing in potable water treatment and distribution solutions for business and commercial aircraft. With over 30 years of industry experience, IWG positions itself as a leading provider of flight-certified water treatment units, pumps, heaters, and touchless lavatory technologies. The company targets aircraft manufacturers and operators seeking innovative and sustainable water management solutions to enhance passenger experience and comply with environmental standards. Technically, the website is built on a modern WordPress platform using Bootstrap and jQuery, with integrations such as Google Analytics and reCAPTCHA to support analytics and security. The site demonstrates good mobile optimization, SEO practices, and a professional design, although some accessibility features could be improved. The absence of explicit privacy and cookie policies suggests room for enhancement in compliance. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms, but lacks visible security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the content. The WHOIS data is unavailable, which limits domain trust verification, but the website's certifications and social media presence support its legitimacy. Overall, the website is professional and trustworthy with moderate technical maturity and security posture. Strategic improvements in privacy compliance, security headers, and domain registration transparency would enhance trust and compliance.

H

Hartzell Aviation

hartzellaviation.com

51

Hartzell Aviation is a prominent aviation company that unites leading general aviation manufacturers, suppliers, and service providers under a family of brands. With a rich heritage dating back to the Wright Brothers era and subsidiaries founded as early as 1917, the company focuses on innovation, quality, and performance in the general aviation sector. Their services span advanced aircraft propeller design, engine accessories, aerospace welding, and maintenance, repair, and overhaul (MRO) operations. The website reflects a professional and consistent brand image targeting aviation professionals and aircraft operators worldwide. Technically, the website is built on WordPress with modern plugins for SEO and analytics, hosted behind Cloudflare DNS. It demonstrates good mobile optimization and SEO practices but lacks some advanced security headers and DNSSEC implementation. The site uses HTTPS and has a cookie consent mechanism aligned with GDPR requirements, although a dedicated privacy policy page was not found in the provided content. From a security perspective, the site benefits from HTTPS and domain transfer protection but could improve by enabling DNSSEC and adding security headers. No critical vulnerabilities or WAF blocks were detected. Contact information is clearly presented, including phone numbers and a contact form with anti-spam measures. Social media presence on major platforms adds to trustworthiness. Overall, Hartzell Aviation's website is a well-structured, professional platform that effectively communicates its business and brand values. Enhancements in privacy policy visibility and security headers would further strengthen its compliance and security posture.

Cleveland Wheel & Brake Systems is a globally recognized manufacturer specializing in aircraft braking products, systems, and services. As a part of Signia Aerospace, the company leverages over 85 years of industry experience to serve general aviation, turboprop, business jet, rotorcraft, and military markets. Their product portfolio includes wheel assemblies, brake assemblies, hydraulic components, and repair kits, supported by comprehensive technical publications and resources. The website reflects a professional and well-branded digital presence, targeting aerospace manufacturers, mechanics, and pilots.

A

AUTO BILD

autobild.de

63

AUTO BILD operates a comprehensive German-language automotive portal offering test reports, car market listings, and buying advice. The website serves a large audience of automotive consumers and enthusiasts, providing extensive content including news, reviews, and a used car marketplace with over 700,000 listings. The platform is well-positioned in the German automotive media sector with a strong brand presence and professional digital infrastructure. Technically, the website employs modern JavaScript frameworks (likely Vue.js), uses a robust CDN and DNS provider (Akamai), and integrates advanced consent management for GDPR compliance. The site is mobile-optimized, fast-loading, and SEO-friendly, reflecting a mature digital presence. From a security perspective, the site enforces HTTPS, uses security headers, and manages user consent effectively. However, it lacks publicly accessible privacy policies, terms of service, security policies, and incident response contacts, which are important for compliance and user trust. No critical vulnerabilities or suspicious WHOIS patterns were detected, indicating a legitimate and secure operation. Overall, AUTO BILD's website is a professional, trustworthy, and content-rich platform with room for improvement in transparency and compliance documentation.

M

Meeker Aviation

meekeraviation.com

58

Meeker Aviation is a specialized manufacturer and supplier of customizable external payload mounts for helicopters and fixed-wing aircraft. The company positions itself as a top choice in the aviation sector, serving OEM providers and operators with innovative, flexible, and reliable payload mounting solutions. The website reflects a professional and consistent brand image with clear product categorization and partner affiliations. Technically, the site is built on WordPress with WooCommerce and Elementor, leveraging modern SEO and analytics tools such as Yoast SEO and Google Tag Manager. Performance and mobile optimization are good, though accessibility is basic. Security posture is adequate with HTTPS enabled and domain transfer protections, but lacks advanced security headers and incident response disclosures. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the website is trustworthy and professionally maintained but would benefit from enhanced compliance and security transparency.

L

Lifesaving Systems

lifesavingsystems.com

56

Lifesaving Systems is a well-established company specializing in the manufacture and supply of rescue, safety, and survival equipment primarily for Search & Rescue responders in the Aviation and Marine sectors. With over 43 years of industry presence, the company positions itself as a premier supplier globally. The website reflects a professional business model targeting both industry professionals and SAR responders, leveraging a B2B and B2C approach. The company maintains partnerships with several related aerospace and safety technology firms, enhancing its market reach and product offerings. Technically, the website is built on a modern WordPress platform using WooCommerce for e-commerce capabilities and Elementor for page building. The site employs standard web technologies including jQuery and Google Fonts, and integrates Google Analytics via MonsterInsights for visitor tracking. The site is hosted behind Cloudflare DNS but does not use DNSSEC, and the SSL configuration is good, ensuring secure HTTPS connections. The website demonstrates good SEO practices with comprehensive metadata and structured data, although accessibility features are basic. From a security perspective, the site uses HTTPS and has domain transfer protections in place. However, it lacks DNSSEC and explicit security headers, which are recommended for enhanced security. No privacy or cookie policies were detected, which is a compliance gap especially for GDPR and similar regulations. No incident response or vulnerability disclosure information is publicly available, indicating room for improvement in transparency and security posture. Overall, the website is professional and trustworthy with a strong business credibility score. The main risks relate to privacy compliance and security best practices. Strategic improvements in these areas would enhance user trust and regulatory compliance.

A

ACE Thermal Systems

acethermalsystems.com

59

ACE Thermal Systems is a medium-sized aerospace company specializing in the design, engineering, manufacturing, and support of high-performance environmental control systems and thermal management solutions for aircraft. The company positions itself as a responsive and agile partner to aerospace OEMs, offering a comprehensive range of services from product development to FAA certification support. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to the aerospace industry. Technically, the site is built on WordPress with Elementor and uses modern web technologies, though some improvements in security headers and privacy compliance are recommended. Security posture is generally good with HTTPS enabled and domain registration consistent with the business profile. However, the absence of explicit privacy and cookie policies and lack of security headers are areas for improvement. Overall, the website is safe, trustworthy, and well-structured, supporting the company’s market position as a specialized aerospace solutions provider.

S

Signia Aerospace

signiaaerospace.com

59

Signia Aerospace is a medium-sized, global integrated provider specializing in highly technical aircraft systems and components for the aerospace industry. Founded in 2022, the company operates multiple specialized brands covering thermal management, mission equipment, cargo handling, and other aerospace solutions. Their business model focuses on partnering with aircraft OEMs and operators to deliver engineering, manufacturing, and support services. The website reflects a professional and consistent brand image with clear navigation and relevant content targeting aerospace industry professionals. Technically, the website is built on WordPress using Elementor and Yoast SEO, with Google Analytics and Tag Manager for tracking. The site is mobile optimized and performs moderately well, though accessibility features are basic. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks security headers and DNSSEC. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the security posture is moderate with no critical vulnerabilities detected, but improvements are recommended in security headers, privacy policies, and incident response information. The domain WHOIS data is consistent with the business claims, showing a legitimate registration matching the company's founding date. No adult or questionable content is present, making the site safe for general audiences.

G

G-car s.r.o.

g-4f.cz

44

The website www.g-4f.cz serves as a wholesale vehicle sales portal operated by G-car s.r.o., targeting wholesale buyers in the transportation sector within the Czech Republic. The site is primarily a login portal for wholesale customers, with minimal public-facing content describing the business. The technical infrastructure is based on VARIO CMS 1.0 with standard JavaScript and CSS assets. The site shows basic mobile optimization and accessibility but lacks advanced SEO and content richness. From a security perspective, the site lacks visible HTTPS enforcement and security headers, which are critical for protecting user credentials and data. The absence of privacy and cookie policies indicates non-compliance with GDPR and other privacy regulations. The WHOIS data is missing or unavailable, which raises concerns about domain legitimacy and trustworthiness. No contact emails, phone numbers, or social media profiles are publicly listed, limiting transparency. Overall, the website demonstrates a basic digital presence with significant gaps in security posture and privacy compliance. The lack of WHOIS data and security best practices lowers the trust score and increases risk. Strategic improvements in security, privacy policies, and transparency are recommended to enhance business credibility and user trust.

A

Autotrip.cz

autotrip.cz

56

Autotrip.cz is a Czech automotive magazine providing news, advice, and tools for drivers and car enthusiasts. The website offers content such as traffic signs, insurance information, driving tips, and automotive tests, targeting the Czech market. The business operates as a niche online media platform with a small company size and a founding date in 2014. Technically, the site is built on WordPress with Elementor and Yoast SEO, hosted via a Czech registrar and using Cloudflare DNS. The site employs HTTPS with good SSL configuration and integrates Google Adsense and Facebook Pixel for advertising and tracking. However, it lacks explicit privacy and cookie policies, which impacts its privacy compliance score. Security posture is moderate with room for improvement in security headers and incident response disclosures. Overall, the website is professional and trustworthy but should enhance privacy and security transparency to improve compliance and user trust.

T

Textron Inc.

textron.com

69

Textron Inc. is a large, diversified industrial company with a strong presence in aerospace, defense, and specialized vehicles. Founded in 1923, it operates multiple business segments including Bell, Textron Aviation, and Textron Systems. The company targets investors, customers in transportation and defense sectors, and job seekers. The website reflects a mature digital presence built on Drupal 10, with modern analytics and tracking tools integrated. It features comprehensive corporate, investor, and career information, supported by consistent branding and professional design. From a security perspective, the website enforces HTTPS and includes a Content Security Policy, along with cookie consent mechanisms indicating GDPR compliance. However, additional security headers and a vulnerability disclosure policy are absent, representing areas for improvement. The WHOIS data is unavailable or obscured, which is unusual for a public company domain but does not detract significantly from the overall trustworthiness given the extensive corporate content and social media presence. Overall, the website demonstrates a strong business credibility and technical maturity, with good privacy compliance and a solid security posture. The absence of direct contact emails and phone numbers suggests reliance on contact forms and social media channels for communication. The site is safe for general audiences with no adult or questionable content detected.

G

Gumi-teszt.eu

gumi-teszt.eu

55

Gumi-teszt.eu is a Hungarian-language tire review and test aggregation website providing extensive user-generated and expert test data for summer, winter, and all-season tires. The platform targets vehicle owners and drivers seeking reliable tire information to make informed purchasing decisions. It aggregates official test results from reputable sources such as ADAC and AutoBild and supplements these with user reviews. Technically, the site uses standard web technologies including Google Analytics and Adsense for tracking and monetization, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks some advanced security headers and explicit security policies. Privacy compliance is basic, with a cookie policy present but no detailed privacy or incident response policies. WHOIS data is unavailable due to EURid privacy restrictions, which is typical for EU domains and does not raise legitimacy concerns. Overall, the site is professional and trustworthy within its niche but could improve transparency and security practices.

T

Testy-Pneumatik.sk

testy-pneumatik.sk

52

Testy-Pneumatik.sk is a Slovak online portal specializing in tire reviews and expert test aggregations, targeting motorists seeking detailed information on summer, winter, and all-season tires. The site offers extensive user-generated reviews, official test summaries from ADAC and AutoBild, and search functionalities by vehicle, tire size, and manufacturer. Technically, the site employs standard web technologies including JavaScript, jQuery, Google Tag Manager, and Facebook SDK, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though it lacks advanced security headers and explicit incident response policies. Privacy compliance is basic, with a cookie policy present but no active consent mechanism. Overall, the site is trustworthy and professionally maintained, serving a niche automotive audience effectively.

R

Ranking-opon.eu

ranking-opon.eu

58

Ranking-opon.eu is a Polish-language niche content platform specializing in tire rankings and user reviews, aggregating thousands of tire evaluations and official test results such as ADAC and AutoBild. The website targets drivers and vehicle owners in Central Europe seeking detailed and transparent tire information to aid purchase decisions. The business model revolves around user-generated content combined with expert test data, supported by advertising revenue through Google Adsense and retargeting services. The site is small in scale but maintains consistent branding and good content quality.

G

G-car s.r.o.

g-car.cz

50

G-car s.r.o. is a Czech Republic-based luxury car dealership specializing in new, demo, and reference vehicles from premium brands such as Audi, BMW, Mercedes-Benz, Volkswagen, and Škoda. Established in 2008, the company offers a comprehensive range of services including vehicle sales, a unique SMART financing system tailored for entrepreneurs, and a fully equipped autoservice for vehicles up to 3.5 tons. The business maintains a strong local presence in České Budějovice and Boršov nad Vltavou, supported by positive customer reviews and a professional online presence. Technically, the website is built on VARIO CMS 3.0, employing modern web technologies with asynchronous script loading and responsive design for mobile users. While the site performs moderately well, there is room for improvement in accessibility and SEO optimization. The absence of some security headers and explicit cookie consent mechanisms indicates partial compliance with best security and privacy practices. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data, but lacks visible incident response policies or vulnerability disclosure information. The WHOIS data is unavailable, which slightly impacts trustworthiness, though the business information and external trust signals mitigate this concern. Overall, the site presents a secure and professional front with minor gaps in privacy compliance and security transparency. Strategically, G-car s.r.o. should focus on enhancing security headers, implementing explicit cookie consent, and publishing incident response and vulnerability disclosure policies to strengthen trust and compliance. These improvements will support sustained growth and customer confidence in a competitive luxury automotive market.

Centrum pro rozvoj dopravních systémů – RODOS is a Czech research platform focused on the modeling, management, and optimization of future transportation systems. It collaborates with academia, private companies, and government agencies to provide research outputs and applications such as ViaRODOS and Meteo RODOS. The website presents basic content describing its mission and services, targeting professionals and stakeholders in transportation research. Technically, the site uses an older ASP.NET Web Forms framework with jQuery 2.1.1 and minimal modern web features. Security posture is moderate with no visible advanced security headers or policies, and no privacy or cookie policies are present, indicating compliance gaps. The domain is well-established since 2012, consistent with the organization's history, and no suspicious WHOIS patterns were found.

W

WDF s.r.o.

omnetic.com

73

Omnetic, operated by WDF s.r.o., offers a comprehensive digital dealership management system tailored for automotive dealers and garages. The platform provides a wide range of services including new and used car sales tools, vehicle pricing, sourcing, insurance, CRM, workshop management, and more. With over 30 years of experience and more than 1,500 customers, Omnetic positions itself as a mature player in the automotive SaaS market. The website is professionally designed, mobile-optimized, and integrates multiple third-party services to enhance functionality and user experience. Technically, the site employs modern JavaScript frameworks, Google Tag Manager for analytics, and a robust cookie consent mechanism ensuring GDPR compliance. Security posture is solid with HTTPS enforced and no exposed sensitive data, though the absence of a published security policy and incident response details suggests room for improvement. The WHOIS data for the domain is missing, which raises concerns about domain legitimacy and registration transparency. Overall, the website is trustworthy and professional but would benefit from enhanced transparency regarding domain registration and security policies.

T

Teas spol. s r.o.

skladovevozy.cz

51

Skladovevozy.cz is an established Czech online marketplace specializing in the sale of new, demo, and reference vehicles from authorized dealers across the Czech Republic. The platform offers a wide range of vehicle brands and models, targeting consumers and businesses seeking stock vehicles with minimal mileage. The business is operated by Teas spol. s r.o., a company founded in 2011, with a clear presence and legitimacy supported by consistent WHOIS data and company registration details. Technically, the website employs a custom-built platform using jQuery and other JavaScript libraries, integrates Google Analytics for tracking, and uses CookieFirst for GDPR-compliant cookie consent management. The site is served over HTTPS, ensuring secure data transmission. Security posture is moderate with room for improvement in security headers and updated libraries. Privacy compliance is supported by a cookie consent banner and a basic user rules PDF document. Overall, the website presents a professional and trustworthy front for its niche automotive market.

A

Autopůjčovna Taggart

taggart.cz

53

Autopůjčovna Taggart is a well-established car rental company based in Prague, Czech Republic, operating since 2010. It offers a wide range of rental vehicles including short-term, long-term, flexible monthly rentals, and specialized vehicles such as minibuses and luxury cars. The company positions itself as one of the largest and most trusted car rental providers in the region, supported by numerous positive customer reviews and multiple awards. Their business model focuses on customer convenience, transparent pricing, and comprehensive service including insurance and roadside assistance. Technically, the website is built on modern frameworks like Bootstrap and uses popular analytics and marketing tools such as Google Tag Manager, Smartlook, and Microsoft UET. The site is mobile-optimized, accessible, and SEO-friendly, providing a professional user experience. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. The absence of WHOIS data is a concern but does not outweigh the strong trust signals from the website content and customer feedback. Overall, the company demonstrates a mature digital presence with room for minor security enhancements.

S

Simple Lift s.r.o.

simplelift.cz

48

Simple Lift s.r.o. is a Czech-based company specializing in the sale and servicing of material handling equipment including pallet trucks, forklifts, hand trucks, lifting platforms, and tables. The company operates an e-commerce platform targeting businesses and individuals in the Czech Republic and Slovakia, offering both new and used equipment as well as maintenance services. The website is professionally designed, mobile-optimized, and includes structured data to enhance search engine visibility. Contact information and customer reviews are prominently provided, supporting customer trust and engagement. Technically, the site is built on WordPress with WooCommerce and uses modern libraries such as jQuery and Bootstrap, supported by WP Rocket for performance optimization. Security posture is good with HTTPS enforced and no obvious vulnerabilities detected, though additional security headers and incident response information could improve the security maturity. Privacy and cookie policies are present and indicate GDPR compliance. Overall, the website represents a legitimate, medium-sized business with a solid digital presence and good operational transparency.

T

Test-Pneumatik.cz

test-pneumatik.cz

58

Test-Pneumatik.cz is a specialized Czech online portal dedicated to aggregating thousands of tire reviews and expert test results, primarily from ADAC and AutoBild. It serves as a comprehensive resource for drivers seeking detailed information on summer, winter, and all-season tires, including user-generated reviews and ratings. The site targets Czech-speaking vehicle owners and enthusiasts, providing search capabilities by vehicle, tire size, and manufacturer. The business model appears to be content-driven with monetization likely through advertising and affiliate partnerships. The website demonstrates consistent branding and a good level of content quality, supported by structured data and social media presence. Technically, the site employs a modern JavaScript stack including jQuery, Facebook SDK, Google Tag Manager, Microsoft Clarity, and Smartlook for analytics and user behavior tracking. The site is mobile-optimized with good SEO practices and moderate performance. However, there is room for improvement in accessibility and security headers implementation. HTTPS is enforced, ensuring secure communication. From a security perspective, the site shows a solid posture with no visible vulnerabilities or exposed sensitive data. The use of multiple tracking and advertising scripts indicates extensive user data collection, but privacy compliance is basic with a cookie policy present but lacking explicit consent mechanisms. No terms of service or security policy pages were found, and no direct contact information is provided, which may impact user trust. WHOIS data is unavailable, likely due to privacy protection, but the site’s content and external signals suggest legitimacy. Overall, Test-Pneumatik.cz is a credible and useful resource within its niche, with a good balance of content and technical implementation. Strategic improvements in privacy compliance, security headers, and transparency of business contact information would enhance trust and security posture.

T

Toman Motors

tomanmotors.com

65

Toman Motors is a Czech Republic-based specialist in American and sports cars, offering import, sales, and servicing with a focus on exclusive brands such as Hennessey. The company positions itself as a premium provider with over a decade of market presence and a comprehensive portfolio of vehicles and automotive services. The website is professionally designed, mobile-optimized, and integrates modern analytics and consent management tools, reflecting a mature digital infrastructure. Security posture is generally good with HTTPS and cookie consent mechanisms, though the absence of explicit security policies and incident response information suggests room for improvement. A notable concern is the lack of WHOIS domain registration data, which impacts trust and legitimacy assessments. Overall, the site presents a credible business front but would benefit from enhanced transparency and security disclosures.

HUKR spol. s r.o. is a small Czech company specializing in the sale, service, and restoration of classic and veteran cars, primarily Toyota, Lexus, and Hyundai brands. Established in 1994, the company has a strong local presence in Brno and offers specialized veteran car renovation services with over two decades of experience. The website provides basic business information and contact details but lacks modern digital maturity features such as privacy policies, HTTPS, and advanced security measures. The technical infrastructure relies on basic HTML, CSS, and JavaScript libraries like jQuery and Modernizr, with no detected CMS or advanced frameworks. Security posture is weak due to missing HTTPS and security headers, and privacy compliance is minimal with no cookie or privacy policies. Overall, the website serves its purpose as a business brochure but requires significant improvements in security and compliance to meet modern standards.

Spårvägsmuseet is a well-established museum in Stockholm dedicated to the history and cultural impact of public transportation in the city. The museum offers a variety of exhibitions, guided tours, educational programs, and event hosting services, targeting a broad audience including families, schools, and tourists. The website reflects a mature digital presence with modern technologies such as Next.js and Contentful CMS, hosted on Microsoft Azure, and integrates privacy-compliant analytics via Matomo. Security posture is strong with HTTPS and standard security headers, though DNSSEC is not enabled. The site complies well with GDPR, featuring a comprehensive privacy and cookie policy with user consent mechanisms. Contact information is clearly presented, enhancing business credibility.

W

Waxholmsbolaget

waxholmsbolaget.se

59

Waxholmsbolaget is a well-established regional public transportation operator providing boat travel services throughout the Stockholm archipelago. The company operates under the auspices of Region Stockholm and offers journey planning, ticketing, and customer support services primarily targeting residents and tourists in the region. The website serves as a comprehensive portal for travel information, ticket purchases, and customer service access. Technically, the site is built on a modern React and Next.js framework, hosted on Microsoft Azure, with good mobile optimization and accessibility features. Security posture is solid with HTTPS enforced and no exposed sensitive data, though there is room for improvement in security headers and incident response transparency. Privacy compliance is strong, with clear cookie consent and GDPR-aligned privacy policies. Overall, the site reflects a professional and trustworthy digital presence aligned with its public transportation mission.

U

UITP Summit

uitpsummit.org

63

UITP Summit is a prominent event organizer specializing in public transport sector events, with the 2026 summit scheduled in Dubai. The website serves as a comprehensive platform for event information, including exhibition, congress, networking, sponsorship, and exhibitor opportunities. The site targets professionals and stakeholders in the public transport industry, offering a well-structured and professionally designed user experience. Technically, the website is built on WordPress with modern SEO and analytics tools integrated, including Yoast SEO, Google Analytics, and CookieYes for consent management. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site demonstrates a mature digital presence aligned with its business goals.

The website www.hazardperception.cz is an educational platform focused on improving road safety awareness in the Czech Republic through interactive hazard perception video tests and related articles. It is supported by multiple Czech governmental and safety organizations, indicating a strong partnership ecosystem and trustworthiness in its niche. The platform targets drivers and driving license applicants, aiming to enhance their hazard recognition skills to reduce accidents. Technically, the site is built on a modern React and Next.js stack, with good mobile optimization and a clean user experience. However, it lacks visible privacy and cookie policies, contact information, and security headers, which are areas for improvement. The absence of WHOIS data reduces transparency but does not detract significantly from the site's legitimacy given its public and governmental backing. Overall, the site presents a professional and trustworthy educational resource with moderate technical and security maturity.

The website www.noveotazky.cz serves as an educational platform focused on providing new test questions and traffic situation scenarios for driver license applicants in the Czech Republic. It is supported by reputable organizations including the Czech Insurers' Bureau and various government and road safety partners, positioning it as a niche but trusted resource in the transportation education sector. The site targets individuals preparing for driving tests and aims to enhance road safety awareness through interactive content such as hazard perception video sequences. From a technical perspective, the site employs modern JavaScript frameworks, likely Vue.js, and is built on a Laravel backend, as indicated by route and sanctum references. It integrates Google Tag Manager for analytics and uses libraries like SweetAlert2 and NProgress for UI enhancements. The site is mobile-optimized with good design quality and navigation clarity, though accessibility features are basic. Performance is moderate, with room for improvement in SEO and accessibility. Security-wise, the site enforces HTTPS and includes CSRF tokens, but lacks visible security headers and explicit privacy or cookie policies. No vulnerability disclosures or incident response contacts are provided, which could be improved to enhance trust and compliance. The absence of WHOIS data limits domain legitimacy verification, though the presence of partner logos and contact email supports credibility. Overall, the website is a well-designed, functional educational resource with a solid business foundation but could benefit from enhanced privacy compliance, security best practices, and transparency to improve trust and regulatory adherence.

S

Start Driving

startdriving.cz

54

Start Driving is a Czech Republic-based educational project focused on enhancing the knowledge, responsibility, and driving skills of novice drivers. Supported by the Association of Driving Schools of the Czech Republic and other partners including government bodies, the project offers free advanced driver training and educational activities for young drivers, driving instructors, and responsible parents. The website reflects a well-structured initiative with strong institutional backing and a clear mission to improve road safety through education. Technically, the website is built on WordPress and integrates modern tools such as Google Tag Manager, Google Analytics, and YouTube embeds. It implements a cookie consent mechanism compliant with GDPR requirements, although a dedicated privacy policy page is not clearly found. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. However, some security headers are missing, and the Google Maps API key is exposed in the source code, which should be reviewed for restrictions. From a security perspective, the site uses HTTPS and has no visible critical vulnerabilities or exposed sensitive data. The cookie consent mechanism and partner trust signals enhance its compliance posture. The absence of WHOIS registrant data limits domain trust assessment but does not detract significantly from the overall legitimacy given the project's nature and partnerships. Overall, Start Driving presents a credible, well-supported educational platform with moderate technical maturity and good security practices. Strategic improvements in privacy policy transparency and security header implementation are recommended to enhance compliance and trust further.

R

Ráj aut

rajaut.cz

53

Ráj aut is a Czech Republic based online automotive classifieds platform specializing in car advertisements, sales, and bazaar listings. The website offers a comprehensive search and filter system for vehicles, targeting car buyers and sellers primarily within the Czech market. It maintains a moderate market position with partnerships to related automotive sites and services. Technically, the site uses standard web technologies including Google Analytics, Google Tag Manager, Google Adsense, and Adform for advertising and tracking. The site is served over HTTPS, ensuring secure data transmission, but lacks some advanced security headers and has only basic mobile optimization. Privacy and cookie policies are present but could be more explicit and comprehensive. No WHOIS data was retrievable, which slightly impacts trustworthiness but the site content and business presence indicate legitimate operation. Overall, the website is functional, moderately secure, and serves its niche audience effectively.

R

Ráj veteránů

rajveteranu.cz

55

Ráj veteránů is a specialized online classifieds platform focused on vintage and classic vehicles primarily serving the Czech Republic market. The website offers a comprehensive vehicle listing service with detailed search filters, partner promotions, and community engagement through a Facebook group. The business operates as a niche marketplace catering to classic car enthusiasts and sellers, with a business model centered on advertising and listing fees. Technically, the site employs modern web technologies including Google Fonts, Google Analytics, and Adform for advertising and tracking, with HTTPS and security headers implemented to ensure secure user interactions. Privacy compliance is addressed with cookie consent mechanisms and a privacy policy, though direct contact information is limited to a contact form. The absence of WHOIS data limits domain trust assessment, but the website's professional presentation and active content suggest legitimacy. Overall, the site demonstrates a good balance of content quality, technical implementation, and security posture, making it a reliable resource for its target audience.

S

Sportovní vozy

sportovnivozy.cz

55

Sportovní vozy is a Czech online platform specializing in the listing and sale of sports cars. It offers classified ads, dealer catalogs, automotive news, and advertising opportunities primarily targeting car enthusiasts and buyers in the Czech Republic and Slovakia. The website has been active since at least 2007, indicating a stable presence in its niche market. The business model revolves around providing a marketplace for sports car sales and monetizing through advertising and partnerships. Technically, the website employs common web technologies including Google Analytics, Google Tag Manager, Google Adsense, and Adform for advertising and tracking. The site uses HTTPS and Google Fonts, but lacks advanced security headers and explicit privacy or terms of service pages. Mobile optimization and accessibility are basic, with room for improvement. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism compliant with GDPR principles. However, the absence of WHOIS registrant data and missing security headers reduce trustworthiness. No critical vulnerabilities or exposed sensitive data were detected. The site uses extensive user tracking through third-party analytics and advertising services. Overall, the website is functional and professionally designed for its target audience but would benefit from enhanced security practices, clearer privacy disclosures, and improved contact transparency. The domain's WHOIS data is unavailable, which slightly impacts the trust score but does not negate the site's legitimacy based on content and longevity.

C

CCAM

ccam.eu

51

CCAM is a European partnership focused on advancing Connected, Cooperative and Automated Mobility through coordinated research and innovation efforts. The organization acts as a platform for over 200 members from industry, research, and public sectors to collaborate on Horizon Europe projects and other initiatives. The website reflects a professional and well-structured digital presence, leveraging modern web technologies and SEO best practices to communicate its mission and activities effectively. Technically, the site is built on WordPress with a robust tech stack including jQuery, Owl Carousel, and Google Analytics, ensuring good performance and mobile optimization. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is limited by the absence of visible privacy and cookie policies, which should be addressed to enhance user trust and regulatory adherence. Overall, the domain is privacy protected as per EURid policies, consistent with legitimate EU organizations. The site is safe for general audiences and does not contain any adult or questionable content.

R

Region Stockholm

sl.se

62

SL (Storstockholms Lokaltrafik) operates the public transportation network in Stockholm County, Sweden, providing metro, bus, train, tram, and boat services. The website serves as a comprehensive portal for travel planning, ticketing, traffic updates, and customer support, targeting residents and visitors of Stockholm. The business is a large, government-affiliated entity with a strong market position as the primary transit provider in the region. The website content is rich, professionally presented, and accessible, supporting multiple languages and accessibility needs. Technically, the site is built on modern web technologies including React and Next.js, hosted on Microsoft Azure with good performance and mobile optimization. The use of Contentful CMS is inferred, enabling dynamic content management. Security practices include HTTPS enforcement, standard security headers, and cookie consent mechanisms, although DNSSEC is not enabled and no explicit security.txt or incident response contacts are published. The security posture is strong with no evident vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies, GDPR adherence, and user consent mechanisms. Business credibility is high, supported by official regional government affiliation, clear contact channels, and trust signals such as social media presence and comprehensive content. Overall, SL.se is a trustworthy, well-maintained, and user-friendly website that effectively supports its public transportation mission. Minor improvements could include enabling DNSSEC, publishing a security.txt file, and providing explicit incident response contacts to further enhance security transparency and readiness.

A

Autoškolský ombudsman

autoskolsky-ombudsman.cz

50

The website 'Autoškolský ombudsman' serves as an independent advisory and mediation portal focused on driving schools and related stakeholders in the Czech Republic. It is a joint project of two professional associations representing driving schools, providing free expert advice, mediation services, and legislative input collection. The site targets driving school students, instructors, examiners, and operators, positioning itself as a niche expert resource within the transportation and education sectors. The business model is non-profit, funded initially by sponsorships and planned contributions from driving schools. Technically, the site employs a modern but basic technology stack including Bootstrap, jQuery, and Google Analytics. The design is professional and mobile-optimized with clear navigation and consistent branding. However, the site lacks advanced accessibility features and comprehensive SEO optimization. No CMS or hosting provider details were detected. From a security perspective, the site uses HTTPS and avoids exposing sensitive data, but lacks visible security headers and formal privacy or cookie policies. No incident response or security contact information is provided. The absence of WHOIS data for the domain reduces trustworthiness, although the site content and partner affiliations support legitimacy. Tracking via Google Analytics is present, but privacy compliance is minimal. Overall, the website is functional and professional but would benefit from enhanced security practices, privacy compliance, and domain registration transparency to improve trust and compliance posture.

R

R.A.C.E.

race.pt

61

R.A.C.E. is a small Portuguese company specializing in the promotion, advertising, and rental of competition vehicles, particularly classic and historic racing cars. The company has a notable presence in national classic car racing championships and offers services targeting motorsport enthusiasts and sponsors. The website reflects a focused business model with clear content about their vehicles and achievements, supported by active social media channels. Technically, the site uses modern web technologies including HTTPS, service workers for PWA capabilities, and a responsive design, although some SEO and accessibility features could be improved. Security posture is adequate with HTTPS and cookie consent, but lacks advanced security headers and incident response information. Privacy compliance is weak due to the absence of a privacy policy and terms of service. Overall, the site is professional and trustworthy but would benefit from enhanced compliance and security transparency.

U

UITP

uitp.org

70

UITP is a globally recognized international association dedicated to public transport authorities, operators, policy makers, scientific institutes, and sector service providers. It champions sustainable urban mobility and serves as a comprehensive network for all public transport stakeholders worldwide. The website reflects a mature digital presence with a modern tech stack including Vue.js and WordPress, supported by Cloudflare for hosting and security. The site is well-structured, mobile-optimized, and rich in content, offering resources, events, training, and membership services. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies could be enhanced. WHOIS data is unavailable due to privacy protection, which is justified for this type of organization. Overall, UITP presents a trustworthy, professional, and authoritative online presence in the transportation sector.

D

DMSB – Deutscher Motor Sport Bund e.V.

bahnsport-deutschland.de

57

Bahnsport Deutschland is the official website for the German motor sports federation's Bahnsport discipline, operated by the Deutscher Motor Sport Bund e.V. The site serves as a comprehensive information hub for enthusiasts, athletes, and clubs involved in motor sports in Germany, providing news, event schedules, results, and official documents. The website demonstrates a solid market position as a national governing body platform with a clear focus on accessibility and user experience. Technically, the site is built on TYPO3 CMS, employs modern web standards, and integrates accessibility tools to support diverse user needs. Security posture is strong with HTTPS enforcement, security headers, and bot protection via Google reCAPTCHA, though explicit security policies and incident response contacts are not published. Overall, the site is professional, trustworthy, and compliant with GDPR, though improvements could be made in transparency around security and vulnerability disclosures.

A

ADAC Südbayern e.V.

motorsport-suedbayern.de

57

ADAC Motorsport Südbayern is a regional non-profit organization focused on motorsport activities, youth engagement, and club services within the Südbayern region of Germany. The website serves as a portal for information, event registration, and community engagement for motorsport enthusiasts and local clubs. It leverages TYPO3 CMS with modern SEO and consent management tools to provide a professional and compliant digital presence. The site demonstrates good technical infrastructure with moderate performance and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. No critical vulnerabilities or suspicious activities were detected. Overall, the website is trustworthy and well-positioned to serve its target audience effectively.

T

Traficon Oy

traficon.fi

54

Traficon Oy is a Finnish specialist company focused on traffic planning and transportation consulting. Their website presents a professional image with clear contact details and a focus on expert services in traffic safety and planning. The company targets municipalities, infrastructure planners, and transport authorities, positioning itself as an established player in the Finnish transportation sector. Technically, the website is built on WordPress using popular plugins such as WPBakery Page Builder and Slider Revolution, with integration of Google Tag Manager and Cookiebot for analytics and privacy compliance. Security posture is strong with HTTPS enforced and appropriate security headers, alongside a comprehensive cookie consent mechanism that aligns with GDPR requirements. However, the site lacks explicit security policies and incident response contacts, which could be improved to enhance trust and compliance. Overall, the website is well-designed, mobile-optimized, and trustworthy, reflecting a mature digital presence for a small-sized professional services firm.

H

Harley-Davidson® Praha

harley-davidson-praha.cz

51

Harley-Davidson® Praha is an established authorized dealer and service center for Harley-Davidson motorcycles located in Prague, Czech Republic. Founded in 2005, the company offers a comprehensive range of services including new and used motorcycle sales, rentals, authorized servicing, and retail of branded clothing and accessories. The website reflects a strong brand presence with consistent Harley-Davidson branding and a clear focus on motorcycle enthusiasts and potential buyers in the local market. The business model integrates retail, service, and event engagement, positioning it as a key player in the regional motorcycle retail sector. Technically, the website employs modern JavaScript libraries such as jQuery and Glide.js for UI components, integrates Facebook SDK and Google Tag Manager for marketing and analytics, and uses Google reCAPTCHA for form security. Hosting is provided by Wedos, a Czech hosting provider, consistent with the domain's WHOIS data. The site is mobile optimized with good navigation and SEO practices, though accessibility features are basic. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms compliant with GDPR. However, no explicit security headers were detected in the HTML content, and there is no visible security policy or incident response information published. Tracking and retargeting scripts are present but managed with user consent. The WHOIS data is consistent and transparent, supporting the legitimacy of the business. Overall, the website demonstrates a good balance of content quality, technical implementation, and privacy compliance, with a solid business credibility score. Strategic improvements in security headers and published security policies would enhance the security posture and trustworthiness further.

E

EFA – European Driving Schools Association

efa-eu.com

50

EFA – European Driving Schools Association is a professional organization representing driving schools and instructors across Europe. It advocates for harmonization of driving education, instructor training, and road safety initiatives with European authorities. The website demonstrates a solid digital presence built on WordPress with modern plugins and a focus on user experience and GDPR compliance. Security posture is good with HTTPS and cookie consent mechanisms, though explicit security policies and incident response information are absent. The domain WHOIS data is unavailable, which slightly reduces trust but the professional content and contact information support legitimacy. Overall, the website is well-structured and serves its target audience effectively.

S

Silnice LK a.s.

silnicelk.cz

50

Silnice LK a.s. is a regional transportation service company specializing in the maintenance and upkeep of roads, greenery, and related infrastructure within the Liberecký kraj region of the Czech Republic. The company provides essential services including summer and winter road maintenance, vegetation management, and repair of road components, positioning itself as a key regional player in transportation infrastructure services. The website reflects a professional and consistent brand image, targeting local government entities, residents, and road users in the region. Technically, the website employs a modern technology stack including Google Analytics, Google Tag Manager, jQuery, and Bootstrap, hosted likely within the Czech Republic under a reputable registrar. The site uses Insite CMS, supports mobile optimization, and implements cookie consent mechanisms aligned with GDPR requirements. Performance is moderate with good SEO and accessibility basics. From a security perspective, the site enforces HTTPS and employs cookie consent with default denial of storage, indicating a privacy-conscious approach. However, it lacks explicit security headers and published incident response or vulnerability disclosure policies. No vulnerabilities or exposed sensitive data were detected, and the WHOIS data is consistent and legitimate, supporting trustworthiness. Overall, the website presents a low-risk profile with good business credibility and privacy compliance. Strategic improvements include enhancing security headers, publishing security and incident response policies, and expanding accessibility features to further strengthen the security posture and user trust.

A

Autoškola Jiří Novotný

novotny-autoskola.cz

41

Autoškola Jiří Novotný is a small regional driving school based in Železný Brod, Czech Republic, specializing in comprehensive driver training for all license categories including motorcycles and tractors. The company holds a unique market position in its region by offering a broad range of driver education services and cooperating with the Czech Labor Office for retraining programs. The website reflects a service-oriented business model targeting individuals seeking driver licenses in the local area. Technically, the website uses legacy JavaScript libraries and a CMS platform called WebMaker System, with moderate performance and basic mobile optimization. Security posture is moderate but could be improved by updating libraries and implementing security headers. Privacy compliance is weak due to missing policies and consent mechanisms. Overall, the site is functional and professional but would benefit from modernization and enhanced security and privacy practices.

A

Asociace autoškol ČR, z.s.

asociaceautoskol.cz

47

Asociace autoškol ČR, z.s. is a Czech non-profit association dedicated to improving the quality and standards of driving schools and driver education in the Czech Republic. The organization provides educational seminars, develops innovative testing materials including hazard perception videos, and offers support services such as an ombudsman for driving schools and students. It maintains partnerships with government bodies and safety organizations, positioning itself as a key stakeholder in national driver education and road safety. Technically, the website employs modern web technologies including jQuery, Bootstrap, and Google services such as reCAPTCHA v3 and Google Analytics. The site is mobile-optimized with a good user experience and clear navigation. Cookie consent mechanisms are implemented, reflecting awareness of privacy compliance requirements, although a formal privacy policy page is not found. From a security perspective, the site uses HTTPS and bot protection but lacks visible security headers and formal security policies. No critical vulnerabilities were detected in the content or scripts. The absence of WHOIS data reduces transparency and slightly impacts trustworthiness, but the professional presentation and official contact information mitigate concerns. Overall, the website is a credible and professional platform supporting a non-profit association with a clear mission in driver education. Strategic improvements in privacy documentation, security headers, and WHOIS transparency would enhance trust and compliance.

M

MSC Abensberg e.V.

msc-abensberg.de

51

MSC Abensberg e.V. is a well-established motorsport club based in Abensberg, Germany, with a rich history dating back to 1928. The club specializes in speedway racing and hosts significant international events such as the FIM Speedway Grand Prix Qualifying rounds. It also emphasizes youth development and community engagement, serving over 500 members. The website reflects a professional and consistent brand image, providing comprehensive event information, news updates, and membership details. Technical infrastructure includes modern web technologies, integration of Google Maps for location services, and Google Analytics for visitor tracking, complemented by a GDPR-compliant cookie consent mechanism. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though there is room for improvement in security headers and explicit security policies. Overall, the site is user-friendly, mobile-optimized, and trustworthy, supporting the club's community and promotional goals effectively.