Transportation security reports

N

Národná diaľničná spoločnosť

ndsas.sk

50

Národná diaľničná spoločnosť, a.s. is the national highway company of Slovakia responsible for the preparation, construction, maintenance, and tolling of highways. The website reflects a well-established government entity with a clear market position as the primary operator of the Slovak highway network. Key services include electronic vignette sales, electronic toll collection, traffic information, and motorway patrol services. The company targets motorists, transport companies, and public authorities within Slovakia. The digital infrastructure employs modern web technologies such as jQuery, Bootstrap, and Matomo analytics, ensuring a responsive and accessible user experience. Security measures include HTTPS enforcement and Google reCAPTCHA integration, although explicit security policies and incident response contacts are not publicly available. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations.

P

Pražský RALLYSPRINT

prazskyrallysprint.cz

48

Pražský Rallysprint is a well-established motorsport event in Prague with a history dating back over two decades. The website serves as an information hub for participants, spectators, media, and partners, providing event details, results, galleries, and contact information. The business model revolves around event organization, sponsorship, and media partnerships, positioning it as a key annual rally event in the Czech Republic. Technically, the website uses modern web technologies including jQuery and Swiper.js, with a cookie consent mechanism and basic SEO optimizations. Security posture is moderate with room for improvement in security headers and explicit policies. Privacy compliance is addressed with cookie consent and a privacy policy in Czech. Overall, the site is professional, trustworthy, and well-maintained, though lacking some advanced security and compliance features.

The Dutch Cycling Embassy operates a closed community platform aimed at connecting public and private companies involved in cycling infrastructure and policy. The website serves as a knowledge sharing and collaboration hub, offering access to events, best practices, and expert networks. The business model focuses on fostering a public-private partnership to promote bicycle-friendly environments, primarily targeting Dutch and international cycling experts and stakeholders. The platform is well-branded and maintains a consistent professional image with a clear focus on its niche market. Technically, the website is built on Drupal CMS with Bootstrap framework, integrating Google Translate for multilingual support. The site is mobile-optimized and accessible, with moderate performance. Security is enforced through HTTPS and secure forms, though there is room for improvement by adding security headers and publishing formal security and privacy policies. No major vulnerabilities or exposed sensitive data were detected. Overall, the security posture is solid but lacks transparency in privacy and incident response policies. The absence of privacy and cookie policies indicates compliance gaps with GDPR and related regulations. The website is trustworthy, with legitimate WHOIS registration consistent with its business claims. Social media presence across multiple platforms enhances credibility. Strategically, the website should prioritize publishing comprehensive privacy and cookie policies, implement security headers, and establish incident response contacts to improve compliance and trust. These steps will strengthen the platform's security posture and regulatory adherence, supporting its role as a professional community hub.

EUROPEAN MOBILITY WEEK is a flagship awareness campaign by the European Commission focused on promoting sustainable urban mobility across Europe. The website serves as an information hub and registration platform for cities, NGOs, businesses, and schools to participate in mobility actions and campaigns. It maintains a strong presence on major social media platforms and provides campaign resources, news, and awards information. Technically, the site is built on TYPO3 CMS with modern front-end frameworks like Bootstrap and FontAwesome, supported by privacy-conscious Matomo analytics. The website is well-structured, mobile-optimized, and professionally branded, reflecting its official and authoritative nature. Security posture is good with HTTPS enforced and no visible vulnerabilities, though improvements in cookie consent and security headers are recommended. Overall, the site is trustworthy and aligns well with its mission and audience.

C

CIVITAS Initiative

civitas.eu

59

The CIVITAS Initiative is a prominent European non-profit organization dedicated to promoting sustainable and smart urban mobility across Europe and beyond. It operates through a network of city partnerships, projects, and knowledge sharing platforms aimed at transforming urban transport systems. The website reflects a mature digital presence with a focus on accessibility and user engagement through various projects and city networks. Technically, the site is built on Drupal CMS and leverages modern web technologies such as lazy loading and responsive design, ensuring a good user experience across devices. Security posture is solid with HTTPS enabled and deferred script loading, though there is room for improvement in implementing security headers and explicit privacy compliance mechanisms. Overall, the site is trustworthy and professional, serving a specialized audience of urban mobility stakeholders and European cities.

C

Centrum dopravního výzkumu, v.v.i.

katalog-poskozeni.cz

57

The website katalog-poskozeni.cz operates as a specialized database platform primarily serving court experts and professionals in transportation accident analysis. It offers a catalog of vehicle damage and an EES catalog with real accident and crash test data, supported by reputable Czech research institutions. The site is well-branded and targeted to a niche professional audience, with clear affiliations to Centrum dopravního výzkumu and VUT Brno. Technically, the site uses modern web technologies including Bootstrap, jQuery, and Nette Forms, with a moderate performance profile and good mobile optimization. Security posture is adequate with cookie consent mechanisms and session management, but lacks explicit security headers and published privacy or security policies. The domain registration is consistent with the business origin and age appropriate for the service launch. Overall, the site is professional, trustworthy, and safe for its intended audience.

C

Centrum dopravního výzkumu, v. v. i.

kombinovanapreprava.cz

55

The website 'kombinovanapreprava.cz' represents the Centrum dopravního výzkumu, a research and informational center focused on continental combined transport. It provides transparent information, legislative guidance, and e-learning services with certification aimed at professionals and stakeholders in the transportation and logistics sectors. The site is built using modern web technologies including React, Gatsby, and Material UI, and incorporates Google reCAPTCHA v3 and Cookiebot for security and privacy compliance. The website is accessible without any WAF or security challenge blocking content. However, WHOIS data is unavailable, indicating privacy protection, which slightly reduces trustworthiness. The site lacks a visible privacy policy page and security.txt, which are recommended for compliance and security transparency.

C

Centrum dopravního výzkumu, v. v. i.

cistadoprava.cz

48

Centrum dopravního výzkumu, v. v. i. operates a professional and authoritative website focused on clean transportation research and data dissemination in the Czech Republic. The site provides comprehensive statistics, news, educational resources, and project information to a broad audience including the general public and professionals in the transportation and energy sectors. Supported by government partners, it serves as a key informational platform for clean mobility initiatives. Technically, the website is built on modern frameworks such as React and Gatsby, ensuring fast performance, mobile optimization, and good accessibility. Security posture is strong with HTTPS enforcement and standard security headers, though explicit security policies and incident response contacts are not published. Privacy compliance is well addressed with cookie consent and a detailed privacy policy. Overall, the site reflects a mature digital presence with high trustworthiness and professional content.

C

cdv.cz

shopcdv.cz

66

The website shopcdv.cz represents an e-commerce platform operated by Centrum dopravního výzkumu (CDV), a Czech organization specializing in transportation research and related expert services. The platform offers publications, methodologies, and professional services targeting both public and private sector stakeholders interested in transportation safety, planning, and sustainability. The business is positioned as a niche provider with a medium-sized footprint, founded in 2019, and focused on delivering research outputs into practical applications. The website is primarily in Czech with multilingual support and integrates social media channels for broader engagement. Technically, the site is built on the Shopify platform, leveraging modern web technologies including JavaScript, CSS, and HTML5. It employs hCaptcha for form security and Judge.me for customer reviews, indicating a mature digital infrastructure. Performance and mobile optimization are good, with accessibility and SEO considerations well implemented. Hosting and domain registration are consistent with the business location and sector. From a security perspective, the site enforces HTTPS with excellent SSL configuration and uses CAPTCHA to protect forms. However, explicit security headers and published security policies are lacking, and no incident response or vulnerability disclosure mechanisms are evident. Privacy compliance is strong, with clear privacy and cookie policies and consent mechanisms aligned with GDPR requirements. Overall, the website demonstrates a solid business and technical foundation with good security hygiene, though it could benefit from enhanced transparency on security policies and incident response. The risk profile is low, with no critical vulnerabilities or suspicious indicators detected.

K

KNDS Deutschland GmbH & Co. KG

kmweg.de

62

KNDS Deutschland GmbH & Co. KG is a leading European defense technology company specializing in the development, production, and support of military land systems. As part of the KNDS group, formed by the merger of Krauss-Maffei Wegmann and Nexter, the company offers comprehensive solutions including armored vehicles, artillery systems, training, logistics, and customer service. Their market position is strong, serving armed forces in over 50 countries with a broad product portfolio and extensive expertise. Technically, the website is built on modern frameworks such as Next.js and React, with cloud-hosted media assets and integrated analytics via Matomo. The site is well-optimized for performance, mobile responsiveness, and SEO, reflecting a mature digital infrastructure. From a security perspective, the site uses HTTPS, domain protection statuses, and cookie consent mechanisms, though it lacks explicit public security policies or incident response contacts. No vulnerabilities or suspicious activities were detected, and the WHOIS data confirms domain legitimacy and consistency with the business history. Overall, the website presents a professional, trustworthy, and secure digital presence aligned with the company's stature in the defense industry. Strategic improvements could focus on enhancing security transparency and formalizing vulnerability disclosure processes.

E

Escuderia Castelo Branco

escuderiacastelobranco.pt

53

Escuderia Castelo Branco is a Portuguese motorsports club dedicated to promoting and developing motor sports activities, alongside cultural and recreational events. The website serves as a hub for event information, member services, and community engagement, targeting motorsport enthusiasts and club members primarily in Portugal. The organization appears well-established with a clear focus on motorsport competitions, kartodrome operations, and enduro training. The site is professionally designed with consistent branding and good content relevance, supporting its position as a regional leader in motorsports activities.

F

FORVIA HELLA

hella.com

74

FORVIA HELLA is a large, internationally positioned automotive supplier specializing in high-performance lighting technology and vehicle electronics. The company also offers a broad portfolio of services and products for spare parts, workshops, and special vehicle manufacturers. The website reflects a professional corporate presence with comprehensive information for partners, investors, and job seekers. Technically, the site uses modern web technologies including JavaScript, Bootstrap, and Piwik PRO analytics, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and privacy compliance evident through detailed policies and cookie consent mechanisms, though explicit security headers and incident response contacts are absent. The WHOIS data is missing, which slightly reduces trust but the overall site content and branding strongly support legitimacy. Strategic recommendations include enhancing security headers, publishing vulnerability disclosure information, and improving accessibility features.

M

MATERI’ACT

materiact.com

65

MATERI’ACT is a subsidiary of FORVIA focused on developing sustainable materials that tackle the plastic crisis by innovating with recycled plastics and biomass alternatives for automotive applications. The company positions itself as a forward-thinking innovator aiming to reduce CO₂ emissions significantly in vehicle interiors. The website is professionally designed, mobile-optimized, and rich in relevant content, targeting automotive industry stakeholders and sustainability advocates. Technically, the site uses WordPress with modern plugins and privacy-respecting analytics (Matomo), and implements a cookie consent mechanism compliant with GDPR. Security posture is good with HTTPS and no visible vulnerabilities, though some security headers could be improved. The lack of WHOIS data for the domain is a concern and should be investigated further to confirm domain legitimacy. Contact information is limited to a contact form, with no direct emails or phone numbers published. Overall, the site is trustworthy and professional but would benefit from enhanced transparency in domain registration and contact details.

M

Melrose Industries PLC

melroseplc.net

71

Melrose Industries PLC is a UK-listed, industry-leading global aerospace business specializing in manufacturing aerospace engines and structures for major OEMs across civil and defense markets. The company emphasizes value creation, technology leadership, and sustainability, serving investors, customers, and stakeholders with comprehensive reporting and governance. The website demonstrates a mature digital presence with modern technologies, accessibility features, and clear navigation. Security posture is strong with HTTPS and cookie consent mechanisms, though explicit security headers and a public security policy are absent. The lack of WHOIS data introduces some uncertainty about domain registration legitimacy, but the professional corporate content and investor relations mitigate this risk. Overall, the website reflects a credible and well-managed aerospace business with room for security enhancements.

S

Satys

satys.com

69

Satys is a well-established French industrial group specializing in aerospace and railway mobility services, including aircraft painting, sealing, interiors manufacturing, and surface treatment. The company operates internationally with a strong presence in 13 countries and employs approximately 2,600 people. Their market position is strong, recognized as a world leader in aircraft painting and a French leader in composite treatment. The website reflects a professional and consistent brand image with good content quality and clear business focus. Technically, the website is built on Joomla CMS using modern frameworks such as Helix Ultimate and Bootstrap 5.3.3, with a moderate performance profile and good mobile optimization. Hosting is provided by OVH sas, a reputable provider. Security posture is adequate with HTTPS enabled and domain protections in place, though improvements such as DNSSEC and security headers are recommended. Security policies and incident response information are not explicitly presented on the website, indicating room for improvement in transparency and compliance. Privacy and cookie policies exist but lack advanced consent mechanisms. Overall, the site is safe, professional, and trustworthy, with no adult or questionable content detected. Strategic recommendations include enhancing security headers, enabling DNSSEC, implementing cookie consent mechanisms, and publishing clear incident response and vulnerability disclosure policies to strengthen compliance and trust.

S

SPEEDBIRD VEICULOS AEREOS NAO TRIPULADOS SA

speedbird.aero

60

Speedbird Aero is a Brazilian-based company specializing in drone delivery logistics, offering a certified and innovative platform for commercial, industrial, and healthcare sectors. Their business model centers on Drone as a Service (DaaS), providing unmanned aircraft systems, navigation software, and droneport infrastructure to enable efficient and safe package delivery. The company has established partnerships with major clients and operates globally with plans for expansion by 2030. Technically, the website employs modern web technologies such as jQuery and Bootstrap, with integrated analytics and a cookie consent mechanism, reflecting moderate digital maturity. Security posture is adequate with HTTPS and domain transfer protection, but lacks DNSSEC and published security policies, indicating room for improvement. Overall, the website is professional, content-rich, and trustworthy, though it would benefit from enhanced privacy and security disclosures.

P

PSD Aero

psdaero.com

72

PSD Aero is a well-established French company specializing in the distribution and processing of metallurgical products for the aerospace, nuclear, and mechanical industries. With a strong international presence and partnerships with major aerospace players such as Safran and Airbus, PSD Aero positions itself as a first-tier supplier offering high-quality alloys and customized services. The company emphasizes quality, environmental sustainability, and supply chain acceleration to meet the demanding needs of its customers. Technically, the website employs modern web technologies including Bootstrap, Swiper.js, and Microsoft Clarity for analytics, ensuring a responsive and user-friendly experience. Security measures such as HTTPS, security headers, and secure forms are implemented, although there is room for improvement in publishing explicit security policies and incident response contacts. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations, making it a credible and reliable digital presence for PSD Aero.

H

Hi Fly

mesa.aero

43

Mesa is a specialized aircraft line and base maintenance provider operating primarily in Portugal with additional presence in Brussels and Brisbane. The company holds an EASA Part-145 certification and focuses on maintenance services for Airbus aircraft models. Their business model includes aircraft maintenance, technical training, logistics and procurement, and consulting services, targeting airlines and aviation operators. The website is professionally designed with clear navigation and consistent branding, supporting a medium-sized enterprise profile founded in 2005 under the parent company Hi Fly. Technically, the site uses modern JavaScript libraries and Google Analytics for tracking, but lacks some advanced security headers and cookie consent mechanisms. Security posture is adequate with HTTPS and domain transfer protections, but could be improved by enabling DNSSEC and publishing security policies. Overall, the domain registration data aligns well with the business claims, indicating a legitimate and established operation.

A

Aernnova

aernnova.com

73

Aernnova is a leading aerospace company specializing in the design and manufacturing of aero structures such as wings, stabilizers, and fuselages using metal and composite materials. The company targets aerospace OEMs and partners, positioning itself as a key player in the aerospace manufacturing sector. The website reflects a professional and consistent brand image with good content quality and clear business focus. Technically, the site is built on Webflow with modern web technologies, includes cookie consent mechanisms, and uses Google Tag Manager for analytics. Security posture is strong with HTTPS and privacy compliance, though some security headers and explicit contact/security policies are missing. The WHOIS data is not available, which raises some concerns about domain registration transparency but does not detract from the professional presentation of the website. Overall, the site is well-structured, compliant, and trustworthy from a business and technical perspective.

D

DT - Výhybkárna a strojírna, a.s.

dtvs.cz

48

DT - Výhybkárna a strojírna, a.s. is a traditional Czech manufacturer specializing in the development, construction, production, assembly, and regeneration of railway and tramway switch components. With decades of experience, the company serves both domestic and international markets, including metro systems. Their business model focuses on manufacturing and servicing railway infrastructure components, supported by a subsidiary in Slovakia. The website reflects a professional and consistent brand image targeting transportation infrastructure clients. Technically, the website employs a moderately modern technology stack including Bootstrap, jQuery, and Google services such as Analytics and reCAPTCHA. The site is mobile-optimized and includes a comprehensive cookie consent mechanism ensuring GDPR compliance. Performance is moderate with room for improvement in accessibility and security headers. From a security perspective, the site uses HTTPS and implements Google reCAPTCHA for form protection. However, it lacks explicit security headers and does not provide visible incident response or security policy information. The WHOIS data is unavailable, likely due to privacy protection, but the website content and contact details support legitimacy. No critical vulnerabilities or suspicious patterns were detected. Overall, the website presents a trustworthy and professional digital presence suitable for its industry. Strategic improvements in security headers, updated libraries, and enhanced accessibility would further strengthen its posture.

F

FORVIA

faurecia.com

70

FORVIA is a major global supplier in the automotive industry, focusing on sustainable and innovative automotive technologies. The company positions itself as a tech company with a strong emphasis on sustainability and digital transformation in mobility. The website reflects a professional corporate presence with detailed sections on technologies, sustainability, investor relations, and careers. Technically, the site is built on Drupal 10 and uses Matomo for analytics, indicating a modern and privacy-conscious approach. Security posture is moderate with HTTPS implied but lacks visible security headers and explicit security policies. The absence of WHOIS data limits domain trust verification but the website content and branding suggest legitimacy. Privacy and cookie policies are not clearly found, indicating room for compliance improvement.

Z

ZDAR, a.s.

zdar.cz

58

ZDAR, a.s. is a well-established transportation and logistics company based in the Czech Republic, offering a wide range of services including bus and truck servicing, logistics, vehicle maintenance, and public transportation. With over 30 years of experience, the company targets regional transport customers and motorists, positioning itself as a reliable and professional service provider in its sector. The website reflects this maturity with detailed service descriptions and a consistent brand presence. Technically, the website employs modern web technologies such as jQuery, Bootstrap, and Google Tag Manager, ensuring a responsive and user-friendly experience. The presence of Google reCAPTCHA and cookie consent mechanisms indicates attention to security and privacy compliance. However, the absence of visible security headers and missing WHOIS data slightly detract from the overall technical and trust posture. From a security perspective, the site uses HTTPS and implements basic security best practices, but lacks published incident response or vulnerability disclosure information. No critical vulnerabilities or exposed sensitive data were detected. The privacy policy and cookie consent are comprehensive and GDPR compliant, supporting good privacy practices. Overall, the website is professional, secure, and trustworthy, though improvements in transparency (WHOIS data) and security headers would enhance its security posture. The business is credible and well-positioned in its market, with a clear focus on transportation and logistics services.

A

AI Austria

aaig.at

54

Aviation Industry Austria (AI Austria) is a prominent umbrella organization representing the Austrian aviation sector, including major aviation companies, suppliers, research, and training institutions. The website serves as a professional platform to communicate industry news, events, and initiatives focused on strengthening the Austrian aviation industry through advocacy, networking, and quality standards such as EN 9100 certification. The target audience includes aviation industry stakeholders, policymakers, and related organizations within Austria. The business model centers on industry representation and fostering collaboration within the sector. Technically, the website is built on WordPress using the Breakdance theme and plugins, with modern web technologies including SVG icons and Google Fonts. SEO is enhanced by Rank Math PRO, and the site is mobile optimized with good navigation clarity. Performance is moderate, with room for improvement in accessibility features. The site uses HTTPS with a strong SSL configuration, but lacks some security headers and cookie consent mechanisms. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and no visible vulnerabilities or exposed sensitive data. However, it lacks published security policies, incident response information, and vulnerability disclosure mechanisms, which are recommended for enhanced trust and compliance. Privacy compliance is generally good with a privacy policy present, but no cookie consent banner was detected. Overall, the website is professional, trustworthy, and well-aligned with its business purpose. Strategic recommendations include implementing cookie consent, publishing security and incident response policies, adding security headers, and improving accessibility to further enhance compliance and user trust.

KNDS is a leading European defense manufacturer specializing in military land systems, formed by the association of Krauss-Maffei Wegmann and Nexter. The company operates globally with over 10,000 employees and a strong product portfolio including main battle tanks, armored vehicles, artillery, and advanced training solutions. Their market position is strong within the European defense sector, supported by a large order backlog and significant turnover. Technically, the website is built on modern frameworks such as React and Next.js, with privacy-conscious analytics via Matomo and comprehensive cookie consent management through Cookiebot. Security posture is good with HTTPS enforced and domain registration consistent with the business profile. However, there is room for improvement in publishing explicit security policies and incident response contacts. Overall, the website is professional, secure, and compliant with GDPR, reflecting a mature and credible business entity.

G

GKN Aerospace Services Limited

gknaerospace.com

74

GKN Aerospace Services Limited is a leading global tier one aerospace supplier specializing in aero-engine products, airframe structures, and aftermarket services. The company serves over 90% of the world's aircraft and engine manufacturers with a strong presence in both civil and defense aerospace markets. The website reflects a mature digital presence with comprehensive content, clear navigation, and professional branding consistent with a large enterprise in the transportation and manufacturing sectors. Technically, the site employs modern JavaScript frameworks, cookie consent management, and accessibility tools, indicating a commitment to user experience and compliance. Security posture is good with HTTPS and consent mechanisms, though explicit security policies and vulnerability disclosures are absent. The WHOIS data is missing or indicates the domain may not be currently registered, which is a critical concern for domain legitimacy despite the professional website content. Overall, the site is trustworthy from a content and business perspective but requires domain registration verification and enhanced security transparency.

D

Dassault Aviation

dassault-aviation.com

76

Dassault Aviation is a leading French aerospace company specializing in the design, manufacture, and support of combat aircraft and business jets, including renowned brands such as Rafale, Falcon, and nEUROn. The company holds a strong market position as a major player in aeronautics with a global presence and a history dating back to 1916. The website reflects a mature digital presence with comprehensive content tailored to industry professionals, customers, and enthusiasts. Technically, the site is built on WordPress with modern analytics and tracking tools, optimized for performance and accessibility. Security posture is robust with HTTPS enforcement, security headers, and GDPR-compliant cookie consent mechanisms, although explicit security policies and incident response details are not publicly available. Overall, the domain appears legitimate despite WHOIS privacy protection, consistent with the company's stature and security needs.

ANTONOV Company is a well-established Ukrainian aircraft manufacturing and aviation services provider, specializing in cargo and passenger airplanes and air transportation. The company holds a strong market position as a global leader in specialized cargo air transport, particularly for space components and satellite-related shipments. The website reflects a professional and consistent brand image with good content quality and navigation, targeting aviation industry professionals and customers requiring specialized air transport services. Technically, the website is built on a Yii framework with modern JavaScript libraries and is moderately optimized for performance and mobile devices. Security posture is adequate with HTTPS and CSRF protections but lacks advanced security headers and DNSSEC. Privacy and cookie policies are not present, indicating compliance gaps. Overall, the domain registration and WHOIS data support the legitimacy and trustworthiness of the company and website.

S

Státní fond dopravní infrastruktury (SFDI)

ceskobezbarier.cz

43

The website 'Česko bez bariér' is operated by the Státní fond dopravní infrastruktury (SFDI), a Czech government fund focused on financing projects that remove barriers in public spaces to improve accessibility and safety. The site provides information about funding programs, supported projects, and consultation services for municipalities and other entities. The content is professionally presented, with clear navigation and a focus on public infrastructure improvements. Technically, the site uses a combination of legacy and modern web technologies including jQuery, Bootstrap, and Owl Carousel, with Google Analytics integrated for visitor tracking. Security posture is adequate with HTTPS enforced and a cookie consent mechanism implemented, though some improvements are recommended such as updating libraries and adding security headers. The absence of WHOIS data limits domain registration trust analysis, but the website's consistent government branding and contact details support its legitimacy. Overall, the site is a reliable resource for its target audience, though privacy policy documentation and enhanced security practices would strengthen compliance and trust.

F

Federace klubů historických vozidel ČR z. s.

testovanihv.cz

31

The website www.testovanihv.cz serves as the online information system for the Federation of Historic Vehicle Clubs of the Czech Republic (FKHV). It provides a platform for vehicle owners to submit applications for historic vehicle testing, facilitating the certification process for historic authenticity. The site targets historic vehicle enthusiasts and club members within the Czech Republic, operating as a non-profit entity. The business model focuses on community service and regulatory compliance within the historic vehicle sector. The website content is professionally presented, with clear instructions, contact information, and relevant resources such as video tutorials and downloadable terms of service.

3

3RIDES – Das Rad-Event im Dreiländereck

3rides.de

46

3RIDES.de is a German-based cycling event website focused on organizing and promoting cycling races and rides in the Dreiländereck region, including internationally recognized UCI Gravel and Gran Fondo World Series events. The site targets cycling enthusiasts, athletes, and families interested in cycling activities, offering event information, race results, training programs, and expo details. The website is built on WordPress with modern plugins and technologies, providing a good user experience with mobile optimization and clear navigation. However, explicit privacy and cookie policies are not found, and no direct contact information is visible, which may impact user trust and compliance. Security posture is adequate with HTTPS enabled but lacks visible security headers and formal security policies. Social media integration is strong, enhancing community engagement and marketing reach.

M

McRent

mc-rent.es

54

McRent is a leading motorhome and camper rental provider operating primarily in Spain and across Europe, with over 120 rental stations. The company offers a wide range of new vehicles, unlimited mileage, comprehensive insurance, and additional equipment included in the rental price. Their website is professionally designed, multilingual, and optimized for user experience and SEO, reflecting a mature digital presence. Technically, the site leverages modern JavaScript frameworks such as React, integrates Mapbox for mapping, and uses Usercentrics for consent management, indicating compliance with privacy regulations. Security posture is strong with HTTPS enforced and secure payment integration, though some security headers could be improved. Overall, the business demonstrates high credibility with transparent contact information, social media presence, and consistent WHOIS data. No critical vulnerabilities or suspicious activities were detected.

M

McRent

mcrent.it

54

McRent is a leading camper rental company operating primarily in Italy, Europe, and New Zealand, offering a wide range of motorhomes and campervans with modern vehicles and inclusive services such as unlimited kilometers and insurance. The company maintains a strong market position with over 120 locations and a professional online presence that supports booking, customer service, and online check-in functionalities. The website is well-structured, mobile-optimized, and uses modern web technologies including React, Mapbox, and Usercentrics for cookie consent, ensuring a smooth user experience. Security posture is solid with HTTPS enforced and secure payment integration, though some security headers could be improved. Privacy compliance is robust with clear policies and consent mechanisms in place. Overall, McRent demonstrates a trustworthy and professional digital footprint suitable for its business model.

M

McRent

mcrent.nl

52

McRent is a leading camper rental company operating primarily in Europe and New Zealand, offering a wide range of motorhomes and campervans with inclusive services such as insurance, unlimited kilometers, and professional maintenance. The company targets vacationers seeking freedom and comfort in their travel experience. The website is well-designed, mobile-optimized, and provides comprehensive business and contact information, including multiple language options and country-specific sites. Technically, the site uses modern frameworks like React, integrates Mapbox for mapping, and employs Usercentrics for cookie consent management. Security posture is solid with HTTPS and no exposed sensitive data, although explicit security policies and incident response details are absent. Overall, the site reflects a mature digital presence with good privacy compliance and trustworthy business credentials.

F

Federace klubů historických vozidel ČR z. s.

fkhv.cz

48

Federace klubů historických vozidel ČR z. s. is a Czech non-profit federation representing historic vehicle clubs nationally and acting as the national authority affiliated with FIVA. The organization provides key services including vehicle testing, educational training, legislative support, and issuance of membership cards. The website is professionally designed using WordPress with modern technologies such as lazy loading and responsive design, providing a good user experience for its target audience of historic vehicle enthusiasts in the Czech Republic. Security posture is adequate with HTTPS enabled and secure forms, but lacks some security headers and cookie consent mechanisms. The absence of WHOIS data is a notable concern for domain legitimacy, though the website content and contact information support the organization's credibility. Strategic improvements include enhancing security headers, implementing cookie consent, and publishing security and incident response policies.

Skiline X is a digital platform focused on providing ski resort related services such as ski pass management, live resort information, and booking functionalities. The platform targets winter sports enthusiasts and travelers, positioning itself as a niche service provider in the transportation and travel sector within Austria. Technically, the website leverages modern JavaScript frameworks like Vue.js and Nuxt.js, integrates with Contentful CMS, and uses Google Analytics and Tag Manager for tracking. The site is well-optimized for mobile devices and shows good SEO practices. Security-wise, the site enforces HTTPS and includes important security headers, indicating a mature security posture. However, the absence of visible privacy, cookie policies, and contact information reduces privacy compliance and user trust. Overall, the site is professional and secure but would benefit from enhanced transparency and compliance documentation.

M

McRent

mcrent.fi

57

McRent is a leading motorhome rental company operating primarily in Europe and New Zealand, with a strong presence in Finland as evidenced by the localized website. The company offers a wide range of motorhomes, including vans, campervans, and integrated models, targeting leisure travelers seeking flexible and comfortable travel options. Their business model focuses on direct rentals supported by a comprehensive online booking system and extensive customer support. Technically, the website is built on modern frameworks such as React, uses Mapbox for mapping, and integrates cookie consent management and analytics tools, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site projects professionalism and trustworthiness, supported by consistent WHOIS data and transparent contact information.

S

STAM s.r.l.

asd-connect.org

62

ASD Connect is a digital platform developed by STAM s.r.l. to serve the aerospace, security, and defense sectors in Europe. It facilitates networking, communication, and access to funding and events for SMEs and mid-cap companies, positioning itself as a key enabler in the European aerospace ecosystem. The platform is supported by major European aerospace and defense companies and national associations, enhancing its market credibility. Technically, the website is built on Angular with Material Design components, integrating third-party services like CometChat and Umami analytics. The site demonstrates good design quality and mobile optimization but lacks some advanced accessibility and SEO features. Security posture is adequate with HTTPS and domain protections, though improvements like DNSSEC and security headers are recommended. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the website is professional and trustworthy, with room for enhancements in security and privacy practices.

S

STROJÍRNA OSLAVANY, spol. s r.o.

st-os.cz

60

STROJÍRNA OSLAVANY, spol. s r.o. is a well-established Czech manufacturer specializing in hydraulic dampers for rail vehicles and precision machined components. The company has a strong market position in the transportation manufacturing sector, supported by multiple industry awards and recognitions. Their business model includes manufacturing, real estate rental, innovation education, and tourism, targeting primarily B2B customers in the railway and transport industries. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the website is built on a modern Angular framework with Material Design components, integrating third-party services such as YouTube and Google Tag Manager. The site is mobile-optimized and performs moderately well, though accessibility and SEO optimizations could be improved. Security posture is adequate with HTTPS usage implied, but lacks explicit security headers and cookie consent mechanisms, indicating room for enhancement in compliance and security best practices. Overall, the security posture is moderate with no critical vulnerabilities detected in the content. The absence of WHOIS data reduces domain trustworthiness, but the professional presentation and business legitimacy mitigate this concern. Strategic recommendations include implementing security headers, enhancing privacy compliance with cookie consent, publishing security policies, and improving accessibility. These steps will strengthen the company's digital maturity and trustworthiness.

I

INKOSYS s.r.o.

inkosys.cz

37

INKOSYS s.r.o. is a small Czech company specializing in transportation-related project consulting and engineering services. Their website presents a professional image with clear descriptions of their key services including project documentation, BIM technology, engineering activities, and technical supervision of construction. The company targets clients in the transportation infrastructure sector primarily within Prague and the Czech Republic. The website is bilingual (Czech and English) and includes contact details and partner logos, indicating established business relationships. Technically, the website uses a modern but somewhat dated technology stack including jQuery 1.11.3 and Bootstrap. It integrates Google Analytics and Google reCAPTCHA for analytics and security respectively. The site is mobile-optimized and includes a GDPR-compliant cookie consent mechanism. However, some security best practices such as security headers are missing, and the jQuery version is outdated, which could pose vulnerabilities. Security posture is generally good with HTTPS enforced and no visible vulnerabilities in the provided content. Privacy compliance is supported by a cookie consent banner and a cookie policy page, but no explicit privacy policy or terms of service pages were found. WHOIS data is unavailable, which limits domain legitimacy verification and slightly reduces trustworthiness. Overall, the website is professional and trustworthy from a business and user perspective but could improve in security hardening and transparency regarding privacy and incident response. The lack of WHOIS data is a notable gap that should be addressed to enhance domain trust.

S

SkipperCheck.net

skippercheck.net

53

SkipperCheck.net is a specialized online platform offering digital tools and certification services for yacht charterers and boating enthusiasts. The business focuses on community-based seatime certification, refresher courses for skippers, VHF radio operator certification, and interactive quiz games to enhance maritime knowledge. The website positions itself as a niche leader in the yachting certification space, collaborating officially with Latvian maritime authorities, which strengthens its credibility and trustworthiness. The target audience includes yacht skippers, charterers, and boating hobbyists seeking modern, recognized certifications and training resources. Technically, the website employs modern front-end technologies such as Bootstrap 5 and FontAwesome, with Google Tag Manager for analytics and tracking. The site is mobile-optimized with a clean, professional design and clear navigation. However, some accessibility and SEO optimizations could be improved. Security-wise, HTTPS is enforced, and secure login forms are used, but the absence of explicit security headers and a formal security policy reduces the overall security posture. Cookie consent mechanisms are implemented, supporting GDPR compliance. Overall, the website demonstrates a good balance of business credibility, technical implementation, and privacy compliance. There are no signs of malicious content or blocking mechanisms, and the WHOIS data aligns well with the website's claims, supporting legitimacy. Strategic improvements in security headers, incident response transparency, and accessibility would further enhance the platform's trust and resilience.

V

Veteranfest

veteranfest.cz

54

Veteranfest.cz is a professionally maintained website promoting a major historic vehicle event held in the Czech Republic, specifically in the castle park of Slavkov. The event attracts vintage car and motorcycle enthusiasts, families, and history lovers, positioning itself as one of the largest gatherings of its kind in Central Europe. The website provides rich content including event news, partner information, and visitor guidance, supported by a modern WordPress infrastructure with UIkit and jQuery technologies. Security posture is generally good with HTTPS and cookie consent implemented, though there is room for improvement in security headers and privacy policy transparency. The absence of WHOIS data is a notable concern for domain legitimacy verification but does not detract from the website's professional presentation and trust signals. Overall, the site is safe, family-friendly, and well-structured, serving its target audience effectively.

M

MAMIBIKE

mamibike.cz

56

MAMIBIKE is a Czech company specializing in the manufacture, sale, and rental of sport electric scooters. The website presents a professional and well-structured platform targeting consumers interested in electric scooters, primarily within the Czech Republic. Key services include product sales through an e-shop, rental offerings, and technical servicing. The company appears to be a niche player with a focus on quality and customer support, supported by active social media channels and clear contact information. Technically, the website is built on WordPress with WooCommerce for e-commerce functionality, leveraging modern JavaScript libraries such as jQuery and UIkit for UI components. SEO is enhanced by Yoast SEO plugin and structured data (JSON-LD) is implemented for better search engine understanding. The site uses HTTPS with Google reCAPTCHA for form security and a cookie consent mechanism, indicating a moderate level of digital maturity. Security posture is generally good with HTTPS enforced and anti-bot measures in place; however, the absence of security headers and explicit privacy/security policies suggests room for improvement. No vulnerabilities or exposed sensitive data were detected. The missing WHOIS data is a concern for domain legitimacy verification but does not negate the apparent professionalism of the site. Overall, the website is safe, well-designed, and functional with a moderate risk profile primarily due to incomplete domain registration transparency and some security best practices gaps. Strategic recommendations include enhancing security headers, publishing comprehensive privacy and security policies, and verifying domain registration details to improve trustworthiness.

V

V klidu jedu

vklidujedu.cz

42

V klidu jedu is a small Czech Republic based business specializing in motorhome rental services primarily serving the Moravia region including Slavkov, Vyškov, and Brno. The company offers a modern, spacious motorhome with additional services such as parking space and secure bicycle storage. Their business model focuses on affordable, eco-friendly travel experiences with fair customer dealings and insurance coverage. The website reflects a localized niche market positioning with clear service descriptions and contact information. Technically, the website is built on WordPress with a modern tech stack including Bootstrap, jQuery, and various plugins for booking and contact forms. SEO is enhanced by Yoast SEO plugin and the site uses Google Tag Manager for analytics and tracking. The site is mobile optimized and performs moderately well, though accessibility features are basic. Security best practices such as HTTPS and honeypot anti-spam are implemented, but security headers are missing. From a security perspective, the site shows a good posture with no visible vulnerabilities or exposed sensitive data. However, the absence of WHOIS data limits domain trust assessment and no explicit security or incident response policies are published. Privacy and cookie policies exist but are basic, indicating room for improvement in GDPR compliance transparency. Overall, the website is professional and trustworthy for its business scope but would benefit from enhanced security headers, detailed privacy compliance documentation, and domain registration transparency to improve trust and security posture.

C

CAMT Trade s.r.o.

camttrade.cz

47

CAMT Trade s.r.o. is a small Czech Republic based company specializing in the sale, servicing, and care of vehicles, particularly motorcycles. Their website presents a professional and consistent brand image, targeting motorcycle buyers and owners seeking import, maintenance, tire services, and detailing. The company maintains an active social media presence on Facebook and Instagram, enhancing customer engagement. Technically, the website is built on WordPress with common plugins and libraries, offering moderate performance and good mobile optimization. Security posture is basic with HTTPS enabled but lacks advanced security headers and vulnerability disclosure mechanisms. Privacy compliance is addressed through a cookie policy and consent mechanism, aligning with GDPR requirements. Contact information is clearly provided, supporting business credibility. However, the absence of WHOIS data limits domain trust verification, which slightly impacts overall trustworthiness.

A

ASD - AeroSpace and Defence Industries Association of Europe

asd-europe.org

69

ASD - AeroSpace and Defence Industries Association of Europe is a leading European industry association representing aerospace, defense, security, and space sectors. The organization connects over 4,000 companies across 21 countries, providing advocacy, standards development, and networking services. Their website reflects a professional and comprehensive digital presence, targeting industry professionals and stakeholders. The site uses modern web technologies including Next.js and React, with privacy-conscious analytics via Matomo and a robust cookie consent mechanism powered by Cookiebot. Security posture is strong with HTTPS enforced and appropriate security headers in place, though explicit security policies and incident response information are not publicly detailed. Overall, the domain appears legitimate and consistent with an established industry association, despite the lack of WHOIS data due to privacy protection. Strategic recommendations include publishing security policies and vulnerability disclosure information to enhance trust and compliance.

G

Global Wolf Motors LTD

globalwolfmotors.com

52

Global Wolf Motors LTD is a small company specializing in the development and promotion of environmentally friendly electric vehicles for both civilian and military markets. Their product portfolio includes electric tricycles, ATVs, and military mobility solutions, with a business model that includes franchise opportunities and direct product sales. The company positions itself as an innovator in electric mobility with a focus on quality and durability. Technically, the website is built on a modern frontend stack using Bootstrap, jQuery, and Font Awesome, hosted behind Cloudflare DNS services. The site is mobile-optimized and provides a professional user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS and domain registration protections but lacks DNSSEC and important security headers, and does not provide privacy or cookie policies, which are compliance gaps. No contact emails or phone numbers are publicly listed; contact is via a form. Overall, the website is functional and professional but could improve privacy compliance and security posture.

V

VR Cars

vrcars.eu

55

VR Cars is a specialized Latvian company focused on designing and manufacturing the VR FOX military vehicle, tailored for special forces and intelligence service needs. The company leverages extensive experience in suspension engineering and racing car development to deliver a niche product with advanced off-road capabilities and compliance with NATO standards. Their digital presence includes a professional website with multimedia content and active social media channels, supporting their market positioning as a small but innovative manufacturer in the defense transportation sector. Technically, the website employs modern JavaScript libraries and frameworks such as jQuery, Swiper, and AOS, with good mobile optimization and SEO practices. Security-wise, the site enforces HTTPS and uses Google Recaptcha for form protection, but lacks visible HTTP security headers and explicit security or incident response policies. Privacy compliance is well addressed with a comprehensive privacy and cookie policy and a consent mechanism aligned with GDPR requirements. Overall, the website presents a moderate security posture and good business credibility, though improvements in security headers and transparency policies are recommended.

T

Tarragon Aircraft

tarragonaircraft.com

63

Tarragon Aircraft is a small niche manufacturer specializing in high-performance ultralight aircraft, leveraging advanced composite materials and targeting aviation enthusiasts and specialized markets such as military and acrobatic aircraft. The website is built on the Wix platform and integrates Google Analytics for visitor tracking. While the site is accessible and uses HTTPS with good SSL configuration, it lacks critical privacy and cookie policies, contact information, and WHOIS registration data, which raises concerns about business credibility and compliance. The technical infrastructure is basic but functional, with room for improvement in SEO, accessibility, and security headers. Overall, the security posture is moderate due to HTTPS usage but could be enhanced with additional security best practices. Strategic recommendations include adding privacy and cookie policies, improving contact transparency, and securing domain registration information to build trust.

Rinker Materials is a division of The QUIKRETE Companies specializing in the manufacturing and distribution of concrete pipe and related infrastructure products. The company targets construction professionals and infrastructure developers, offering a range of products including bridges, precast box culverts, end treatments, and specialty applications. The website reflects a well-established business with consistent branding and a clear market position within the transportation and manufacturing sectors. Technically, the website is built on WordPress with Bootstrap and uses modern libraries such as jQuery and Font Awesome. It integrates marketing and analytics tools including Google Tag Manager, Google Analytics, and HubSpot, alongside a cookie consent mechanism compliant with GDPR. The site demonstrates good mobile optimization and SEO practices, though performance is moderate. From a security perspective, the site enforces HTTPS and employs cookie consent but lacks advanced security headers and published security policies or incident response information. No vulnerabilities or exposed sensitive data were detected, but the absence of WHOIS data for the domain raises concerns about domain legitimacy and registration transparency. Overall, the website presents a professional and trustworthy front for Rinker Materials, but the missing WHOIS information and lack of explicit security policies suggest areas for improvement to enhance trust and compliance.